[논문]Relevance analysis using revision identifier in MS word

Joun, Jihun; Chung, Hyunji; Park, Jungheum; Lee, Sangjin

doi:10.1111/1556-4029.14584

[해외논문] Relevance analysis using revision identifier in MS word

Journal of forensic sciences, v.66 no.1, 2021년, pp.323 - 335

Joun, Jihun (School of Cybersecurity Korea University Seoul South Korea) , Chung, Hyunji (School of Cybersecurity Korea University Seoul South Korea) , Park, Jungheum (School of Cybersecurity Korea University Seoul South Korea) , Lee, Sangjin (School of Cybersecurity Korea University Seoul South Korea)

Abstract ▼ AI-Helper

AbstractElectronic documents often contain personal or confidential information, which can be used as valuable evidence in criminal investigations. In the digital investigation, special techniques are required for grouping and screening electronic documents, because it is challenging to analyze relationships between numerous documents in storage devices manually. To this end, although techniques such as keyword search, similarity search, topic modeling, metadata analysis, and document clustering are continually being studied, there are still limitations for revealing the relevance of documents. Specifically, metadata used in previous research are not always values present in the documents, and clustering methods with specific keywords may be incomplete because text‐based contents (including metadata) can be easily modified or deleted by users. In this work, we propose a novel method to efficiently group Microsoft Office Word 2007+ (MS Word) files by using revision identifier (RSID). Through a thorough understanding of the RSID, examiners can predict organizations to which a specific user belongs, and further, it is likely to discover unexpected interpersonal relationships. An experiment with a public dataset (GovDocs) provides that it is possible to categorize documents more effectively by combining our proposal with previously studied methods. Furthermore, we introduce a new document tracking method to understand the editing history and movement of a file, and then demonstrate its usefulness through an experiment with documents from a real case.

참고문헌 (26)

Castiglione, A., De Santis, A., Soriente, C.. Taking advantages of a disadvantage: Digital forensics and steganography using document metadata. The Journal of systems and software, vol.80, no.5, 750-764.

상세보기
Garfinkel, Simson L., Migletz, James J.. New XML-Based Files Implications for Forensics. IEEE security & privacy, vol.7, no.2, 38-44.

상세보기
Park, B., Park, J., Lee, S.. Data concealment and detection in Microsoft Office 2007 files. Digital investigation, vol.5, no.3, 104-114.

상세보기
Proceedings of the International Conference on Digital Forensics and Cyber Crime; 2011 Oct 26‐28; Dublin, Ireland Rowe NC 115 2011
Proceedings of the International Conference on Computer Science, Software Engineering, Information Technology, e‐Business and Applications (CSITeA); 2004 Dec 27‐29; Cairo, Egypt Fathi M 1 2004
10.1109/SADFE.2013.6911541
Raghavan, Sriram, Raghavan, S. V.. Eliciting file relationships using metadata based associations for digital forensics. CSI transactions on ICT, vol.2, no.1, 49-64.

상세보기
Proceedings of the Twenty‐Ninth Conference on Uncertainty in Artificial Intelligence (UAI); 2013 Jul 11-15; Bellevue, WA Xie P 694 2013
ECMA.Standard ECMA‐376 Office Open XML file formats.2016.https://www.ecma‐international.org/publications/standards/Ecma‐376.htm. Accessed 31 Aug 2020.
OASIS Standard.Open document format for office applications (OpenDocument). Version 1.2.http://docs.oasis‐open.org/office/v1.2/os/OpenDocument‐v1.2‐os.html. Accessed 31 Aug 2020.
Fu, Zhangjie, Sun, Xingming, Liu, Yuling, Li, Bo. Forensic investigation of OOXML format documents. Digital investigation, vol.8, no.1, 48-55.

상세보기
Forensic analysis of OOXML documents Didriksen E 2014
Langweg, H.. OOXML File Analysis of the July 22nd Terrorist Manual. Lecture notes in computer science, vol.7394, 195-197.

상세보기
10.3115/1118935.1118949
Flynn, P., Zhou, L., Maly, K., Zeil, S., Zubair, M.. Automated Template-Based Metadata Extraction Architecture. Lecture notes in computer science, vol.4822, 327-336.

상세보기
10.1109/ICDIM.2009.5356767
10.1109/ICSC.2018.00023
Proceedings of the 2010 AAAI Spring Symposium; 2010 Mar 22-24; Stanford, CA Power R 67 2010
da Cruz Nassif, L. F., Hruschka, E. R.. Document Clustering for Forensic Analysis: An Approach for Improving Computer Inspection. IEEE transactions on information forensics and security, vol.8, no.1, 46-54.

상세보기
Int J Recent Innovation Trends Comput Commun Mundhe MRK 2934 2 9 2014 Automatic labelling and document clustering for forensic analysis
Int J Sci Res Prachi KK 1787 3 12 2014 Document clustering approach for forensic analysis: a survey
Int J Recent Innovation Trends Comput Commun Vaijayanthi RP 245 5 7 2017 Digital forensic analysis through document clustering
Dagher, G.G., Fung, B.C.M.. Subject-based semantic document clustering for digital forensic investigations. Data & knowledge engineering, vol.86, 224-241.

상세보기
10.1007/978-3-642-22309-9_12
Park, Jungheum, Lee, Sangjin. Forensic investigation of Microsoft PowerPoint files. Digital investigation, vol.6, no.1, 16-24.

상세보기
Jeong, Doowon, Lee, Sangjin. Study on the tracking revision history of MS Word files for forensic investigation. Digital investigation, vol.23, 3-10.

상세보기

LOADING...

원문 URL 링크

DOI : 10.1111/1556-4029.14584
EBSCO Industries, Inc. : 저널
Blackwell Publishing_STM : 저널 > 논문

*원문 PDF 파일 및 링크정보가 존재하지 않을 경우 KISTI DDS 시스템에서 제공하는 원문복사서비스를 사용할 수 있습니다.

이 논문과 함께 이용한 콘텐츠

[논문] MS 워드의 RSID 분석을 통한 문서파일 이력 추적 기법 연구

저작권 관리 안내

내보내기 메뉴

내보내기 구분

파일저장
인쇄
메일전송

구성항목

기본정보
상세정보

관리번호, 논문명, 저널/프로시딩명, 저자 , 발행년, 권, 호, 시작페이지, 끝페이지, 발행기관

저장형식

Text(ASCII format)
Excel format
RefWorks Direct Export
RIS format (for Reference Manager, ProCite, EndNote), Scholar's Aids, Mendeley

메일정보

받는사람 (필수): @
보내는사람 (선택): @
제목
내용: KISTI 검색결과 이메일 서비스

안내

총 건의 자료가 검색되었습니다.

다운받으실 자료의 인덱스를 입력하세요. (1-10,000)

검색결과의 순서대로 최대 10,000건 까지 다운로드가 가능합니다.

데이타가 많을 경우 속도가 느려질 수 있습니다.(최대 2~3분 소요)

다운로드 파일은 UTF-8 형태로 저장됩니다.
파일의 내용이 제대로 보이지 않을실 때는 웹브라우저 상단의 보기 -> 인코딩 -> 자동선택 여부를 확인하십시오.

Text(ASCII format)
Excel format

표제어: PCR

동의어: Packet Collision Rate

용어 설명 출처 목록 (6)

용어 설명: PCR은 세균 특이성이 있는 primer를 이용하여 적은 수의 세균이 있을지라도 쉽게 검출할 수 있는 유용한 방법이며, 이를 이용하여 구강 내 치면세균막이나 타액에서 직접 세균을 검출할 수 있게 되었다[8].

AI-Helper ※ AI-Helper는 을 사용합니다.

AI-Helper

안녕하세요, AI-Helper입니다. 좌측 "선택된 텍스트"에서 텍스트를 선택하여 요약, 번역, 용어설명을 실행하세요.
※ AI-Helper는 부적절한 답변을 할 수 있습니다.

연합인증