Visualizing Digital Forensic Datasets: A Proof of Concept

Journal of Forensic Sciences

Volumn 62, Issue 5, 2017, Pages 1197-1204

  Tassone, Christopher F R ^a   Martini, Ben ^a   Choo, Kim Kwang Raymond ^a,b  

^a UNIVERSITY OF SOUTH AUSTRALIA   (Australia)

^b UNIVERSITY OF TEXAS AT SAN ANTONIO   (United States)

Author keywords

digital forensics; forensic science; forensic visualization; geographic map plots; mobile device forensics; MSAB XRY; treemap; word cloud

Indexed keywords

EID: 85011545453     PISSN: 00221198     EISSN: 15564029     Source Type: Journal    
DOI: 10.1111/1556-4029.13431     Document Type: Article

References (29)

1. US DOJ.In the matter of the search of an Apple iPhone seized during the execution of a search warrant on a black Lexus IS300, California license plate #5KGD203. US Department of Justice, 2016; https://www.justice.gov/usao-cdca/file/832166/download (accessed December 20, 2016).
2. McKemmish R. What is forensic computing? Trend Issue Crime Crim Justice 1999;118:1–6.
3. Quick D, Choo K-KR. Impacts of increasing volume of digital forensic data: a survey and future research challenges. Digit Investig 2014;11(4):273–94.
4. Roussev V, Richard G. Breaking the performance wall: the case for distributed digital forensics. Proceedings of the Digital Forensics Research Workshop; 2004 August 11-13; Baltimore, MD, Trumansburg, NY: DFRWS, 2004;1–16.
5. Osborne G, Turnbull B. Enhancing computer forensics investigation through visualisation and data exploitation Proceedings of the IEEE International Conference on Availability, Reliability and Security; 2009 March 16-19.; Fukuoka, Japan. Piscataway, NJ: Institute of Electrical and Electronics Engineers, 2009;1012–7.
6. Ayers D. A second generation computer forensic analysis system. Digit Investig 2009;6(S):S34–42.
7. Osborne G, Turnbull B, Slay J. The explore, investigate and correlate (EIC) conceptual framework for digital forensics information visualisation. Proceedings of the International Conference on Availability, Reliability, and Security; 2010 February. 15-18; Krakow, Poland. Piscataway, NJ: Institute of Electrical and Electronics Engineers, 2010;629–34.
8. Glisson WB, Storer T, Buchanan-Wollaston J. An empirical comparison of data recovered from mobile forensic toolkits. Digit Investig 2013;10(1):44–55.
9. Koven J, Bertini E, Dubois L, Memon N. InVEST: intelligent visual email search and triage. Digit Investig 2016;18(S):S138–48.
10. Garfinkel S. Digital forensics XML and the DFXML toolset. Digit Investig 2012;8(3–4):161–74.
11. Casey E, Back G, Barnum S. Leveraging CybOX™ to standardize representation and exchange of digital forensic information. Digit Investig 2015;12(S):S102–10.
12. Alink W, Bhoedjang R, Boncz PA, de Vries AP. XIRAF–XML-based indexing and querying for digital forensics. Digit Investig 2006;3(S):50–8.
13. Bhoedjang RAF, van Ballegooij AR, van Beek HMA, van Schie JC, Dillema FW, van Baar RB, et al. Engineering an online computer forensic service. Digit Investig 2012;9(2):96–108.
14. van Baar RB, Van Beek HMA, van Eijk EJ. Digital forensics as a service: a game changer. Digit Investig 2014;11(S):S54–62.
15. O'Malley T. Forensic informatics enabling forensic intelligence. Aust J Forensic Sci 2015;47(1):27–35.
16. Lawton D, Stacey R, Dodd G. E-discovery in digital forensic investigations. London, U.K.: U.K. Government Home Office, Centre for Applied Science and Technology, 2014 Sept. Report No.: 32/14.
17. Tassone C, Martini B, Choo K-KR. Forensic visualization: survey and future research directions. In: Choo K-KR, Dehghantanha A, editors. Contemporary digital forensic investigations of cloud and mobile applications. Rockland, MA: Syngress, 2016;163–84.
18. McKemmish R. When is digital evidence forensically sound? In: Ray I, Shenoi S, editors. Advances in digital forensics IV. Boston, MA: Springer U.S.A, 2008;3–15.
19. Haerder T, Reuter A. Principles of transaction-oriented database recovery. ACM Comput Surv 1983;15(4):287–317.
20. Al Fahdi M, Clarke N, Furnell S. Towards an automated forensic examiner (AFE) based upon criminal profiling & artificial intelligence. Proceedings of the Australian Digital Forensics Conference; 2013 December 2-4; Perth, Western Australia.: Edith Cowan University, 2013;1–9.
21. Martini B, Do Q, Choo K-KR. Mobile cloud forensics: an analysis of seven popular Android apps. In: Ko R, Choo K-KR, editors. The cloud security ecosystem. Boston, MA: Syngress, 2015;309–45.
22. Heer J. TreeMap Demo, 2016; http://prefuse.org/gallery/treemap/ (accessed December 20, 2016).
23. prefuse.org. Prefuse | interactive information visualization toolkit, 2016; http://prefuse.org/ (accessed December 20, 2016).
24. jxmapviewer2. GitHub - msteiger/jxmapviewer2: JXMapViewer2. 2016; https://github.com/msteiger/jxmapviewer2 (accessed December 20, 2016).
25. kennycason. GitHub - kennycason/kumo: Kumo - Java Word Cloud, 2016; https://github.com/kennycason/kumo (accessed December 20, 2016).
26. Quick D, Choo K-KR. Big forensic data management in heterogeneous distributed systems: quick analysis of multimedia forensic data. Softw-Pract Exp. In press; https://doi.org/10.1002/spe.2429 (accessed December 20, 2016).
27. Quick D, Choo K-KR. Pervasive social networking forensics: intelligence and evidence from mobile device extracts. J Netw Comput Appl. In press; https://doi.org/10.1016/j.jnca.2016.11.018 (accessed December 20, 2016).
28. Quick D, Choo K-KR. Big forensic data reduction: digital forensic images and electronic evidence. Cluster Comput 2016;19(2):723–40.
29. Quick D, Choo K-KR. Data reduction and data mining framework for digital forensic evidence: storage, intelligence, review, and archive. Trends & Issues in Crime and Criminal Justice 2014;480:1–11; http://www.aic.gov.au/media_library/publications/tandi_pdf/tandi480.pdf (accessed December 20, 2016).