A method for locating digital evidences with outlier detection using support vector machine

International Journal of Network Security

Volumn 6, Issue 3, 2008, Pages 301-308

  Liu, Zaiqiang ^a   Lin, Dongdai ^a   Guo, Fengdeng ^a  

^a INSTITUTE OF SOFTWARE   (China)

Author keywords

Data mining; Digital forensics; Feature calculation; Support vector machine

Indexed keywords

DIGITAL EVIDENCE; DIGITAL FORENSIC; DIGITAL INVESTIGATORS; EXPERT KNOWLEDGE; FEATURE VECTORS; ONE-CLASS SUPPORT VECTOR MACHINE; OUTLIER DETECTION; RESEARCH FOCUS;

COMPUTER CRIME; DATA MINING; IMAGE RETRIEVAL; INTRUSION DETECTION; STATISTICS;

SUPPORT VECTOR MACHINES;

EID: 84872776077     PISSN: 1816353X     EISSN: 18163548     Source Type: Journal    
DOI: None     Document Type: Article

References (15)

1. Be. E. Boser, I. Guyon, and V. Vapnik, "A training algorithm for optimal margin classifiers," Computational Learing Theory, pp. 144-152, 1992.
2. C. Campbell and K. P. Bennett, "A linear programming approach to novelty detection," Advances in Neural Information Processing Systems, vol. 14, pp. 395-401, 2001.
3. B. D. Carrier and E. H. Spfford, "Defining event reconstruction of a digital crime scene," Journal of Forensic Sciences, vol. 49, no. 6, pp. 1291-1298, 2004.
4. B. Carrier, File System Forensic Analysis, Addison Wesley Professional, 2005.
5. B. D. Carrier and E. H. Spafford, "Automated digital evidence target definition using outlier analysis and existing evidence," in 2005 Digital Forensic Research Workshop (DFRWS), 2005.
6. C. C. Chang and C. J. Lin, LIBSVM: A Library for Support Vector Machines, 2001. (http://www.csie.ntu.edu.tw/ cjlin/libsvm)
7. M. Davy, A. Gretton, A. Doucet, and P. J.W. Rayne, "Optimised support vector machines for nonstationary signal classification," IEEE Signal Processing Letters, vol. 9, pp. 442-445, 2002.
8. F. Desobry and M. Davy, "Support vector-based online detection of abrupt changes," in Proceedings of ICASSP, vol. 4, pp. 872-875, 2003.
9. W. Lee and S. J. Stolfo. "Data mining approaches for intrusion detection," in Proceedings of the 7th USENIX Security Symposium, pp. 79-93, 1998.
10. S. Mukkamala and A. H. Sung, "Identifying significant features for network forensic analysis using artificial intelligent techniques," International Journal of Digital Evidence, vol. 1, no. 4, pp. 1-17, 2003.
11. F. Provost and T. Fawcett, "Robust classification for imprecise environments," Machine Learning, vol. 42, pp. 203-231, 2001.
12. B. Scḧolkopf, J. C. Platt, J. Shawe-Taylor, A. J. Smola, and R. C. Williamson, "Estimating the support of a high-dimensional distribution," Neural Computation, vol. 13, no. 7, pp. 1443-1471, 2001.
13. B. Scḧolkopf and A. J. Smola, Learning with Kernels: Support Vector Machines, Regularization, Optimization, and Beyond MIT Press, Cambridge, MA, 2002.
14. S. J. Stolfo, W. Fan, andW. Lee, "Cost-based modeling and evaluation for data mining with application to fraud and intrusion detection: Results from the JAM projec", in DARPA Information Survivability Conference, pp. 130-144, 2000.
15. D. R. Wilson, and T. R. Martinez, "Improved heterogeneous distance functions," Journal of Artificial Intelligence Research, no. 6, pp. 1-34, 1997.