Email Mining Toolkit Supporting Law Enforcement Forensic Analyses

支持执法取证分析的电子邮件挖掘工具包

• 批准号: 0429323
• 负责人: Salvatore Stolfo
• 金额: $ 20万
• 依托单位: Columbia University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2004
• 资助国家: 美国
• 起止时间: 2004-09-15 至 2006-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0429323&HistoricalAwards=false
• 关键词: Email; Mining; Toolkit; Supporting; Law

This proposal presents research, development, deployment and testing of data-mining and machine learning-based technology for email and instant messaging data, including attached documents and files, and allowing for a broad range of applications for criminal investigation (both evidence gathering and evidence analysis) by law enforcement agencies. This tool can be applied to email and/or account misuse, user behavior-based analyses such as detecting criminal groups using email and Instant Messaging accounts that communicate with one another, and for the purpose of detecting various roles of the individuals that communicate with each other, as well as the subject matter discussed and exchanged between parties or groups of corresponding parties. Such investigative activities are routinely performed today by law enforcement agencies for criminal intelligence gathering, evidence processing of subpoenaed electronic records and in the detection of stegonographic communications between suspect groups of criminals and terrorists. If successful, this research will substantially improve the productivity of forensic analysis personnel, and support evidence gathering and tracking.

该提案提出了针对电子邮件和即时消息数据（包括附加文档和文件）的数据挖掘和基于机器学习的技术的研究、开发、部署和测试，并允许执法机构在刑事调查（证据收集和证据分析）方面进行广泛的应用。该工具可应用于电子邮件和/或帐户滥用、基于用户行为的分析，例如检测使用电子邮件和即时消息帐户相互通信的犯罪集团，并用于检测相互通信的个人的各种角色，以及各方或相应各方团体之间讨论和交换的主题。如今，执法机构例行开展此类调查活动，以收集犯罪情报、处理传票电子记录的证据以及侦查犯罪嫌疑人与恐怖分子之间的隐写通信。如果成功，这项研究将大大提高法医分析人员的工作效率，并支持证据收集和跟踪。