Invest: Intelligent visual email search and triage

Jay Koven, Enrico Bertini, Luke Dubois, Nasir Memon

Research output: Contribution to conferencePaper

Abstract

Large email data sets are often the focus of criminal and civil investigations. This has created a daunting task for investigators due to the extraordinary size of many of these collections. Our work offers an interactive visual analytic alternative to the current, manually intensive methodology used in the search for evidence in large email data sets. These sets usually contain many emails which are irrelevant to an investigation, forcing investigators to manually comb through information in order to find relevant emails, a process which is costly in terms of both time and money. To aid the investigative process we combine intelligent preprossessing, a context aware visual search, and a results display that presents an integrated view of diverse information contained within emails. This allows an investigator to reduce the number of emails that need to be viewed in detail without the current tedious manual search and comb process.

Original languageEnglish (US)
PagesS138-S148
DOIs
StatePublished - 2016
Event16th Annual USA Digital Forensics Research Conference, DFRWS 2016 USA - Seattle, United States
Duration: Aug 7 2016Aug 10 2016

Conference

Conference16th Annual USA Digital Forensics Research Conference, DFRWS 2016 USA
CountryUnited States
CitySeattle
Period8/7/168/10/16

Keywords

  • Data analytics
  • Data forensics
  • Data visualization
  • Email forensics
  • Email search

ASJC Scopus subject areas

  • Information Systems

Fingerprint Dive into the research topics of 'Invest: Intelligent visual email search and triage'. Together they form a unique fingerprint.

  • Cite this

    Koven, J., Bertini, E., Dubois, L., & Memon, N. (2016). Invest: Intelligent visual email search and triage. S138-S148. Paper presented at 16th Annual USA Digital Forensics Research Conference, DFRWS 2016 USA, Seattle, United States. https://doi.org/10.1016/j.diin.2016.04.008