CS4920: Automated Document and Media Exploitation

Mon Dec 8, 2008

Data Fusion

Seminar 19 <<                     Seminar 20                    >> Seminar 21

• Data from different modalities being "fused" together
• Incommensurate units.
• Systematic and rigorous handling of uncertainty.

• In fusing together forensic information from multiple sources?
• How can we use external databases to augment forensic investigations?
• DNS and IP Address Geolocation
  • Guha and Francis Paper
  • Google Analytics Demo
  • IP Address Geolocation Services:
    • Look up NPS at IPPages
    • http://www.ip2location.com/
    • http://www.ipligence.com/geolocation/
    • http://www.fileformat.info/system/iplocation.htm
    • List of services at ipinfo.info
    • MaxMind GeoLite City
    • http://www.geobytes.com/IpLocator.htm?GetLocation
  • Geocoding:
    • geocoder.us
    • Google Simple Demo
• Geolocate phone numbers:
  • TP2Location
• Google Integration into tools
• KML
  • Google Earth API
  • Google MAPS API Reference
  • Google MAP API Concepts
  • Google Flu Trends
  • Google Maps API
  • Rapid integration with Google Street View.
• Articles:
  • [www.geospatialtraining.com/Newsletter/Summer%202006/Google%20Geocoding.htm Geocoding API]
  • Introducing Google's Geocoding Service
• DHS Research programs:
  • DETER
  • PREDICT Large Datasets for Cyber Security

Required reading

• Geospatial Anomaly Detection in Internet Usage (Word Version), Chad M. Steel Tech Seminar Paper, Virginia Tech, 2007.

Chinese Menu Readings (please read 1)

• Garfinkel, S. "Data Fusion," Scientific American, September 2008.
• Computer Geolocation Using Extracted Features, ADFSL 2007 Conference on Digital Forensics, Security and Law, April 18, 2007
• Identity Trail: Covert Suveillance using DNS, PET 2007, Saikat Guha and Paul Francis, Cornell University, Ithaca NY 14853, USA [slides]

Background Readings

• Garfinkel, S. "Data Fusion," Scientific American, September 2008.