Data Mining Methods Applied to a Digital Forensics Task for Supervised Machine Learning

Digital forensics research includes several stages. Once we have collected the data the last goal is to obtain a model in order to predict the output with unseen data. We focus on supervised machine learning techniques. This chapter performs an experimental study on a forensics data task for multi-c...

Descripción completa

Detalles Bibliográficos
Autores: Tallón Ballesteros, Antonio Javier, Riquelme Santos, José Cristóbal, Computational Intelligence in Digital Forensics: Forensic Investigation and Applications, Vol. 555, Studies in Computational Intelligence pp 413-428 (2014) (Coordinador)
Tipo de recurso: capítulo de libro
Estado:Versión publicada
Fecha de publicación:2014
País:España
Institución:Universidad de Sevilla (US)
Repositorio:idUS. Depósito de Investigación de la Universidad de Sevilla
OAI Identifier:oai:idus.us.es:11441/39130
Acceso en línea:http://hdl.handle.net/11441/39130
https://doi.org/10.1007/978-3-319-05885-6_17
Access Level:acceso abierto
Palabra clave:Digital forensics
Glass evidence
Data mining
Supervised machine learning
Classification model
Descripción
Sumario:Digital forensics research includes several stages. Once we have collected the data the last goal is to obtain a model in order to predict the output with unseen data. We focus on supervised machine learning techniques. This chapter performs an experimental study on a forensics data task for multi-class classification including several types of methods such as decision trees, bayes classifiers, based on rules, artificial neural networks and based on nearest neighbors. The classifiers have been evaluated with two performance measures: accuracy and Cohen’s kappa. The followed experimental design has been a 4-fold cross validation with thirty repetitions for non-deterministic algorithms in order to obtain reliable results, averaging the results from 120 runs. A statistical analysis has been conducted in order to compare each pair of algorithms by means of t-tests using both the accuracy and Cohen’s kappa metrics.