Measuring Evidential Weight in Digital Forensic Investigations: a Role for Bayesian Networks in Digital Forensic Triage

Richard Overill; Kam-Pui Chow

doi:10.1007/978-3-319-99277-8_1

Measuring Evidential Weight in Digital Forensic Investigations: a Role for Bayesian Networks in Digital Forensic Triage

Richard Overill, Kam-Pui Chow

University of Hong Kong

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

5 Citations (Scopus)

140 Downloads (Pure)

Abstract

A method for obtaining a quantitative measure of the relative weight of each individual item of evidence in a digital forensic investigation by means of a Bayesian network is described. The resulting evidential weights can then be used to determine a near-optimal cost-effective triage scheme for the investigation in question.

Original language	English
Title of host publication	Advances in Digital Forensics
Editors	Sujeet Shenoi, Gilbert Peterson
Place of Publication	Heidelberg
Publisher	Springer
Volume	XIV
DOIs	https://doi.org/10.1007/978-3-319-99277-8_1
Publication status	Accepted/In press - 21 Oct 2017

Keywords

digital forensics
quantitative metric
Bayesian network
evidential weight
cost-effective triage scheme

Access to Document

10.1007/978-3-319-99277-8_1

ProbativeValue_IFIP2018Accepted author manuscript, 621 KB

Cite this

@inbook{cbfde7f681cb4fdbb0931b8d44eb5fba,

title = "Measuring Evidential Weight in Digital Forensic Investigations: a Role for Bayesian Networks in Digital Forensic Triage",

abstract = "A method for obtaining a quantitative measure of the relative weight of each individual item of evidence in a digital forensic investigation by means of a Bayesian network is described. The resulting evidential weights can then be used to determine a near-optimal cost-effective triage scheme for the investigation in question.",

keywords = "digital forensics, quantitative metric, Bayesian network, evidential weight, cost-effective triage scheme",

author = "Richard Overill and Kam-Pui Chow",

year = "2017",

month = oct,

day = "21",

doi = "10.1007/978-3-319-99277-8_1",

language = "English",

volume = "XIV",

editor = "Sujeet Shenoi and {Gilbert Peterson}",

booktitle = "Advances in Digital Forensics",

publisher = "Springer",

}

TY - CHAP

T1 - Measuring Evidential Weight in Digital Forensic Investigations: a Role for Bayesian Networks in Digital Forensic Triage

AU - Overill, Richard

AU - Chow, Kam-Pui

PY - 2017/10/21

Y1 - 2017/10/21

N2 - A method for obtaining a quantitative measure of the relative weight of each individual item of evidence in a digital forensic investigation by means of a Bayesian network is described. The resulting evidential weights can then be used to determine a near-optimal cost-effective triage scheme for the investigation in question.

AB - A method for obtaining a quantitative measure of the relative weight of each individual item of evidence in a digital forensic investigation by means of a Bayesian network is described. The resulting evidential weights can then be used to determine a near-optimal cost-effective triage scheme for the investigation in question.

KW - digital forensics

KW - quantitative metric

KW - Bayesian network

KW - evidential weight

KW - cost-effective triage scheme

U2 - 10.1007/978-3-319-99277-8_1

DO - 10.1007/978-3-319-99277-8_1

M3 - Conference paper

VL - XIV

BT - Advances in Digital Forensics

A2 - Shenoi, Sujeet

A2 - null, Gilbert Peterson

PB - Springer

CY - Heidelberg

ER -

Measuring Evidential Weight in Digital Forensic Investigations: a Role for Bayesian Networks in Digital Forensic Triage

Abstract

Keywords

Access to Document

Fingerprint

Cite this