A Rapid Method For Discovering Covert Communication Through Spam Emails
Recently,email spam is noticed as a covert communication platform for criminals.Yet,discovering incriminating information from spam emails is one of the most tedious tasks due to characteristics of email spam.In this paper,we proposed a systematic content-based analysis method to discover suspicious messages in the spam folder.It is applied to the initial stage of investigation,in which investigator often have little information on the collection of spam emails.Experimental results suggest that the proposed method is able to identify potential evidence by analyzing keywords,URL links,named entities etc.Furthermore,a modified text visualization technique is employed to refine and display analysis results.
Email spam digital forensics TF-IDF text visualization
Jianguo Jiang Bo Yang Ning Li
Institute of Information Engineering,Chinese Academy of Sciences Beijing,China Beijing Key Laboratory of Network Security Technology,Institute of Information Engineering,Chinese A
国际会议
重庆
英文
376-380
2016-03-20（万方平台首次上网日期，不代表论文的发表时间）