Show simple item record

dc.contributor.authorRowe, Neil C.
dc.contributor.authorSchwamm, Riqui
dc.contributor.authorMcCarrin, Michael R.
dc.contributor.authorGera, Ralucca
dc.date2016
dc.date.accessioned2016-11-02T22:49:38Z
dc.date.available2016-11-02T22:49:38Z
dc.date.issued2016
dc.identifier.citationRowe, Neil C., et al. "Making Sense of Email Addresses on Drives." The Journal of Digital Forensics, Security and Law: JDFSL 11.2 (2016): 153.en_US
dc.identifier.urihttp://hdl.handle.net/10945/50618
dc.description.abstractDrives found during investigations often have useful information in the form of email addresses, which can be acquired by search in the raw drive data independent of the file system. Using these data, we can build a picture of the social networks in which a drive owner participated, even perhaps better than investigating their online profiles maintained by social-networking services, because drives contain much data that users have not approved for public display. However, many addresses found on drives are not forensically interesting, such as sales and support links. We developed a program to filter these out using a Naïve Bayes classifier and eliminated 73.3% of the addresses from a representative corpus. We show that the byte-offset proximity of the remaining addresses found on a drive, their word similarity, and their number of co-occurrences over a corpus are good measures of association of addresses, and we built graphs using this data of the interconnections both between addresses and between drives. Results provided several new insights into our test data.en_US
dc.format.extent22 p.en_US
dc.publisherADFSLen_US
dc.rightsThis publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.en_US
dc.titleMaking Sense of Email Addresses on Drivesen_US
dc.typeArticleen_US
dc.contributor.corporateNaval Postgraduate School (U.S.)en_US
dc.contributor.departmentComputer Science (CS)
dc.subject.authordigital forensicsen_US
dc.subject.authorelectronic mailen_US
dc.subject.authoremailen_US
dc.subject.authoraddressesen_US
dc.subject.authorusersen_US
dc.subject.authorfilteringen_US
dc.subject.authornetworksen_US
dc.subject.authorvisualizationen_US


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record