The analysis stage of digital forensic investigation is suggested to be a creative process which relies primarily on the intuition and experience of the analyst. Although other stages of the investigative process, such as acquisition, are relatively well supported with tools; this process of analysing the dataset to derive a testable high-level hypothesis is not so well supported. It can be reasoned that the interactive and exploratory nature of information visualization could potentially allow it to be applied to the analytical stage in order to aid investigation. This paper demonstrates how 3D hyperbolic visualization could potentially be used to supplement the Autopsy 3 software.
|Title of host publication||Cyberforensics perspectives|
|Subtitle of host publication||proceedings of the 3rd International Conference on Cybercrime, Security and Digital Forensics (Cyberforensics 2013)|
|Editors||George R. S. Weir, Michael Daley|
|Place of Publication||Glasgow|
|Publisher||University of Strathclyde Publishing|
|Number of pages||7|
|Publication status||Published - Jun 2013|
|Event||3rd International Conference on Cybercrime, Security and Digital Forensics - University of Cardiff, Cardiff, United Kingdom|
Duration: 10 Jun 2013 → 11 Jun 2013
Conference number: 3
|Conference||3rd International Conference on Cybercrime, Security and Digital Forensics|
|Abbreviated title||Cyberforensics 2013|
|Period||10/06/13 → 11/06/13|
Hales, G. A., Ferguson, R. I., & Archibald, J. M. (2013). On the use of hyperbolic visualization to assist digital forensic analysis. In G. R. S. Weir, & M. Daley (Eds.), Cyberforensics perspectives: proceedings of the 3rd International Conference on Cybercrime, Security and Digital Forensics (Cyberforensics 2013) (pp. 107-113). University of Strathclyde Publishing.