Modeling and Reasoning About Digital Evidence Using Temporal Networks
摘要
The deluge of email and text communications has increased the need to develop efficient digital forensic analysis techniques for retrieving, organizing and reasoning about evidence. This chapter describes a temporal network methodology for organizing digital communications data to advance digital forensic analyses. An automated methodology that leverages temporal data organization is employed to extract relevant evidence. The methodology also enables digital forensic practitioners to visualize and reason about digital data using temporal network models of evidence. The effectiveness of the methodology is demonstrated using email and text datasets.