Digital Forensics and Cyber Crime. Fifth International Conference, ICDF2C 2013, Moscow, Russia, September 26-27, 2013, Revised Selected Papers

Research Article

An Automated Link Analysis Solution Applied to Digital Forensic Investigations

Download
549 downloads
  • @INPROCEEDINGS{10.1007/978-3-319-14289-0_13,
        author={Fergal Brennan and Martins Udris and Pavel Gladyshev},
        title={An Automated Link Analysis Solution Applied to Digital Forensic Investigations},
        proceedings={Digital Forensics and Cyber Crime. Fifth International Conference, ICDF2C 2013, Moscow, Russia, September 26-27, 2013, Revised Selected Papers},
        proceedings_a={ICDF2C},
        year={2015},
        month={2},
        keywords={Forensic tools Link analysis Social network analysis Software engineering Automation Profiling Visualisation Keywords},
        doi={10.1007/978-3-319-14289-0_13}
    }
    
  • Fergal Brennan
    Martins Udris
    Pavel Gladyshev
    Year: 2015
    An Automated Link Analysis Solution Applied to Digital Forensic Investigations
    ICDF2C
    Springer
    DOI: 10.1007/978-3-319-14289-0_13
Fergal Brennan1,*, Martins Udris1,*, Pavel Gladyshev1,*
  • 1: University College Dublin
*Contact email: fergalbrennan@gmail.com, martins.udris@gmail.com, pavel.gladyshev@ucd.ie

Abstract

The rapid growth of computer storage, new technologies, anti-forensics and hacking tools, as well as cheaper and easily accessible powerful computing equipment, has led to digital crimes becoming more frequent and often more sophisticated. These challenges have led to digital examinations becoming increasingly time-consuming and laborious, resulting in an urgent need for the automation of digital forensic analysis. In addition to in-depth analysis of particular digital devices, it is often necessary to establish that two devices and hence their owners are linked. This need arises, for example, when a suspect is apprehended and the investigator needs to establish grounds for the detention of a suspect. This paper proposes a methodology and a software solution to automate the detection of information linkage between two or more distinct digital devices.