Journal of Digital Forensics, Security and Law (Jun 2012)

Identifying and Attributing Similar Traces with Greatest Common Factor Analysis

  • Fred Cohen

Journal volume & issue
Vol. 7, no. 2
pp. 89 – 112

Abstract

Read online

This paper presents an algorithm for comparing large numbers of traces to each other and identifying and presenting groups of traces with similar features. It is applied to forensic analysis in which groups of similar traces are automatically identified and presented so that attribution and other related claims may be asserted, and independently confirmed or refuted. The approach of this paper is to identify an approximate algorithm that will find a large subset of greatest common factor similar groups of arbitrary factors in far less time and space than an exact algorithm using examiner-provided selection criteria for factor definition.