Using computer interaction behavior to differentiate between users to assist with digital investigations
Abstract
Most digital crimes involve finding evidence on the computer and then linking this evidence to a suspect. This is usually done using login information from the computer. However, often login information is shared or compromised. In such a situation, there needs to be a way to identify the user without relying on login information. This research introduces the concept that users may be distinguished from each other based on how they interact with the computer. This theory was tested by conducting an experiment in which subjects were required to perform common tasks on a computer over multiple sessions. Cluster Analysis of all the sessions formed groups corresponding to each user with 98% of the sessions grouped in the right cluster.
Degree
M.S.
Advisors
Rogers, Purdue University.
Subject Area
Behavioral psychology|Information Technology|Criminology
Off-Campus Purdue Users:
To access this dissertation, please log in to our
proxy server.