International Journal of Engineering Research in Computer Science and Engineering (IJERCSE)

Digital Forensics Triage for Automated Analysis of Digital Evidence

Author : Shital Gade ¹ Vanita Mane ²

Date of Publication :7th August 2016

Abstract: With the rapid advancements in information and communication technology in the world, the number of crimes related to the digital devices with huge storage space and broadband network connections has increased dramatically and these crimes are becoming technically intensive. It is indeed very crucial for digital forensics investigators to timely identify, analyze and interpret the digital evidence. The digital forensics investigations are carried out to investigate a wide variety of crimes including child pornography, murder, child abductions, missing or exploited persons. In such types of cases, there is a need for timely identification and analysis of digital evidences found at the crime scene. The forensic experts dealing with such crime investigations, need quick investigative leads. The traditional, manually intensive and time consuming procedures indeed, may no longer be appropriate in such cases. There is a need of advanced investigative techniques which can speed up investigation process. The paper explores one of such advanced techniques, 'Triage' which combines the principles of data mining and machine learning. Triage is a technique used in many disciplines, when applied to digital forensics its goal is to speed up the investigation process. Based on the connections between the digital evidences retrieved and crimes under investigation, our proposed triage model aims at automating the categorization of the digital media.

Reference :

1. Vassil Roussev, Candice Quates, Robert Martell, "Real-time digital forensics and triage", Digital Investigation, Sept. 2013.
2. Richard E. Overill a,J antje A.M. Silomona, Keith A. Roscoe, "Triage template pipelines in digital forensic investigations", Digital Investigation, Sept. 2013.
3. Rogers, M. K., Goldman, J., Mislan, R., Wedge T., "Computer Forensics Field Triage Process Model", Conference on Digital Forensics, Security and Law, 2006.
4. Veena H Bhat, Abhilach R. V., P. Deepa Shenoy, Venugopal K.R., L.M. Patnaik, " A Data Mining Approach for Data Generation and Analysis for Digital Forensic Application", IACSIT International Journal of Engineering and Technology, Vol.2, No.3, ISSN: 1793-8236, June 2010.
5. Bertè, R., Marturana F., Me G., Tacconi S., "Data mining based crime dependent triage in digital forensics analysis", Proceedings of International Conference on Affective Computing and Intelligent Interaction (ICACII 2012) and IERI Lecture Notes in Information Technology ISSN: 2070-1918, in press , Feb. 2012.
6. Fabio Marturana, Rosamaria Berte, Simone Tacconi,Gianluigi Me, "Triage-based automated analysis of evidence in court cases of copyright infringement", First IEEE International Workshop on Security and Forensics in Communication Systems, June 2012.
7. Fabio Marturana a, Simone Tacconi, "A Machine Learning-based Triage methodology for automated categorization of digital media", Digital Investigation 10, Sept. 2013.
8. Marturana, F., Berte R,; Me G., Tacconi S., " Mobile Forensics "triaging": new directions for methodology", Springer ISBN: 978-88-6105-063-1, Proceedings of VIII Conference of the Italian Chapter of AIS (ITAIS 2011) Rome, Italy, 2011.
9. D. Bem, F. Feld, E. Huebner, O. Bem, "Computer forensics — past, present and future", Journal of Information Science and Technology 5(3), 2008.
10. Graeme Horsman, Christopher Laing, Paul Vickers, "A case-based reasoning method for locating evidence during digital forensic device triage", Decision Support Systems, May 2014.
11. Robert J. Walls, Erik Learned-Miller, Brian Neil Levine, "Forensic Triage for Mobile Phones with DEC0DE", Digital Investigation, 2012.
12. Inikipi O. Ademu, Dr Chris O. Imafidon, Dr David S. Preston, "A new approach of digital forensic model for digital forensic investigation", International Journal of Advanced Computer Science and Applications, Vol.2, No.12, 2011.
13. P.A. Aguileraa, A. Fernández b, R. Fernández a, R. Rumí b, A.Salmeronb, "Bayesian networks in environmental modelling", Environmental Modelling and Software 26, 2011.
14. C.Ramasubramanian, R.Ramya, "Effective PreProcessing Activities in Text Mining using Improved Porter’s Stemming Algorithm", International Journal of Advanced Research in Computer and Communication Engineering Vol. 2, Issue 12, December 2013.
15. Yunus Yusoff, Roslan Ismail, Zainuddin Hassan, "Common phases of computer forensics investigation models", International Journal of Computer Science and Information Technology (IJCSIT), Vol.3, No.3, June 2011.
16. W.A. Awad, S.M. ELseuofi, "Machine Learning Methods for Spam E-Mail Classification", International Journal of Computer Science and Information Technology (IJCSIT), Vol.3, No 1, Feb. 2011.
17. Ira Cohen, Nicu Sebe, Fabio G. Cozman, Marcelo C. Cirelo, Thomas S. Huang, "Learning Bayesian Network Classifiers for Facial Expression Recognition using both Labeled and Unlabeled Data", Proceedings 2003 IEEE Computer Society Conference on Computer Vision and Pattern Recognition, Vol. 1, June 2003.