Facilitation of Forensic Analysis Using a Narrative Template

Autor: Chris Forsythe, Shelby Hopkins, Austin Silva, Andrew T. Wilson
Rok vydání: 2015
Předmět:
Zdroj: Procedia Manufacturing. 3:5022-5027
ISSN: 2351-9789
DOI: 10.1016/j.promfg.2015.07.674
Popis: Criminal forensic analysis involves examining a collection of clues to construct a plausible account of the events associated with a crime. In this paper, a study is presented that assessed whether software tools designed to encourage construction of narrative accounts would facilitate cyber forensic analysis. Compared to a baseline condition (i.e., spreadsheet with note-taking capabilities) and a visualization condition, subjects performed best when provided tools that emphasized established components of narratives. Specifically, features that encouraged subjects to identify suspected entities, and their activities and motivations proved beneficial. It is proposed that software tools developed to facilitate cyber forensic analysis and training of cyber security professionals incorporate techniques that facilitate a narrative account of events.
Databáze: OpenAIRE