Advertisement

Factors Contributing to Performance for Cyber Security Forensic Analysis

  • Shelby Hopkins
  • Andrew Wilson
  • Austin Silva
  • Chris ForsytheEmail author
Conference paper
Part of the Lecture Notes in Computer Science book series (LNCS, volume 9190)

Abstract

Previously, the current authors (Hopkins et al. 2015) described research in which subjects provided a tool that facilitated their construction of a narrative account of events performed better in conducting cyber security forensic analysis. The narrative tool offered several distinct features. In the current paper, an analysis is reported that considered which features of the tool contributed to superior performance. This analysis revealed two features that accounted for a statistically significant portion of the variance in performance. The first feature provided a mechanism for subjects to identify suspected perpetrators of the crimes and their motives. The second feature involved the ability to create an annotated visuospatial diagram of clues regarding the crimes and their relationships to one another. Based on these results, guidance may be provided for the development of software tools meant to aid cyber security professionals in conducting forensic analysis.

Keywords

Cyber security Forensic analysis Decision making Narratives 

Notes

Acknowledgements

Sandia National Laboratories is a multi-program laboratory managed and operated by Sandia Corporation, a wholly owned subsidiary of Lockheed Martin Corporation, for the U.S. Department of Energy’s National Nuclear Security Administration under contract DE-AC04-94AL85000. (SAND2014-2123 C)

References

  1. Burning Glass: Job market intelligence: report on the growth of cyber security jobs (2014). http://www.burning-glass.com/media/4187/Burning%20Glass%20Report%20on%20Cybersecurity%20Jobs.pdf
  2. Hopkins, S.E., Silva, A., Wilson, A., Forsythe, C.: Facilitation of forensic analysis using a narrative template. In: Proceedings of the Applied Human Factors and Ergonomics Conference, Las Vegas, NV (2015)Google Scholar
  3. Zwaan, R.A., Radvansky, G.A.: Situation models in language comprehension and memory. Psychol. Bull. 123(2), 162–185 (1998)CrossRefGoogle Scholar

Copyright information

© Springer International Publishing Switzerland 2015

Authors and Affiliations

  • Shelby Hopkins
    • 1
  • Andrew Wilson
    • 1
  • Austin Silva
    • 1
  • Chris Forsythe
    • 1
    Email author
  1. 1.Sandia National LaboratoriesAlbuquerqueUSA

Personalised recommendations