Lockpicking Forensics

117
Lockpicking Forensics datagram [email protected] Black Hat USA Briefings, 2009

Transcript of Lockpicking Forensics

Page 1: Lockpicking Forensics

Lockpicking Forensics

[email protected] Hat USA Briefings, 2009

Page 2: Lockpicking Forensics

Agenda

How locks/picks work Normal wear Lock Analysis Key Analysis Investigative process

Page 3: Lockpicking Forensics

Destructive entry still #1!

Page 4: Lockpicking Forensics

How Locks Work

Page 5: Lockpicking Forensics

How Locks Work

Page 6: Lockpicking Forensics

How Locks Work

Page 7: Lockpicking Forensics

How Locks Work

Page 8: Lockpicking Forensics

Pin Binding

Page 9: Lockpicking Forensics

Pin Binding

Page 10: Lockpicking Forensics

Picking a Lock

Apply tensionFind binding pinRaise to shear lineRepeat

Page 11: Lockpicking Forensics

Picking a Lock

Page 12: Lockpicking Forensics

Forensic Locksmithing

1976 - Art Paholke, Chicago PD

Locks, Safes, Security (Tobias) Werkzeugspur (Goth) Impressioning (Diederichsen)

Determine method of entry Identify evidence, tool marks, techniques Provide expert testimony

Page 13: Lockpicking Forensics

Pins – New

Page 14: Lockpicking Forensics

Pins – New

Page 15: Lockpicking Forensics

Key - New

Page 16: Lockpicking Forensics

Plug - New

Page 17: Lockpicking Forensics

Pins – 100 uses

Page 18: Lockpicking Forensics

Pins – 100 uses

Page 19: Lockpicking Forensics

Plug – 100 uses

Page 20: Lockpicking Forensics

Key – 100 Uses

Page 21: Lockpicking Forensics

Pins – 1,500 uses (pin 1)

Page 22: Lockpicking Forensics

Pins – 1,500 uses (pin 5)

Page 23: Lockpicking Forensics

Key – 1,500 uses

Page 24: Lockpicking Forensics

Plug – 1,500 uses

Page 25: Lockpicking Forensics

Pins - 5,000 uses (pin 1)

Page 26: Lockpicking Forensics

Pins - 5,000 uses (pin 5)

Page 27: Lockpicking Forensics

Plug – 5,000 uses

Page 28: Lockpicking Forensics

Plug – 5,000 uses

Page 29: Lockpicking Forensics

Plug – 5,000 uses

Page 30: Lockpicking Forensics

Key - 5,000 uses

Page 31: Lockpicking Forensics

Forensic Analysis

Components (pins, springs, etc)PlugCylinderCam/ActuatorKeysBoltDoor, window, wall, etc

Page 32: Lockpicking Forensics

Lockpicking

Page 33: Lockpicking Forensics

Lockpicking - Pins

Page 34: Lockpicking Forensics

Lockpicking - Pins

Page 35: Lockpicking Forensics

Lockpicking - Pins

Page 36: Lockpicking Forensics

Lockpicking - Pins

Page 37: Lockpicking Forensics

Lockpicking - Pins

Page 38: Lockpicking Forensics

Lockpicking - Pins

Page 39: Lockpicking Forensics

Lockpicking - Pins

Page 40: Lockpicking Forensics

Lockpicking - Pins

Page 41: Lockpicking Forensics

Lockpicking - Pins

Page 42: Lockpicking Forensics

Lockpicking - Pins

Page 43: Lockpicking Forensics

Lockpicking - Pins

Page 44: Lockpicking Forensics

Lockpicking - Plug

Page 45: Lockpicking Forensics

Lockpicking - Plug

Page 46: Lockpicking Forensics

Lockpicking - Plug

Page 47: Lockpicking Forensics

Lockpicking - Plug

Page 48: Lockpicking Forensics

Lockpicking - Plug

Page 49: Lockpicking Forensics

Lockpicking - Plug

Page 50: Lockpicking Forensics

Lockpicking - Tension

Page 51: Lockpicking Forensics

Lockpicking - Tension

Page 52: Lockpicking Forensics

Lockpicking - Tension

Page 53: Lockpicking Forensics

Lockpicking - Cam

Page 54: Lockpicking Forensics

Lockpicking - Cam

Page 55: Lockpicking Forensics

Lockpicking - Medecoder

Page 56: Lockpicking Forensics

Pick Guns

Page 57: Lockpicking Forensics

Pick Guns - Pins

Page 58: Lockpicking Forensics

Pick Guns - Pins

Page 59: Lockpicking Forensics

Pick Guns - Cam

Page 60: Lockpicking Forensics

Pick Guns - Cam

Page 61: Lockpicking Forensics

Key Bumping

Page 62: Lockpicking Forensics

Key Bumping

Page 63: Lockpicking Forensics

Key Bumping - Pins

Page 64: Lockpicking Forensics

Key Bumping - Pins

Page 65: Lockpicking Forensics

Key Bumping - Pins

Page 66: Lockpicking Forensics

Key Bumping - Pins

Page 67: Lockpicking Forensics

Key Bumping - Pins

Page 68: Lockpicking Forensics

Key Bumping - Pins

Page 69: Lockpicking Forensics

Key Bumping - Plug

Page 70: Lockpicking Forensics

Key Bumping - Face

Page 71: Lockpicking Forensics

Key Bumping - Face

Page 72: Lockpicking Forensics

Key Bumping - Plug

Page 73: Lockpicking Forensics

Impressioning

Page 74: Lockpicking Forensics

Impressioning - Manipulation

Page 75: Lockpicking Forensics

Impressioning - Manipulation

Page 76: Lockpicking Forensics

Impressioning - Plug

Page 77: Lockpicking Forensics

Impressioning – UV residue

Page 78: Lockpicking Forensics

Impressioning – UV Residue

Page 79: Lockpicking Forensics

Decoding

Depends on technique Covert vs. surreptitious

Decoder “pick” Manipulation Visual/Optical Thermal Radiological Disassembly

Page 80: Lockpicking Forensics

Decoding - Visual

Page 81: Lockpicking Forensics

Decoding - Visual

Page 82: Lockpicking Forensics

Bypass

Page 83: Lockpicking Forensics

Bypass

Page 84: Lockpicking Forensics

Bypass

Page 85: Lockpicking Forensics

Key Analysis

Material, keyway, cuts, codes

Original or duplicate Hand cut or machined Recent cutting, copying

Material transfer

Page 86: Lockpicking Forensics

Keys - Plating

Page 87: Lockpicking Forensics

Keys – Original vs Copied

Page 88: Lockpicking Forensics

Keys – Original vs Copied

Page 89: Lockpicking Forensics

Keys – Stylus striae

Page 90: Lockpicking Forensics

Keys – Hand made

Page 91: Lockpicking Forensics

Keys – Filed

Page 92: Lockpicking Forensics

Keys – Filed

Page 93: Lockpicking Forensics

Keys - Dremel

Page 94: Lockpicking Forensics

Keys – Cutting Wheels

Page 95: Lockpicking Forensics

Keys - Comparison

Page 96: Lockpicking Forensics

Key - Bumping

Page 97: Lockpicking Forensics

Keys – Bumping

Page 98: Lockpicking Forensics

Keys – Tool Marks

Page 99: Lockpicking Forensics

Keys – Tool Marks

Page 100: Lockpicking Forensics

Keys – Tool Marks

Page 101: Lockpicking Forensics

Keys – Clay residue

Page 102: Lockpicking Forensics

Keys – Wax residue

Page 103: Lockpicking Forensics

Keys – UV Residue

Page 104: Lockpicking Forensics

Anti-forensics Tools?

Possible!

Difficult to use Limited durability Expensive*

Page 105: Lockpicking Forensics

Safe/Vault Forensics

Drill points Writing/marking Magnetic/adhesive Tool marks

Page 106: Lockpicking Forensics

Investigative Process

Crime scene investigation Laboratory examination Investigative report Testimony

Page 107: Lockpicking Forensics

Crime Scene Investigation

Photographs Sketches Permission issues Evidence preservation Chain of custody

Police vs. Insurance

Page 108: Lockpicking Forensics

Initial Questions

Purchase/Installation Per day usage Security rating(s) Key/combo distribution Lock condition

− Working?− Repaired?− Replaced?

Page 109: Lockpicking Forensics

Forensic Examination

Lock specs & data Lock operation Lock security rating Tool marks Material transfer Keys

Do your homework!

Page 110: Lockpicking Forensics

Disassembly

Chamber casings

Use of key(s)

Shimming

Destructive

Page 111: Lockpicking Forensics

Shimming

Page 112: Lockpicking Forensics

Forensic Workspaces Separate!

Clean area

Clean/new tools− Tweezers, followers, shims− Saws− Clay− Hands/etc

Page 113: Lockpicking Forensics

Cleaning of Components

To clean or not?

Always look first!

Evidence destruction False evidence creation

Page 114: Lockpicking Forensics

Cleaning of Components

Page 115: Lockpicking Forensics

Investigative Report

Findings Supporting pictures Mirrored locks*

− Picked− Pick gun− Bumped− Impressioned

Page 116: Lockpicking Forensics

Licensing & Certification

International Association of Investigative Locksmiths (IAIL)

Page 117: Lockpicking Forensics

Resources

http://www.LockpickingForensics.com

http://www.LockpickingForensics.com/links.php

http://www.LockWiki.com