Mining writeprints from anonymous e-mails for forensic investigation

Digital Investigation

Volumn 7, Issue 1-2, 2010, Pages 56-64

  Iqbal, Farkhund ^a   Binsalleeh, Hamad ^a   Fung, Benjamin C M ^a   Debbabi, Mourad ^a  

^a Gina Cody School of Engineering and Computer Science   (Canada)

Author keywords

Authorship analysis; Classification; Clustering; E mail; Forensic investigation; Stylometric features; Writeprint; Writing styles

Indexed keywords

CLASSIFICATION (OF INFORMATION); CRIME;

AUTHORSHIP ANALYSIS; CLUSTERING; FORENSIC INVESTIGATION; STYLOMETRIC FEATURES; WRITE-PRINT; WRITING STYLE;

ELECTRONIC MAIL;

EID: 78449239926     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2010.03.003     Document Type: Article

References (31)

1. S. Aaronson Stylometric clustering, a comparative analysis of data-driven and syntactic features Technical report 1999 UC Berkeley
2. A. Abbasi, and H. Chen Writeprints: a stylometric approach to identity-level identification and similarity detection in cyberspace ACM Transactions on Information Systems 26 2 2008 1 29
3. A. Abbasi, H. Chen, and J. Nunamaker Stylometric identification in electronic markets: scalability and robustness Journal of Management Information Systems 5 1 2008 49 78
4. Agrawal R, Imieliński T, Swami A. Mining association rules between sets of items in large databases. In: Proc. of the 1993 ACM international conference on Management of Data (SIGMOD). Washington, D.C., United States; 1993. p. 207-216.
5. R.H. Baayen, H. Van Halteren, and F.J. Tweedie Outside the cave of shadows: using syntactic annotation to enhance authorship attribution Literary and Linguistic Computing 2 1996 110 120
6. J.F. Burrows Word patterns and story shapes: the statistical analysis of narrative style Literary and Linguistic Computing 2 1987 61 67
7. Cohen WW. Enron email dataset; 2004.
8. Corney M, de Vel O, Anderson A, Mohay G. Gender-preferential text mining of e-mail discourse. In: Proc. of the 18th Annual computer security applications conference; 2002. p. 282.
9. de Vel O. Mining e-mail authorship. In: Proc. of the Workshop on text mining in ACM international conference on knowledge discovery and data mining (KDD); 2000.
10. O. de Vel, A. Anderson, M. Corney, and G. Mohay Mining e-mail content for author identification forensics SIGMOD Record 30 4 2001 55 64
11. P. Dempster, N.M. Laird, and D.B. Rubin Maximum likelihood from incomplete data via the EM algorithm Journal of the Royal Statistical Society 39 1 1977 1 38
12. Fung CM, Wang K, Ester M. Hierarchical document clustering using frequent itemsets. In: Proc. of the 3rd SIAM international conference on data mining (SDM). San Francisco, CA; May 2003. p. 59-70.
13. Gamon M. Linguistic correlates of style: authorship classification with deep linguistic analysis features. In: Proc. of the 20th international conference on computational linguistics. Geneva, Switzerland; 2004. p. 611.
14. D.I. Holmes The evolution of stylometry in humanities Literary and Linguistic Computing 13 3 1998 111 117
15. D.I. Holmes, and R.S. Forsyth The federalist revisited: new directions in authorship attribution Literary and Linguistic Computing 10 2 1995 111 127
16. F. Iqbal, R. Hadjidj, B.C.M. Fung, and M. Debbabi A novel approach of mining write-prints for authorship attribution in e-mail forensics Digital Investigation 5 2008 42 51
17. M. Koppel, J. Schler, and S. Argamon Computational methods in authorship attribution Journal of American Society Information Science Technology 60 1 2009 9 26
18. G.R. Ledger, and T.V.N. Merriam Shakespeare, Fletcher, and the two Noble Kinsmen Literary and Linguistic Computing 9 1994 235 248
19. H. Li, D. Shen, B. Zhang, Z. Chen, and Q. Yang Adding semantics to email clustering Proc. of the 6th international conference on data mining (ICDM) 2006 IEEE Computer Society Washington, DC, USA 938 942
20. J. Li, R. Zheng, and H. Chen From fingerprint to writeprint Communications of the ACM 49 4 2006 76 82
21. F. Mosteller, and D.L. Wallace Inference and disputed authorship: the federalist behavioral science:quantitative methods edition 1964 Addison-Wesley Massachusetts
22. Novak J, Raghavan P, Tomkins A. Anti-aliasing on the web. In: Proc. of the 13th international conference on world wide web (WWW); 2004. p. 30-39.
23. D. Paice Another stemmer SIGIR Forum 24 3 1990 56 61
24. M.F. Porter An algorithm for suffix stripping Program 3 14 October 1980 130 137
25. E. Stamatatos, G. Kokkinakis, and N. Fakotakis Automatic text categorization in terms of genre and author Computational Linguistics 26 4 2000 471 495
26. Stolfo SJ, Creamer G, Hershkop S. A temporal based forensic analysis of electronic communication. In: Proc. of the 2006 international conference on Digital Government Research. San Diego, CA, 2006. p. 23-24.
27. G.U. Yule On sentence length as a statistical characteristic of style in prose Biometrika 30 1938 363 390
28. G.U. Yule The statistical study of literary vocabulary 1944 Cambridge University Press Cambridge, UK
29. R. Zheng, J. Li, H. Chen, and Z. Huang A framework for authorship identification of online messages: writing-style features and classification techniques Journal of the American Society for Information Science and Technology 57 3 February 2006 1532 2882
30. R. Zheng, Y. Qin, Z. Huang, and H. Chen Authorship analysis in cybercrime investigation. Presentation Retrieved February 07, 2009 http://www. isiconference.org/2003/presentation.htm 2003
31. Zheng R, Qin Y, Huang Z, Chen H. Authorship analysis in cybercrime investigation. In: Proc. of the 1st International symposium on Intelligence and security informatics (ISI). Tucson, Arizona; 2003.