Presentation is loading. Please wait.

Presentation is loading. Please wait.

Quantification of Digital Forensic Hypotheses Using Probability Theory Richard E Overill & Jantje A M Silomon King’s College London Kam-Pui Chow & Hayson.

Published byBaldwin Edwards Modified over 8 years ago

Similar presentations

Presentation on theme: "Quantification of Digital Forensic Hypotheses Using Probability Theory Richard E Overill & Jantje A M Silomon King’s College London Kam-Pui Chow & Hayson."— Presentation transcript:

1 Quantification of Digital Forensic Hypotheses Using Probability Theory Richard E Overill & Jantje A M Silomon King’s College London Kam-Pui Chow & Hayson Tse University of Hong Kong

2 Synopsis Introduction & Background Probabilistic Models Simplifying Assumptions Results & Interpretation Summary & Conclusions Questions & Comments?

3 Introduction & Background Possession of Child Pornography (CP) is a serious offence in HK, UK and elsewhere Under prosecution, 2 common defences are: – Trojan Horse (when many CP images are recovered) – Inadvertent (when a few CP images are recovered amongst many non-CP images) We used complexity theory to quantify the plausibility of the THD (ICDFI-2012, ICDFI-2013) Here we use probability theory to quantify the plausibility of the Inadvertent Defence (ID)

4 Probabilistic Models Greedy download – every image on website – the probability distribution is trivially singular. Selective download – a representative sample of images on website – Infinite website: probabilities do not change as download proceeds – use the Binomial Theorem; – Finite website: probabilities change as images are downloaded – use the “Urn/Bag of balls” model.

5 Simplifying Assumptions Random browsing behaviour. Random distribution of CP images on website. No duplicates in download. Single download session. Single website. Single computer. One individual.

6 Results & Interpretation 2 actual HK cases: – Case 1: 248/30,000 images were CP (2010); – Case 2: 84/714,430 images were of CP (2013). “worst case” (prosecution) results: “worst-case” probabilitiesFinite ModelInfinite Model Case 1 0.03040.0254 Case 2 0.08070.0435

7 Case 1 - Probability Distributions Finite ModelInfinite Model

8 Case 2 - Probability Distributions Finite ModelInfinite Model

9 Summary & Conclusions Infinite model worst-case results (2.5% & 4.3%) suggest a criminal prosecution is feasible. Finite model worst-case results (3% & 8%) also suggest a criminal prosecution is feasible but are influenced by assumptions of website size. Non-worst-case probabilities fall off rapidly: σ ≈ √μ Simple probability models can be used to quantify the plausibility of the Inadvertent defence (ID) against possession of CP.

10 Questions & Comments? richard.overill@kcl.ac.uk www.inf.kcl.ac.uk/staff/richard/

Download ppt "Quantification of Digital Forensic Hypotheses Using Probability Theory Richard E Overill & Jantje A M Silomon King’s College London Kam-Pui Chow & Hayson."

Similar presentations

PAC Learning 8/5/2005. purpose Effort to understand negative selection algorithm from totally different aspects –Statistics –Machine learning What is.

PAC Learning 8/5/2005. purpose Effort to understand negative selection algorithm from totally different aspects –Statistics –Machine learning What is.
SADC Course in Statistics Introduction to Non- Parametric Methods (Session 19)

SADC Course in Statistics Introduction to Non- Parametric Methods (Session 19)
The t-test Inferences about Population Means. Questions What is the main use of the t-test? How is the distribution of t related to the unit normal? When.

The t-test Inferences about Population Means. Questions What is the main use of the t-test? How is the distribution of t related to the unit normal? When.
Assumptions for Z Confidence Intervals

Assumptions for Z Confidence Intervals
Statistics Review – Part II Topics: – Hypothesis Testing – Paired Tests – Tests of variability 1.

Statistics Review – Part II Topics: – Hypothesis Testing – Paired Tests – Tests of variability 1.
Teaching Basic Statistics with R: An Introduction to Interactive Packages Shuen-Lin Jeng National Cheng Kung University.

Teaching Basic Statistics with R: An Introduction to Interactive Packages Shuen-Lin Jeng National Cheng Kung University.
Power Laws for Cyber Crime Richard Overill & Jantje Silomon Department of Informatics King’s College London.

Power Laws for Cyber Crime Richard Overill & Jantje Silomon Department of Informatics King’s College London.
ICDFI 2013 Keynote Speech 1: Quantifying Likelihood in Digital Forensic Investigations Dr Richard Overill Department of Informatics, King’s College London.

ICDFI 2013 Keynote Speech 1: Quantifying Likelihood in Digital Forensic Investigations Dr Richard Overill Department of Informatics, King’s College London.
Probability theory 2010 Order statistics  Distribution of order variables (and extremes)  Joint distribution of order variables (and extremes)

Probability theory 2010 Order statistics  Distribution of order variables (and extremes)  Joint distribution of order variables (and extremes)
Chapter 7 Sampling and Sampling Distributions

Chapter 7 Sampling and Sampling Distributions
Programme in Statistics (Courses and Contents). Elementary Probability and Statistics (I) 3(2+1)Stat. 101 College of Science, Computer Science, Education.

Programme in Statistics (Courses and Contents). Elementary Probability and Statistics (I) 3(2+1)Stat. 101 College of Science, Computer Science, Education.
Stat 301 – Day 14 Review. Previously Instead of sampling from a process  Each trick or treater makes a “random” choice of what item to select; Sarah.

Stat 301 – Day 14 Review. Previously Instead of sampling from a process  Each trick or treater makes a “random” choice of what item to select; Sarah.
CSE 221: Probabilistic Analysis of Computer Systems Topics covered: Statistical inference (Sec. )

CSE 221: Probabilistic Analysis of Computer Systems Topics covered: Statistical inference (Sec. )
CSE 221: Probabilistic Analysis of Computer Systems Topics covered: Statistical inference.

CSE 221: Probabilistic Analysis of Computer Systems Topics covered: Statistical inference.
Chapter 5. Operations on Multiple R. V.'s 1 Chapter 5. Operations on Multiple Random Variables 0. Introduction 1. Expected Value of a Function of Random.

Chapter 5. Operations on Multiple R. V.'s 1 Chapter 5. Operations on Multiple Random Variables 0. Introduction 1. Expected Value of a Function of Random.
Computational Learning Theory

Computational Learning Theory
1 Random Variables and Probability Distributions: Discrete versus Continuous For this portion of the session, the learning objective is:  Learn that the.

1 Random Variables and Probability Distributions: Discrete versus Continuous For this portion of the session, the learning objective is:  Learn that the.
The Central Limit Theorem For simple random samples from any population with finite mean and variance, as n becomes increasingly large, the sampling distribution.

The Central Limit Theorem For simple random samples from any population with finite mean and variance, as n becomes increasingly large, the sampling distribution.
How do you simplify? 1 + 1 + 1 + 1 + 1 5Simple Complicated.

How do you simplify? Simple Complicated.
INFERENTIAL STATISTICS – Samples are only estimates of the population – Sample statistics will be slightly off from the true values of its population’s.

INFERENTIAL STATISTICS – Samples are only estimates of the population – Sample statistics will be slightly off from the true values of its population’s.

Similar presentations

Ads by Google