论文信息 - Improved Decision Tree Method for Imbalanced Data Sets in Digital Forensics

Improved Decision Tree Method for Imbalanced Data Sets in Digital Forensics

Improved decision tree ID3 algorithm for suiting digital forensics is presented in the study. Forensics data are imbalanced, inconstant, noisy and dispersive. Based on these characteristic, we improve ID3 algorithm by adopting correction factor and two times information gain, which can avoid the large data bias of ID3 algorithm. The experimental results show that the improved algorithm has good simplicity and low error rate compared with ID3. It can be seen that the improved method used in the digital forensics process is entirely feasible.

Qin Liu

[1] David A. Cieslak,et al. A Robust Decision Tree Algorithm for Imbalanced Data Sets , 2010, SDM.

[2] Jiawei Han,et al. Data Mining: Concepts and Techniques , 2000 .

[3] Deniz Sinangin. Computer Forensics Investigations in a Corporate Environment , 2002 .

[4] Peigen Li,et al. Application of ID3 algorithm in knowledge acquisition for tolerance design , 2001 .

[5] E. Eugene Schultz,et al. Computer forensics challenges in responding to incidents in real-life settings , 2007 .

[6] Andy Spruill,et al. Tackling the U3 trend with computer forensics , 2007, Digit. Investig..

[7] Vicki Miller Luoma,et al. Computer forensics and electronic discovery: The new management challenge , 2006, Comput. Secur..

[8] Vern Paxson,et al. Outside the Closed World: On Using Machine Learning for Network Intrusion Detection , 2010, 2010 IEEE Symposium on Security and Privacy.