Date of Award
Master of Science in Computer Science
Department of Electrical and Computer Engineering
Gilbert L. Peterson, PhD.
Ontological data representation and data normalization can provide a structured way to correlate digital artifacts. This can reduce the amount of data that a forensics examiner needs to process in order to understand the sequence of events that happened on the system. However, ontology processing suffers from large disk consumption and a high computational cost. This paper presents Property Graph Event Reconstruction (PGER), a novel data normalization and event correlation system that leverages a native graph database to improve the speed of queries common in ontological data. PGER reduces the processing time of event correlation grammars and maintains accuracy over a relational database storage format.
DTIC Accession Number
Schelkoph, Daniel J., "Digital Forensics Event Graph Reconstruction" (2018). Theses and Dissertations. 1822.