Survey on Forensic Document Clustering Using High Performance Clustering Algorithm

Computer forensics is a new and fast growing field which involves carefully collecting and examining electronic evidence. This evidences not only assesses the damage to a computer as a result of an electronic attack, but also to recover lost information from such a system to prosecute a criminal. Document clustering can simplify the browsing large collections of documents by reorganizing them into a smaller number of manageable clusters. Hundreds and thousands of files are usually examined in computer Forensic analysis. Most of the data in unstructured format. Due to the unstructured format and explosive growth of amount of data that humans want to analyze, fast algorithms are necessary, but they can often give poor quality results. The methodology that compare and evaluate the quality of clustering algorithms is investigated. Present an approach that applies clustering algorithms for forensic analysis of seized computer documents in investigations. Not a one specific algorithm is Cluster analysis itself but the general task to be solved. Various algorithms are used that significantly differ in their notion of what they constitutes a cluster. Automatic clustering and cluster labeling helps to improve efficiency.