DIALOG: A framework for modeling, analysis and reuse of digital forensic knowledge

  • Authors:
  • Damir Kahvedić;Tahar Kechadi

  • Affiliations:
  • Center for Cybercrime Investigation, University College Dublin, Ireland;Center for Cybercrime Investigation, University College Dublin, Ireland

  • Venue:
  • Digital Investigation: The International Journal of Digital Forensics & Incident Response
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper presents DIALOG (Digital Investigation Ontology); a framework for the management, reuse, and analysis of Digital Investigation knowledge. DIALOG provides a general, application independent vocabulary that can be used to describe an investigation at different levels of detail. DIALOG is defined to encapsulate all concepts of the digital forensics field and the relationships between them. In particular, we concentrate on the Windows Registry, where registry keys are modeled in terms of both their structure and function. Registry analysis software tools are modeled in a similar manner and we illustrate how the interpretation of their results can be done using the reasoning capabilities of ontology.