Show simple item record

dc.contributor.advisorStefanou, Marcus S.
dc.contributor.advisorGera, Ralucca
dc.contributor.advisorMcCarrin, Michael R.
dc.contributor.authorGoodwin, Justin
dc.contributor.authorWard, Erin C.
dc.dateJun-18
dc.date.accessioned2018-08-24T22:34:45Z
dc.date.available2018-08-24T22:34:45Z
dc.date.issued2018-06
dc.identifier.urihttp://hdl.handle.net/10945/59616
dc.description.abstractThe ability to find email addresses on digital storage media and deduce the relationships between them is critical for the success of many law enforcement and intelligence collection activities. Currently, building these social networks requires manually processing forensic images of acquired digital media. We conduct an experiment using readily available extraction and visualization tools along with a new algorithm that constructs networks based on the byte-offset proximity between digital artifacts. The main objective of this study is to test this new algorithm and refine techniques for classification with a goal of automating steps in the process of constructing social networks. To achieve this, we build an 11 terabyte dataset of drive images, construct networks from them, and assign these networks to the categories “useful” or “not useful” according to whether we believe them to contain information relevant to the actual social network of the device owner. We then interview device owners to determine ground truth, which we use to evaluate our analysis. We succeed in correctly categorizing networks with a recall of 0.9166, precision of 0.6316 and F-score of 0.7643. Our results show that our algorithm is successful in outputting data useful for the construction of the user's social networks.en_US
dc.description.urihttp://hdl.handle.net/10945/59616
dc.publisherMonterey, CA; Naval Postgraduate Schoolen_US
dc.rightsThis publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.en_US
dc.titleCONSTRUCTING SOCIAL NETWORKS AND CLASSIFYING EMAIL ADDRESSES FROM RAW FORENSIC IMAGESen_US
dc.typeThesisen_US
dc.contributor.departmentInformation Sciences (IS)
dc.contributor.departmentComputer Science (CS)
dc.subject.authordigital forensicsen_US
dc.subject.authorsocial networksen_US
dc.subject.authorgraph theoryen_US
dc.description.serviceLieutenant, United States Navyen_US
dc.description.serviceChief Warrant Officer 3, United States Armyen_US
etd.thesisdegree.nameMaster of Science in Cyber Systems and Operationsen_US
etd.thesisdegree.nameMaster of Science in Computer Scienceen_US
etd.thesisdegree.levelMastersen_US
etd.thesisdegree.disciplineCyber Systems and Operationsen_US
etd.thesisdegree.disciplineComputer Scienceen_US
etd.thesisdegree.grantorNaval Postgraduate Schoolen_US
dc.identifier.thesisid29592
dc.description.distributionstatementApproved for public release; distribution is unlimited.


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record