A Term Distribution Visualization Approach to Digital Forensic String Search

  • Authors:
  • Moses Schwartz;L. M. Liebrock

  • Affiliations:
  • New Mexico Institute of Mining and Technology, Socorro, USA NM 87801;New Mexico Institute of Mining and Technology, Socorro, USA NM 87801

  • Venue:
  • VizSec '08 Proceedings of the 5th international workshop on Visualization for Computer Security
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Digital forensic string search is vital to the forensic discovery process, but there has been little research on improving tools or methods for this task. We propose the use of term distribution visualizations to aid digital forensic string search tasks. Our visualization model enables an analyst to quickly identify relevant sections of a text and provides brushing and drilling-down capabilities to support analysis of large datasets. Initial user study results suggest that the visualizations are useful for information retrieval tasks, but further studies must be performed to obtain statistically significant results and to determine specific utility in digital forensic investigations.