• DocumentCode
    1701251
  • Title

    User-Contributory Case-Based Reasoning for Digital Forensic Investigations

  • Author

    Horsman, Graeme ; Laing, Christopher ; Vickers, Paul

  • Author_Institution
    Comput., Eng. & Inf. Sci., Northumbria Univ., Newcastle upon Tyne, UK
  • fYear
    2012
  • Firstpage
    103
  • Lastpage
    106
  • Abstract
    A novel concept for approaching digital investigations is presented. User-contributory case-based reasoning (UCCBR) is a method by which previous results from digital forensic (DF) examinations are stored and reused in future investigations. The advantages of a UCCBR system are discussed which include implementing UCCBR as an auditing tool, a method for optimizing evidence retrieval and anomalous file detection.
  • Keywords
    case-based reasoning; computer forensics; UCCBR system; anomalous file detection; auditing tool; digital forensic examinations; digital forensic investigations; evidence retrieval; user-contributory case-based reasoning; Cognition; Computers; Digital forensics; Humans; Knowledge based systems; Standards; Contributory case based reasoning; auditing; digital forensics; knowledge reuse;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Emerging Security Technologies (EST), 2012 Third International Conference on
  • Conference_Location
    Lisbon
  • Print_ISBN
    978-1-4673-2448-9
  • Type

    conf

  • DOI
    10.1109/EST.2012.35
  • Filename
    6328012