Creating and understanding email communication networks to aid digital forensic investigations

dc.contributor.authorMcCarrin, Michael
dc.contributor.authorGreen, Janina
dc.contributor.authorGera, Ralucca
dc.contributor.corporateNaval Postgraduate School (U.S.)en_US
dc.contributor.departmentComputer Science (CS)
dc.date.accessioned2018-07-19T17:09:36Z
dc.date.available2018-07-19T17:09:36Z
dc.date.issued2018-06-14
dc.description.abstractDigital forensic analysts depend on the ability to understand the social networks of the individuals they investigate. We develop a novel method for automatically constructing these networks from collected hard drives. We accomplish this by scanning the raw storage media for email addresses, constructing co-reference networks based on the proximity of email addresses to each other, then selecting connected components that correspond to real communication networks. We validate our analysis against a tagged data-set of networks for which we determined ground truth through interviews with the drive owners. In the resulting social networks, we find that classical measures of centrality and community detection algorithms are effective for identifying important nodes and close associates.en_US
dc.format.extent6 p.en_US
dc.identifier.citationMcCarrin, Michael, Janina Green, and Ralucca Gera. "Creating and understanding email communication networks to aid digital forensic investigations." arXiv preprint arXiv:1806.05327 (2018).en_US
dc.identifier.urihttps://hdl.handle.net/10945/59229
dc.publisherCornell University Libraryen_US
dc.rightsThis publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.en_US
dc.titleCreating and understanding email communication networks to aid digital forensic investigationsen_US
dc.typeArticleen_US
dspace.entity.typePublication
Files
Original bundle
Now showing 1 - 1 of 1
Loading...
Thumbnail Image
Name:
Gera_Creating and understanding email_preprint_2018.pdf
Size:
1.76 MB
Format:
Adobe Portable Document Format
Description:
License bundle
Now showing 1 - 1 of 1
Loading...
Thumbnail Image
Name:
license.txt
Size:
2.18 KB
Format:
Item-specific license agreed upon to submission
Description:
Collections