Visualization of client-side web browsing and email activity
Irvine, Cynthia E.
Eagle, Chris S.
MetadataShow full item record
Both web browsers and email clients provide records of user activity, the former as part of the history mechanism for revisitation purposes, and the latter as part of each message. Both are highly valuable from a forensic perspective, with elements such as visited site, mail contact, and event timestamp revealing a wealth of information about the user's browsing and communication behavior. The ability of the forensic analyst to quickly and efficiently explore and understand this volume of information and reconstruct the user's online activity is important, and can contribute to the progress of the investigation. The objective of this thesis is the design and construction of a set of tools to transform this textual history into a visual format, thus facilitating the analysis, interpretation and identification of trends and relationships that may exist. The result of transforming textual histories into visual images and presenting them in a single summary report is the effective distillation of large amounts of information into minimal space, thereby enabling the analyst to form a high-level profile of the user who generated the data. This allows him to better understand the user's online activity in the context of the specific investigation, and effectively prioritize his limited time and attention.
Approved for public release, distribution unlimited
Showing items related by title, author, creator and subject.
Ginn, Patrick W. (2001-06);The Navy's Intrusion Detection process is currently reactive in nature. It is designed and programmed to detect and provide alerts to the Fleet Information Warfare Center (FlWC) of suspicious network activity while it is ...
Lee, Chad H. (Monterey, California. Naval Postgraduate School, 1996-12);As facilities throughout the Navy's infrastructure system degrade and require replacement, and as new missions require additional facilities, it is crucial that each facility approved will in turn improve an activity's ...
Push-pull test for in situ determination of microbial metabolic activities: denitrification and methanogenesis Odenthal, Paul James. (1995);Quantitative information on subsurface microbial processes is needed for many applications, but information obtained by existing methods can be difficult to interpret. The goal of this project was to develop a single well, ...