The use of self-organising maps for anomalous behaviour detection in a digital investigation

Forensic Science International

Volumn 162, Issue 1-3, 2006, Pages 33-37

  Fei, B K L ^a   Eloff, J H P ^a   Olivier, M S ^a   Venter, H S ^a  

^a UNIVERSITY OF PRETORIA   (South Africa)

Author keywords

Anomalous behaviours; Digital forensics; Digital investigation; Self organising map; Visualisation

Indexed keywords

ANALYTIC METHOD; ARTICLE; ARTIFICIAL NEURAL NETWORK; COMPUTER ANALYSIS; COMPUTER SYSTEM; CRIME; DATA ANALYSIS; DATA EXTRACTION; DIGITAL FORENSICS; EMPLOYEE; FORENSIC SCIENCE; HUMAN; INTERNET; LEGAL EVIDENCE; PRIORITY JOURNAL; SELF ORGANIZING MAP;

EID: 33748579887     PISSN: 03790738     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.forsciint.2006.06.046     Document Type: Article

References (16)

1. Noblett M., Pollitt M., and Presley L. Recovering and examining computer forensic evidence. Forensic Sci. Commun. 2 4 (2002)
2. Marcella A., and Greenfield R. Cyber Forensics: A Field Manual for Collecting, Examining and Preserving Evidence of Computer Crimes (2002), Auerbach
3. Guidance Software Inc., 2004. http://www.guidancesoftware.com.
4. Access Data Corp., 2004. http://www.accessdata.com.
5. Technology Pathways, LLC, 2004. http://www.techpathways.com.
6. Roussev V., and Richard III G. Breaking the performance wall: the case for distributed digital forensics. Proceedings of the Digital Forensic Research Workshop (2004)
7. N. Beebe, J. Clark, Dealing with terabyte data sets in digital investigations, Advances in Digital Forensics, Springer (2005) 3-16.
8. Mena J. Investigative Data Mining for Security and Criminal Detection (2003), Heinemann, Butterworth
9. Fei B., Eloff J., Venter H., and Olivier M. Exploring forensic data with self-organising maps. Advances in Digital Forensics, Springer (2005) 113-123
10. Kohonen T. The self-organising map. Proc. IEEE 78 9 (1990) 1464-1480
11. Kohonen T. Self-organising Maps (2001), Springer-Verlag
12. J. Vesanto, Using SOM in data mining, Licentiate Thesis, Helsinki University of Technology, 2000.
13. Engelbrecht A. Computational Intelligence: An Introduction (2002), Wiley
14. J. Vesanto, Data exploration process based on the self-organising map, Doctoral Thesis, Acta Polytechnica Scandinavica, Mathematics and Computing Series 15, Helsinki University of Technology, 2002.
15. Vesanto J. SOM-based data visualisation methods. Intell. Data Anal. 3 2 (1999) 111-126
16. B.K.L. Fei, J.H.P. Eloff, M.S. Olivier, H.M. Tillwick, H.S. Venter, Using self-organising maps for anomalous behaviour detection in a computer forensic investigation, in: Proceedings of the Fifth Annual Information Security South Africa Conference.