CBR-Based Decision Support Methodology for Cybercrime Investigation: Focused on the Data-Driven Website Defacement Analysis

<div>A snippet of website defacement cases by a comparison of examples of the DS and SPE: the defaced LG <svg height="11.0292pt" id="M80" style="vertical-align:-0.2325001pt" version="1.1" viewbox="-0.0498162 -10.7967 15.7826 11.0292" width="15.7826pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M716 650H478V622C549 617 570 605 575 566C579 535 582 493 582 401V326C582 161 537 40 393 40C269 40 205 133 205 294V521C205 611 213 617 291 622V650H33V622C111 615 120 611 120 521V272C120 154 148 80 208 34C252 0 309 -14 368 -14C434 -14 501 7 548 55C605 116 623 201 623 319V401C623 493 626 536 629 563C633 605 656 618 716 622V650Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,9.604,-5.741)"><path d="M556 236V289H337V504H275V289H56V236H275V-4H337V236H556Z"></path></g></svg> groupware homepage (a) and KBS homepage (b) in the DS case and the defaced website in SPE case (c).</div>

Security and Communication Networks

fig11

Figure 11

Figure 11: CBR-Based Decision Support Methodology for Cybercrime Investigation: Focused on the Data-Driven Website Defacement Analysis 