The increasing numbers of cybercrimes nowadays make network forensic a very important area to be studied. In network forensic analysis, evidence is the crucial elements in the investigation process. However, gathering evidences from network is quite difficult because of the large amount of data in the network system. In addition, getting filtered data for analysis purpose is still a major issue...

Client honeypot technology can find malicious web servers that attack web browsers and push malware, so called drive-by-downloads, to the client machine. Merely recording the network traffic is insufficient to perform an efficient forensic analysis of the attack. Custom tools need to be developed to access and examine the embedded data of the network protocols. Once the information is extracted...

Most actionable evidence is identified during the analysis phase of digital forensic investigations. Currently, the analysis phase uses expressionbased searches, which assume a good understanding of the evidence; but latent evidence cannot be found using such methods. Knowledge discovery and data mining (KDD) techniques can significantly enhance the analysis process. A promising KDD technique i...

Graphic design applications are often used for the editing and design of digital art. The same applications can be used for creating counterfeit documents like identity documents (IDs), driver’s licenses or passports among others. However the use of any graphic design application leaves behind traces of digital information which can be used during a digital forensic investigation. Current digit...

Capillary electrophoresis (CE) is a versatile and widely used analysis platform with application in diverse areas such as analytical chemistry, chiral separations, clinical, forensics, molecular biology, natural products, organic chemistry, and the pharmaceutical industry. Forensic applications of CE include fragment analysis, DNA sequencing, SNP typing, and analysis of gunshot residues, explos...

Drs. Simopoulos and Cohen argue that knowledge of one's unconscious processes improves the forensic psychiatrist's capacity to manage complex forensic situations and to generate forensic formulations and opinions that are demonstrably more valid and reliable, much like competence in cultural assessment and formulation. In practice, the challenges posed by the application of these principles in ...

The use of grain size distribution analysis in forensic enquiry was investigated with reference to four forensic case studies which contained the type of sample restraints and limitations often encountered in criminal case work. The problems of the comparison of trace and bulk samples are outlined and the need for multiple sample analysis is highlighted. It was found that the problems of soil a...

In this paper we summarize the bayesian methodology for forensic analysis of the evidence in the speaker recognition area. We also describe the procedure to convert any speaker recognition system into a valuable forensic tool according to the bayesian methodology. Furthermore, we study the difference between assessment of speaker recognition technology using DET curves and assessment of forensi...

Over the last decades, email has been the major carrier for transporting spam and malicious contents over the network. Email is also the primary source of numerous criminal activities on the Internet. Computer Forensics is a systematic process to retain and analyze saved emails for the purpose of legal proceedings and other civil matters. Email analysis is challenging due to not only various fi...

Document clustering or unsupervised document classification is an automated process of grouping documents with similar content. Document clustering is an important task in many Information Retrieval systems. Also document clustering Algorithms can help in discovery of new and useful knowledge or novel class from the documents under analysis. This knowledge or novel class is very important issue...