Forensics in Telecommunications, Information and Multimedia. Second International Conference, e-Forensics 2009, Adelaide, Australia, January 19-21, 2009, Revised Selected Papers

Research Article

Cyber Forensics Ontology for Cyber Criminal Investigation

Download
1458 downloads
  • @INPROCEEDINGS{10.1007/978-3-642-02312-5_18,
        author={Heum Park and SunHo Cho and Hyuk-Chul Kwon},
        title={Cyber Forensics Ontology for Cyber Criminal Investigation},
        proceedings={Forensics in Telecommunications, Information and Multimedia. Second International Conference, e-Forensics 2009, Adelaide, Australia, January 19-21, 2009, Revised Selected Papers},
        proceedings_a={E-FORENSICS},
        year={2012},
        month={5},
        keywords={ontology cyber crime digital evidence criminal investigation cyber forensics},
        doi={10.1007/978-3-642-02312-5_18}
    }
    
  • Heum Park
    SunHo Cho
    Hyuk-Chul Kwon
    Year: 2012
    Cyber Forensics Ontology for Cyber Criminal Investigation
    E-FORENSICS
    Springer
    DOI: 10.1007/978-3-642-02312-5_18
Heum Park1,*, SunHo Cho1,*, Hyuk-Chul Kwon1,*
  • 1: Pusan National University
*Contact email: parkheum2@empal.com, sean@pusan.ac.kr, hckwon@pusan.ac.kr

Abstract

We developed Cyber Forensics Ontology for the criminal investigation in cyber space. Cyber crime is classified into cyber terror and general cyber crime, and those two classes are connected with each other. The investigation of cyber terror requires high technology, system environment and experts, and general cyber crime is connected with general crime by evidence from digital data and cyber space. Accordingly, it is difficult to determine relational crime types and collect evidence. Therefore, we considered the classifications of cyber crime, the collection of evidence in cyber space and the application of laws to cyber crime. In order to efficiently investigate cyber crime, it is necessary to integrate those concepts for each cyber crime-case. Thus, we constructed a cyber forensics domain ontology for criminal investigation in cyber space, according to the categories of cyber crime, laws, evidence and information of criminals. This ontology can be used in the process of investigating of cyber crime-cases, and for data mining of cyber crime; classification, clustering, association and detection of crime types, crime cases, evidences and criminals.