A discussion of visualization techniques for the analysis of digital evidence

Proceedings of the 2011 6th International Conference on Availability, Reliability and Security, ARES 2011

Volumn , Issue , 2011, Pages 758-763

  Schrenk, Gerald ^a   Poisel, Rainer ^a  

^a St Poelten University of Applied Sciences   (Austria)

Author keywords

Digital forensics; Timeline; Timestamp; Visualization

Indexed keywords

CONVENTIONAL APPROACH; DATA CLASSIFICATION; DATA SOURCE; DIGITAL CRIME; DIGITAL EVIDENCE; DIGITAL FORENSIC; LOGGING DATA; STATE OF THE ART; STORAGE CAPACITY; TIMELINE; TIMESTAMP; VISUALIZATION TECHNIQUE;

CLASSIFICATION (OF INFORMATION); COMPUTER CRIME; ELECTRONIC CRIME COUNTERMEASURES; RELIABILITY ANALYSIS; VISUALIZATION;

DATA VISUALIZATION;

EID: 80455162356     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2011.119     Document Type: Conference Paper

References (23)

1. Sheldon Teerlink and Robert F. Erbacher. Improving the computer forensic analysis process through visualization. Commun. ACM, 49:71-75, February 2006.
2. Marco Lerche and Olga Koziol. Visualisierung in der digitalen forensik. Technical report, Fraunhofer IGD, 2010.
3. Bennie Kar Leung Fei. Data visualisation in digital forensics. Master's thesis, University of Pretoria, 2007.
4. Forensics Wiki. Visualization tools, April 2011. [Online; Status 04/15/2011] Available: http://www.forensicswiki.org/wiki/Tools:Visualization.
5. Forensics Wiki. Timeline analysis bibliography, April 2011. [Online; Status 04/15/2011] Available: http://www.forensicswiki.org/wiki/Timeline- Analysis-Bibliography.
6. Daniel A. Keim. Datenvisualisierung und Data Mining. atenbank- Spektrum, pages 30-39, 2002.
7. Raffael Marty. Applied Security Visualization. Addison-Wesley Professional, 1 edition, 2008.
8. J. R. Goodall. Introduction to visualization for computer security. In John R. Goodall, Gregory Conti, and Kwan-Liu Ma, editors, VizSEC 2007, Mathematics and Visualization, pages 1-17. Springer Berlin Heidelberg, 2008. 10.1007/978-3-540-78243-8-1.
9. D.; Stamps A.S.; Franck J.; Carver J.; Swan J.E.; Jankun-Kelly, T.J.; Wilson. A visual analytic framework for exploring relationships in textual contents of digital forensics evidence. Visualization for Cyber Security, 2009. VizSec 2009. 6th International Workshop on, pages 39-44, 2009.
10. Svein Yngvar Willassen. Methods for Enhancement of Timestamp Evidence in Digital Investigations. PhD thesis, Norwegian University of Science and Technology, Department of Telematics, 2008.
11. Jens Olsson and Martin Boldt. Computer forensic timeline visualization tool. ScienceDirect Digital Investigation, 6:78-87, 2009.
12. GuidanceSoftware. Encase, April 2011. [Online; Status 04/15/2011] Available: http://www.guidancesoftware.com/.
13. AccessData. Forensictoolkit, April 2011. [Online; Status 04/15/2011] Available: http://accessdata.com/products/forensic-investigation/ftk.
14. SleuthKit, April 2011. [Online; Status 04/15/2011] Available: http://www.sleuthkit.org/.
15. TechPathways. Prodiscover dft, April 2011. [Online; Status 04/15/2011] Available: http://www.techpathways.com/ProDiscoverDFT.htm.
16. Junbin Yang Genzhen Yu Fanlin Meng, Shunxiang Wu. Research of an e-mail forensic and analysis system based on visualization. Second Asia-Pacific Conference on Computational Intelligence and Industrial Applications, pages 281-284, 2009.
17. Ronny Hadany and David Harel. A multi scale algorithm for drawing graphs nicely. Discrete Appl. Math., 113:3-21, October 2001.
18. Ka-Ping Yee, Danyel Fisher, Rachna Dhamija, and Marti Hearst. Animated exploration of dynamic graphs with radial layout. In Proceedings of the IEEE Symposium on Information Visualization 2001 (INFOVIS'01), pages 43-, Washington, DC, USA, 2001. IEEE Computer Society.
19. Doantam Phan. Supporting the visualization and forensic analysis of network events. PhD thesis, Stanford, CA, USA, 2008. AAI3292405.
20. Kulsoom Abdullah, Chris Lee, Gregory Conti, and John A. Copel. Visualizing network data for intrusion detection. In In Proceedings of the 2005 IEEE Workshop on Information Assurance and Security. United States Military Academy, pages 2-3, 2005.
21. tcpdump. April 2011. [Online; Status 04/23/2011] Available: http://www.tcpdump.org/
22. Sebastian Schmerl, Michael Vogel, Rene Rietz, and Hartmut Konig. Explorative visualization of log data to support forensic analysis and signature development. Systematic Approaches to Digital Forensic Engineering, IEEE International Workshop on, 0:109-118, 2010.
23. J. R. Goodall. Visualization is better! a comparative evaluation. VizSec 2009. 6th International Workshop on, pages 57 - 68, 2009.