A Model for Computer Profiling

This paper discusses the use of models in automatic computer forensic analysis, and proposes and elaborates on a novel model for use in computer profiling, the computer profiling object model. The computer profiling object model is an information model which models a computer as objects with various...

Full description

Saved in:
Bibliographic Details
Published in2010 International Conference on Availability, Reliability and Security pp. 635 - 640
Main Authors Marrington, A., Mohay, G., Morarji, H., Clark, A.
Format Conference Proceeding
LanguageEnglish
Published IEEE 01.02.2010
Subjects
Availability
computer profiling
Computer security
Data analysis
Data mining
events
Forensics
History
Humans
Information analysis
Information security
relationships
Testing
Online AccessGet full text

Cover

More Information
Summary:This paper discusses the use of models in automatic computer forensic analysis, and proposes and elaborates on a novel model for use in computer profiling, the computer profiling object model. The computer profiling object model is an information model which models a computer as objects with various attributes and inter-relationships. These together provide the information necessary for a human investigator or an automated reasoning engine to make judgments as to the probable usage and evidentiary value of a computer system. The computer profiling object model can be implemented so as to support automated analysis to provide an investigator with the information needed to decide whether manual analysis is required.
ISBN:142445879X
9781424458790
DOI:10.1109/ARES.2010.95