Email Mining Toolkit Supporting Law Enforcement Forensic Analyses

该提案介绍了对电子邮件和即时通讯数据(包括附件和文件)进行数据挖掘和基于机器学习的技术的研究、开发、部署和测试，并允许执法机构广泛应用于刑事调查(包括证据收集和证据分析)。该工具可应用于电子邮件和/或帐户滥用、基于用户行为的分析，例如使用彼此通信的电子邮件和即时消息收发帐户来检测犯罪集团，以及用于检测相互通信的个人的各种角色，以及在各方或相应各方的组之间讨论和交换的主题。今天，执法机构经常进行这种调查活动，以收集刑事情报，处理传唤的电子记录的证据，并侦测犯罪嫌疑人与恐怖分子之间的隐秘通信。如果成功，这项研究将大大提高法医分析人员的生产力，并支持证据收集和跟踪。

This proposal presents research, development, deployment and testing of data-mining and machine learning-based technology for email and instant messaging data, including attached documents and files, and allowing for a broad range of applications for criminal investigation (both evidence gathering and evidence analysis) by law enforcement agencies. This tool can be applied to email and/or account misuse, user behavior-based analyses such as detecting criminal groups using email and Instant Messaging accounts that communicate with one another, and for the purpose of detecting various roles of the individuals that communicate with each other, as well as the subject matter discussed and exchanged between parties or groups of corresponding parties. Such investigative activities are routinely performed today by law enforcement agencies for criminal intelligence gathering, evidence processing of subpoenaed electronic records and in the detection of stegonographic communications between suspect groups of criminals and terrorists. If successful, this research will substantially improve the productivity of forensic analysis personnel, and support evidence gathering and tracking.