Applying data mining principles in the extraction of digital evidence

Abstract

Data mining in databases is part of the interdisciplinary field of knowledge discovery used for extracting patterns and relationships amongst the data sets from a data source. This paper focuses on mining data from a database. The study further identifies how data mining techniques can be used to support digital forensic investigation in a digital crime case. Digital forensic models are reviewed, concepts mapped onto experimental cases and tested on a Pentium (R) Core ™ 2 Duo CPU, 1.89 GHz with Windows XP Professional OS. The findings supported the benefits of integrating data mining principles in extracting data for digital evidence.