Improved ID3 algorithm using ontology in computer forensics

This paper presents an improved ID3 algorithm for computer forensics. Forensics data are volatile, noisy and dispersive. Based on these characteristics, ontology is used to produce the inheritance relation tree. Leaded by the tree, the ID3 algorithm is improved by adopting weight and two times information gain. The experiment results show that the improved algorithm has better simplicity and lower error rate compared than traditional ID3 algorithm in the field of computer forensics.