Title :
User-Contributory Case-Based Reasoning for Digital Forensic Investigations
Author :
Horsman, Graeme ; Laing, Christopher ; Vickers, Paul
Author_Institution :
Comput., Eng. & Inf. Sci., Northumbria Univ., Newcastle upon Tyne, UK
Abstract :
A novel concept for approaching digital investigations is presented. User-contributory case-based reasoning (UCCBR) is a method by which previous results from digital forensic (DF) examinations are stored and reused in future investigations. The advantages of a UCCBR system are discussed which include implementing UCCBR as an auditing tool, a method for optimizing evidence retrieval and anomalous file detection.
Keywords :
case-based reasoning; computer forensics; UCCBR system; anomalous file detection; auditing tool; digital forensic examinations; digital forensic investigations; evidence retrieval; user-contributory case-based reasoning; Cognition; Computers; Digital forensics; Humans; Knowledge based systems; Standards; Contributory case based reasoning; auditing; digital forensics; knowledge reuse;
Conference_Titel :
Emerging Security Technologies (EST), 2012 Third International Conference on
Conference_Location :
Lisbon
Print_ISBN :
978-1-4673-2448-9
DOI :
10.1109/EST.2012.35
