Framework forensic examination computer systems

This thesis discusses the features and requirements of a computationally intelligent computer forensic system. By introducing a novel concept, "Case-Relevance", a computationally intelligent forensic framework has been proposed. The details of binding the "Case-Relevance" concept...

Full description

Saved in:
Bibliographic Details
Main Author: Gong, Ruibin
Other Authors: Shi Daming
Format: Theses and Dissertations
Published: 2008
Subjects:
Online Access:https://hdl.handle.net/10356/2470
Tags: Add Tag
No Tags, Be the first to tag this record!
Institution: Nanyang Technological University
Description
Summary:This thesis discusses the features and requirements of a computationally intelligent computer forensic system. By introducing a novel concept, "Case-Relevance", a computationally intelligent forensic framework has been proposed. The details of binding the "Case-Relevance" concept with the current data analysis phase in computer forensic investigation have been given in two investigation scenarios. An email evidence extraction algorithm has been developed based on the proposed framework. The experimental results fully demonstrated the advantage of such a computer forensic framework. Phonetic string search is a very important technique, which has been widely used in computer forensics. In this thesis, a novel phonetic string search algorithm, Syllable Alignment Pattern Searching (SAPS), which computes the optimal pairing of the corresponding syllables in two strings, is proposed.