A forensic analysis solution of the email network based on email contents

Forensics analyses of an email network were more based on the email communication structure, while the email content was seldom considered. In this paper, we propose a forensics analysis method for an email network based on the Latent Dirichlet Allocation topic model and the Centrality algorithm. The method takes into full consideration the email content and the email communication structure. In order to calculate the email communication correlation with the topic of the criminal case, we get the similarity of the email content based on the Latent Dirichlet Allocation model. Combined with the Centrality algorithm, we can obtain the mail accounts that have the greater influence on the email network. Experimental results show that this method can more effectively analyze an email network and find the specific email accounts.