{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T15:30:22Z","timestamp":1783611022086,"version":"3.55.0"},"reference-count":43,"publisher":"MDPI AG","issue":"11","license":[{"start":{"date-parts":[[2024,11,18]],"date-time":"2024-11-18T00:00:00Z","timestamp":1731888000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Artificial Intelligence Center at Norwich University","award":["P116Z220106"],"award-info":[{"award-number":["P116Z220106"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>The field of digital forensics relies on expertise from multiple domains, including computer science, criminology, and law. It also relies on different toolsets and an analyst\u2019s expertise to parse enormous amounts of user-generated data to find clues that help crack a case. This process of investigative analysis is often done manually. Artificial Intelligence (AI) can provide practical solutions to efficiently mine enormous amounts of data to find useful patterns that can be leveraged to investigate crimes. Natural Language Processing (NLP) is a subdomain of research under AI that deals with problems involving unstructured data, specifically language. The domain of NLP includes several tools to parse text, including topic modeling, pairwise correlation, word vector cosine distance measurement, and sentiment analysis. In this research, we propose a digital forensic investigative technique that uses an ensemble of NLP tools to identify a person of interest list based on a corpus of text. Our proposed method serves as a type of human feature reduction, where a total pool of suspects is filtered down to a short list of candidates who possess a higher correlation with the crime being investigated.<\/jats:p>","DOI":"10.3390\/fi16110426","type":"journal-article","created":{"date-parts":[[2024,11,19]],"date-time":"2024-11-19T06:06:54Z","timestamp":1731996414000},"page":"426","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["Identifying Persons of Interest in Digital Forensics Using NLP-Based AI"],"prefix":"10.3390","volume":"16","author":[{"given":"Jonathan","family":"Adkins","sequence":"first","affiliation":[{"name":"Senator Patrick Leahy School of Cybersecurity and Advanced Computing, Norwich University, Northfield, VT 05663, USA"},{"name":"Artificial Intelligence Center, Norwich University, Northfield, VT 05663, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9530-7950","authenticated-orcid":false,"given":"Ali","family":"Al Bataineh","sequence":"additional","affiliation":[{"name":"Artificial Intelligence Center, Norwich University, Northfield, VT 05663, USA"},{"name":"Department of Electrical and Computer Engineering, Norwich University, Northfield, VT 05663, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Majd","family":"Khalaf","sequence":"additional","affiliation":[{"name":"Artificial Intelligence Center, Norwich University, Northfield, VT 05663, USA"},{"name":"Department of Electrical and Computer Engineering, Norwich University, Northfield, VT 05663, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2024,11,18]]},"reference":[{"key":"ref_1","first-page":"7","article-title":"An historical perspective of digital evidence: A forensic scientist\u2019s view","volume":"1","author":"Whitcomb","year":"2002","journal-title":"Int. J. Digit. Evid."},{"key":"ref_2","first-page":"1","article-title":"User Generated Evidence","volume":"57","author":"Hamilton","year":"2018","journal-title":"Columbia J. Transnatl. Law"},{"key":"ref_3","unstructured":"EdgeDelta (2024, June 02). The Exponential Growth of Data. Available online: https:\/\/www.shipyardapp.com\/blog\/exponential-data-growth\/."},{"key":"ref_4","first-page":"301351","article-title":"Reliability assessment of digital forensic investigations in the Norwegian police","volume":"40","author":"Stoykova","year":"2022","journal-title":"Forensic Sci. Int. Digit. Investig."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"97","DOI":"10.5958\/0974-083X.2021.00016.9","article-title":"A comparative study of digital forensic tools for data extraction from electronic devices","volume":"21","author":"Tara","year":"2021","journal-title":"J. Punjab Acad. Forensic Med. Toxicol."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Chowdhary, K., and Chowdhary, K. (2020). Natural language processing. Fundamentals of Artificial Intelligence, Springer.","DOI":"10.1007\/978-81-322-3972-7"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"736","DOI":"10.1016\/j.psep.2023.01.067","article-title":"How to account artificial intelligence in human factor analysis of complex systems?","volume":"171","author":"Zarei","year":"2023","journal-title":"Process. Saf. Environ. Prot."},{"key":"ref_8","unstructured":"Wang, Z.J., Choi, D., Xu, S., and Yang, D. (2021). Putting humans in the natural language processing loop: A survey. arXiv."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Maksutov, A.A., Zamyatovskiy, V.I., Vyunnikov, V.N., and Kutuzov, A.V. (2020, January 27\u201330). Knowledge base collecting using natural language processing algorithms. Proceedings of the 2020 IEEE Conference of Russian Young Researchers in Electrical and Electronic Engineering (EIConRus), St. Petersburg and Moscow, Russia.","DOI":"10.1109\/EIConRus49466.2020.9039303"},{"key":"ref_10","first-page":"123","article-title":"Machine learning and AI in business intelligence: Trends and opportunities","volume":"48","author":"Bharadiya","year":"2023","journal-title":"Int. J. Comput. (IJC)"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Shaheen, M.Y. (2021). Applications of Artificial Intelligence (AI) in healthcare: A review. ScienceOpen Prepr.","DOI":"10.14293\/S2199-1006.1.SOR-.PPVRY8K.v1"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Jafari, R., and Far, B.H. (2022, January 2\u20134). Behavioral Mapping, Using NLP to Predict Individual Behavior: Focusing on Towards\/Away Behavior. Proceedings of the 2022 International Conference on Advanced Enterprise Information System (AEIS), London, UK.","DOI":"10.1109\/AEIS59450.2022.00030"},{"key":"ref_13","first-page":"832","article-title":"Machine Learning based Predictive Modelling of Cybersecurity Threats Utilising Behavioural Data","volume":"14","author":"Tin","year":"2023","journal-title":"Int. J. Adv. Comput. Sci. Appl."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"718","DOI":"10.1037\/0022-3514.76.5.718","article-title":"Attributional orientations and the prediction of behavior: The attribution\u2013prediction bias","volume":"76","author":"Ybarra","year":"1999","journal-title":"J. Personal. Soc. Psychol."},{"key":"ref_15","first-page":"1","article-title":"Antisocial Behavior Identification from Twitter Feeds Using Traditional Machine Learning Algorithms and Deep Learning","volume":"10","author":"Singh","year":"2023","journal-title":"EAI Endorsed Trans. Scalable Inf. Syst."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Lindegaard, M.R., Bernasco, W., Jacques, S., and Zevenbergen, B. (2013). Posterior gains and immediate pains: Offender emotions before, during and after robberies. Affect and Cognition in Criminal Decision Making, Routledge.","DOI":"10.21428\/7b6d533a.c8f339f3"},{"key":"ref_17","first-page":"466","article-title":"Emotions in offender decision making","volume":"Volume 6","year":"2017","journal-title":"The Oxford Handbook of Offender Decision Making"},{"key":"ref_18","unstructured":"Seyeditabari, A., and Zadrozny, W. (2017, January 22\u201324). Can word embeddings help find latent emotions in text? preliminary results. Proceedings of the The Thirtieth International Flairs Conference, Marco Island, FL, USA."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Jones, G.M., and Winster, S.G. (2022). An insight into digital forensics: History, frameworks, types and tools. Cyber Security and Digital Forensics, Wiley.","DOI":"10.1002\/9781119795667.ch6"},{"key":"ref_20","unstructured":"Wickramasinghe, S., and Hettiarachchi, S. (2024, November 01). Use of Computer Forensics and Its Implications. Available online: https:\/\/www.academia.edu\/28557307\/Use_of_Computer_Forensics_and_Its_Implications."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Mohamed, N., Al-Jaroodi, J., and Jawhar, I. (2020). Cyber\u2013physical systems forensics: Today and tomorrow. J. Sens. Actuator Netw., 9.","DOI":"10.3390\/jsan9030037"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"e1418","DOI":"10.1002\/wfs2.1418","article-title":"The impact of automation and artificial intelligence on digital forensics","volume":"3","author":"Jarrett","year":"2021","journal-title":"Wiley Interdiscip. Rev. Forensic Sci."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"332","DOI":"10.1109\/WI-IAT.2012.68","article-title":"Mining criminal networks from chat log","volume":"Volume 1","author":"Iqbal","year":"2012","journal-title":"Proceedings of the 2012 IEEE\/WIC\/ACM International Conferences on Web Intelligence and Intelligent Agent Technology"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"47","DOI":"10.5815\/ijmecs.2014.12.07","article-title":"A study of sentiment and trend analysis techniques for social media content","volume":"6","author":"Mehmood","year":"2014","journal-title":"Int. J. Mod. Educ. Comput. Sci."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"379","DOI":"10.1146\/annurev-criminol-032317-092036","article-title":"Offender decision-making in criminology: Contributions from behavioral economics","volume":"1","author":"Pogarsky","year":"2018","journal-title":"Annu. Rev. Criminol."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"e12473","DOI":"10.1111\/soc4.12473","article-title":"Emotions in criminological theory: Insights from social psychology","volume":"11","author":"Dippong","year":"2017","journal-title":"Sociol. Compass"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Gelsthorpe, L. (2009). Emotions and contemporary developments in criminology. Emotion: New Psychosocial Perspectives, Springer.","DOI":"10.1057\/9780230245136_14"},{"key":"ref_28","first-page":"458","article-title":"Psychological factors underlying criminal behavior","volume":"37","author":"Schmideberg","year":"1946","journal-title":"J. Crim. Law Criminol."},{"key":"ref_29","first-page":"6","article-title":"Putting the Psyche into \u2018Cultural Criminology\u2019: A psychosocial understanding of looting, masculinity, shame and violence","volume":"7","author":"Jones","year":"2013","journal-title":"J. Psycho-Soc. Stud. Vol."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"235","DOI":"10.1017\/pan.2022.10","article-title":"Sentiment is not stance: Target-aware opinion classification for political text analysis","volume":"31","author":"Bestvater","year":"2023","journal-title":"Political Anal."},{"key":"ref_31","unstructured":"Brown, S.E., and Geis, G. (2015). Criminology: Explaining Crime and Its Context, Routledge."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Casey, E., and Rose, C.W. (2010). Forensic analysis. Handbook of Digital Forensics and Investigation, Elsevier.","DOI":"10.1016\/B978-0-12-374267-4.00002-1"},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"32","DOI":"10.1080\/19393555.2014.897401","article-title":"Enhanced timeline analysis for digital forensic investigations","volume":"23","author":"Inglot","year":"2014","journal-title":"Inf. Secur. J. Glob. Perspect."},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Hina, M., Ali, M., Javed, A.R., Srivastava, G., Gadekallu, T.R., and Jalil, Z. (2021, January 18\u201321). Email classification and forensics analysis using machine learning. Proceedings of the 2021 IEEE SmartWorld, Ubiquitous Intelligence & Computing, Advanced & Trusted Computing, Scalable Computing & Communications, Internet of People and Smart City Innovation (SmartWorld\/SCALCOM\/UIC\/ATC\/IOP\/SCI), Atlanta, GA, USA.","DOI":"10.1109\/SWC50871.2021.00093"},{"key":"ref_35","unstructured":"Belvisi, N.M.S., Muhammad, N., and Alonso-Fernandez, F. (2020, January 29\u201330). Forensic authorship analysis of microblogging texts using n-grams and stylometric features. Proceedings of the 2020 8th International Workshop on Biometrics and Forensics (IWBF), Porto, Portugal."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"297","DOI":"10.1016\/j.future.2019.02.040","article-title":"Analyse digital forensic evidences through a semantic-based methodology and NLP techniques","volume":"98","author":"Amato","year":"2019","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_37","first-page":"301121","article-title":"A comparative study of support vector machine and neural networks for file type identification using n-gram analysis","volume":"36","author":"Sester","year":"2021","journal-title":"Forensic Sci. Int. Digit. Investig."},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"1775","DOI":"10.1016\/j.neucom.2008.06.011","article-title":"A density-based method for adaptive LDA model selection","volume":"72","author":"Cao","year":"2009","journal-title":"Neurocomputing"},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Nazemi, K., Klepsch, M.J., Burkhardt, D., and Kaupp, L. (2020, January 7\u201311). Comparison of full-text articles and abstracts for visual trend analytics through natural language processing. Proceedings of the 2020 24th International Conference Information Visualisation (IV), Melbourne, Australia.","DOI":"10.1109\/IV51561.2020.00065"},{"key":"ref_40","unstructured":"Romanova, A. (2021, January 19\u201320). Detect text topics by semantics graphs. Proceedings of the 2nd International Conference on Blockchain and Internet of Things (BIoT 2021), Copenhagen, Denmark."},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Toshevska, M., Stojanovska, F., and Kalajdjieski, J. (2020). Comparative analysis of word embeddings for capturing word similarities. arXiv.","DOI":"10.5121\/csit.2020.100402"},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"567","DOI":"10.1002\/1099-0798(200010)18:5<567::AID-BSL410>3.0.CO;2-8","article-title":"Emotional deficiency and psychopathy","volume":"18","author":"Herpertz","year":"2000","journal-title":"Behav. Sci. Law"},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s40163-017-0074-0","article-title":"Crime topic modeling","volume":"6","author":"Kuang","year":"2017","journal-title":"Crime Sci."}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/16\/11\/426\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T16:34:16Z","timestamp":1760114056000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/16\/11\/426"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,18]]},"references-count":43,"journal-issue":{"issue":"11","published-online":{"date-parts":[[2024,11]]}},"alternative-id":["fi16110426"],"URL":"https:\/\/doi.org\/10.3390\/fi16110426","relation":{},"ISSN":["1999-5903"],"issn-type":[{"value":"1999-5903","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,11,18]]}}}