the need for a reliable and complementary identifier mechanism in a digital forensic analysis is the focus of this study. Mouse dynamics have been applied in information security studies, particularly, continuous authentication and authorization. However, the method applied in security is void of specific behavioral signature of a user, which inhibits its applicability in digital forensic science. This study investigated the likelihood of the observation of a unique signature from mouse dynamics of a computer user. An initial mouse path model was developed using non-finite automata. Thereafter, a set-theory based adaptive two-stage hash function and a multi-stage rule-based semantic algorithm were developed to observe the feasibility of a unique signature for forensic usage. An experimental process which comprises three existing mouse dynamics datasets were used to evaluate the applicability of the developed mechanism. The result showed a low likelihood of extracting unique behavioral signature which can be used in a user attribution process. Whilst digital forensic readiness mechanism could be a potential approach that can be used to achieve a reliable behavioral biometrics modality, the lack of unique signature presents a limitation. In addition, the result supports the logic that the current state of behavioral biometric modality, particularly mouse dynamics, is not suitable for forensic usage. Hence, the study concluded that whilst mouse dynamics-based behavioral biometrics may be a complementary modality in security studies, more will be required to adopt it as a forensic modality in litigation. Furthermore, the result from this study finds relevance in other human attributional studies such as user identification in recommender systems, e-commerce, and online profiling systems, where the degree of accuracy is not relatively high.

本研究的重点是在数字取证分析中需要一种可靠且互补的标识符机制。鼠标动力学已应用于信息安全研究中，特别是连续身份验证和授权。但是，在安全性中应用的方法没有用户的特定行为签名，这限制了其在数字取证科学中的适用性。这项研究调查了从计算机用户的鼠标动态观察到唯一签名的可能性。使用非有限自动机开发了初始鼠标路径模型。此后，开发了一种基于集合理论的自适应两阶段哈希函数和一种基于多阶段规则的语义算法，以观察法医使用唯一签名的可行性。一个包括三个现有的鼠标动力学数据集的实验过程用于评估所开发的机制的适用性。结果表明，提取可用于用户归因过程的唯一行为签名的可能性很小。尽管数字取证准备机制可能是一种可用于实现可靠的行为生物特征识别方式的潜在方法，但缺乏唯一签名却存在局限性。此外，结果支持这样的逻辑，即行为生物特征识别模式（尤其是鼠标动力学）的当前状态不适用于法医使用。因此，该研究得出的结论是，尽管基于鼠标动力学的行为生物识别技术可能是安全性研究中的一种补充方式，但在诉讼中将需要更多的方法来将其用作法医方式。此外，