Patent ID: 8422730
Filing Date: 2013-04-16
Classification: G06F

Abstract:
1. A system for analyzing digital forensic evidence using an image filter, comprising: a duplicator that creates a copy of digital evidence; a verifying unit that verifies whether the copy created by the duplicator is identical to the original of the digital evidence; an evidence analyzer that classifies image files of the copy of the digital evidence into predetermined categories, using the image filter including an image filtering model created by a learning model, and then analyzes the evidence; and a reporting unit that creates a report about the evidence analysis result obtained by the evidence analyzer, wherein the evidence analyzer analyzes not only existing data and image files on a hard disk, but also images restored from deleted and lost data and performs registry analysis, e-mail analysis, web history analysis, password analysis, and related keyword search analysis wherein the learning model improves an accuracy of the classifying by learning more samples using resources in advance, wherein the evidence analyzer includes: