Social Media User Relationship Framework (SMURF)

The use of social media has spread through many aspects of society, allowing millions of individuals, corporate as well as government entities to leverage the opportunities it affords. These opportunities often end up being exploited by a small percentage of the user community who use it for objectionable or unlawful activities; for example, trolling, cyber bullying, grooming, luring. In some cases, these unlawful activities result in investigations where the swift retrieval of critical evidence is required in order to save a life. This paper presents a proof of concept (PoC) framework for social media user attribution. The framework aims to provide digital evidence that can be used to substantiate user activity in live triage investigations. This paper highlights the use of live triage as a viable technique for the investigation of social media activity, contextualizing user activity and attributing actions to users. It discusses the reliability of artefacts other than the communication content as a means of drawing inferences about user social media activity, taking into account.

[1]  Iain Robertson-Steel,et al.  Evolution of triage systems , 2006, Emergency Medicine Journal.

[2]  Anthony Reyes,et al.  Incident Response: Live Forensics and Investigations , 2007 .

[3]  M W Gielen.  Prioritizing Computer Forensics Using Triage Techniques , 2014 .

[4]  M. Robert Barnett,et al.  Hindsight , 1958 .

[5]  Yoginder S. Dandass,et al.  Research toward a Partially-Automated, and Crime Specific Digital Triage Process Model , 2012, Comput. Inf. Sci..

[6]  Marcus K. Rogers,et al.  Computer Forensics Field Triage Process Model , 2006, J. Digit. Forensics Secur. Law.

[7]  LandscapesByPeter F. Stadlera.  Towards Theory: , 2021, Philosophy Behind Bars.

[8]  Shaheed Zulfikar,et al.  Triage in Live Digital Forensic Analysis , 2013 .

[9]  Wm J. Baker,et al.  Toward a Theory of Human Communication , 1990 .

[10]  R. Jones,et al.  Digital Evidence and Computer Crime: Forensic Science, Computers and the Internet , 2003, Int. J. Law Inf. Technol..

[11]  Katharina Wagner,et al.  Digital Evidence And Computer Crime Forensic Science Computers And The Internet , 2016 .

[12]  Harry Parsonage,et al.  Computer Forensics Case Assessment and Triage - some ideas for discussion , 2010 .

[13]  Nhien-An Le-Khac,et al.  Tiered Forensic Methodology Model for Digital Field Triage by Non-Digital Evidence Specialists , 2016, ArXiv.

[14]  Humaira Arshad,et al.  Evidence collection and forensics on social networks: Research challenges and directions , 2019, Digit. Investig..

[15]  Hsinchun Chen,et al.  Social Media Analytics and Intelligence , 2010, IEEE Intell. Syst..

[16]  Rodney McKemmish,et al.  When is Digital Evidence Forensically Sound? , 2008, IFIP Int. Conf. Digital Forensics.

[17]  Vacius Jusas,et al.  Methods and Tools of Digital Triage in Forensic Context: Survey and Future Directions , 2017, Symmetry.

[18]  Benjamin Pfaff,et al.  Theories Of Human Communication , 2016 .

[19]  Reza Montasari.  A Formal Two Stage Triage Process Model (FTSTPM) for Digital Forensic Practice , 2016 .

[20]  Simson L. Garfinkel,et al.  Digital media triage with bulk data analysis and bulk_extractor , 2013, Comput. Secur..

[21]  Peter Sommer,et al.  Intrusion detection systems as evidence , 1999, Comput. Networks.

[22]  U. S. Nij.  Electronic Crime Scene Investigation: A Guide for First Responders, Second Edition , 2012 .

[23]  Albert Marcella,et al.  Cyber Forensics: A Field Manual for Collecting, Examining, and Preserving Evidence of Computer Crimes , 2002 .

[24]  Vassil Roussev,et al.  Content triage with similarity digests: The M57 case study , 2012 .

[25]  Brian Cusack,et al.  Evidence Examination Tools for Social Networks , 2012 .

[26]  Eoghan Casey.  Triage in digital forensics , 2013, Digit. Investig..

[27]  Sarah Morris,et al.  A Two-Stage Model for Social Network Investigations in Digital Forensics , 2020 .

[28]  David A. Dampier,et al.  Implementing The Automated Phases Of The Partially-Automated Digital Triage Process Model , 2012, J. Digit. Forensics Secur. Law.