Australian Digital Forensics Conference
Document Type
Conference Proceeding
Publisher
secau Security Research Centre, Edith Cowan University, Perth, Western Australia
Abstract
Visualisation is becoming increasingly important for understanding information, such as investigative data (for example: computing, medical and crime scene evidence) and analysis (for example: network capability assessment, data file reconstruction and planning scenarios). Investigative data visualisation is used to reconstruct a scene or item and is used to assist the viewer (who may well be a member of the general public with little or no understanding of the subject matter) to understand what is being presented. Analysis visualisations, on the other hand, are usually developed to review data, information and assess competing scenario hypotheses for those who usually have an understanding of the subject matter. Visualisation represents information that has been digitally recorded (for example: pictures, video and sound), hand written and/or spoken data, to show what may have, could have, did or is believed to have happened. That is why visualising data is an important development in the analysis and investigation realms, as visualisation explores the accuracies, inconsistencies and discrepancies of the collected data and information. One of the primary issues of visualisation is that no matter how coherent the data, there will always be conjecture and debate as to how the information is/has-been visualised and, is it presented in an acceptable and meaningful way. This paper presents a range of examples of where forensic data has been visualised using various techniques and technology, the paper then concludes with a discussion of potential benefits and problems.
DOI
10.4225/75/57b2bc7240cec
Comments
9th Australian Digital Forensics Conference, Edith Cowan University, Perth Western Australia, 5th -7th December 2011