Framework forensic examination computer systems

• Main Author: Gong, Ruibin
• Other Authors: Shi Daming
• Format: Theses and Dissertations
• Published: 2008
• Subjects: DRNTU::Engineering::Computer science and engineering::Computer systems organization::Computer-communication networks
• Online Access: https://hdl.handle.net/10356/2470
• Institution: Nanyang Technological University

This thesis discusses the features and requirements of a computationally intelligent computer forensic system. By introducing a novel concept, "Case-Relevance", a computationally intelligent forensic framework has been proposed. The details of binding the "Case-Relevance" concept with the current data analysis phase in computer forensic investigation have been given in two investigation scenarios. An email evidence extraction algorithm has been developed based on the proposed framework. The experimental results fully demonstrated the advantage of such a computer forensic framework. Phonetic string search is a very important technique, which has been widely used in computer forensics. In this thesis, a novel phonetic string search algorithm, Syllable Alignment Pattern Searching (SAPS), which computes the optimal pairing of the corresponding syllables in two strings, is proposed.