A visual analytic framework for exploring relationships in textual contents of digital forensics evidence

We describe the development of a set of tools for analyzing the textual contents of digital forensic evidence for the purpose of enhancing an investigator's ability to discover information quickly and efficiently. By examining the textual contents of files and unallocated space, relationships b...

Full description

Saved in:
Bibliographic Details
Main Authors: Jankun-Kelly, T.J., Wilson, D., Stamps, A.S., Franck, J., Carver, J., Swan, J.E.
Format: Conference Proceeding
Language:English
Subjects:
Computer crime
Computer graphics
Computer science
Digital forensics
Frequency
I.3.3 [Computer Graphics]: Picture/Image Generation
I.3.8 [Computer Graphics]: Applications-Visualization
Image analysis
Image generation
Information analysis
K.6.m [Management of Computing and Information Systems]: Miscellaneous-Security
Visual analytics
Visualization
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:We describe the development of a set of tools for analyzing the textual contents of digital forensic evidence for the purpose of enhancing an investigator's ability to discover information quickly and efficiently. By examining the textual contents of files and unallocated space, relationships between sets of files and clusters can be formed based on the information that they contain. Using the information gathered from the evidence through the analysis tool, the visualization tool can be used to search through the evidence in an organized and efficient manner. The visualization depicts both the frequency of relevant terms and their location on disk. We also discuss a task analysis with forensics officers to motivate the design.
DOI:10.1109/VIZSEC.2009.5375541