A two-stage model for social network investigations in digital forensics

Date published

2020-08-20

Free to read from

Supervisor/s

Journal Title

Journal ISSN

Volume Title

Publisher

Association of Digital Forensics, Security and Law

Department

Type

Article

ISSN

1558-7215

Format

Citation

David A, Morris S, Appleby-Thomas G. (2020) A two-stage model for social network investigations in digital forensics. Journal of Digital Forensics, Security and Law, Volume 15, August 2020, Article number 1

Abstract

This paper proposes a two-stage model for identifying and contextualizing features from artefacts created as a result of social networking activity. This technique can be useful in digital investigations and is based on understanding and the deconstruction of the processes that take place prior to, during and after user activity; this includes corroborating artefacts. Digital Investigations are becoming more complex due to factors such as, the volume of data to be examined; different data formats; a wide range of sources for digital evidence; the volatility of data and the limitations of some of the standard digital forensic tools. This paper highlights the need for an approach that enables digital investigators to prioritize social network artefacts to be further analysed; determine social connections in the context of an investigation e.g. a user’s social relationships, how recovered artefacts came to be, and how they can successfully be used as evidence in court

Description

Software Description

Software Language

Github

Keywords

Computer Law Commons, Information Security, Evidence Commons

DOI

Rights

Attribution-NonCommercial 4.0 International

Relationships

Relationships

Supplements

Funder/s