Loading [a11y]/accessibility-menu.js
Investigative profiling with computer forensic log data and association rules | IEEE Conference Publication | IEEE Xplore

Investigative profiling with computer forensic log data and association rules


Abstract:

Investigative profiling is an important activity in computer forensics that can narrow the search for one or more computer perpetrators. Data mining is a technique that h...Show More

Abstract:

Investigative profiling is an important activity in computer forensics that can narrow the search for one or more computer perpetrators. Data mining is a technique that has produced good results in providing insight into large volumes of data. This paper describes how the association rule data mining technique may be employed to generate profiles from log data and the methodology used for the interpretation of the resulting rule sets. The process relies on background knowledge in the form of concept hierarchies and beliefs, commonly available from, or attainable by, the computer forensic investigative team. Results obtained with the profiling system has identified irregularities in computer logs.
Date of Conference: 09-12 December 2002
Date Added to IEEE Xplore: 10 March 2003
Print ISBN:0-7695-1754-4
Conference Location: Maebashi City, Japan

Contact IEEE to Subscribe

References

References is not available for this document.