Application of Case-oriented Evidence Mining in Forensic Computing
In this paper, we proposed a new digital forensic process model, named COEM (case-oriented evidence mining model), along with its approaches, top-down. The model consists of sets of tasks described at two levels of abstraction: case (from requirement to finding) and data (from general to specific). The COEM facilitates analysis in a viewpoint of case instead of data, and gives investigators a more natural and rational perspective. As an example, we illustrate its application with a digital crime case accused of distributing pornographic materials through WAP sites in China.
Forensic Computing Digital Evidence Evidence Mining Top-down approaches
Jun Zhang Lina Wang
Computer School of Wuhan University, Wuhan, P.R.China, 430079 Department of Information Technology, Computer School of Wuhan University, Wuhan, P.R.China, 430079
国际会议
武汉
英文
103-106
2009-11-18（万方平台首次上网日期，不代表论文的发表时间）