Powered by OpenAIRE graph
Found an issue? Give us feedback
addClaim

A new triage process model for digital investigations

Authors: null Bo Yang; null Ning Li; null Jianguo Jiang;

A new triage process model for digital investigations

Abstract

As the amount of crimes involving the digital dimension grows, an ever increasing number of digital artifacts collected from a forensic investigation needs plenty of resources to process in a forensically sound manner. Digital forensic triage provides a way to deal with this scalability problem, as it is tailored to maximize the utilization of resources based on a priority system. Unfortunately, the paucity of definite solutions limits efforts to triage implementation. In this article, we propose a Dual-Triage Digital Forensic Process Model, termed DTDFPM, which increases the effectiveness and efficiency of examinations. The DTDFPM simultaneously enjoys the following properties: i) background information is utilized to prioritize cases and specific features are determined which media contain information relevant to the investigation, ii) a Priority Sorting with Artificial Neuron algorithm (PSAN) is designed, which is the first application of neural network to sorting solution in digital triage, iii) efficient integration, the proposed model implemented based on the Python programming language can be easy to integrate into existing forensic tools. Thoroughly theoretical analysis and performance evaluation indicate the advantage of our proposed process model.

Related Organizations
  • BIP!
    Impact byBIP!
    selected citations
    These citations are derived from selected sources.
    This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    0
    popularity
    This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
    Average
    influence
    This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    Average
    impulse
    This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
    Average
Powered by OpenAIRE graph
Found an issue? Give us feedback
selected citations
These citations are derived from selected sources.
This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Citations provided by BIP!
popularity
This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
BIP!Popularity provided by BIP!
influence
This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Influence provided by BIP!
impulse
This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
BIP!Impulse provided by BIP!
0
Average
Average
Average
Upload OA version
Are you the author of this publication? Upload your Open Access version to Zenodo!
It’s fast and easy, just two clicks!