In 2014, we launched our open-access repository which offers full text access to conference proceedings from many of our events including the INC and HAISA series. These papers are free to access and distribute (subject to citing the source).
» Openaccess proceedings » Tenth International Network Conference (INC 2014)
 | Tenth International Network Conference (INC 2014) |
Title: Retrieval and Analysis of Web Search Narratives for Digital Investigations
Author(s): John Haggerty, Mark Taylor
Reference: pp153-162
Keywords: Digital forensics, Web clients, narrative, data visualization
Abstract: Our reliance on accessing information on the Web ensures that it provides a wealth of information to a forensics examiner. Current tools for the analysis of a suspect’s Web activity return evidence ranging from cached data to URLs visited. However, these tools are not without their limitations, such as textual presentation of results, issues related to private browsing, and links between Web searches and subsequent behaviour. This paper presents a novel approach that visualises search strings in Web browser log files to present a narrative of a suspect’s interests, motives and actions over time. The aim of this methodology is to triage and analyse potentially large data sets from a suspect’s daily interaction with the Internet and to demonstrate intent during the activity under investigation. In order to demonstrate the applicability of the approach, data from a Web browser history file is parsed for search terms and the results visualised.
Download count: 2681
How to get this paper:
PDF copy of this paper is free to download. You may distribute this copy providing you cite this page as the source.