Lens ID,Title,Date Published,Publication Year,Publication Type,Source Title,ISSNs,Publisher,Source Country,Author/s,Abstract,Volume,Issue Number,Start Page,End Page,Fields of Study,Keywords,MeSH Terms,Chemicals,Funding,Source URLs,External URL,PMID,DOI,Microsoft Academic ID,PMCID,Citing Patents Count,References,Citing Works Count,Is Open Access,Open Access License,Open Access Colour 000-018-093-052-18X,Integrated computer forensic investigation model based on Malaysian standards,,2010,journal article,International Journal of Electronic Security and Digital Forensics,1751911x; 17519128,Inderscience Publishers,United Kingdom,Sundresan Perumal; Norita Md. Norwawi,"With the proliferation of the digital crime around the world, numerous digital forensic investigation models are already being developed. In fact, many of the digital forensic investigation models focus on technical implementation of the investigation process as most of it were developed by traditional forensic expert and technologist. As an outcome of this problem, most of the digital forensic practitioners focus on technical aspect and forget the core concept of digital forensic investigation model. In this paper, we are introducing a new digital forensic investigation model which will capture a full scope of an investigation process based on Malaysian cyber law. The proposed model is also compared with the existing model which is currently available and being applied in the investigation process.",3,2,108,119,Forensic science; Data science; Scope (project management); Cyber crime; Digital forensic investigation; Computer security; Computer science; Process (engineering); Computer forensics; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/ijesdf/ijesdf3.html#PerumalN10 https://www.inderscienceonline.com/doi/abs/10.1504/IJESDF.2010.03378 https://dl.acm.org/doi/10.1504/IJESDF.2010.033780,http://dx.doi.org/10.1504/ijesdf.2010.033780,,10.1504/ijesdf.2010.033780,1997808093,,0,010-086-703-646-194; 020-799-712-866-984; 020-944-423-224-895; 032-697-093-668-898; 038-668-970-194-854; 040-823-216-153-224; 050-612-532-454-179; 102-503-052-643-001; 140-821-103-436-654; 184-948-841-629-735; 190-065-821-748-92X; 199-172-967-270-034,11,false,, 000-025-119-604-719,Controller-based geo-tagging and digital signing of legally authorized firearms and bullets,2017-09-11,2017,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Pooja Ahuja; Ashmita Anna Mathew; Simfy Fready; Faizul Rahman; M. S. Dahiya,"Forensic ballistics a core field of forensic science, and focuses on locating the point and time of firing as well as matching the bullet to a specific firearm. The paper proposes a model for legal...",51,3,309,317,Digital signature; Controller (computing); Matching (statistics); Computer security; Computer science; Geotagging; Ballistics,,,,,https://www.tandfonline.com/doi/full/10.1080/00450618.2017.1363288,http://dx.doi.org/10.1080/00450618.2017.1363288,,10.1080/00450618.2017.1363288,2756030745,,0,102-803-458-990-585,0,false,, 000-061-941-428-56X,Test-driven forensic analysis of satellite automotive navigation systems,2012-06-05,2012,journal article,Journal of Intelligent Manufacturing,09565515; 15728145,Springer Science and Business Media LLC,Netherlands,Kyung-Soo Lim; Changhoon Lee; Jong Hyuk Park; Sangjin Lee,"The use of satellite automotive navigation systems has increased rapidly worldwide in recent years. Forensic analysis of these devices can be identified information of evidential value in criminal cases. Mappy GPS navigation software is one of the most popular products of satellite navigation software in Korea. Mappy records the usage history, such as the most frequently visited locations and routes, in an external storage medium for convenience and accessibility. These artifacts can be extracted, examined, and analyzed to trace location entries or recent vehicle routes. It can be used to investigate diverse crimes such as kidnap and murder cases; thus, they are of great value in digital forensics. This paper outlines test-driven forensic analysis for Mappy location records and shows how these can be recovered, including deleted location entries.",25,2,329,338,Satellite; External storage; Software; Test (assessment); Satellite navigation; Computer security; Computer science; Automotive industry; TRACE (psycholinguistics); Database; Digital forensics,,,,,https://dx.doi.org/10.1007/s10845-012-0653-6 https://dl.acm.org/doi/10.1007/s10845-012-0653-6 https://dblp.uni-trier.de/db/journals/jim/jim25.html#LimLPL14 https://koreauniv.pure.elsevier.com/en/publications/test-driven-forensic-analysis-of-satellite-automotive-navigation- https://link.springer.com/article/10.1007/s10845-012-0653-6 https://doi.org/10.1007/s10845-012-0653-6,http://dx.doi.org/10.1007/s10845-012-0653-6,,10.1007/s10845-012-0653-6,2044969507,,0,004-898-342-386-740; 016-046-803-187-724; 055-967-961-527-254; 085-214-277-668-01X; 108-037-636-662-866; 112-309-369-863-698; 126-338-081-626-731; 131-391-048-870-779; 134-795-562-800-220; 145-794-467-738-945,5,false,, 000-360-120-513-679,Digital Forensics as a Service: A game changer,,2014,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,R.B. van Baar; H.M.A. van Beek; E.J. van Eijk,Abstract How is it that digital investigators are always busy and still never have enough time to actually dig deep into digital evidence? In this paper we will explore the current implementation of the digital forensic process and analyze factors that impact the efficiency of this process. Next we explain how in the Netherlands a Digital Forensics as a Service implementation reduced case backlogs and freed up digital investigators to help detectives better understand the digital material.,11,,S54,S62,Digital forensic process; Digital evidence; Digital material; Service implementation; Service (systems architecture); Computer security; Computer science; Process (engineering); Computer forensics; Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S1742287614000127 https://core.ac.uk/display/82501077 http://www.sciencedirect.com/science/article/pii/S1742287614000127 https://dx.doi.org/10.1016/j.diin.2014.03.007 http://dx.doi.org/10.1016/j.diin.2014.03.007,http://dx.doi.org/10.1016/j.diin.2014.03.007,,10.1016/j.diin.2014.03.007,1967185460,,0,019-831-293-743-518; 024-735-069-822-749; 026-774-296-742-022; 033-877-222-136-260; 051-645-938-939-51X; 056-715-378-869-201; 079-070-981-899-105; 097-567-011-227-46X; 134-927-490-231-285; 199-172-967-270-034; 199-745-676-923-766,70,true,cc-by-nc-nd,hybrid 000-534-406-835-275,A research on the investigation method of digital forensics for a VMware Workstation’s virtual machine,,2012,journal article,Mathematical and Computer Modelling,08957177,Elsevier BV,United Kingdom,Sungsu Lim; Byeongyeong Yoo; Jungheum Park; Keun Duck Byun; Sangjin Lee,"Abstract Virtualization is a technology that uses a logical environment to overcome physical limitations in hardware. Recently, its coverage has become broader. Because a virtual machine can perform the same role as an actual system, a recorded user’s activity trail in the virtual machine is important factor in terms of digital forensics. If the investigator found trails of the VMware Workstation on the host, he should investigate the virtual machine along with host system. However, due to a lack of understanding of the virtual machine, the investigation process is not clear. Moreover, a damaged virtual machine image is difficult to investigate because of the structural characteristics. Therefore, we need a technical understanding and a research about investigation procedures and recovery methods on the virtual machine. In this research, we suggest an investigation procedure of digital forensics and a recovery method on damaged images for the VMware Workstation that has the largest number of users.",55,1,151,160,Operating system; Host (network); Virtual machine; Computer science; Full virtualization; Virtualization; Workstation; Hardware virtualization; Digital forensics; Process (computing),,,,MKE/KEIT,https://dblp.uni-trier.de/db/journals/mcm/mcm55.html#LimYPBL12 https://www.sciencedirect.com/science/article/pii/S0895717711001014 https://koreauniv.pure.elsevier.com/en/publications/a-research-on-the-investigation-method-of-digital-forensics-for-a,http://dx.doi.org/10.1016/j.mcm.2011.02.011,,10.1016/j.mcm.2011.02.011,1971766706,,0,040-393-580-637-973; 042-922-388-727-569; 061-412-953-386-541; 075-092-110-948-778; 085-063-161-801-039; 105-708-174-479-949; 144-034-242-927-325,13,true,elsevier-specific: oa user license, 000-616-206-600-091,Camera-identification and common-source identification: The correlation values of mismatches,2019-05-10,2019,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Arjan Mieremet,,301,,46,54,Artificial intelligence; Pattern recognition; Focus (optics); Range (statistics); A priori estimate; Simple (abstract algebra); Digital camera; Computer science; Digital image; Identification (information); Decision rule,Camera-identification; Digital images; Forensic science; PRNU,,,,https://www.sciencedirect.com/science/article/pii/S0379073819301847 https://www.ncbi.nlm.nih.gov/pubmed/31128408,http://dx.doi.org/10.1016/j.forsciint.2019.05.008,31128408,10.1016/j.forsciint.2019.05.008,2943978394,,0,012-412-270-035-761; 022-455-239-710-493; 028-961-046-717-576; 045-226-923-439-105; 063-318-464-288-838; 070-308-945-671-285; 083-097-133-928-799; 127-502-383-988-293; 151-372-268-187-893; 184-897-235-429-285,5,false,, 000-704-067-637-950,Design of Digital Image Forensic System Based on the Chromatic Aberration,,2009,journal article,Microcomputer Information,,,,Jiang Bao-cheng,"At present, people pay more attention to the tempering of digital images. There are lots of digital photos without watermarking. It is difficult to detect digital forgeries in them. With the limits of optical system of the digital camera, the digital photos include a variety of aberration. That is to say, there are local correlations among the pixels in an image. When tampering with an image, the statistic features will be changed. Therefore, we design a forensic system based on chromatic aberration for digital photos.",,,,,Digital image processing; Digital imaging; Computer graphics (images); Digital watermarking; Artificial intelligence; Pixel; Digital camera; Computer vision; Computer science; Digital image; Digital forensics; Chromatic aberration,,,,,http://en.cnki.com.cn/Article_en/CJFDTOTAL-WJSJ200906036.htm,http://en.cnki.com.cn/Article_en/CJFDTOTAL-WJSJ200906036.htm,,,2364200506,,0,,0,false,, 000-910-549-617-511,The Use of Forensic Science Methods in Digital Forensics,,2018,journal article,SSRN Electronic Journal,15565068,Elsevier BV,,Nicholas Bruin,,,,,,Forensic science; Information system; Ransomware; Computer security; Computer science; Phishing; Digital forensics,,,,,https://papers.ssrn.com/abstract=3185591,http://dx.doi.org/10.2139/ssrn.3185591,,10.2139/ssrn.3185591,2904843228,,0,003-870-694-249-212; 106-156-015-991-201; 120-680-121-587-307,0,false,, 001-146-798-404-408,Gaslight: A comprehensive fuzzing architecture for memory forensics frameworks,,2017,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Andrew Case; A. Das; Seung-Jong Park; J. Ramanujam; Golden G. Richard,"Abstract Memory forensics is now a standard component of digital forensic investigations and incident response handling, since memory forensic techniques are quite effective in uncovering artifacts that might be missed by traditional storage forensics or live analysis techniques. Because of the crucial role that memory forensics plays in investigations and because of the increasing use of automation of memory forensics techniques, it is imperative that these tools be resilient to memory smear and deliberate tampering. Without robust algorithms, malware may go undetected, frameworks may crash when attempting to process memory samples, and automation of memory forensics techniques is difficult. In this paper we present Gaslight, a powerful and flexible fuzz-testing architecture for stress-testing both open and closed-source memory forensics frameworks. Gaslight automatically targets critical code paths that process memory samples and mutates samples in an efficient way to reveal implementation errors. In experiments we conducted against several popular memory forensics frameworks, Gaslight revealed a number of critical previously undiscovered bugs.",22,,S86,S93,Fuzz testing; Automation; Memory forensics; Computer security; Computer science; Component (UML); Network forensics; Malware; Computer forensics; Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S1742287617301986 https://www.sciencedirect.com/science/article/abs/pii/S1742287617301986,http://dx.doi.org/10.1016/j.diin.2017.06.011,,10.1016/j.diin.2017.06.011,2742819853,,0,000-226-390-590-140; 036-662-510-200-483; 048-922-699-889-467; 072-863-748-519-44X; 116-136-129-754-823,7,true,cc-by-nc-nd,hybrid 001-217-010-056-328,Qualitative Assessment of Digital Forensic Tools,2020-05-05,2020,journal article,Asian Journal of Electrical Sciences,22496297,The Research Publication,,Sakshi Singh; Suresh Kumar,"Forensic science is a study of science to criminals and civil laws. Digital forensics is the part of forensic science relating to proof found in computers and advanced storage media. Forensic examiners gather, protect and break down logical confirmations over the span of examination. Digital information contains data as content, pictures, sound, video and so on. These days numerous cybercrime cases, for example, hacking, banking cheats, phishing, email spamming, etc., have developed which are connected with a computerized information. Since the digital investigation is turning into an expanding concern, numerous digital forensic tools have been created to manage the difficulties of exploring computerized wrongdoings. The motivation behind digital forensics strategies is to look, protect and extract data on advanced frameworks to discover potential confirmations to exhibit them in the courtroom. In this paper, we have discussed five kinds of forensics namely Network Forensics, Live Forensics, Cyber Forensics, Database Forensics, and Mobile Forensics. The paper depicts a list of digital forensic tools in detail and looks at them based on the characterized parameters to figure out which tool suits better for any investigation. The paper looks at network, database and mobile forensic tools and examines the silent features and uniqueness of each of the tools along with their functionalities.",9,1,25,32,,,,,,,http://dx.doi.org/10.51983/ajes-2020.9.1.2372,,10.51983/ajes-2020.9.1.2372,,,0,,0,false,, 001-255-768-346-633,On metadata context in Database Forensics,,2009,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Martin S. Olivier,"Database Forensics is an important topic that has received hardly any research attention. This paper starts from the premise that this lack of research is due to the inherent complexity of databases that are not fully understood in a forensic context yet. The paper considers the relevant differences between file systems and databases and then transfers concepts of File System Forensics to Database Forensics. It is found that databases are inherently multidimensional from a forensic perspective. A notation is introduced to express the meaning of various possible forensic queries within this multidimensional context. It is posited that this notation, with the multidimensional nature of databases as described, forms a map for possible Database Forensics research projects.",5,3,115,123,Database theory; World Wide Web; Database design; Probabilistic database; Data science; Database forensics; Database schema; Computer science; Database model; Database catalog; Database testing,,,,,https://core.ac.uk/display/101659442 https://www.infona.pl/resource/bwmeta1.element.elsevier-778da124-4fe5-303e-a98c-0b70e5a79113 http://b1386.persiangig.com/DB_Paper/DB%20(8).pdf https://dl.acm.org/doi/10.1016/j.diin.2008.10.001 http://mo.co.za/open/dbfor.pdf https://dx.doi.org/10.1016/j.diin.2008.10.001 http://martinolivier.com/open/dbfor.pdf https://doi.org/10.1016/j.diin.2008.10.001 https://dblp.uni-trier.de/db/journals/di/di5.html#Olivier09 https://mo.co.za/open/dbfor.pdf https://www.sciencedirect.com/science/article/pii/S1742287608000972 http://dx.doi.org/10.1016/j.diin.2008.10.001,http://dx.doi.org/10.1016/j.diin.2008.10.001,,10.1016/j.diin.2008.10.001,2153590008,,0,000-853-465-742-472; 001-518-111-914-458; 001-829-135-644-040; 002-495-833-326-831; 005-109-388-909-756; 005-268-875-787-352; 013-246-076-655-612; 021-972-221-274-557; 022-530-184-398-582; 024-228-977-273-451; 029-265-198-146-482; 035-632-889-166-588; 036-507-191-290-484; 037-987-418-063-510; 040-664-674-930-857; 042-632-506-459-556; 043-093-846-816-675; 046-919-840-004-390; 050-308-742-156-878; 054-507-171-824-189; 065-210-303-569-91X; 072-684-764-901-899; 080-117-008-231-77X; 083-332-161-575-721; 083-473-932-456-923; 085-214-277-668-01X; 085-669-579-012-375; 086-007-613-280-263; 096-776-037-148-326; 102-602-192-826-532; 106-865-640-867-523; 133-752-203-150-119; 147-374-329-806-26X; 175-929-179-104-087; 178-883-713-153-793; 179-357-906-255-768,94,true,,green 001-303-259-599-142,Analysis of changes in file time attributes with file manipulation,,2011,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Jewan Bang; Byeongyeong Yoo; Sangjin Lee,,7,3,135,144,Stub file; Fork (file system); Versioning file system; File Control Block; Unix file types; File system fragmentation; File system; Computer science; Database; Computer file,,,,"Ministry of Education, Science and Technology; National Research Foundation of Korea",https://www.sciencedirect.com/science/article/abs/pii/S1742287610000824 http://www.sciencedirect.com/science/article/pii/S1742287610000824 https://dl.acm.org/doi/10.1016/j.diin.2010.12.001 https://koreauniv.pure.elsevier.com/en/publications/analysis-of-changes-in-file-time-attributes-with-file-manipulatio https://dblp.uni-trier.de/db/journals/di/di7.html#BangYL11,http://dx.doi.org/10.1016/j.diin.2010.12.001,,10.1016/j.diin.2010.12.001,1974302100,,1,040-533-091-712-76X; 046-505-599-865-150; 053-376-195-646-045; 061-326-248-978-030; 085-214-277-668-01X; 135-717-892-795-412,14,false,, 001-334-079-265-518,Opinion: Does the field of digital forensics have a consistency problem?,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Graeme Horsman,"Abstract Consistency is a term which should be used cautiously in the context of digital forensics (DF). Its meaning indicates regular, repeatable performance, where with regards to the undertaking of forensic analysis procedures, such behaviour is synonymous with the traits of reliability and trustworthiness, which in turn provides a foundation for deriving dependable results. In the context of investigatory processes, consistency is generally considered a mark of quality; a gold standard to be achieved where conversely, any evidential interpretations gleaned from inconsistently functioning forensic processes are inherently unsafe ( Lander, 2016 ). Great value should be placed upon attaining consistency in all aspects of the forensic process in all investigations, yet the field of DF in its current form is arguably far from achieving it. This is partly due in England and Wales to its regionalised infrastructure, and arguably impacted by a lack of robust regulation and oversight.",33,,300970,,Consistency (negotiation); Data science; Quality (business); Context (language use); Meaning (existential); Foundation (evidence); Computer science; Process (engineering); Reliability (statistics); Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S2666281720300445 https://research.tees.ac.uk/en/publications/opinion-does-the-field-of-digital-forensics-have-a-consistency-pr https://dblp.uni-trier.de/db/journals/di/di33.html#Horsman20a,http://dx.doi.org/10.1016/j.fsidi.2020.300970,,10.1016/j.fsidi.2020.300970,3017973008,,0,006-933-430-647-14X; 007-790-059-029-953; 008-713-157-011-092; 010-963-610-208-920; 013-017-062-437-973; 032-451-540-235-796; 047-386-524-667-691; 050-513-243-638-138; 061-269-967-405-492; 070-213-659-171-077; 075-950-021-558-098; 087-342-951-350-054; 094-587-727-381-031; 118-838-969-146-870; 142-790-196-752-819; 192-437-973-004-61X,3,true,cc-by-nc-nd,green 001-349-955-609-387,Analisis Perbandingan File Carving Dengan Metode Nist,2020-05-06,2020,journal article,Jurnal Sains Komputer dan Teknologi Informasi,26557460,Universitas Muhammadiyah Palangkaraya,,Doddy Teguh Yuwono; Yunanri W,"Pemulihan data adalah bagian terpenting dari Digital Forensic. Bagi penyidik ??negara untuk menghasilkan bukti yang sah di pengadilan sangat penting dan wajib. Memori Flash, Hard Disk Drive (HDD) dan Solid State Drive (SDD) adalah beberapa Media Penyimpanan yang digunakan sebagai tempat untuk meletakkan semua jenis data dan informasi dalam berbagai format file digital. Karena bentuk digitalnya sehingga memungkinkan berbagai format file digital disembunyikan, dihapus, dan bahkan diformat di media penyimpanan, sedangkan semua data dan informasi harus ditemukan oleh penyelidik negara. ; Prinsip dasar data atau informasi digital jika telah disalin pada Memori Flash, Hard Disk Drive (HDD) dan Solid State Drive (SDD) tidak akan pernah hilang secara permanen dan bahkan data atau informasi digital hilang karena dihapus, diformat dengan cepat atau sistem macet. Jadi, mengembalikan data sangat mungkin. Dalam penelitian ini, tes dilakukan menggunakan Foremost, FTK Imager, dan Scalpel, yang merupakan Alat OpenSource yang dapat digunakan pada sistem operasi Propietary dan OpenSource. Metode yang digunakan adalah Institut Teknologi Standar Nasional (NIST). NIST memiliki panduan kerja yang sangat baik tentang kebijakan dan standar untuk memastikan setiap Penguji mengikuti alur kerja yang sama, sehingga pekerjaan mereka didokumentasikan dan hasilnya dapat ditinjau dan dapat dipertahankan saat pelaporan sebelum dijadikan sebagai bukti yang valid. Hasil penelitian ini membuktikan bahwa Foremost, FTK Imager, dan Scalpel dapat mengembalikan data yang dihapus, disembunyikan, dan diformat.",2,2,1,6,,,,,,http://journal.umpalangkaraya.ac.id/index.php/jsakti/article/download/1472/1294 https://core.ac.uk/download/pdf/327226713.pdf,http://dx.doi.org/10.33084/jsakti.v2i2.1472,,10.33084/jsakti.v2i2.1472,3037383077,,0,,0,true,cc-by-sa,gold 001-660-853-267-816,Policing and Crime Act 2017: Changes to pre-charge bail and the impact on digital forensic analysis,,2018,journal article,Computer Law & Security Review,02673649,Elsevier BV,United Kingdom,Graeme Horsman; Angela King,"Abstract Following the enactment of the Police and Crime Act 2017, subsequent amendments to the Police and Criminal Evidence Act 1984 have seen a ‘cap’ placed on the length of time a suspect can be released on bail; a process commonly referred to as ‘police bail’ or ‘pre-charge bail’. Whilst designed to instil consistency and certainty into bail processes to prevent individuals being subject to lengthy periods of regulation and uncertainty, it places additional pressures on forensic services. With a focus on digital forensics, examination of digital media is a complex and time-consuming process, with existing backlogs well documented. The need for timely completion of investigations to adhere to pre-charge bail rules places additional stress on an already stretched service. This comment submission provides an initial analysis of new pre-charge bail regulations, assessing their impact on digital forensic services.",34,5,1139,1143,Business; Digital media; Consistency (negotiation); Suspect; Service (business); Criminology; Certainty; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/clsr/clsr34.html#HorsmanK18 https://research.tees.ac.uk/ws/files/4192050/621946.pdf https://research.tees.ac.uk/en/publications/policing-and-crime-act-2017-changes-to-pre-charge-bail-and-the-im https://www.sciencedirect.com/science/article/abs/pii/S0267364918300840 https://core.ac.uk/download/pdf/196165653.pdf,http://dx.doi.org/10.1016/j.clsr.2018.04.005,,10.1016/j.clsr.2018.04.005,2803850255,,0,003-982-227-180-136; 032-451-540-235-796; 042-767-661-429-064; 118-214-115-485-064; 137-755-137-054-864; 163-330-758-807-944,0,true,,green 001-671-532-897-917,Analysis of sensitivity and specificity: precise recognition of neutrophils during regeneration of contused skeletal muscle in rats,2020-03-19,2020,journal article,Forensic sciences research,24711411; 20961790,Informa UK Limited,England,Jia-jia Niu; Guoshuai An; Zhen Gu; Peng Li; Qi-qing Liu; Rufeng Bai; Jun-hong Sun; Qiu-xiang Du,"In this report, we applied the TissueFAXS 200 digital pathological analysis system to rapidly and accurately identify neutrophils during regeneration of contused skeletal muscle, and to provide inf...",7,2,1,10,Pathology; Regeneration (biology); Immunohistochemistry; Pathological; Forensic pathology; Skeletal muscle; Medicine,Forensic sciences; TissueFAXS 200 digital pathological analysis system; cut-off value of staining area; forensic pathology; immunohistochemistry; neutrophil staining area; parameter optimization,,,National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China,https://www.tandfonline.com/doi/full/10.1080/20961790.2020.1713432,http://dx.doi.org/10.1080/20961790.2020.1713432,35784418,10.1080/20961790.2020.1713432,3012016122,PMC9245985,0,000-646-878-500-760; 005-774-046-675-46X; 012-567-088-303-48X; 012-578-493-873-412; 013-900-464-285-290; 018-152-903-182-869; 020-376-304-532-761; 031-308-647-523-634; 033-499-927-193-438; 040-113-009-140-117; 040-890-882-932-131; 049-048-990-781-169; 051-647-900-073-123; 053-890-450-407-52X; 056-661-568-506-566; 060-452-174-822-068; 062-047-588-489-000; 062-301-565-817-359; 063-538-869-925-238; 068-029-414-838-521; 085-566-084-818-05X; 094-735-165-538-173; 096-054-048-125-643; 110-112-505-485-205; 111-832-843-879-84X; 117-418-163-210-004,6,true,"CC BY, CC BY-NC",gold 001-868-759-629-801,Comparative analysis on integrated digital forensic tools for digital forensic investigation,2020-04-01,2020,journal article,IOP Conference Series: Materials Science and Engineering,17578981; 1757899x,IOP Publishing,,Jae-Ung Lee; Wooyoung Soh,"As a variety of digital devices have recently become widely commercialized, digital forensics, a process where electronic information stored in digital devices is accurately identified, collected, preserved and analysed and the information is submitted to the court as evidence, is gaining enormous popularity. This paper analyses characteristics, applications, limitations of digital forensic tools and compare the tool with others in terms of ease of use, thereby helping investigators to adopt integrated digital forensic tools in their investigation.",834,1,012034,,Variety (cybernetics); Usability; Data science; Popularity; Electronic information; Digital forensic investigation; Computer science; Process (engineering); Digital forensics,,,,,https://iopscience.iop.org/article/10.1088/1757-899X/834/1/012034/pdf https://ui.adsabs.harvard.edu/abs/2020MS&E..834a2034L/abstract https://iopscience.iop.org/article/10.1088/1757-899X/834/1/012034,http://dx.doi.org/10.1088/1757-899x/834/1/012034,,10.1088/1757-899x/834/1/012034,3037684965,,0,025-038-687-609-155; 090-537-509-217-101; 115-204-360-176-558; 117-754-132-477-323; 124-566-352-741-128; 175-840-536-452-987,3,true,,gold 001-888-175-704-116,Leveraging human thinking style for user attribution in digital forensic process,2017-02-02,2017,journal article,"International Journal on Advanced Science, Engineering and Information Technology",24606952; 20885334,Insight Society,Indonesia,Ikuesan Richard Adeyemi; Shukor Abd Razak; Mazleena Salleh; Hein S. Venter,"User attribution, the process of identifying a human in a digital medium, is a research area that has receive significant attention in information security research areas, with a little research focus on digital forensics. This study explored the probability of the existence of a digital fingerprint based on human thinking style, which can be used to identify an online user. To achieve this, the study utilized Server-side web data of 43-respondents were collected for 10-months as well as a self-report thinking style measurement instrument. Cluster dichotomies from five thinking styles were extracted. Supervised machine-learning techniques were then applied to distinguish individuals on each dichotomy. The result showed that thinking styles of individuals on different dichotomies could be reliably distinguished on the Internet using a Meta classifier of Logistic model tree with bagging technique. The study further modeled how the observed signature can be adopted for a digital forensic process, using high-level universal modeling language modeling process- specifically, the behavioral state-model and use-case modeling process. In addition to the application of this result in forensics process, this result finds relevance and application in human-centered graphical user interface design for recommender system as well as in e-commerce services. It also finds application in online profiling processes, especially in e-learning systems",7,1,198,206,The Internet; Machine learning; Cognitive style; Artificial intelligence; Data science; Digital forensic process; Graphical user interface; Computer science; Information security; Recommender system; Digital forensics; Classifier (UML),,,,,https://core.ac.uk/display/90874512 http://ijaseit.insightsociety.org/index.php?option=com_content&view=article&id=9&Itemid=1&article_id=1383 https://repository.up.ac.za/handle/2263/65805 http://eprints.utm.my/id/eprint/66172/ https://core.ac.uk/download/pdf/296921841.pdf,http://dx.doi.org/10.18517/ijaseit.7.1.1383,,10.18517/ijaseit.7.1.1383,2591499099,,0,007-577-029-015-064; 008-849-714-232-991; 011-850-183-685-719; 012-056-075-655-334; 014-175-333-509-917; 014-357-647-717-302; 015-057-737-147-915; 021-811-256-188-256; 027-338-694-650-938; 031-967-529-225-926; 037-672-757-933-369; 040-411-277-743-307; 041-200-455-515-996; 043-674-322-551-472; 045-533-500-732-596; 062-624-724-547-760; 069-823-591-222-44X; 073-648-666-465-913; 073-884-694-506-406; 074-495-616-190-44X; 075-115-094-597-339; 080-874-788-703-165; 090-632-799-573-969; 098-682-152-467-280; 100-149-606-823-492; 105-194-129-349-111; 115-591-817-700-181; 118-075-434-142-096; 168-122-843-611-626; 176-957-105-126-712; 183-333-945-850-883; 183-361-176-724-740,16,true,cc-by-sa,hybrid 002-020-246-447-998,Blockchain-Based Digital Forensics Investigation Framework in the Internet of Things and Social Systems,,2019,journal article,IEEE Transactions on Computational Social Systems,2329924x; 23737476,Institute of Electrical and Electronics Engineers (IEEE),United States,Shancang Li; Tao Qin; Geyong Min,"The decentralized nature of blockchain technologies can well match the needs of integrity and provenances of evidences collecting in digital forensics (DF) across jurisdictional borders. In this paper, a novel blockchain-based DF investigation framework in the Internet of Things (IoT) and social systems environment is proposed, which can provide proof of existence and privacy preservation for evidence items examination. To implement such features, we present a block-enabled forensics framework for IoT, namely, IoT forensic chain (IoTFC), which can offer forensic investigation with good authenticity, immutability, traceability, resilience, and distributed trust between evidential entitles as well as examiners. The IoTFC can deliver a guarantee of traceability and track provenance of evidence items. Details of evidence identification, preservation, analysis, and presentation will be recorded in chains of block. The IoTFC can increase trust of both evidence items and examiners by providing transparency of the audit train. The use case demonstrated the effectiveness of the proposed method.",6,6,1433,1441,Traceability; Audit; Immutability; Resilience (network); Transparency (behavior); Computer security; Computer science; Identification (information); Cloud computing; Digital forensics,,,,,https://uwe-repository.worktribe.com/preview/1492037/forensicsblock.pdf https://dblp.uni-trier.de/db/journals/tcss/tcss6.html#LiQM19 https://ieeexplore.ieee.org/document/8777292 https://uwe-repository.worktribe.com/output/1492024/blockchain-based-digital-forensics-investigation-framework-in-the-internet-of-things-and-social-systems http://eprints.uwe.ac.uk/41539/ https://core.ac.uk/download/323906745.pdf,http://dx.doi.org/10.1109/tcss.2019.2927431,,10.1109/tcss.2019.2927431,2959564865,,0,001-320-203-836-318; 001-470-661-245-05X; 007-321-225-339-593; 010-284-227-477-250; 011-098-613-952-694; 019-912-316-692-552; 021-035-069-988-144; 023-858-572-607-02X; 025-217-964-155-547; 028-705-577-620-56X; 029-164-830-214-360; 035-859-793-614-223; 036-017-549-836-946; 041-749-004-943-703; 050-620-756-442-492; 053-035-819-620-914; 058-156-586-882-704; 058-882-017-546-096; 074-995-483-560-419; 075-141-150-084-474; 077-425-502-034-153; 081-746-298-679-238; 090-256-483-119-640; 090-537-580-850-057; 091-153-935-081-386; 092-111-604-628-923; 092-827-935-965-207; 093-801-189-809-800; 103-535-795-864-289; 111-166-133-504-881; 112-503-589-157-76X; 122-880-373-616-302; 123-721-430-776-408; 125-682-509-275-554; 126-463-554-689-402; 141-227-167-540-818; 144-796-391-638-165; 148-828-929-349-306; 155-432-271-116-313,37,true,cc-by,green 002-214-848-360-115,"Archival science, digital forensics, and new media art",,2015,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Dianne Dietrich; Frank Adelstein,"Digital archivists and traditional digital forensics practitioners have significant points of convergence as well as notable differences between their work. This paper provides an overview of how digital archivists use digital forensics tools and techniques to approach their work, comparing and contrasting archival with traditional computer forensics. Archives encounter a wide range of digital materials. This paper details a specific example within archival forensics-the analysis of complex, interactive, new media digital artworks. From this, the paper concludes with considerations for future directions and recommendations to the traditional forensics community to support the needs of cultural heritage institutions.",14,,S137,S145,World Wide Web; Media arts; Computer science; Archival science; Computer forensics; Cultural heritage; Digital forensics; New media,,,,National Endowment for the Humanities,https://doi.org/10.1016/j.diin.2015.05.004 https://dl.acm.org/doi/10.1016/j.diin.2015.05.004 https://core.ac.uk/display/82761998 https://dblp.uni-trier.de/db/journals/di/di14.html#DietrichA15 https://dx.doi.org/10.1016/j.diin.2015.05.004 http://dx.doi.org/10.1016/j.diin.2015.05.004 https://www.sciencedirect.com/science/article/pii/S1742287615000493,http://dx.doi.org/10.1016/j.diin.2015.05.004,,10.1016/j.diin.2015.05.004,1413540581,,0,001-604-679-038-981; 002-495-833-326-831; 006-307-797-689-911; 008-034-395-012-889; 011-051-740-313-213; 030-545-501-398-060; 035-448-415-847-226; 043-589-904-668-295; 068-897-559-627-004; 080-425-722-856-19X; 122-880-373-616-302; 152-595-511-266-730; 152-742-745-030-197; 166-303-965-322-945; 182-195-359-407-29X; 199-172-967-270-034,10,true,cc-by-nc-nd,hybrid 002-288-892-034-343,A hierarchy of expert performance (HEP) applied to digital forensics: Reliability and biasability in digital forensics decision making,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Nina Sunde; Itiel E. Dror,"Abstract In order to examine the biasability (impact of contextual information) and reliability (consistency) of digital forensic observations, interpretations, and conclusions, 53 digital forensics (DF) examiners analysed the same evidence file. For biasability, some DF examiners were provided with contextual information suggesting guilt or innocence, while a control group received no contextual information. As per biasability, the results showed that the DF examiners' observations were affected by the biasing contextual information. As per reliability, the results showed low reliability between DF examiners in observations, interpretations, and conclusions. For improving DF work, as well as for transparency, it is important to study and assess the biasability and reliability of their decision making.",37,,301175,,Information retrieval; Consistency (negotiation); Control (management); Transparency (behavior); Contextual information; Hierarchy; Computer science; Reliability (statistics); Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/di/di37.html#SundeD21 https://www.sciencedirect.com/science/article/pii/S2666281721000834,http://dx.doi.org/10.1016/j.fsidi.2021.301175,,10.1016/j.fsidi.2021.301175,3165519753,,0,000-354-619-269-715; 000-360-120-513-679; 000-790-486-938-751; 001-701-829-263-08X; 002-098-094-127-361; 006-274-985-599-675; 007-868-297-443-532; 010-061-391-662-193; 010-218-618-278-587; 010-963-610-208-920; 012-410-670-929-028; 016-007-436-797-894; 016-220-259-667-003; 017-420-574-211-041; 018-182-926-340-45X; 020-639-086-440-149; 024-616-418-849-375; 030-178-593-043-926; 033-120-690-053-891; 040-907-268-218-905; 043-083-546-914-143; 050-214-108-891-19X; 055-614-100-530-52X; 058-260-728-239-715; 064-549-392-650-90X; 065-805-363-769-350; 074-706-219-689-754; 075-529-701-912-32X; 078-082-517-555-79X; 080-545-688-531-696; 086-013-257-150-665; 099-377-733-522-116; 099-407-105-258-080; 108-249-505-350-920; 119-397-843-207-581; 125-939-677-745-616; 163-376-020-626-884,7,true,cc-by-nc-nd,hybrid 002-328-258-595-526,"Archival application of digital forensics methods for authenticity, description and access provision",,2012,journal article,Comma,16801865; 20493355,Liverpool University Press,,Christopher A. Lee,"When acquiring born-digital materials, archivists must often extract digital materials from media in ways that reflect the rich metadata associated with records and ensure records' integrity. They must also allow users to make sense of materials and understand their context, while preventing inadvertent disclosure of sensitive data. There are a variety of methods and strategies from the field of digital-forensics that can aid this work. This paper discusses the development and application of digital forensics tools to improve the acquisition, management and access functions of archives. It reports on the BitCurator project, which is identifying current and desirable workflows of several archival institutions, as well as developing and testing tools to support the workflows. There are a variety of potential changes within the archival profession that are associated with adopting digital forensics tools and practices.",2012,2,133,140,Variety (cybernetics); World Wide Web; Work (electrical); Workflow; Context (language use); Field (computer science); Computer science; Digital forensics; Metadata,,,,,http://ica2012.ica.org/files/pdf/Full%20papers%20upload/ica12Final00290.pdf https://liverpooluniversitypress.co.uk/journals/article/30509/ https://online.liverpooluniversitypress.co.uk/doi/abs/10.3828/comma.2012.2.14,http://dx.doi.org/10.3828/comma.2012.2.14,,10.3828/comma.2012.2.14,2070769990,,0,016-874-564-437-194; 025-832-466-975-926; 027-105-572-507-191; 033-241-817-699-448; 033-292-300-474-828; 037-438-633-046-535; 037-647-066-964-858; 040-576-453-232-211; 041-066-232-929-572; 043-589-904-668-295; 044-224-934-641-370; 068-359-641-178-799; 069-199-701-151-667; 074-028-601-448-433; 095-362-324-026-43X; 096-085-861-594-137; 098-570-643-235-402; 111-843-229-824-017; 118-994-361-737-474; 121-157-572-649-706; 138-683-475-168-799; 151-783-042-648-550; 152-102-874-393-618; 172-443-563-369-742; 187-101-557-827-991; 198-570-571-263-492,4,false,, 002-383-410-319-043,Specifying digital forensics: A forensics policy approach,,2007,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Carol Taylor; Barbara Endicott-Popovsky; Deborah A. Frincke,"In this paper we present an approach to digital forensics specification based on forensic policy definition. Our methodology borrows from computer security policy specification, which has accumulated a significant body of research over the past 30 years. We first define the process of specifying forensics properties through a forensics policy and then present an example application of the process. This approach lends itself to formal policy specification and verification, which would allow for more clarity and less ambiguity in the specification process.",4,1,101,104,CLARITY; Computer security policy; Ambiguity; Computer security; Computer science; Process (engineering); Digital forensics; System requirements specification,,,,,https://www.sciencedirect.com/science/article/abs/pii/S1742287607000461 https://www.sciencedirect.com/science/article/pii/S1742287607000461 https://dblp.uni-trier.de/db/journals/di/di4.html#TaylorEF07 http://www.osti.gov/scitech/biblio/983738 https://dl.acm.org/doi/10.1016/j.diin.2007.06.006,http://dx.doi.org/10.1016/j.diin.2007.06.006,,10.1016/j.diin.2007.06.006,2113212164,,0,012-732-074-219-275; 041-291-462-265-899; 104-249-629-797-999; 105-126-222-909-334; 199-745-676-923-766,38,true,cc-by-nc-nd,hybrid 002-385-129-636-011,The Possibilities and Limitations of Forensic Hand Comparison,2014-07-29,2014,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Ana Slot; Zeno Geradts,"On recordings of certain crimes, the face is not always shown. In such cases, hands can offer a solution, if they are completely visible. An important aspect of this study was to develop a method for hand comparison. The research method was based on the morphology, anthropometry, and biometry of hands. A new aspect of this study was that a manual and automated test were applied, which, respectively, assess many features and provide identification rates quickly. An important observation was that good quality images can provide sufficient hand details. The most distinctive features were the length/width ratio, the palm line pattern and the quantity of highly distinctive features present, and how they are distributed. The results indicate that experience did not improve the identification rates, while the manual test did. Intra-observer variability did not influence the results, whereas hands of relatives were frequently misjudged. Both tests provided high identification rates.",59,6,1559,1567,Engineering; Artificial intelligence; Pattern recognition; Biometrics; Face (geometry); Quality (business); Research method; Width ratio; Computer vision; Identification (information),anthropometry; biometric identification; biometry; forensic science; hand comparison; image analysis,"Algorithms; Anthropometry; Checklist; Databases, Factual; Female; Forensic Sciences; Hand/anatomy & histology; Humans; Image Processing, Computer-Assisted; Male; Professional Competence; Skin Pigmentation; Whites",,Ministry of Security and Justice The Netherlands,https://onlinelibrary.wiley.com/doi/abs/10.1111/1556-4029.12542 https://europepmc.org/abstract/MED/25069532 https://www.ncbi.nlm.nih.gov/pubmed/25069532 https://core.ac.uk/display/132741422 https://www.narcis.nl/publication/RecordID/oai%3Adare.uva.nl%3Apublications%2F0d475269-de53-4a2f-b82d-3f2a5bba74b7 https://onlinelibrary.wiley.com/doi/10.1111/1556-4029.12542/abstract https://dare.uva.nl/search?identifier=0d475269-de53-4a2f-b82d-3f2a5bba74b7,http://dx.doi.org/10.1111/1556-4029.12542,25069532,10.1111/1556-4029.12542,1983446319,,0,011-154-141-002-116; 011-910-140-382-445; 017-138-307-235-63X; 019-963-672-804-370; 026-942-449-116-162; 027-616-844-808-575; 031-089-471-360-028; 042-931-569-770-253; 076-183-945-700-48X; 083-133-511-669-807; 118-971-341-866-488; 124-637-684-141-298; 165-669-541-113-541; 190-781-161-397-665,6,false,, 002-464-138-461-933,Actionable threat intelligence for digital forensics readiness,2019-06-12,2019,journal article,Information & Computer Security,20564961,Emerald,United Kingdom,Nikolaos Serketzis; Vasilios Katos; Christos Ilioudis; Dimitrios Baltatzis; George J. Pangalos,"The purpose of this paper is to formulate a novel model for enhancing the effectiveness of existing digital forensic readiness (DFR) schemes by leveraging the capabilities of cyber threat information sharing.,This paper uses a quantitative methodology to identify the most popular cyber threat intelligence (CTI) elements and introduces a lightweight approach to correlate those with potential forensic value, resulting in the quick and accurate triaging and identification of patterns of malicious activities.,While threat intelligence exchange steadily becomes a common practice for the prevention or detection of security incidents, the proposed approach highlights its usefulness for the digital forensics (DF) domain.,The proposed model can help organizations to improve their DFR posture, and thus minimize the time and cost of cybercrime incidents.",27,2,273,291,Cybercrime; Cyber threat intelligence; Threat intelligence; Quantitative methodology; Cyber threats; Computer security; Computer science; Information security; Identification (information); Digital forensics,,,,,https://www.emerald.com/insight/content/doi/10.1108/ICS-09-2018-0110/full/html http://eprints.bournemouth.ac.uk/31484/ https://dblp.uni-trier.de/db/journals/imcs/imcs27.html#SerketzisKIBP19 https://core.ac.uk/download/161865225.pdf,http://dx.doi.org/10.1108/ics-09-2018-0110,,10.1108/ics-09-2018-0110,2911829052,,0,001-228-339-410-349; 002-718-328-889-719; 006-435-365-660-88X; 010-791-676-072-730; 021-486-901-460-202; 026-163-378-046-984; 031-777-212-730-740; 035-565-993-122-262; 037-964-408-560-765; 044-902-881-182-472; 047-221-550-114-462; 049-283-049-875-723; 050-390-492-310-638; 051-995-804-690-245; 086-224-459-672-488; 095-576-328-454-005; 111-533-467-262-562; 120-024-605-234-553; 124-837-341-752-034; 126-281-444-894-256; 134-927-490-231-285; 162-252-967-636-208,9,true,,green 002-634-071-189-646,A case study on anonymised sharing platforms and digital traces left by their usage.,2020-09-09,2020,journal article,Science & justice : journal of the Forensic Science Society,18764452; 13550306,Forensic Science Society,United Kingdom,Graeme Horsman,"Abstract Non-local forms of file storage and transfer provide investigatory concerns. Whilst mainstream cloud providers offer a well-established challenge to those involved in criminal enquiries, there are also a host of services offering non-account based ‘anonymous’ online temporary file storage and transfer. From the context of a digital forensic investigation, the practitioner examining a suspect device must detect when such services have been utilised by a user, as offending files may not be resident on local storage media. In addition, identifying the use of a service may also expose networks of illegal file distribution, supporting wider investigations into criminal activity. This work examines 16 anonymous file transfer services and identifies and interprets the digital traces left behind on a device following their use to support law enforcement investigations.",61,1,97,106,Internet privacy; File transfer; Suspect; Context (language use); Law enforcement; Service (business); Temporary file; Computer science; Cloud computing; Digital forensics,Browser forensics; Cloud forensics; Digital forensics; Investigation,Humans; Law Enforcement,,,https://research.tees.ac.uk/en/publications/a-case-study-on-anonymised-sharing-platforms-and-digital-traces-l https://www.ncbi.nlm.nih.gov/pubmed/33357832 https://www.sciencedirect.com/science/article/pii/S1355030620302793,http://dx.doi.org/10.1016/j.scijus.2020.09.002,33357832,10.1016/j.scijus.2020.09.002,3084242698,,0,002-449-146-256-491; 006-933-430-647-14X; 017-815-064-018-299; 019-831-293-743-518; 022-264-235-998-870; 030-715-959-417-277; 058-631-300-195-90X; 087-217-042-703-040; 091-619-263-117-914; 121-704-965-852-836; 191-675-641-864-91X,0,false,, 002-657-433-027-989,Structured Investigation of Digital Incidents in Complex Computing Environments,,2003,journal article,Information Systems Security,1065898x; 1934869x,Informa UK Limited,,Peter Stephenson,"Abstract Critics, unimpressed by the rigor of the forensic digital examination process, have taken the position that forensic digital analysis is, more rightly, simply little more than ad hoc data collection and analysis. The reality is that forensic digital analysis as a whole, in its relative infancy, is the unwilling victim of the rapid advancement of computer technology.",12,3,29,38,Internet privacy; Data collection; Digital examination; Digital analysis; Computer technology; Computer science; Process (engineering); Computer forensics,,,,,https://dblp.uni-trier.de/db/journals/isjgp/isjgp12.html#Stephenson03 https://www.tandfonline.com/doi/abs/10.1201/1086/43327.12.3.20030701/43624.5,http://dx.doi.org/10.1201/1086/43327.12.3.20030701/43624.5,,10.1201/1086/43327.12.3.20030701/43624.5,2001966851,,0,038-668-970-194-854,4,false,, 002-757-600-778-594,Imaging in forensic science: Five years on,,2019,journal article,Journal of Forensic Radiology and Imaging,22124780; 22124799,Elsevier BV,Netherlands,Rachael M. Carew; David Errickson,"Abstract The Journal of Forensic Radiology and Imaging was launched in 2013 with the aim to collate the literature and demonstrate high-quality case studies on image-based modalities across the forensic sciences. Largely, the focus of this journal has been on the transmissive aspect of forensic imaging, and therefore a significant number of high-quality case studies have been published focusing on computed tomography and magnetic resonance imaging. As a result, the ‘and imaging’ aspect is often neglected. Since 2013, technology has fundamentally evolved, and a number of new techniques have become accessible or have been demonstrated as particularly useful within many sub-disciplines of forensic science. These include active and passive surface scanning techniques, and the availability of three-dimensional printing. Therefore, this article discusses non-contact techniques, their applications, advantages, and considerations on the current state of play of imaging in forensic science.",16,,24,33,Data science; Modalities; Forensic radiology; Forensic imaging; Surface scanning; Computer science; Computed tomography,,,,,https://pureportal.coventry.ac.uk/en/publications/imaging-in-forensic-science-five-years-on https://dspace.lib.cranfield.ac.uk/handle/1826/13838 https://dspace.lib.cranfield.ac.uk/bitstream/1826/13838/4/Imaging_in_forensic_science-2018.pdf https://www.sciencedirect.com/science/article/abs/pii/S2212478018300984,http://dx.doi.org/10.1016/j.jofri.2019.01.002,,10.1016/j.jofri.2019.01.002,2910913185,,0,000-268-154-596-167; 002-127-138-459-748; 003-065-924-063-359; 003-278-228-480-094; 005-341-988-954-522; 006-036-539-291-490; 006-169-507-945-33X; 010-681-955-161-667; 011-944-503-411-205; 012-041-015-183-409; 012-334-155-775-771; 012-509-983-163-123; 013-064-849-740-249; 014-099-763-628-391; 015-123-182-480-038; 015-962-947-852-989; 017-771-114-812-721; 022-877-776-826-125; 022-999-610-568-248; 023-776-376-764-029; 024-006-182-434-991; 024-441-245-472-976; 024-916-697-790-701; 025-094-429-798-148; 025-536-028-349-275; 028-320-733-426-404; 032-306-447-977-364; 033-579-939-342-592; 035-760-773-135-524; 036-403-879-718-18X; 037-165-077-440-310; 037-534-450-685-297; 037-749-897-100-601; 038-182-158-028-273; 038-257-840-765-069; 038-748-035-487-517; 039-150-366-594-296; 039-565-056-532-406; 042-141-941-221-562; 042-591-701-283-914; 042-681-440-303-807; 043-402-049-989-588; 043-520-403-608-424; 044-295-973-878-539; 047-348-590-414-767; 047-857-403-343-875; 050-397-436-492-977; 051-346-522-464-290; 052-010-126-807-228; 052-332-973-851-731; 053-525-211-728-03X; 053-864-865-444-69X; 056-062-046-429-28X; 064-340-857-249-888; 067-882-624-748-50X; 070-419-583-359-869; 073-823-317-995-663; 073-933-049-544-280; 073-990-255-764-904; 077-482-099-440-469; 078-245-337-744-263; 078-380-583-447-952; 083-531-862-786-603; 084-405-905-359-943; 088-043-607-018-040; 088-246-401-760-362; 088-783-580-458-92X; 091-048-622-639-68X; 093-007-088-286-467; 093-633-919-109-161; 101-319-200-902-022; 102-404-606-341-483; 102-599-064-891-853; 104-901-074-740-351; 110-321-141-469-802; 115-892-300-102-663; 116-017-921-838-412; 121-584-229-014-291; 122-072-421-770-967; 122-232-540-191-933; 124-684-494-161-222; 126-486-980-769-44X; 128-049-566-898-438; 129-249-739-883-289; 132-143-299-457-253; 138-112-529-065-72X; 138-867-550-322-271; 139-576-971-424-977; 139-622-634-944-554; 139-729-629-797-721; 147-369-030-470-195; 149-148-170-690-96X; 154-590-271-973-566; 155-288-251-179-989; 161-895-964-454-567; 167-196-159-251-842; 173-072-899-572-433; 178-456-110-092-227; 181-201-708-791-157,29,true,cc-by-nc-nd,green 002-828-312-621-651,Defining ‘service levels’ for digital forensic science organisations,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Graeme Horsman,,38,,301178,,Criminal justice; Software deployment; Engineering management; Work (electrical); Service level; Law enforcement; Field (computer science); Computer science; Decision model; Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S266628172100086X https://doi.org/10.1016/j.fsidi.2021.301178,http://dx.doi.org/10.1016/j.fsidi.2021.301178,,10.1016/j.fsidi.2021.301178,3170563327,,0,000-360-120-513-679; 007-868-297-443-532; 021-563-550-669-43X; 029-164-830-214-360; 047-630-600-014-492; 047-859-979-695-194; 050-513-243-638-138; 066-235-037-082-291; 075-089-767-933-223; 076-698-947-460-953; 080-196-042-005-758; 102-243-142-344-71X; 111-488-239-742-003; 118-214-115-485-064; 125-939-677-745-616; 142-527-962-979-521; 190-343-104-111-19X,0,false,, 002-887-236-141-671,Recovering Evidentiary E-mail for Non-Repudiation Forensics,2019-10-26,2019,journal article,International Journal of Innovative Technology and Exploring Engineering,22783075,Blue Eyes Intelligence Engineering and Sciences Engineering and Sciences Publication - BEIESP,,,"Computer Forensic, the upcoming branch of forensic science where acquiring, preserving, retrieving and presenting content processed electronically and stored digitally, is used for legal evidence in computer related crimes or any other unethical practice involving manipulation of digital content. Such digital content can take many forms which are manifested by different file formats and digital artifacts”. This paper concentrates on acquisition of deleted e-mail from mailbox of web servers satisfying two tier, three tier and n-tier technology. A detailed survey of several possibilities are included for non-repudiation forensic. A case study of a particular file type using suitable forensic tool is cited as a proof of concept towards this claimed inference to provide digital evidence in case of non-repudiation by sender and/or by receiver. This is simply conducted by using Encase a proprietary Digital forensic tools. The whole process is captured in step by step fashion to have a better understanding of the mechanism used. Recovery of files/emails have certain kinds of legal hurdles, the paper have addressed them as well. This paper contributes to the extend the recovered email can used as a ready digital evidence in any court of law.",8,11S2,551,557,Digital evidence; Computer science; Communication source; Computer forensics; Digital forensics; Digital content; Computer security; Process (computing); World Wide Web,,,,,,http://dx.doi.org/10.35940/ijitee.k1085.09811s219,,10.35940/ijitee.k1085.09811s219,,,0,,0,true,,gold 002-938-740-551-466,Verifying authorship for forensic purposes: A computational protocol and its validation.,2021-05-09,2021,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Patrick Juola,,325,,110824,110824,Writing style; Evidence-based practice; Computational linguistics; Key (cryptography); Information retrieval; Protocol (science); Task (project management); Forensic linguistics; Computer science; Digital forensics,Authorship attribution; Authorship verification; Computational linguistics; Digital forensics; Linguistics; Questioned documents,Authorship; Forensic Sciences/methods; Humans; Linguistics; Reproducibility of Results,,National Science Foundation,https://europepmc.org/article/MED/34098471 https://www.sciencedirect.com/science/article/abs/pii/S0379073821001444 https://www.ncbi.nlm.nih.gov/pubmed/34098471 https://pubag.nal.usda.gov/catalog/7369503,http://dx.doi.org/10.1016/j.forsciint.2021.110824,34098471,10.1016/j.forsciint.2021.110824,3163107682,,0,000-768-578-039-787; 002-455-602-950-673; 003-213-654-482-597; 005-542-560-321-688; 006-232-848-961-820; 008-178-501-105-839; 008-360-929-851-796; 011-417-534-712-719; 017-420-574-211-041; 023-636-466-657-038; 024-818-685-138-143; 030-378-159-478-931; 031-777-288-398-035; 032-727-260-671-782; 033-686-283-184-328; 037-165-077-440-310; 040-140-607-838-770; 040-522-343-056-217; 043-083-546-914-143; 043-740-167-537-218; 043-862-881-755-63X; 043-890-416-257-270; 045-625-644-070-382; 048-758-628-105-969; 050-119-400-415-849; 051-718-637-461-887; 051-844-758-374-488; 056-005-311-800-502; 059-548-325-380-369; 060-836-967-227-843; 066-937-282-076-772; 070-488-592-807-757; 075-494-645-094-547; 077-012-736-488-54X; 078-850-927-505-196; 079-188-251-693-491; 089-335-035-225-044; 091-025-503-721-427; 096-986-617-825-552; 097-627-440-942-164; 101-199-450-924-909; 104-402-912-397-497; 107-507-899-313-884; 108-884-315-402-083; 109-035-212-366-710; 112-768-977-414-098; 113-609-652-384-634; 115-602-945-595-68X; 117-988-770-587-035; 121-793-586-330-904; 122-815-273-145-207; 129-855-867-751-029; 139-710-979-313-889; 145-409-489-330-189; 150-710-020-841-815; 152-010-628-063-527; 161-711-642-638-292; 163-691-113-751-772; 178-746-001-922-59X; 193-720-260-691-763; 198-146-952-382-142,0,false,, 003-206-474-001-578,Цифровизация справочно-информационных фондов криминалистического и судебно-экспертного назначения как часть учения о цифровизации криминалистической регистрации,2020-07-31,2020,journal article,Courier of Kutafin Moscow State Law University (MSAL)),23115998,Kutafin Moscow State Law University,,Е. Р. Россинская,"The article discusses the modern problems of digitalization criminalistic registration system. The author notes that the use of information and computer technologies in order to systematize and store relevant and potential criminalistic information, which together constitute a forensic registration system that began in the 80s of the twentieth century, is actively ongoing. Along with databases and AIPS, forensic records and reference information funds (CIF) for many objects are still in the form objects in kind. From the point of view to the theory of information and computer support of criminalistic activity and the doctrine of criminalistic registration, it is formulated that the subject of the doctrine of digitalization of the criminalistic registration system are the laws of formalization, structuring, unifi cation and algorithmizing the actual and potential forensic information, on the basis of which technologies are being developed for transferring forms of storing this information to digital databases criminalistic and forensic assignment. The objects of this doctrine are criminalistic records and reference and information funds (CIF) in the process of their digitalization. The advantages of CIFs in the form of digital databases are demonstrated. Based on the doctrine of the digitalization of the criminalistic registration system, the author analyzes the possibility of digitalization of legitimate natural collections. It is proved that digital bases for ensuring the evidence-based signifi cance of the results of their use should have regulatory fi xation in technical regulations, as well as expert research methods. The connection between the digitalization of criminalistic and forensic expert activity, where the connecting links are digital traces and CIF, is indicated.",,6,23,32,World Wide Web; Point (typography); Doctrine; Subject (documents); Computer support; Registration system; Computer science; Process (engineering),,,,,https://cyberleninka.ru/article/n/tsifrovizatsiya-spravochno-informatsionnyh-fondov-kriminalisticheskogo-i-sudebno-ekspertnogo-naznacheniya-kak-chast-ucheniya-o https://vestnik.msal.ru/jour/article/view/1129 https://cyberleninka.ru/article/n/tsifrovizatsiya-spravochno-informatsionnyh-fondov-kriminalisticheskogo-i-sudebno-ekspertnogo-naznacheniya-kak-chast-ucheniya-o/pdf https://vestnik.msal.ru/jour/article/download/1129/1150,http://dx.doi.org/10.17803/2311-5998.2020.70.6.023-032,,10.17803/2311-5998.2020.70.6.023-032,3046776524,,0,131-166-072-114-710,0,true,cc-by,hybrid 003-232-363-219-004,Interpol review of digital evidence 2016 - 2019.,2020-03-19,2020,journal article,Forensic science international. Synergy,2589871x,Elsevier BV,Netherlands,Paul Reedy,Abstract This review paper covers the forensic-relevant literature in digital evidence from 2016 to 2019 as a part of the 19th Interpol International Forensic Science Managers Symposium. The review papers are also available at the Interpol website at: https://www.interpol.int/content/download/14458/file/Interpol Review Papers 2019.pdf,2,,489,520,Library science; Download; Digital evidence; Computer science; Network forensics; Digital forensics,Digital evidence; Digital forensics; Network forensics,,,,http://www.sciencedirect.com/science/article/pii/S2589871X20300152 https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7770434 https://www.sciencedirect.com/science/article/pii/S2589871X20300152,http://dx.doi.org/10.1016/j.fsisyn.2020.01.015,33385144,10.1016/j.fsisyn.2020.01.015,3011326668,PMC7770434,0,001-330-619-276-915; 003-385-688-915-283; 004-200-813-216-207; 006-138-917-123-177; 006-352-188-170-383; 008-033-307-675-865; 008-807-857-586-716; 009-512-003-529-193; 010-084-169-561-57X; 010-963-610-208-920; 015-153-772-071-055; 015-550-190-274-871; 015-654-094-120-991; 016-357-729-609-877; 016-545-450-234-850; 018-552-581-098-658; 019-500-518-223-980; 022-564-463-934-451; 023-744-332-350-071; 024-304-270-764-670; 026-073-425-144-247; 026-934-168-279-23X; 027-725-711-087-703; 030-178-593-043-926; 030-355-169-268-637; 030-751-060-000-287; 031-973-009-227-195; 032-664-290-593-804; 033-394-274-571-989; 035-031-257-128-045; 036-112-898-081-145; 036-962-718-355-681; 039-158-280-114-980; 041-249-902-359-989; 043-069-596-469-868; 045-701-895-839-020; 046-857-308-211-173; 047-386-524-667-691; 047-925-302-360-870; 049-337-278-368-275; 050-694-164-774-292; 052-152-063-024-042; 054-471-285-379-894; 055-824-759-528-044; 057-720-182-045-334; 061-269-967-405-492; 063-246-991-940-023; 063-572-994-319-332; 064-185-555-697-856; 064-549-392-650-90X; 065-026-135-610-134; 066-235-037-082-291; 067-307-335-041-486; 075-950-021-558-098; 080-282-279-211-788; 081-140-064-081-587; 087-326-101-466-886; 088-229-295-768-496; 088-553-642-323-93X; 088-688-832-386-331; 089-115-596-397-298; 089-695-854-791-989; 097-496-807-682-876; 097-939-114-561-254; 099-712-023-378-848; 100-947-231-339-501; 106-229-562-693-558; 112-955-497-358-051; 115-380-228-622-98X; 123-393-129-372-391; 124-202-713-284-341; 127-291-182-090-033; 131-476-361-473-174; 131-874-028-513-738; 137-320-816-794-079; 141-906-892-787-690; 142-790-196-752-819; 143-347-787-372-092; 144-184-475-249-995; 148-617-284-942-187; 155-758-692-373-705; 162-814-268-960-713; 163-853-761-819-084; 167-366-167-352-677; 181-684-050-889-439; 182-670-398-460-931; 187-108-280-798-543; 189-205-808-191-262; 194-351-971-349-302; 199-010-941-903-268,18,true,"CC BY, CC BY-NC-ND",gold 003-275-658-705-341,A formalized model of the Trace.,2021-08-17,2021,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,David-Olivier Jaquet-Chiffelle; Eoghan Casey,"This work proposes a formalized model, grounded in forensic science, to support a unified understanding of the Trace across scientific disciplines. The model is precisely defined in mathematical terms that reflect the dynamics of an offense as expressed in Locard's Exchange principle. Specifically, this mathematical approach represents the Trace as the modification of a Scene, subsequently perceptible, resulting from the Event under investigation. Examples are provided to illustrate how this conceptualization applies to forensic science, including DNA and digital evidence. Broader implications of this model are presented in the context of COVID-19, emphasizing the value of cohesive scientific study of the Trace. The aim of this work is to stimulate more formalized study of the Trace, both from tangible and abstract perspectives, and to strengthen forensic science as a whole.",327,,110941,,Locard's exchange principle; Crime scene; Trace (semiology); Context (language use); Digital evidence; Computer science; Event (computing); Management science; Digital forensics; Conceptualization,Abstract Trace; Abstract world; Crime scene; Digital forensic science; Hypothetical world; Mathematical representation; Pierce; Real world; Scene of Investigation; Semiotic; Tangible Trace,,,European Society of Contraception and Reproductive Health,https://www.sciencedirect.com/science/article/pii/S0379073821002619 https://pubmed.ncbi.nlm.nih.gov/34543782/,http://dx.doi.org/10.1016/j.forsciint.2021.110941,34543782,10.1016/j.forsciint.2021.110941,3194550237,,0,005-859-821-142-158; 010-963-610-208-920; 012-364-349-886-717; 019-831-293-743-518; 025-214-545-266-265; 028-857-636-801-145; 029-150-404-979-195; 034-159-384-149-38X; 042-387-463-939-026; 056-672-370-150-588; 064-549-392-650-90X; 077-589-464-357-875; 096-168-749-737-39X; 101-549-415-202-81X; 111-471-986-310-852; 127-068-494-802-050; 198-695-992-703-168,2,true,cc-by-nc-nd,hybrid 003-563-396-724-10X,Fintech forensics: Criminal investigation and digital evidence in financial technologies,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Bruce J. Nikkel,,33,,200908,,Finance; Criminal investigation; Digital transformation; Business; Payment; Financial transaction; Extortion; Money laundering; Digital evidence; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/di/di33.html#Nikkel20 https://www.sciencedirect.com/science/article/abs/pii/S2666281720300287 https://doi.org/10.1016/j.fsidi.2020.200908,http://dx.doi.org/10.1016/j.fsidi.2020.200908,,10.1016/j.fsidi.2020.200908,3012107526,,0,,14,false,, 003-585-400-908-778,Digital image forensic approach based on the second-order statistical analysis of CFA artifacts,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Gurinder Singh; Kulbir Singh,,32,,200899,,Image (mathematics); Support vector machine; Artificial intelligence; Interpolation; Pattern recognition; Bilinear interpolation; Computer science; Digital image; Feature (computer vision); Detector; Process (computing),,,,Ministry of Electronics and Information Technology,https://www.sciencedirect.com/science/article/pii/S1742287619302397,http://dx.doi.org/10.1016/j.fsidi.2019.200899,,10.1016/j.fsidi.2019.200899,3003346669,,0,005-021-673-285-683; 014-079-494-188-077; 016-167-894-033-755; 017-522-442-322-636; 023-624-827-239-301; 023-928-444-110-407; 026-710-170-953-550; 028-484-441-810-763; 029-976-556-060-314; 033-932-291-455-221; 036-001-472-867-413; 037-862-945-393-555; 041-838-544-052-666; 043-212-445-850-396; 053-217-455-972-392; 067-236-654-156-859; 067-303-718-151-959; 068-082-205-208-585; 083-274-787-587-30X; 085-547-032-022-62X; 093-117-184-682-360; 098-768-111-046-209; 100-880-837-233-791; 104-279-390-845-094; 108-896-114-392-841; 125-162-036-005-386; 135-082-770-753-517; 159-132-926-596-284; 172-112-498-122-981; 180-552-666-228-97X,7,false,, 003-767-240-799-740,Editorial Board,,2015,journal article,Digital Investigation,17422876; 1873202x,Elsevier BV,Netherlands,,,12,,i,i,Computer science,,,,,https://core.ac.uk/download/pdf/82745273.pdf,http://dx.doi.org/10.1016/s1742-2876(15)00023-7,,10.1016/s1742-2876(15)00023-7,,,0,,0,true,cc-by-nc-nd,hybrid 004-023-816-066-748,Navigating Unmountable Media with the Digital Forensics XML File System.,1970-01-01,1970,journal article,International journal of digital curation,17468256,Edinburgh University Library,England,Alexander J. Nelson; Alexandra Chassanoff; Alexandra Holloway,"Some computer storage is non-navigable by current general-purpose computers. This could be because of obsolete interface software, or a more specialized storage system lacking widespread support. These storage systems may contain artifacts of great cultural, historical, or technical significance, but implementing compatible interfaces may be beyond available resources. We developed the DFXML File System (DFXMLFS) to enable navigation of arbitrary storage systems that fulfill a minimum feature set of the POSIX file system standard. Our approach advocates for a two-step workflow that separates parsing the storage's file system structures from navigating the storage like a contemporary file system, including file contents. The parse extracts essential file system metadata, serializing to Digital Forensics XML for later consumption as a read-only file system.",12,2,309,326,Interface (computing); Computer data storage; File system; Computer science; Serialization; POSIX; Database; Digital forensics; XML; Metadata,,,,Intramural NIST DOC (9999-NIST) United States,https://www.nist.gov/publications/navigating-unmountable-media-digital-forensics-xml-file-system https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6512863 https://paperity.org/p/275604284/navigating-unmountable-media-with-the-digital-forensics-xml-file-system http://www.ijdc.net/article/download/581/508 https://europepmc.org/article/MED/31093298 https://doi.org/10.2218/ijdc.v12i2.581 https://core.ac.uk/download/pdf/162675936.pdf,http://dx.doi.org/10.2218/ijdc.v12i2.581,31093298,10.2218/ijdc.v12i2.581,2804413013,PMC6512863,0,004-023-816-066-748,1,true,cc-by,gold 004-095-036-114-529,Digital forensic standards and digital evidence in Polish criminal proceedings. An updated definition of digital evidence in forensic science,,2021,journal article,International Journal of Electronic Security and Digital Forensics,1751911x; 17519128,Inderscience Publishers,United Kingdom,Piotr Lewulis,,13,4,403,403,Digital forensics; Digital evidence; Forensic science; Computer science; Computer forensics; Data science; Criminal investigation; Cybercrime; Computer security; Criminology,,,,,,http://dx.doi.org/10.1504/ijesdf.2021.116024,,10.1504/ijesdf.2021.116024,,,0,,0,false,, 004-132-523-853-61X,U.S. initiatives to strengthen forensic science & international standards in forensic DNA,2015-06-30,2015,journal article,Forensic science international. Genetics,18780326; 18724973,Elsevier Ireland Ltd,Netherlands,John M. Butler,"A number of initiatives are underway in the United States in response to the 2009 critique of forensic science by a National Academy of Sciences committee. This article provides a broad review of activities including efforts of the White House National Science and Technology Council Subcommittee on Forensic Science and a partnership between the Department of Justice (DOJ) and the National Institute of Standards and Technology (NIST) to create the National Commission on Forensic Science and the Organization of Scientific Area Committees. These initiatives are seeking to improve policies and practices of forensic science. Efforts to fund research activities and aid technology transition and training in forensic science are also covered.; ; The second portion of the article reviews standards in place or in development around the world for forensic DNA. Documentary standards are used to help define written procedures to perform testing. Physical standards serve as reference materials for calibration and traceability purposes when testing is performed. Both documentary and physical standards enable reliable data comparison, and standard data formats and common markers or testing regions are crucial for effective data sharing. Core DNA markers provide a common framework and currency for constructing DNA databases with compatible data. Recent developments in expanding core DNA markers in Europe and the United States are discussed.",18,,4,20,NIST; Forensic science; Currency; Traceability; Political science; Justice (ethics); Data sharing; Engineering ethics; National Science Education Standards; General partnership,Core DNA markers; Forensic science; National Commission on Forensic Science; Organization of Scientific Area Committees; Standard reference materials; Standards,"DNA/analysis; Databases, Factual; Forensic Genetics/legislation & jurisprudence; Forensic Sciences/legislation & jurisprudence; Humans; International Cooperation; United States",DNA,Intramural NIST DOC (9999-NIST) United States,https://www.sciencedirect.com/science/article/abs/pii/S1872497315300284 https://core.ac.uk/display/82383580 http://europepmc.org/articles/PMC4573542 https://www.sciencedirect.com/science/article/pii/S1872497315300284 https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4573542/table/T2/ https://core.ac.uk/download/pdf/82383580.pdf,http://dx.doi.org/10.1016/j.fsigen.2015.06.008,26164236,10.1016/j.fsigen.2015.06.008,2114171564,PMC4573542,0,002-478-236-154-969; 002-732-953-331-797; 002-788-807-339-769; 004-720-380-865-314; 006-097-480-018-244; 007-500-077-626-50X; 009-111-604-064-734; 009-757-100-081-701; 009-937-017-730-422; 010-788-539-410-169; 015-763-016-872-242; 015-802-196-219-935; 020-168-876-831-146; 021-942-921-078-840; 022-746-511-566-030; 023-776-660-217-911; 025-805-398-785-616; 029-020-578-106-399; 030-338-780-845-633; 031-389-438-618-888; 033-490-662-098-265; 036-699-683-640-54X; 038-248-909-465-132; 040-960-910-761-706; 043-794-985-936-708; 047-917-949-493-762; 051-562-252-252-111; 056-092-468-053-371; 056-711-894-207-476; 057-013-440-308-879; 063-254-890-677-019; 066-470-106-865-231; 066-950-014-452-862; 067-407-647-404-07X; 067-938-325-014-282; 068-348-028-889-302; 069-458-024-102-30X; 070-428-832-149-040; 076-385-114-048-262; 078-060-881-962-669; 078-492-364-369-25X; 079-445-271-508-737; 080-127-695-287-431; 081-461-834-794-207; 082-689-784-457-903; 090-860-439-815-754; 092-679-871-628-575; 095-019-308-150-58X; 096-876-869-653-446; 097-381-678-249-602; 098-235-885-441-833; 101-436-770-235-826; 105-587-259-236-331; 110-501-133-318-332; 111-949-681-104-943; 118-699-381-530-145; 131-377-824-066-53X; 131-582-397-609-343; 136-524-721-346-896; 150-618-864-818-357; 152-265-820-213-454; 165-221-455-003-068; 178-519-087-228-549; 194-150-811-384-458; 194-961-861-881-523; 197-378-302-161-07X; 198-476-125-680-623,38,true,cc-by-nc-nd,hybrid 004-200-813-216-207,Digital forensic evidence-Flaws in the criminal justice system.,2018-05-26,2018,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Jan Collie,,289,,154,155,Criminal justice; Criminal law; MEDLINE; Computer science; Criminology; Digital forensics,,Civil Rights/legislation & jurisprudence; Computers/legislation & jurisprudence; Criminal Law; Forensic Sciences/legislation & jurisprudence; Freedom; Humans,,,https://europepmc.org/abstract/MED/29864602 https://www.sciencedirect.com/science/article/pii/S0379073818302378 http://oro.open.ac.uk/70043/ https://pubmed.ncbi.nlm.nih.gov/29864602/ https://www.ncbi.nlm.nih.gov/pubmed/29864602,http://dx.doi.org/10.1016/j.forsciint.2018.05.014,29864602,10.1016/j.forsciint.2018.05.014,2804231830,,0,,11,false,, 004-270-164-263-436,Prelim iii - Contents List,,2022,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,,,42,,301435,,,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00116-0,,10.1016/s2666-2817(22)00116-0,,,0,,0,false,, 004-376-985-680-005,Towards a capability maturity model for digital forensic readiness,2019-01-01,2019,journal article,Wireless Networks,10220038; 15728196,Springer Science and Business Media LLC,Netherlands,Ludwig Englbrecht; Stefan Meier; Günther Pernul,"Increasing IT-security breaches and the extensively growing loss due to fraud-related incidents cause the need for being prepared for a digital investigation. A specific capability maturity model can assist organizations to determine their current state accordingly to implement digital forensic readiness measures and get assistance to reach a desired level in having related capabilities implemented. This paper examines how such a model can assist in integrating digital forensic readiness related measures to reach an appropriate maturity level. Through facilitating core elements of the IT-governance framework COBIT 5 and the core characteristics of implementing digital forensic readiness, a proposal for a specific capability maturity model has been conducted. In five maturity levels (initial, managed, defined, quantitatively managed, and optimized), the different stages of implementing digital forensic readiness are represented. It can be shown that with the IT-governance aligned model, the implementation of digital forensic readiness can be assisted.",26,7,4895,4907,Process management; COBIT; Maturity (finance); Computer science; State (computer science); Digital forensics; Capability Maturity Model,,,,Bundesministerium für Bildung und Forschung,https://link.springer.com/article/10.1007/s11276-018-01920-5 https://epub.uni-regensburg.de/40028/ https://dblp.uni-trier.de/db/journals/winet/winet26.html#EnglbrechtMP20 https://doi.org/10.1007/s11276-018-01920-5 https://link.springer.com/content/pdf/10.1007/s11276-018-01920-5.pdf,http://dx.doi.org/10.1007/s11276-018-01920-5,,10.1007/s11276-018-01920-5,2907825110,,0,002-056-390-935-528; 006-435-365-660-88X; 008-751-783-762-210; 014-494-420-328-995; 019-698-064-288-240; 021-486-901-460-202; 033-394-274-571-989; 034-109-295-952-909; 035-565-993-122-262; 046-143-775-958-052; 049-225-570-879-682; 049-404-833-736-24X; 050-390-492-310-638; 050-612-532-454-179; 058-439-132-526-924; 060-150-759-143-593; 063-008-195-718-524; 073-524-789-009-542; 075-142-959-030-889; 077-676-218-804-217; 077-702-229-787-594; 097-511-514-959-467; 097-675-162-158-578; 119-215-264-177-058; 124-712-549-942-567; 137-468-868-771-961; 145-743-906-992-348; 199-566-397-751-128; 199-745-676-923-766,6,false,, 004-652-388-189-304,Bringing science to digital forensics with standardized forensic corpora,,2009,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Simson L. Garfinkel; Paul Farrell; Vassil Roussev; George W. Dinolt,"Progress in computer forensics research has been limited by the lack of a standardized data sets-corpora-that are available for research purposes. We explain why corpora are needed to further forensic research, present a taxonomy for describing corpora, and announce the availability of several forensic data sets.",6,,S2,S11,World Wide Web; Forensic science; Standardization; Data science; File carving; Computer science; Computer forensics; Digital forensics; Taxonomy (general),,,,,https://www.sciencedirect.com/science/article/abs/pii/S1742287609000346 http://simson.net/clips/academic/2009.DFRWS.Corpora.slides.pdf https://www.sciencedirect.com/science/article/pii/S1742287609000346 https://core.ac.uk/display/36734389 https://apps.dtic.mil/dtic/tr/fulltext/u2/a549473.pdf https://doi.org/10.1016/j.diin.2009.06.016 https://dfrws.org/2009/proceedings/p2-garfinkel.pdf https://dl.acm.org/doi/10.1016/j.diin.2009.06.016 https://dblp.uni-trier.de/db/journals/di/di6.html#GarfinkelFRD09,http://dx.doi.org/10.1016/j.diin.2009.06.016,,10.1016/j.diin.2009.06.016,2076342816,,1,002-534-435-127-422; 021-485-454-063-840; 022-590-551-579-583; 025-832-466-975-926; 027-542-795-590-039; 034-264-583-741-030; 038-902-455-312-943; 044-641-967-355-570; 049-903-035-265-873; 056-689-263-355-386; 061-549-181-856-861; 066-403-963-486-412; 109-568-327-818-520; 173-012-249-728-26X,274,true,cc-by-nc-nd,hybrid 004-655-797-294-715,Computationally Efficient Digital Image Forensic Method for Image Authentication,,2016,journal article,Procedia Computer Science,18770509,Elsevier BV,,Anil Dada Warbhe; Rajiv V. Dharaskar; Vilas M. Thakare,"Abstract The issue of the authenticity and integrity of digital images is getting critical. Nowadays it became easy to create image forgeries. Digital image forensics plays a vital role in proving authenticity and integrity of digital images. There are various types of image forgeries possible, and Copy-Paste is one of it. In this type of forgery, a region of an image is copied and afterward pasted to another part of the same picture. In this paper, we propose an effective and computationally efficient method for the detection of Copy-Paste forgery. The proposed forgery detection is based on a customized Normalized Cross Correlation (NCC). The experimental results show that the proposed approach can be effectively used to detect forgeries accurately and is robust to affine transform to a certain extent.",78,,464,470,Image (mathematics); Feature detection (computer vision); Artificial intelligence; Cross-correlation; Authentication; Digital image forensics; Computer vision; Computer science; Digital image; Affine transformation,,,,,https://www.sciencedirect.com/science/article/pii/S1877050916000910 https://www.sciencedirect.com/science/article/abs/pii/S1877050916000910 https://core.ac.uk/display/82404167 https://core.ac.uk/download/pdf/82404167.pdf,http://dx.doi.org/10.1016/j.procs.2016.02.089,,10.1016/j.procs.2016.02.089,2313375625,,0,018-714-912-826-875; 019-461-243-164-715; 024-225-405-455-512; 029-322-330-771-081; 033-295-070-837-251; 034-121-155-020-714; 037-103-332-118-06X; 038-937-237-659-201; 039-055-556-012-538; 040-499-338-725-508; 045-327-928-509-160; 062-007-949-183-546; 065-037-301-489-012; 065-369-773-065-673; 071-292-048-830-963; 075-228-376-439-786; 076-346-829-732-533; 076-704-896-134-67X; 080-794-266-877-942; 086-832-985-542-578; 089-363-854-574-422; 090-691-753-970-360; 092-092-246-517-236; 097-461-557-468-286; 131-740-474-802-798,7,true,,gold 004-670-548-978-249,Systematic Literature Review on Data Carving in Digital Forensic,,2013,journal article,Procedia Technology,22120173,Elsevier BV,,Nadeem Alherbawi; Zarina Shukur; Rossilawati Sulaiman,"Abstract Data carving is a very important topic in digital investigation and computer forensic. Researches are needed to focus on improving data carving techniques to enable digital investigators to retrieve important data and evidences from damaged or corrupted data resources. This paper is the result of a systematic literature review which answer three main questions in data carving filed. The Results fall into four main directions. First it shows the need of realistic data sets for tools testing. Secondly, it points to the need of object validation under fragmented data storage. Thirdly, investigating content based validation and its benefits in digital investigation field. Finally, it points to a new direction for using semantic validation to reduce false positive rates.",11,,86,92,Data mining; Systematic review; Computer data storage; Information retrieval; Carving; Data resources; Field (computer science); Focus (computing); Computer science; Object (computer science); Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S2212017313003198 https://www.sciencedirect.com/science/article/abs/pii/S2212017313003198 https://core.ac.uk/display/82179735 https://core.ac.uk/download/pdf/82179735.pdf,http://dx.doi.org/10.1016/j.protcy.2013.12.165,,10.1016/j.protcy.2013.12.165,2044372942,,0,015-537-933-151-383; 029-717-924-939-132; 043-093-846-816-675; 052-075-863-186-238; 072-072-328-028-440; 074-145-325-661-168; 077-066-116-235-027; 082-216-018-661-366; 094-933-978-324-364; 102-953-068-000-033; 107-841-657-896-742; 113-473-792-362-349; 126-916-335-288-384; 134-927-490-231-285; 152-771-716-159-330; 162-485-003-594-995,15,true,,gold 004-778-686-619-011,"Forensically ready digital identity management systems, issues of digital identity life cycle and context of usage",,2017,journal article,International Journal of Electronic Security and Digital Forensics,1751911x; 17519128,Inderscience Publishers,United Kingdom,Mehrdad Tajbakhsh; Elaheh Homayounvala; Sajjad Shokouhyar,"Collecting necessary digital and network forensics to prove the identity of an individual who is responsible for a crime, or suspected of a malicious attack, or has used a device during an incident, with minimum doubt to the court or other legitimate organisations based on the digital forensic investigation model is one of the most important legal and security issues of digital identity management systems DIMSs. Without a good understanding and identification of the most important parameters of DIMS based on the digital forensic investigation model, it is not possible to do digital forensic investigation and provide required evidence. Therefore, the main goal of this paper is to identify and prioritise DIMS parameters by considering a user's digital identity lifecycle, the contexts of usage challenges, and constraints that should be considered in a digital forensic readiness model.",9,1,62,83,Identity (object-oriented programming); Digital identity; Context (language use); Computer security; Computer science; Network forensics; Identity management; Computer forensics; Identification (information); Digital forensics,,,,,https://research.gold.ac.uk/id/eprint/27057/ https://www.inderscienceonline.com/doi/abs/10.1504/IJESDF.2017.081781 https://dl.acm.org/doi/10.1504/IJESDF.2017.081781 https://core.ac.uk/download/228123558.pdf,http://dx.doi.org/10.1504/ijesdf.2017.081781,,10.1504/ijesdf.2017.081781,2572537845,,0,003-097-641-696-240; 008-297-927-077-443; 021-376-433-883-484; 021-850-998-857-676; 024-665-355-874-020; 026-774-296-742-022; 036-150-437-127-822; 037-789-654-228-885; 060-877-320-347-466; 078-422-506-893-847; 078-937-165-241-316; 109-715-338-545-334; 119-377-297-976-683; 121-657-732-376-374; 129-932-503-927-253; 132-355-634-397-986; 133-157-737-906-420; 140-821-103-436-654; 144-688-901-316-003; 144-924-692-716-271; 158-400-418-434-934; 162-161-362-621-763; 176-817-855-610-146; 194-965-580-194-055,1,true,,green 004-806-187-092-505,"Likelihood ratios, Health Apps, Artificial Intelligence and Deepfakes",,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,41,,301394,301394,Artificial intelligence; Psychology; Computer science,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301394,,10.1016/j.fsidi.2022.301394,,,0,,0,false,, 004-872-169-627-620,A New Approach of Digital Forensic Model for Digital Forensic Investigation,,2011,journal article,International Journal of Advanced Computer Science and Applications,2158107x; 21565570,The Science and Information Organization,,Inikpi O Ademu; Chris Imafidon; David Preston,"The research introduces a structured and consistent approach for digital forensic investigation. Digital forensic science provides tools, techniques and scientifically proven methods that can be used to acquire and analyze digital evidence. The digital forensic investigation must be retrieved to obtain the evidence that will be accepted in the court. This research focuses on a structured and consistent approach to digital forensic investigation. This research aims at identifying activities that facilitate and improves digital forensic investigation process. Existing digital forensic framework will be reviewed and then the analysis will be compiled. The result from the evaluation will produce a new model to improve the whole investigation process.",2,12,,,World Wide Web; Data science; Digital evidence; Digital forensic investigation; Computer science; Process (engineering); Digital forensics,,,,,https://thesai.org/Publications/ViewPaper?Volume=2&Issue=12&Code=IJACSA&SerialNo=26 https://thesai.org/Downloads/Volume2No12/Paper%2026-A%20New%20Approach%20of%20Digital%20Forensic%20Model%20for%20Digital%20Forensic%20Investigation.pdf,http://dx.doi.org/10.14569/ijacsa.2011.021226,,10.14569/ijacsa.2011.021226,2261973985,,0,032-697-093-668-898; 035-223-520-491-228; 065-452-675-566-99X; 120-697-354-224-33X; 170-299-458-679-224; 178-883-713-153-793; 190-065-821-748-92X,60,true,cc-by,hybrid 004-944-337-711-849,A digital method of measuring the gonial angle on radiographs for forensic age estimation,,2017,journal article,Journal of Forensic Radiology and Imaging,22124780; 22124799,Elsevier BV,Netherlands,Ashith B. Acharya,,11,,18,23,Forensic science; Surgery; Gonial angle; Orthodontics; Age prediction; Age estimation; Radiography; Linear regression; Medicine,,,,,https://jglobal.jst.go.jp/detail?JGLOBAL_ID=201802211428452500 https://www.sciencedirect.com/science/article/abs/pii/S2212478017300023,http://dx.doi.org/10.1016/j.jofri.2017.09.002,,10.1016/j.jofri.2017.09.002,2756907268,,0,001-317-406-697-437; 003-632-311-229-545; 011-065-921-491-593; 013-511-173-215-218; 015-522-557-059-222; 020-693-143-117-450; 032-015-396-884-976; 051-691-526-854-63X; 053-861-654-903-338; 055-844-964-280-832; 058-168-509-916-18X; 067-820-786-847-38X; 070-013-598-429-874; 081-317-997-035-778; 096-743-212-418-952; 125-952-942-990-070; 130-649-977-193-919; 158-013-855-635-996; 162-914-438-124-637,2,false,, 004-962-084-085-761,iCOP: Live forensics to reveal previously unknown criminal media on P2P networks,,2016,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Claudia Peersman; Christian Schulze; Awais Rashid; M Brennan; Carl Fischer,publisher: Elsevier articletitle: iCOP: Live forensics to reveal previously unknown criminal media on P2P networks journaltitle: Digital Investigation articlelink: http://dx.doi.org/10.1016/j.diin.2016.07.002 content_type: article copyright: © 2016 The Authors. Published by Elsevier Ltd.,18,,50,64,World Wide Web; Live forensics; Peer to peer computing; Computer science; Contextual image classification,,,,European Commission Safer Internet Programme project,https://www.sciencedirect.com/science/article/pii/S1742287616300779 https://pearl.plymouth.ac.uk/bitstream/10026.1/12700/1/1-s2.0-S1742287616300779-main.pdf https://cora.ucc.ie/handle/10468/8886 http://dx.doi.org/10.1016/j.diin.2016.07.002 https://dblp.uni-trier.de/db/journals/di/di18.html#PeersmanSRBF16 https://research-information.bris.ac.uk/ws/files/148849288/Full_text_PDF_final_published_version_.pdf https://research-information.bris.ac.uk/en/publications/icop-live-forensics-to-reveal-previously-unknown-criminal-media-o https://www.sciencedirect.com/science/article/abs/pii/S1742287616300779 https://core.ac.uk/display/82795158 https://pearl.plymouth.ac.uk/handle/10026.1/12700 https://dx.doi.org/10.1016/j.diin.2016.07.002 https://eprints.lancs.ac.uk/80420/ https://research-information.bristol.ac.uk/files/148849288/Full_text_PDF_final_published_version_.pdf https://core.ac.uk/download/161770402.pdf,http://dx.doi.org/10.1016/j.diin.2016.07.002,,10.1016/j.diin.2016.07.002,2496242257,,0,001-601-037-769-359; 002-508-484-172-239; 003-232-024-507-423; 004-795-963-795-748; 010-499-521-902-738; 011-415-887-187-009; 011-419-429-600-028; 014-500-937-263-141; 022-727-852-857-211; 023-087-367-728-807; 023-172-653-651-587; 023-232-857-018-531; 024-539-327-776-880; 025-290-159-757-335; 027-658-395-615-692; 029-872-103-912-741; 030-849-564-862-353; 031-570-876-692-486; 037-550-015-414-716; 039-048-633-029-46X; 039-121-475-180-508; 041-450-917-435-205; 042-767-661-429-064; 046-902-780-312-461; 047-630-600-014-492; 053-374-527-190-701; 055-693-399-344-032; 057-323-529-606-913; 057-604-236-066-360; 058-118-944-161-679; 067-280-671-122-86X; 069-510-030-533-523; 070-606-448-863-740; 070-758-655-516-162; 077-439-685-344-409; 086-355-348-998-637; 086-881-465-147-700; 087-950-081-760-226; 093-768-922-348-081; 094-295-279-676-447; 097-670-598-500-925; 099-533-324-191-733; 100-572-665-065-36X; 102-330-195-671-955; 103-753-091-216-14X; 106-628-968-616-622; 109-135-424-904-881; 109-502-634-068-254; 113-702-510-601-193; 114-851-735-516-737; 120-835-851-137-555; 121-001-950-491-969; 124-736-135-893-968; 125-950-878-824-107; 136-199-937-192-121; 138-883-941-568-279; 139-857-251-928-449; 142-474-806-225-780; 148-041-330-195-09X; 148-981-923-628-698; 153-153-144-072-106; 158-568-714-766-182; 164-982-407-626-607; 165-823-895-037-171; 173-946-931-092-89X; 176-298-495-831-209; 180-440-127-545-398,14,true,cc-by,hybrid 004-974-971-514-268,Detection and extraction of digital footprints from the iDrive cloud storage using web browser forensics analysis,2022-04-01,2022,journal article,Indonesian Journal of Electrical Engineering and Computer Science,25024760; 25024752,Institute of Advanced Engineering and Science,,Adesoji Adesina; Ayodele Adebiyi; Charles Ayo,"STorage as a <span>service (STaaS) allows its subscribers the ability to access their stored data with the use of internet enabled digital devices at anywhere, anyplace and anytime. The easy accessibility of cloud storage with digital devices is one of the major benefits of cloud computing but this benefit can also be exploited by cybercriminals to perform various forms of malicious usages. During forensic investigation, forensic examiners are expected to provided evidence in relation to the malicious usages but the physical inaccessibility to the digital artifacts on the cloud servers, the difficulty in retrieving evidential artifacts from various cloud storage services and the difficulty in obtaining forensic logs from the concerned cloud service providers among other factors make it difficult to perform forensic investigations. This paper provided step by step experimental guidelines to extract digital artifacts from Google Chrome and Internet Explorer from Windows 10 personal computer using iDrive cloud storage as a case study. The study used Nirsoft forensic tool to locate the relevant forensic artifacts and an integrated conceptual digital forensic framework was adopted to carry out the investigation. This study increases the knowledge of client forensics using web browser analysis during cloud storage forensic investigation.</span>",26,1,550,550,Cloud computing; Digital forensics; Computer science; The Internet; Cloud storage; Network forensics; World Wide Web; Computer security; Operating system,,,,,,http://dx.doi.org/10.11591/ijeecs.v26.i1.pp550-559,,10.11591/ijeecs.v26.i1.pp550-559,,,0,,0,true,,gold 005-116-312-278-527,"DIALOG: A framework for modeling, analysis and reuse of digital forensic knowledge",,2009,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Damir Kahvedzic; Tahar Kechadi,"This paper presents DIALOG (Digital Investigation Ontology); a framework for the management, reuse, and analysis of Digital Investigation knowledge. DIALOG provides a general, application independent vocabulary that can be used to describe an investigation at different levels of detail. DIALOG is defined to encapsulate all concepts of the digital forensics field and the relationships between them. In particular, we concentrate on the Windows Registry, where registry keys are modeled in terms of both their structure and function. Registry analysis software tools are modeled in a similar manner and we illustrate how the interpretation of their results can be done using the reasoning capabilities of ontology",6,,S23,S33,Software engineering; Ontology (information science); Dialog box; Reuse; Windows Registry; Vocabulary; Field (computer science); Computer science; Interpretation (logic); Digital forensics; Data science,,,,,https://arxiv.org/pdf/1903.03061 https://arxiv.org/abs/1903.03061 https://ui.adsabs.harvard.edu/abs/2019arXiv190303061K/abstract http://arxiv.org/abs/1903.03061,http://dx.doi.org/10.1016/j.diin.2009.06.014,,10.1016/j.diin.2009.06.014,3099342706; 2098826055,,0,033-758-831-831-195; 040-393-580-637-973; 044-458-688-648-965; 066-368-942-477-890; 085-693-016-925-584; 088-197-100-998-459; 120-697-354-224-33X; 181-072-396-769-365,34,true,cc-by-nc-nd,hybrid 005-155-472-420-600,When finding nothing may be evidence of something: Anti-forensics and digital tool marks.,2019-06-03,2019,journal article,Science & justice : journal of the Forensic Science Society,18764452; 13550306,Forensic Science Society,United Kingdom,Graeme Horsman; David Errickson,"There are an abundance of measures available to the standard digital device users which provide the opportunity to act in an anti-forensic manner and conceal any potential digital evidence denoting a criminal act. Whilst there is a lack of empirical evidence which evaluates the scale of this threat to digital forensic investigations leaving the true extent of engagement with such tools unknown, arguably the field should take proactive steps to examine and record the capabilities of these measures. Whilst forensic science has long accepted the concept of toolmark analysis as part of criminal investigations, 'digital tool marks' (DTMs) are a notion rarely acknowledged and considered in digital investigations. DTMs are the traces left behind by a tool or process on a suspect system which can help to determine what malicious behaviour has occurred on a device. This article discusses and champions the need for DTM research in digital forensics highlighting the benefits of doing so.",59,5,565,572,Internet privacy; Criminal investigation; Empirical evidence; Suspect; Digital evidence; Field (computer science); Computer science; Process (engineering); Scale (social sciences); Digital forensics,Anti forensics; Crime; Digital forensics; Digital tool marks; Investigation,Computer Security; Crime; Data Anonymization; Data Compression; Disruptive Technology; Forensic Sciences/methods; Humans; Information Technology/trends; Intention,,,https://research.tees.ac.uk/en/publications/when-finding-nothing-may-be-evidence-of-something-anti-forensics- https://www.sciencedirect.com/science/article/pii/S1355030619300085 https://dspace.lib.cranfield.ac.uk/bitstream/1826/14256/4/anti-forensic_and_digital_tool_marks-2019.pdf https://pubmed.ncbi.nlm.nih.gov/31472802/ https://europepmc.org/article/MED/31472802 https://www.ncbi.nlm.nih.gov/pubmed/31472802 https://dspace.lib.cranfield.ac.uk/handle/1826/14256,http://dx.doi.org/10.1016/j.scijus.2019.06.004,31472802,10.1016/j.scijus.2019.06.004,2948024755,,0,005-102-962-333-180; 005-262-962-988-497; 005-542-560-321-688; 018-954-504-137-336; 019-851-756-578-933; 021-722-204-712-947; 023-483-803-048-547; 024-441-245-472-976; 025-319-861-345-580; 026-334-191-382-818; 027-822-961-420-892; 030-997-577-987-23X; 039-690-460-224-010; 042-705-658-682-014; 045-935-396-341-342; 048-254-765-810-067; 069-553-351-193-961; 093-551-054-279-495; 096-986-617-825-552; 144-786-887-819-307; 163-853-761-819-084,4,true,cc-by-nc-nd,green 005-178-307-029-511,Mobile Forensic on Android-based IMO Messenger Services using Digital Forensic Research Workshop (DFRWS) Method,2021-02-16,2021,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,Afif Nur Ichsan; Riadi,,174,18,34,40,Forensic science; Computer science; Multimedia; Android (operating system); Digital forensics,,,,,http://dx.doi.org/10.5120/ijca2021921076,http://dx.doi.org/10.5120/ijca2021921076,,10.5120/ijca2021921076,3129848542,,0,,1,true,,gold 005-203-277-885-748,Forensic Investigation of Google Assistant,2020-08-14,2020,journal article,SN Computer Science,2662995x; 26618907,Springer Science and Business Media LLC,,Alex Akinbi; Tom Berry,"Google Nest devices have seen a rise in demand especially with Google’s huge advantage in search engine results and a complex ecosystem that consists of a range of companion devices and compatible mobile applications integrated and interacting with its virtual assistant, Google Assistant. This study undertakes the forensics extraction and analysis of client-centric and cloud-native data remnants left behind on Android smartphones by the Google Home and Google Assistant apps used to control a Google Nest device. We identified the main database and file system storage location central to the Google Assistant ecosystem. From our analysis, we show forensic artifacts of interest associated with user account information, the chronology and copies of past voice conversations exchanged, and record of deleted data. The findings from this study describe forensic artifacts that could assist forensic investigators and can facilitate a criminal investigation.",1,5,1,10,Criminal investigation; World Wide Web; File system; Remote assistance; Complex ecosystem; Left behind; Computer science; Android (operating system),,,,,https://doi.org/10.1007/s42979-020-00285-x https://link.springer.com/article/10.1007/s42979-020-00285-x https://link.springer.com/content/pdf/10.1007/s42979-020-00285-x.pdf http://doi.org/10.1007/s42979-020-00285-x https://researchonline.ljmu.ac.uk/id/eprint/13504/ https://dblp.uni-trier.de/db/journals/sncs/sncs1.html#AkinbiB20 https://core.ac.uk/download/pdf/328711054.pdf,http://dx.doi.org/10.1007/s42979-020-00285-x,,10.1007/s42979-020-00285-x,3049748707,,0,009-747-804-607-928; 026-764-618-898-849; 039-999-270-718-277; 045-701-748-075-614; 051-558-525-539-694; 053-242-584-326-535; 054-169-114-688-281; 055-996-756-667-066; 068-459-443-764-162; 072-070-835-286-795; 081-746-298-679-238; 088-553-642-323-93X; 097-939-114-561-254; 128-985-340-093-196; 145-501-944-463-55X,4,true,cc-by,hybrid 005-232-046-693-557,Quality standards for digital forensics: Learning from experience in England & Wales,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Gillian Tully; Neil Cohen; David Compton; Gareth Davies; Roy Isbell; Tim Watson,"Abstract The Forensic Science Regulator has the role of setting quality standards for forensic science in the Criminal Justice System (CJS) in England and Wales. The current requirement is for organisations carrying out digital forensics to gain accreditation to the international standard ISO/IEC 17025 and the Forensic Science Regulator's Codes of Practice and Conduct. The aim of this requirement is to embed a systematic approach to quality, including understanding methods, validating software and systems, understanding risks, ensuring that all involved in the crime scene to court process have the skills and competence they need and the appropriate equipment and environment for the work, and providing ongoing assurance of quality through audit and proficiency tests. However, the challenge of implementing the standards in digital forensics should not be underestimated, particularly in an environment where there is insufficient capacity to meet a growing demand for services in an area of increasing complexity and fragmented delivery. It is therefore timely to review available data to determine the extent to which accreditation to ISO/IEC 17025 is addressing quality issues in digital forensics and consider what changes and resources could be made available to assist with implementation of quality systems.",32,,200905,,Competence (human resources); Criminal justice; Engineering management; Crime scene; Audit; Quality management system; International standard; Computer science; Accreditation; Digital forensics,,,,,https://doi.org/10.1016/j.fsidi.2020.200905 https://wrap.warwick.ac.uk/132247/ https://www.sciencedirect.com/science/article/pii/S2666282519300374,http://dx.doi.org/10.1016/j.fsidi.2020.200905,,10.1016/j.fsidi.2020.200905,3004228036,,0,009-512-003-529-193; 012-735-685-969-861; 017-779-541-978-693; 018-756-432-570-933; 030-178-593-043-926; 054-004-313-233-495; 072-883-816-059-106; 076-020-683-409-265; 101-436-770-235-826; 142-790-196-752-819,11,true,,green 005-412-116-848-795,Data Authentication for Wireless Sensor Networks with High Detection Efficiency Based on Reversible Watermarking,2021-06-28,2021,journal article,Wireless Communications and Mobile Computing,15308677; 15308669,Hindawi Limited,United States,Guangyong Gao; Zhao Feng; Tingting Han,"Data authentication is an important part of wireless sensor networks (WSNs). Aiming at the problems of high false positive rate and poor robustness in group verification of existing reversible watermarking schemes in WSNs, this paper proposes a scheme using reversible watermarking technology to achieve data integrity authentication with high detection efficiency (DAHDE). The core of DAHDE is dynamic grouping and double verification algorithm. Under the condition of satisfying the requirement of the group length, the synchronization point is used for dynamic grouping, and the double verification ensures that the grouping will not be confused. According to the closely related characteristics of adjacent data in WSNs, a new data item prediction method is designed based on the prediction-error expansion formula, and a flag check bit is added to the data with embedded watermarking during data transmission to ensure the stability of grouping, by which the fake synchronization point can be accurately identified. Moreover, the embedded data can be recovered accurately through the reversible algorithm of digital watermarking. Analysis and experimental results show that compared with the previously known schemes, the proposed scheme can avoid false positive rate, reduce computation cost, and own stronger grouping robustness.",2021,,1,13,Synchronization (computer science); Computer engineering; Parity bit; Digital watermarking; Authentication; Wireless sensor network; Data integrity; Computer science; Data transmission; Robustness (computer science),,,,Jiangxi Key Natural Science Foundation; Jiangxi Key Natural Science Foundation; Jiangxi Key Natural Science Foundation,https://www.hindawi.com/journals/wcmc/2021/6651137/ https://doi.org/10.1155/2021/6651137 https://dblp.uni-trier.de/db/journals/wicomm/wicomm2021.html#GaoFH21 https://downloads.hindawi.com/journals/wcmc/2021/6651137.pdf http://downloads.hindawi.com/journals/wcmc/2021/6651137.pdf,http://dx.doi.org/10.1155/2021/6651137,,10.1155/2021/6651137,3173780291,,0,004-573-303-904-247; 010-640-506-430-648; 013-254-182-755-449; 014-761-316-804-940; 016-249-275-377-638; 023-183-942-480-538; 027-713-600-996-99X; 057-901-578-042-001; 062-056-236-054-876; 110-478-875-194-559; 112-712-095-656-068; 125-038-809-893-525; 132-832-215-469-200; 133-139-587-042-583; 153-186-784-789-325; 183-373-469-194-34X,0,true,cc-by,gold 005-830-218-526-852,The Proceedings of the Seventh Annual DFRWS Europe Conference,,2020,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,32,,300944,300944,Library science; History; Environmental science; Computer science,,,,,,http://dx.doi.org/10.1016/j.fsidi.2020.300944,,10.1016/j.fsidi.2020.300944,,,0,,0,true,implied-oa,hybrid 005-966-023-558-670,Pemanfaatan Raspberry Pi untuk Hacking dan Forensic,2017-08-10,2017,journal article,Jurnal Teknik Informatika dan Sistem Informasi,24432229; 24432210,Maranatha Christian University,,Ilham Taufiqurrohman; Nur Widiyasono; Husni Mubarok,"Cybercrime because of the people who are not responsible, with the aim of damaging, modifying, and eliminating one's data, one of them with hacking techniques to be able to infiltrate into the data storage makes it easy to commit a crime. Treatment can be performed on cybercrime using forensic science as a problem solver. Cybercrime has digital evidence as traces of a criminal case, with digital evidence forensic science analysis to find out what activities performed on a criminal case. This study analyzed digital evidence on the network by utilizing Raspberry pi as a medium for hacking the network and to obtain digital evidence on the network . The method used to perform analysis of digital evidence is NIST (National Institute of Standards and Technology). Keywords – Cybercrime, Digital evidence, Forensic Science, Hacking, NIST (National Institute of Standards and Technology), Raspberry Pi",3,2,141192,,NIST; Engineering; World Wide Web; Commit; Cybercrime; Digital evidence; Raspberry pi; Criminal case; Problem solver; Computer security; Hacker,,,,,https://www.neliti.com/publications/141192/pemanfaatan-raspberry-pi-untuk-hacking-dan-forensic https://media.neliti.com/media/publications/141192-ID-pemanfaatan-raspberry-pi-untuk-hacking-d.pdf,http://dx.doi.org/10.28932/jutisi.v3i2.604,,10.28932/jutisi.v3i2.604,2755735319,,0,,0,true,, 006-100-694-533-57X,Eighth Annual DFRWS Europe Conference,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Babak Habibnia; Jan-Niclas Hilgert,,36,,301148,,,,,,,https://api.elsevier.com/content/article/PII:S2666281721000524?httpAccept=text/xml,http://dx.doi.org/10.1016/j.fsidi.2021.301148,,10.1016/j.fsidi.2021.301148,3140498199,,0,,0,false,, 006-113-875-322-387,Review Tools Web Browser Forensics untuk Mendukung Pencarian Bukti Digital,2019-04-23,2019,journal article,Jurnal Edukasi dan Penelitian Informatika (JEPIN),25489364; 24600741,Tanjungpura University,,Muhammad Fajar Sidiq; Muhammad Nur Faiz,"Perkembangan penggunaan internet yang semakin; banyak setiap tahunnya mengakibatkan penggunaan web; browser juga meningkat. Hal ini berdampak pada kejahatan; dengan menggunakan web browser juga meningkat seperti; penyalahgunaan email, hoax, hate speech, penipuan dan; lainnya. Penelitian ini menunjukkan pentingnya mengenali; aktivitas penggunaan web browser dari sisi korban dan; pelaku. Penggunaan web browser ini akan menentukan pola; atau alur kejahatan pada suatu insiden kejahatan. Hal ini; akan membantu penyidik dalam menganalisis bukti digital; secara cepat dan dapat mengungkap jenis kejahatan yang; terjadi secara baik. Bukti digital yang dianalisis seperti; akun, kata kunci pencarian, kunjungan web, dan lainnya.; Penelitian ini memberikan penjelasan lokasi penyimpanan; bukti digital, format waktu yang digunakan dan 10 tools; yang digunakan penyidik dalam mengungkap kejahatan; dengan media web browser seperti Google Chrome, Mozilla; Firefox, Internet Explorer, Safari dan Opera.",5,1,67,,,,,,,http://repository.ittelkom-pwt.ac.id/5433/ https://core.ac.uk/download/pdf/294889016.pdf,http://dx.doi.org/10.26418/jp.v5i1.31430,,10.26418/jp.v5i1.31430,2942897138,,0,,2,true,cc-by-nc-sa,gold 006-217-155-335-733,Linguistic Difficulties for Translators and Interpreters: The Case of Forensic Law and Science Documents,2017-12-31,2017,journal article,Journal of Integrated OMICS,21820287,Proteomass Scientific Society,,Vázquez y del Árbol; Esther Inmaculada,"Forensic Science (or Forensics) holds various fields of science (Psychology, Pathology, Odontology, Toxicology, Digital Forensics, to cite a few) involved in solving crimes and offences at any stage in criminal proceedings and researches. On the other hand, Forensic Law is a legal branch that involves issues related to forensic techniques in a justice system (being thus linked to Criminology, Criminal Law, and Civil Law). The intersection of Science and Law contributes to finding out the truth of a case, either criminal or civil, and they both have undergone dramatic progress in recent years. The aforementioned intersection provides specialists with a considerable amount of documents, either electronic or paperback…and they often need to be translated or interpreted into other languages. The high level of technical terms, complex nouns and phraseology, hamper their translation, interpreting, and proofreading services. In this paper, we will provide the reader with the main linguistic features of Forensic Science and Law Discourse, matched with source texts and target texts. By means of the use of original Forensic documents, we will provide translators and interpreters with techniques and strategies for facing their translation and proofreading.",7,2,,,Noun; Interpreter; Economic Justice; Law; Intersection; Criminal law; Phraseology; Linguistics; Civil law (common law); Digital forensics,,,,,http://www.jiomics.com/index.php/jio/article/viewArticle/218,http://dx.doi.org/10.5584/jiomics.v7i2.218,,10.5584/jiomics.v7i2.218,2778810560,,0,,0,false,, 006-299-955-350-458,Forensic Taxonomy of Android Social Apps.,2016-11-28,2016,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Abdullah Azfar; Kim-Kwang Raymond Choo; Lin Liu,"An Android social app taxonomy incorporating artifacts that are of forensic interest will enable users and forensic investigators to identify the personally identifiable information (PII) stored by the apps. In this study, 30 popular Android social apps were examined. Artifacts of forensic interest (e.g., contacts lists, chronology of messages, and timestamp of an added contact) were recovered. In addition, images were located, and Facebook token strings used to tie account identities and gain access to information entered into Facebook by a user were identified. Based on the findings, a two-dimensional taxonomy of the forensic artifacts of the social apps is proposed. A comparative summary of existing forensic taxonomies of different categories of Android apps, designed to facilitate timely collection and analysis of evidentiary materials from Android devices, is presented.",62,2,435,456,Internet privacy; Timestamp; Engineering; World Wide Web; Forensic science; Personally identifiable information; Access to information; Security token; Android (operating system); Mobile device forensics; Digital forensics,digital forensics; forensic science; forensic taxonomy; mobile app forensics; mobile forensics; social app taxonomy,,,,https://dialnet.unirioja.es/servlet/articulo?codigo=5874784 https://pubmed.ncbi.nlm.nih.gov/27892599/ https://www.ncbi.nlm.nih.gov/pubmed/27892599 https://onlinelibrary.wiley.com/doi/10.1111/1556-4029.13267,http://dx.doi.org/10.1111/1556-4029.13267,27892599,10.1111/1556-4029.13267,2557698442,,0,000-132-422-881-51X; 003-504-554-245-316; 009-386-221-930-423; 010-286-028-596-352; 024-894-908-869-686; 025-723-055-730-999; 028-198-596-968-736; 035-774-540-182-749; 045-701-748-075-614; 056-955-029-329-402; 065-857-927-906-643; 065-873-523-989-876; 068-561-870-711-787; 077-859-446-810-741; 080-226-855-967-158; 087-077-385-611-63X; 088-938-096-763-07X; 094-295-279-676-447; 095-313-015-283-204; 096-289-210-165-616; 102-511-394-465-006; 103-780-162-448-09X; 104-026-342-808-170; 109-689-058-252-063; 149-652-288-741-18X; 154-807-851-760-385; 166-183-210-534-575; 180-912-965-167-296,20,false,, 006-547-918-021-380,Accreditation of forensic science service providers,2019-04-25,2019,journal article,Journal of forensic and legal medicine,18787487; 1752928x,Churchill Livingstone,Netherlands,Carole McCartney; Emmanuel Nsiah Amoako,Short commentary on the new UK Accreditation of Forensic Service Providers Regulations 2018.,65,,143,145,Service provider; Forensic science; Business; Medical education; Accreditation,Accreditation; Forensic regulation; Forensic science,Accreditation; Forensic Sciences/standards; Government Regulation; Humans; Quality Control; United Kingdom,,,https://www.ncbi.nlm.nih.gov/pubmed/31202474 https://pubmed.ncbi.nlm.nih.gov/31202474/ https://northumbria-test.eprints-hosting.org/id/document/269043 http://nrl.northumbria.ac.uk/39089/ https://researchportal.northumbria.ac.uk/en/publications/accreditation-of-forensic-science-service-providers https://www.sciencedirect.com/science/article/pii/S1752928X19300253 https://researchportal.northumbria.ac.uk/files/19685229/AAM_Accreditation_of_forensic_science_service_providers.pdf https://core.ac.uk/download/196579775.pdf,http://dx.doi.org/10.1016/j.jflm.2019.04.004,31202474,10.1016/j.jflm.2019.04.004,2941540110,,0,016-557-153-999-724; 027-010-526-468-230; 122-039-553-312-875; 154-531-323-200-937; 187-534-710-128-032,5,true,,green 006-638-571-383-289,Column: File Cabinet Forensics,,2011,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Simson L. Garfinkel,"Researchers can spend their time reverse engineering, performing reverse analysis, or making substantive contributions to digital forensics science. Although work in all of these areas is important, it is the scientific breakthroughs that are the most critical for addressing the challenges that we face. Reverse Engineering is the traditional bread-and-butter of digital forensics research. Companies like Microsoft and Apple deliver computational artifacts (operating systems, applications and phones) to the commercial market. These artifacts are bought and used by billions. Some have evil intent, and (if society is lucky), the computers end up in the hands of law enforcement. Unfortunately the original vendors rarely provide digital forensics tools that make their systems amenable to analysis by law enforcement. Hence the need for reverse engineering. (see PDF for full column)",6,4,7,10,Cabinet (file format); Reverse engineering; Law enforcement; Reverse analysis; Computer security; Computer science; Computer forensics; Digital forensics,,,,,https://core.ac.uk/display/92108058 https://commons.erau.edu/jdfsl/vol6/iss4/1/ https://commons.erau.edu/cgi/viewcontent.cgi?article=1103&context=jdfsl https://dblp.uni-trier.de/db/journals/jdfsl/jdfsl6.html#Garfinkel11a,http://dx.doi.org/10.15394/jdfsl.2011.1103,,10.15394/jdfsl.2011.1103,1584079029,,0,,1,true,cc-by-nc,gold 006-713-021-855-162,Forensic analysis of GPT disks and GUID partition tables,,2009,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Bruce J. Nikkel,,6,1,39,47,Operating system; Software engineering; Forensic science; Terabyte; Partition (database); GUID Partition Table; Target audience; Boot camp; Computer science; BIOS; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/di/di6.html#Nikkel09 https://digitalforensics.ch/nikkel09.pdf https://www.sciencedirect.com/science/article/pii/S1742287609000590 https://doi.org/10.1016/j.diin.2009.07.001 http://www.sciencedirect.com/science/article/pii/S1742287609000590 https://dl.acm.org/doi/10.1016/j.diin.2009.07.001 https://dx.doi.org/10.1016/j.diin.2009.07.001 http://dx.doi.org/10.1016/j.diin.2009.07.001,http://dx.doi.org/10.1016/j.diin.2009.07.001,,10.1016/j.diin.2009.07.001,2084628006,,4,044-824-981-491-378; 085-214-277-668-01X; 167-782-964-015-318,7,false,, 006-794-410-339-126,Energy-based linear PCM audio recovery method of impaired MP4 file stored in dashboard camera memory,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Park Nam In; JiWoo Lee; Lim Seong Ho; Byun Jun Seok; Gi-Hyun Na; Oc-Yeub Jeon; Jung Hwan Lee,,39,,301274,,Frame (networking); Artificial intelligence; Pulse-code modulation; MUSHRA; Event data recorder; Computer vision; Dashboard; Computer science; Spectrogram; Audio signal; Dynamic time warping,,,,,https://www.sciencedirect.com/science/article/abs/pii/S266628172100192X,http://dx.doi.org/10.1016/j.fsidi.2021.301274,,10.1016/j.fsidi.2021.301274,3199876407,,0,010-127-508-296-844; 030-871-126-053-960; 034-927-240-304-052; 043-261-465-467-889; 050-857-984-627-89X; 074-145-325-661-168; 078-519-401-333-983; 080-240-167-261-195; 086-326-264-957-173; 100-881-033-777-296; 106-258-897-750-369; 115-135-564-414-881; 121-670-537-204-258; 181-934-068-826-961,2,false,, 006-913-837-645-666,The Definition of Digital Criminalistics as the Origin of a Misleading Direction in Science. Part 1,2021-02-18,2021,journal article,Legal education and science,18131190,The Publishing Group Jurist,,Oleg S. Kuchin; Yaroslava O. Kuchina,"Purpose. To compare and analyze the trend of appearance of the pseudo-term “digital criminology” in the science of criminology and prove that this is incorrect. Methodology: induction, deduction, synthesis, analysis, formal legal method, comparative legal method, logical method. Conclusions. The evolution of methods of committing crimes and instruments of crime does not always require the evolution of the science of criminology and the emergence of its varieties. You just have to assess the prospects of extrapolative ways and methods of proving the circumstances of the crimes in the era of digitalization of social relations, in terms of the provisions of modern criminal law and only criminal-legal research unit. The definition of “digital criminalistics”, which has recently appeared in science, actually misleads the scientific community with its novelty and originality, since such criminalistics in nature does not exist a priori. It is necessary to speak only about forensic or expert research of carriers of digital (electronic or computer) information. In criminalistics, it is logical to develop a new direction-the forensic study of electronic media of digital information and the use of computer expertise in establishing all the circumstances of the crime committed. And this is just a new section of forensic technology, studying a new subject of research for this naki. Here, the traditional forensic methodology should be applied, which will be aimed “atlinking” the electronic carrier of digital information and the digital information itself to a specific crime and to a specific person. Scientific and practical significance. The research is aimed at orienting forensic theory and practice towards the study of specific objects and contributes to the fact that all these studies are further applicable to the practice of crime investigation, and not only for theoretical purposes.",2,,20,29,Epistemology; Philosophy,,,,,http://dx.doi.org/10.18572/1813-1190-2021-2-20-29,http://dx.doi.org/10.18572/1813-1190-2021-2-20-29,,10.18572/1813-1190-2021-2-20-29,3217095289,,0,,0,true,,bronze 006-933-430-647-14X,Raiders of the lost artefacts:: championing the need for digital forensics research,,2019,journal article,Forensic Science International: Reports,26659107,Elsevier BV,,Graeme Horsman,"Abstract In digital forensics, the concept of a ‘digital artefact’ exists; coined here as ‘a digital object containing data which may describe the past, present or future use or function of a piece of software, application or device for which it is attributable to’. In almost all digital investigations, a practitioner will query any digital artefacts resident on any device subject to examination in order to establish the presence of potentially evidential information. Whilst on face value this task appears straightforward, in reality, the pace of change within technology can lead to a practitioner encountering many unknown or previously unseen artefacts with undocumented functionalities. This creates state of ‘catch-up’ in regards to investigatory techniques and knowledge as practitioners must seek to ascertain the relevance of such data through additional research and testing. Yet, the demands placed upon the role of the practitioner may prevent engagement in the testing and evaluation of new digital artefacts, leaving them reliant on the timely publication and dissemination of forensic research (whether academic, industry or vendor produced) as a support mechanism. Whilst digital artefact research has a clear applied value, the difficulty of measuring its impact means that it may not always be considered of worth by academic communities and their publication platforms. As a result, this work champions the need for ‘digital artefact’ research, calling for increased engagement in this form of research to support the forensic community.",1,,100003,,Internet privacy; Relevance (law); Value (ethics); Vendor; Pace; Task (project management); Computer science; State (computer science); Function (engineering); Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S2665910719300039 https://research.tees.ac.uk/ws/files/8434501/Raiders_of_the_lost_artefacts.pdf https://research.tees.ac.uk/en/publications/raiders-of-the-lost-artefacts-championing-the-need-for-digital-fo https://core.ac.uk/download/pdf/228323042.pdf,http://dx.doi.org/10.1016/j.fsir.2019.100003,,10.1016/j.fsir.2019.100003,2952510125,,0,007-790-059-029-953; 040-711-141-878-573; 047-386-524-667-691; 049-131-797-799-081; 061-269-967-405-492; 067-577-414-064-539; 075-950-021-558-098; 102-243-142-344-71X; 111-488-239-742-003; 118-214-115-485-064; 128-694-144-138-385; 142-790-196-752-819,13,true,"CC BY, CC BY-NC-ND",gold 007-109-733-072-858,EU_2023_Ad,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,42,,301425,301425,Environmental science,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00106-8,,10.1016/s2666-2817(22)00106-8,,,0,,0,false,, 007-130-011-487-396,COMPUTATIONAL INTELLIGENCE IN IDENTIFYING COUNTERFEIT DOCUMENTS,2017-04-01,2017,journal article,Journal of emerging technologies and innovative research,23495162,,,Amudha L; T. M. Nithya; J. Ramya,"Digital Forensics is a branch of forensic science that encompases the recovery and investigation of details found in digital devices. Digital Evidence is information found among a variety of electronic devices like CD, pen drive, hard disk or even mobile phones that is useful in legal systems. The use of digital evidences in criminal and civil investigations is taking a major role in recent years. These evidences are equivalent to fingerprints, DNA pattern or iris pattern that is unique for any person. There is still some limitation, where the digital evidence may be misleading. Anyhow, at the end it is the court to decide whether the digital forensic evidence of that investigation is reliable or not. Also with the increasing prevalence of mobile phones, forensic evidences collected from mobile devices are becoming an invaluable source of evidence. This paper shows digital forensics in a different perspective, and analyses the existing methods of digital forensics. The results are checked with all the existing methods and appropriate matching for specific type of forensic evidence like PAN number, Voter ID, AAthar card, etc.with a forensic method.",4,4,217-219,217-219,Iris recognition; Variety (cybernetics); Computational intelligence; Matching (statistics); Mobile device; Data science; Counterfeit; Digital evidence; Computer science; Digital forensics,,,,,https://www.jetir.org/view?paper=JETIR1704054 https://www.jetir.org/papers/JETIR1704054.pdf,https://www.jetir.org/view?paper=JETIR1704054,,,3009357784,,0,,0,false,, 007-237-563-451-826,Application of the Electrical Network Frequency (ENF) Criterion. A case of a digital recording.,2005-12-20,2005,journal article,Forensic science international,03790738; 18726283,Elsevier Ireland Ltd,Netherlands,Mateusz Kajstura; Agata Trawinska; Jacek Hebenstreit,,155,2,165,171,Fundamental frequency; Signal; Data mining; Electrical network; Digital recording; Electrical network frequency; Computer science; Signal integrity; Telecommunications; Digital audio,,,,,https://www.sciencedirect.com/science/article/pii/S0379073804007662 https://europepmc.org/article/MED/16226153 https://dialnet.unirioja.es/servlet/articulo?codigo=1316539 https://pubmed.ncbi.nlm.nih.gov/16226153/ https://www.ncbi.nlm.nih.gov/pubmed/16226153 http://www.sciencedirect.com/science/article/pii/S0379073804007662,http://dx.doi.org/10.1016/j.forsciint.2004.11.015,16226153,10.1016/j.forsciint.2004.11.015,1544847463,,1,,43,false,, 007-352-917-991-314,Detecting deepfake videos based on spatiotemporal attention and convolutional LSTM,,2022,journal article,Information Sciences,00200255; 18726291,Elsevier BV,Netherlands,Beijing Chen; Tianmu Li; Weiping Ding,,601,,58,70,Computer science; Frame (networking); Mechanism (biology); Artificial intelligence; Face (sociological concept); Pattern recognition (psychology); Dimension (graph theory); Machine learning; Mathematics; Telecommunications; Social science; Philosophy; Epistemology; Sociology; Pure mathematics,,,,National Natural Science Foundation of China; Jiangsu Province Natural Science Foundation; Priority Academic Program Development of Jiangsu Higher Education Institutions,,http://dx.doi.org/10.1016/j.ins.2022.04.014,,10.1016/j.ins.2022.04.014,,,0,005-395-192-170-507; 014-388-356-015-011; 021-409-127-882-764; 033-194-605-427-505; 033-928-519-356-675; 034-965-490-931-611; 053-094-537-530-97X; 079-707-434-066-062; 085-781-891-153-201,4,false,, 007-418-655-737-904,Mining Frequent Sequences for Emails in Cyber Forensics Investigation,2014-01-16,2014,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,Priyanka V. Kayarkar; Prashant Ricchariaya; Anand Motwani,"The goal of Digital forensics process is to preserve any evidence in its most original form while performing a structured investigation by collecting, identifying and validating the digital information for the investigation of particular digital crime. Today we are living in the information age, all the information which is transferred over the internet is through the digital devices. With the advent of world-wide web, advanced forms of digital crimes came into picture. Criminal uses the Digital devices to commit Digital crime, so for the investigation forensic Experts have to adopt practical frameworks and methods to recover data for analysis which can comprise as evidence. Investigation of Digital forensics adopts three essential processes: Data Generation, Data Preparation and Data warehousing. Data Mining has unlimited potential in the field of Digital Forensics. Computer forensics is an emerging discipline investigating the computer crime. In this paper we are introducing the cyber Forensics using Sequence Mining algorithm, by comparing it with association rule mining algorithm parameters.",85,17,1,6,The Internet; Data warehouse; World Wide Web; Forensic science; Computer science; Test data generation; Computer forensics; Digital forensics; Information Age,,,,,https://research.ijcaonline.org/volume85/number17/pxc3893332.pdf https://www.ijcaonline.org/archives/volume85/number17/14930-3332,http://dx.doi.org/10.5120/14930-3332,,10.5120/14930-3332,2164121335,,0,003-448-142-212-67X; 003-868-023-351-977; 037-927-986-476-095; 065-520-849-771-46X; 102-602-192-826-532; 115-547-184-477-216,3,true,,bronze 007-472-656-084-228,"Digital Forensic Investigation Models, an Evolution study",2015-05-01,2015,journal article,Journal of Information Systems and Technology Management,18071775,TECSI,,Khuram Mushtaque; Kamran Ahsan; Ahmer Umer,"In business today, one of the most important segments that enable any business to get competitive advantage over others is appropriate, effective adaptation of Information Technology into business and then managing and governing it on their will. To govern IT organizations need to identify value of acquiring services of forensic firms to compete cyber criminals. Digital forensic firms follow different mechanisms to perform investigation. Time by time forensic firms are facilitated with different models for investigation containing phases for different purposes of the entire process. Along with forensic firms, enterprises also need to build a secure and supportive platform to make successful investigation process possible. We have underlined different elements of organizations in Pakistan; need to be addressed to provide support to forensic firms.",12,2,233,243,Information technology; Engineering; Value (ethics); Cyber crime; Digital forensic investigation; Computer security; Process (engineering); Knowledge management; Competitive advantage; Digital forensics; Adaptation (computer science),,,,,https://www.scielo.br/j/jistm/a/QvqXxDdsP3H73f9WQZFcnTq/ https://www.scielo.br/scielo.php?script=sci_abstract&pid=S1807-17752015000200233&lng=en&tlng=en http://www.jistem.tecsi.org/index.php/jistem/article/view/10.4301%252FS1807-17752015000200003/518 https://www.redalyc.org/pdf/2032/203242219003.pdf https://dialnet.unirioja.es/descarga/articulo/7140257.pdf https://dialnet.unirioja.es/servlet/articulo?codigo=7140257 http://www.jistem.tecsi.org/index.php/jistem/article/download/10.4301%252FS1807-17752015000200003/518 http://www.scielo.br/j/jistm/a/QvqXxDdsP3H73f9WQZFcnTq/ http://www.scielo.br/pdf/jistm/v12n2/1807-1775-jistm-12-2-0233.pdf https://www.revistas.usp.br/jistem/article/download/103614/102079 http://www.jistem.fea.usp.br/index.php/jistem/article/view/10.4301%252FS1807-17752015000200003/0 https://www.revistas.usp.br/jistem/article/view/103614,http://dx.doi.org/10.4301/s1807-17752015000200003,,10.4301/s1807-17752015000200003,2106074629,,0,000-030-282-550-737; 003-741-821-824-144; 004-872-169-627-620; 018-793-813-440-406; 024-490-630-280-349; 035-073-000-911-822; 041-555-963-265-631; 042-160-783-751-093; 069-713-573-886-448; 084-559-361-318-175; 132-355-634-397-986,3,true,cc-by-nc,gold 007-542-115-031-618,"Digital forensics in cyber security - recent trends, threats, and opportunities",2020-07-08,2020,journal article,Periodicals of Engineering and Natural Sciences (PEN),23034521,,,Mohammed I. Alghamdi,"The rapid technological advancement has led the entire world to shift towards digital domain. However, this transition has also result in the emergence of cybercrimes and security breach incidents that threatens the privacy and security of the users. Therefore, this paper aimed at examining the use of digital forensics in countering cybercrimes, which has been a critical breakthrough in cybersecurity. The paper has analyzed the most recent trends in digital forensics, which include cloud forensics, social media forensics, and IoT forensics. These technologies are helping the cybersecurity professionals to use the digital traces left by the data storage and processing to keep data safe, while identifying the cybercriminals. However, the research has also observed specific threats to digital forensics, which include technical, operational and personnel-related challenges. The high complexity of these systems, large volume of data, chain of custody, the integrity of personnel, and the validity and accuracy of digital forensics are major threats to its large-scale use. Nevertheless, the paper has also observed the use of USB forensics, intrusion detection and artificial intelligence as major opportunities for digital forensics that can make the processes easier, efficient, and safe.",8,3,1321,1330,Chain of custody; Cloud forensics; Technological advance; High complexity; Intrusion detection system; Computer security; Computer science; Social media; Internet of Things; Digital forensics,,,,,http://pen.ius.edu.ba/index.php/pen/article/download/1463/616 http://pen.ius.edu.ba/index.php/pen/article/view/1463,http://pen.ius.edu.ba/index.php/pen/article/view/1463,,,3083231950,,0,,2,false,, 007-700-398-690-971,Dispersive liquid-liquid microextraction combined with digital image colorimetry for paracetamol analysis,,2021,journal article,Microchemical Journal,0026265x,Elsevier BV,Netherlands,Rajeev Jain; Rakesh Roshan Jha; Aparna Kumari; Indu Khatri,,162,,105870,,Detection limit; Coefficient of determination; Materials science; Calibration curve; Liquid liquid; Quantitative determination; Digital image; Chromatography; Colorimetry (chemical method); Central composite design,,,,,https://www.sciencedirect.com/science/article/pii/S0026265X20338121,http://dx.doi.org/10.1016/j.microc.2020.105870,,10.1016/j.microc.2020.105870,3112909340,,0,001-236-366-635-607; 003-997-204-990-20X; 007-037-508-166-196; 010-140-545-491-100; 010-229-315-807-481; 016-695-190-611-819; 017-176-032-418-070; 018-733-986-763-129; 021-388-183-949-337; 025-793-293-774-296; 027-288-762-082-889; 029-203-908-714-883; 029-983-050-650-240; 030-799-869-807-221; 038-038-452-929-551; 041-156-330-365-079; 041-593-940-575-87X; 043-446-079-638-118; 045-086-805-480-981; 045-445-929-605-194; 046-941-365-395-847; 047-553-969-530-60X; 048-450-042-793-548; 057-138-133-582-199; 059-226-540-721-494; 059-274-064-501-63X; 070-874-257-101-429; 074-209-158-590-656; 084-677-673-901-842; 088-117-146-639-459; 100-910-042-269-605; 107-619-012-624-101; 112-961-499-641-054; 113-352-602-728-40X; 115-626-372-361-726; 123-018-099-670-544; 128-658-828-676-055; 130-752-809-473-802; 135-843-181-395-33X; 139-106-310-690-155,8,false,, 007-868-297-443-532,Digital forensics as a service: Stepping up the game,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,H.M.A. van Beek; J. van den Bos; A. Boztas; E.J. van Eijk; R. Schramp; M. Ugen,"Abstract After providing Digital Forensics as a Service (DFaaS) implementations to law enforcement agencies for close to a decade, we present our view from an inside-out perspective. We share the lessons learned from an organizational, operational and development perspective in a forensic and legal context. We conclude with our vision on how to bring the DFaaS concept to the next level for both investigative and innovative purposes.",35,,301021,,Perspective (graphical); Data science; Implementation; Context (language use); Law enforcement; Service (systems architecture); Computer science; Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S2666281720300706 https://dblp.uni-trier.de/db/journals/di/di35.html#BeekBBESU20,http://dx.doi.org/10.1016/j.fsidi.2020.301021,,10.1016/j.fsidi.2020.301021,3080100402,,0,000-360-120-513-679; 004-611-973-316-051; 009-998-989-670-005; 011-051-740-313-213; 012-564-492-558-122; 015-461-906-719-684; 035-031-257-128-045; 035-253-391-245-692; 038-793-093-462-716; 039-365-534-871-351; 040-567-901-099-238; 046-857-308-211-173; 050-513-243-638-138; 053-363-195-142-469; 055-166-120-045-285; 056-715-378-869-201; 060-786-957-279-751; 061-549-181-856-861; 062-486-998-356-491; 064-185-555-697-856; 065-643-019-434-19X; 065-671-045-136-370; 067-938-325-014-282; 087-342-951-350-054; 099-111-104-586-32X; 118-244-930-021-861; 125-939-677-745-616; 134-927-490-231-285; 163-330-758-807-944; 166-178-398-716-39X; 167-192-182-132-499; 167-740-265-127-825,6,true,cc-by-nc-nd,hybrid 007-898-145-584-667,Using computed similarity of distinctive digital traces to evaluate non-obvious links and repetitions in cyber-investigations,,2018,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Timothy Bollé; Eoghan Casey,"Abstract This work addresses the challenge of discerning non-exact or non-obvious similarities between cybercrimes, proposing a new approach to finding linkages and repetitions across cases in a cyber-investigation context using near similarity calculation of distinctive digital traces. A prototype system was developed to test the proposed approach, and the system was evaluated using digital traces collected during actual cyber-investigations. The prototype system also links cases on the basis of exact similarity between technical characteristics. This work found that the introduction of near similarity helps to confirm already existing links, and exposes additional linkages between cases. Automatic detection of near similarities across cybercrimes gives digital investigators a better understanding of the criminal context and the actual phenomenon, and can reveal a series of related offenses. Using case data from 207 cyber-investigations, this study evaluated the effectiveness of computing similarity between cases by applying string similarity algorithms to email addresses. The Levenshtein algorithm was selected as the best algorithm to segregate similar email addresses from non-similar ones. This work can be extended to other digital traces common in cybercrimes such as URLs and domain names. In addition to finding linkages between related cybercrime at a technical level, similarities in patterns across cases provided insights at a behavioral level such as modus operandi (MO). This work also addresses the step that comes after the similarity computation, which is the linkage verification and the hypothesis formation. For forensic purposes, it is necessary to confirm that a near match with the similarity algorithm actually corresponds to a real relation between observed characteristics, and it is important to evaluate the likelihood that the disclosed similarity supports the hypothesis of the link between cases. This work recommends additional information, including certain technical, contextual and behavioral characteristics that could be collected routinely in cyber-investigations to support similarity computation and link evaluation.",24,,S2,S9,String metric; Information retrieval; Relation (database); Cybercrime; Context (language use); Digital evidence; Computer science; Linkage (mechanical); Digital forensics; Similarity (network science),,,,,https://www.sciencedirect.com/science/article/pii/S1742287618300343 https://dblp.uni-trier.de/db/journals/di/di24.html#BolleC18 https://www.sciencedirect.com/science/article/abs/pii/S1742287618300343 https://serval.unil.ch/resource/serval:BIB_2F1A43ACD87E.P001/REF.pdf https://serval.unil.ch/notice/serval:BIB_2F1A43ACD87E https://core.ac.uk/download/226982669.pdf,http://dx.doi.org/10.1016/j.diin.2018.01.002,,10.1016/j.diin.2018.01.002,2792308754,,0,003-681-865-438-817; 017-176-620-267-416; 019-879-677-931-334; 037-527-626-001-907; 042-944-602-727-47X; 044-898-668-023-385; 046-777-369-251-275; 060-820-214-935-558; 065-371-008-254-47X; 068-834-253-493-332; 077-684-580-099-346; 081-937-693-264-501; 105-284-007-246-172; 117-605-535-046-57X; 123-771-006-320-415; 179-776-256-587-344,8,true,cc-by-nc-nd,hybrid 007-902-133-940-280,Computer forensics: Are you qualified?,,2008,journal article,Computer Fraud & Security,13613723,Mark Allen Group,United Kingdom,Dario Forte,Industry literature is full of references and diagrams that indicate the level of technical skill required to perform digital investigations in general and computer forensics in particular.,2008,12,18,20,Technical skills; Computer science; Multimedia; Computer forensics,,,,,http://www.sciencedirect.com/science/article/pii/S1361372308701799 https://www.sciencedirect.com/science/article/abs/pii/S1361372308701799,http://dx.doi.org/10.1016/s1361-3723(08)70179-9,,10.1016/s1361-3723(08)70179-9,1965214362,,0,140-247-756-261-464,4,false,, 008-243-103-276-518,Facilitating Electromagnetic Side-Channel Analysis for IoT Investigation: Evaluating the EMvidence Framework,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Asanka Sayakkara; Nhien-An Le-Khac; Mark Scanlon,"Abstract The Internet of Things (IoT) has opened up new opportunities for digital forensics by providing new sources of evidence. However, acquiring data from IoT is not a straightforward task for multiple reasons including the diversity of manufacturers, the lack of standard interfaces, the use of light-weight data encryption, e.g. elliptic curve cryptography (ECC), etc. Electromagnetic side-channel analysis (EM-SCA) has been proposed as a new approach to acquire forensically useful data from IoT devices. However, performing successful EM-SCA attacks on IoT devices requires domain knowledge and specialised equipment that are not available to most digital forensic investigators. This work presents the methodology behind and an evaluation of a framework, EMvidence, that enables forensic investigators to acquire evidence from IoT devices through EM-SCA. This framework helps to automate and perform electromagnetic side-channel evidence collection for forensic purposes. An evaluation of the framework is performed by applying it to multiple realistic digital investigation scenarios. In the case of attacking ECC cryptographic operations, the evaluation demonstrates that the volume of EM data that needs to be stored and processed can be significantly reduced using the framework's machine learning based approach.",33,,301003,,Human–computer interaction; Volume (computing); Encryption; Elliptic curve cryptography; Cryptography; Domain knowledge; Task (project management); Computer science; Side channel attack; Digital forensics,,,,,https://dfrws.org/wp-content/uploads/2020/10/2020_USA_paper-facilitating_electromagnetic_side-channel_analysis_for_iot_investigation__evaluating_the_emvidence_framework.pdf https://forensicsandsecurity.com/papers/EvaluatingEMvidence.pdf https://dfrws.org/presentation/facilitating-electromagnetic-side-channel-analysis-for-iot-investigation-evaluating-the-emvidence-framework/ https://forensicsandsecurity.com/papers/EvaluatingEMvidence.php https://www.sciencedirect.com/science/article/pii/S2666281720302523,http://dx.doi.org/10.1016/j.fsidi.2020.301003,,10.1016/j.fsidi.2020.301003,3025548592,,0,001-799-840-106-411; 012-867-377-866-486; 017-335-677-993-203; 018-772-801-528-344; 023-318-629-736-547; 024-831-771-938-864; 027-163-958-987-808; 033-089-942-594-860; 036-198-835-759-991; 038-052-594-652-085; 039-627-889-157-293; 041-869-362-153-337; 042-636-923-996-676; 051-174-262-378-725; 051-870-124-075-370; 054-169-114-688-281; 060-369-813-003-88X; 064-092-804-942-240; 076-175-512-198-703; 079-726-245-728-809; 081-833-857-658-915; 083-134-473-348-002; 091-352-470-901-517; 092-706-635-239-595; 105-351-791-012-122; 110-311-156-990-220; 133-753-731-718-112; 137-755-137-054-864; 160-370-472-488-703,2,true,cc-by-nc-nd,hybrid 008-346-665-933-569,Prelim iii - Contents List,,2020,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,32,,300940,300940,Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(20)30102-5,,10.1016/s2666-2817(20)30102-5,,,0,,0,true,,bronze 008-585-027-827-022,Digital forensics: pre-conference workshop,2011-12-01,2011,journal article,Journal of Computing Sciences in Colleges,19374763,,,Crystal Edge,"This workshop demonstrates selected topics from an introductory digital forensics course within the context of a class project. Topics include general cell phone forensics, Windows forensics, data carving, forensic imaging, file signature analysis, registry analysis, volatile memory analysis, and other selected topics. The presenter taught this course during the Spring 2011 semester, and the final class project was to write, produce, and perform a short play that demonstrates potential uses and methods of digital forensics in a legal investigation. Students were to draw from the knowledge and skills gained from their lab experiences, which were the primary method of instruction throughout the course. In this tutorial, the attendees will see recorded scenes from that class project, and watch demonstrations of several techniques and tools demonstrated in the play.",27,2,98,98,Forensic science; Class (computer programming); Context (language use); Legal investigation; Forensic imaging; Computer science; Multimedia; Mobile device forensics; Digital forensics,,,,,http://dl.acm.org/citation.cfm?id=2038836.2038849,http://dl.acm.org/citation.cfm?id=2038836.2038849,,,2993909083,,0,,0,false,, 008-782-115-725-766,The Search and Seizure of Digital Evidence by Forensic Investigators in South Africa,2019-04-25,2019,journal article,Potchefstroom Electronic Law Journal,17273781,Academy of Science of South Africa,,Jacobus Gerhardus Nortje; Daniel Christoffel Myburgh,"The discipline of digital forensics requires a combination of skills, qualifications and knowledge in the area of forensic investigation, legal aspects and information technology. The uniqueness of digital evidence makes the adoption of traditional legal approaches problematic.; Information technology terminology is currently used interchangeably without any regard to being unambiguous and consistent in relation to legal texts. Many of the information technology terms or concepts have not yet achieved legal recognition.; The recognition and standardisation of terminology within a legal context are of the utmost importance to ensure that miscommunication does not occur.; To provide clarity or guidance on some of the terms and concepts applicable to digital forensics and for the search and seizure of digital evidence, some of the concepts and terms are reviewed and discussed, using the Criminal Procedure Act 51 of 1977 as a point of departure.; Digital evidence is often collected incorrectly and analysed ineffectively or simply overlooked due to the complexities that digital evidence poses to forensic investigators. As with any forensic science, specific regulations, guidelines, principles or procedures should be followed to meet the objectives of investigations and to ensure the accuracy and acceptance of findings. These regulations, guidelines, principles or procedures are discussed within the context of digital forensics: what processes should be followed and how these processes ensure the acceptability of digital evidence. These processes include international principles and standards such as those of the Association of Chiefs of Police Officers and the International Organisation of Standardisation. A summary is also provided of the most influential or best-recognised international (IOS) standards on digital forensics.; It is concluded that the originality, reliability, integrity and admissibility of digital evidence should be maintained as follows:; ; Data should not be changed or altered.; Original evidence should not be directly examined.; Forensically sound duplicates should be created.; Digital forensic analyses should be performed by competent persons.; Digital forensic analyses should adhere to relevant local legal requirements.; Audit trails should exist consisting of all required documents and actions.; The chain of custody should be protected.; Processes and procedures should be proper, while recognised and accepted by the industry.; ; If the ACPO (1997) principles and ISO/IEC 27043 and 27037 Standards are followed as a forensic framework, then digital forensic investigators should follow these standards as a legal framework.",22,1,1,42,Chain of custody; Information technology; Law; Context (language use); Digital evidence; Computer science; Terminology; Engineering ethics; Search and seizure; Audit trail; Digital forensics,,,,,https://perjournal.co.za/article/download/4886/7609 http://www.scielo.org.za/scielo.php?script=sci_arttext&pid=S1727-37812019000100015 http://www.scielo.org.za/pdf/pelj/v22n1/15.pdf https://perjournal.co.za/article/view/4886 https://doaj.org/article/c71c56d0c79f497bba7b913364a54d72 https://repository.nwu.ac.za/handle/10394/32469 https://dspace.nwu.ac.za/handle/10394/32469 https://www.ajol.info/index.php/pelj/article/view/216461,http://dx.doi.org/10.17159/1727-3781/2019/v22i0a4886,,10.17159/1727-3781/2019/v22i0a4886,2947399083,,0,011-595-637-615-462; 016-255-634-578-521; 021-254-917-283-500; 035-898-815-030-977; 042-373-091-814-099; 047-456-447-003-568; 054-861-209-750-456; 061-099-981-771-326; 061-542-609-981-822; 064-239-251-612-842; 087-300-425-406-630; 090-322-349-422-254; 095-080-443-019-181; 100-767-382-538-470; 110-123-934-011-554; 121-538-836-907-553; 155-899-374-390-306; 160-934-987-081-858; 175-257-770-653-834,4,true,cc-by,gold 008-807-857-586-716,Towards 5G cellular network forensics,2018-07-11,2018,journal article,EURASIP Journal on Information Security,2510523x,Springer Science and Business Media LLC,,Filipo Sharevski,"The fifth generation (5G) of cellular networks will bring 10 Gb/s user speeds, 1000-fold increase in system capacity, and 100 times higher connection density. In response to these requirements, the 5G networks will incorporate technologies like CUPS, NFV, network slicing, and CIoT. Each of these 5G features requires system adaptations to enable acquisition and forensic processing of cellular network evidence. This paper reviews the digital forensics mechanisms for Lawful Interception and user localization available in LTE and LTE-Advanced networks together with the associated evidence types, tools for forensic analysis, and supporting legal framework. The challenges and potential adaptations for retaining these capabilities in the future 5G networks are also discussed to outline the future research directions for cellular network forensics.",2018,1,1,16,Cellular network; Network Functions Virtualization; 5G; Slicing; Lawful interception; System capacity; Fifth generation; Computer network; Computer science; Digital forensics,,,,,https://link.springer.com/article/10.1186/s13635-018-0078-7 https://doi.org/10.1186/s13635-018-0078-7 https://dblp.uni-trier.de/db/journals/ejisec/ejisec2018.html#Sharevski18 https://jis-eurasipjournals.springeropen.com/articles/10.1186/s13635-018-0078-7 https://link.springer.com/10.1186/s13635-018-0078-7 https://rd.springer.com/article/10.1186/s13635-018-0078-7,http://dx.doi.org/10.1186/s13635-018-0078-7,,10.1186/s13635-018-0078-7,2819350481,,0,003-015-626-218-871; 006-138-917-123-177; 016-252-238-290-768; 081-328-149-056-473,6,true,cc-by,gold 009-013-588-035-570,Content based information retrieval in forensic image databases.,2002-03-01,2002,journal article,Journal of forensic sciences,00221198,Wiley-Blackwell,United States,Zeno Geradts; Jurrien Bijhold,"This paper gives an overview of the various available image databases and ways of searching these databases on image contents. The developments in research groups of searching in image databases is evaluated and compared with the forensic databases that exist. Forensic image databases of fingerprints, faces, shoeprints, handwriting, cartridge cases, drugs tablets, and tool marks are described. The developments in these fields appear to be valuable for forensic databases, especially that of the framework in MPEG-7, where the searching in image databases is standardized. In the future, the combination of the databases (also DNA-databases) and possibilities to combine these can result in stronger forensic evidence.",47,2,285,292,Image (mathematics); Engineering; Forensic science; Pattern recognition (psychology); Handwriting; Content based information retrieval; Poison control; Database; Computer graphics; Image processing,,"Computer Graphics; Database Management Systems/instrumentation; Databases, Factual; Dermatoglyphics; Face/anatomy & histology; Firearms; Forensic Medicine/instrumentation; Humans; Illicit Drugs; Image Processing, Computer-Assisted/methods; Information Storage and Retrieval/methods; Pattern Recognition, Visual",Illicit Drugs,,https://pubmed.ncbi.nlm.nih.gov/11908596/ https://dspace.library.uu.nl/bitstream/handle/1874/871/full.pdf;sequence=1 https://www.safetylit.org/citations/index.php?fuseaction=citations.viewdetails&citationIds[]=citjournalarticle_360500_38 https://www.ncbi.nlm.nih.gov/pubmed/11908596 https://www.astm.org/DIGITAL_LIBRARY/JOURNALS/FORENSIC/PAGES/JFS15245J.htm http://www.forensic.to/Dissertation.pdf https://www.forensic.to/Dissertation.pdf,http://dx.doi.org/10.1520/jfs15245j,11908596,10.1520/jfs15245j,1503607662,,0,001-423-951-674-555; 003-143-232-493-092; 003-162-793-959-570; 006-714-799-712-204; 010-110-175-137-456; 010-251-383-111-823; 010-387-567-422-549; 011-709-870-101-882; 011-761-654-651-300; 011-883-359-022-523; 012-367-568-909-097; 017-501-089-905-538; 018-804-058-748-554; 020-258-505-706-687; 022-067-716-858-366; 022-144-597-505-520; 023-941-446-929-770; 024-711-544-355-101; 024-895-772-817-987; 025-024-277-810-879; 028-383-745-912-360; 029-735-894-637-764; 030-201-952-881-204; 032-478-117-006-486; 032-481-180-259-096; 033-364-231-006-368; 034-658-632-090-521; 034-950-014-733-698; 035-519-267-953-822; 037-114-958-467-53X; 037-880-836-176-737; 039-124-264-708-45X; 040-806-863-361-404; 040-960-910-761-706; 041-974-474-956-024; 042-056-374-608-00X; 043-668-169-308-335; 045-354-949-588-228; 046-255-529-414-531; 046-824-385-859-60X; 047-012-794-138-822; 051-677-349-004-050; 053-445-549-438-048; 054-303-328-862-729; 054-930-618-816-344; 056-744-123-043-160; 058-576-651-778-550; 060-204-690-681-772; 065-109-236-361-919; 065-752-377-083-783; 066-132-076-903-791; 066-838-377-313-773; 067-923-490-327-942; 067-969-429-293-302; 068-564-415-121-308; 071-256-600-307-933; 073-246-746-871-629; 075-900-718-850-448; 077-817-349-908-08X; 079-470-418-765-207; 081-883-862-603-068; 083-208-307-054-657; 085-228-520-712-920; 087-952-241-480-856; 090-023-370-872-145; 094-522-548-079-85X; 099-034-512-437-052; 099-757-041-888-875; 100-954-859-929-991; 102-988-258-143-414; 103-179-079-381-050; 108-047-292-063-462; 109-551-792-459-26X; 109-713-585-527-871; 109-730-009-967-531; 111-700-599-906-679; 114-024-845-070-351; 118-513-636-363-038; 122-517-547-522-570; 126-743-030-867-972; 129-285-131-436-219; 130-924-098-334-571; 133-379-900-165-401; 136-737-536-174-841; 138-813-555-488-808; 144-828-987-966-083; 158-326-117-014-570; 159-504-540-440-329; 174-848-941-567-235; 177-175-750-040-989; 177-574-227-276-004; 179-339-517-250-817; 180-088-494-514-913; 180-602-519-338-274; 184-138-262-178-998; 186-850-414-659-099; 191-613-793-224-176; 192-332-872-395-489,33,false,, 009-047-969-266-992,Application of image editing software for forensic detection of image,2016-09-01,2016,journal article,Journal of Fundamental and Applied Sciences,11129867,African Journals Online (AJOL),,N Emami,"The image editing software’s available today is apt for creating visually compelling and sophisticated fake images, which causes major issues to the reliability of digital contents as a right representation of reality. Authenticity is the main problem in most digital image communication. Various forensic techniques have been developed for the verification of image integrity, authentication, and tampering detection. Digital image forensics aims at finding the authenticity of images by recovering history of the image. Image manipulations occur at the time of compression, which means changing the DCT coefficients. Forensic technique is capable of detecting chains of operators that is applied to an image. Here the union of Joint Photographic Experts Group compression and full-frame linear filtering were studied and derived an accurate mathematical framework for fully characterizing the probabilistic distributions of the discrete cosine transform (DCT) coefficients of the image, which gets quantized and filtered. This statistical model is used for deriving a set of significant features from the DCT histogram of the input image; these features were fed to a effective classifier which effectively classifies different combinations of linear filtering and compression. Keywords: Full- frame linear filtering, JPEG compression, Linear classifier, image forensics",8,3,1300,1307,Digital image processing; Image restoration; Image compression; Artificial intelligence; Standard test image; Automatic image annotation; Discrete cosine transform; Computer vision; Computer science; Digital image; Image processing,,,,,https://www.ajol.info/index.php/jfas/article/download/143203/132949 https://www.ajol.info/index.php/jfas/article/view/143203,http://dx.doi.org/10.4314/jfas.v8i2s.277,,10.4314/jfas.v8i2s.277,2512437815,,0,,1,true,cc-by-nc,gold 009-161-602-437-854,Assessing age-related morphology of the pubic symphysis from digital images versus direct observation.,,2005,journal article,Journal of forensic sciences,00221198,Wiley-Blackwell,United States,Myra L. Sitchon; Robert D. Hoppa,"The increasingly global role of a forensic anthropologist necessitates a proper means for archiving evidence for re-examination. Large quantities of evidence can be stored and be made readily accessible through digital imaging. This study focuses on age assessment from digital photographs for personal identity reconstructions. A comparison of 52 Suchey-Brooks scores assigned to digital images and actual bone revealed that age assessment from digital images can be completed with accuracy. Coefficients of concordance imply that there significant agreement between osteological assessment of aging criteria from digital images and direct observation-greater than random change alone (p < 0.05). However, assessments from images should be approached with caution since there are inherent limitations of the naked eye in identifying morphological changes in certain skeletal features, especially where older adults are concerned. Although there is no replacement for a hands-on physical assessment, a digital archive may facilitate the global needs of the forensic anthropologist.",50,4,791,795,Digital imaging; Optometry; Psychology; Concordance; Forensic anthropology; Anthropology; Pubic symphysis; Direct observation; Age related; Digital image; Image processing,,"Age Determination by Skeleton/methods; Female; Forensic Anthropology/methods; Humans; Image Processing, Computer-Assisted; Male; Pubic Symphysis/anatomy & histology",,,https://www.astm.org/doiLink.cgi?JFS2004182 https://dialnet.unirioja.es/servlet/articulo?codigo=1244787 https://www.ncbi.nlm.nih.gov/pubmed/16078479 https://www.astm.org/DIGITAL_LIBRARY/JOURNALS/FORENSIC/PAGES/JFS2004182.htm,https://www.ncbi.nlm.nih.gov/pubmed/16078479,16078479,,2070167432,,0,,11,false,, 009-512-003-529-193,The chequered past and risky future of digital forensics,2019-02-02,2019,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Eoghan Casey,"There is weak integration of digital forensics and forensic science, despite over a decade of effort to break down the borders between them. As more criminal investigations involve digital traces i...",51,6,649,664,Criminal investigation; Engineering; Forensic intelligence; Engineering ethics; Digital forensics,,,,,https://www.tandfonline.com/doi/full/10.1080/00450618.2018.1554090,http://dx.doi.org/10.1080/00450618.2018.1554090,,10.1080/00450618.2018.1554090,2911651065,,0,000-659-280-122-390; 004-200-813-216-207; 014-466-907-950-761; 018-182-926-340-45X; 019-831-293-743-518; 030-177-879-793-402; 035-031-257-128-045; 042-944-602-727-47X; 046-505-599-865-150; 053-522-882-246-521; 056-524-463-164-028; 064-549-392-650-90X; 071-062-258-534-616; 071-697-920-432-649; 076-020-683-409-265; 083-948-757-124-708; 085-482-775-276-618; 087-342-951-350-054; 094-295-279-676-447; 097-939-114-561-254; 115-894-275-671-512; 120-656-428-748-152; 124-776-641-347-974; 125-939-677-745-616; 132-309-864-704-323; 137-661-982-633-25X; 182-670-398-460-931,38,false,, 009-705-592-114-017,A preliminary study to quantify the efficacy of 3D data acquisition for human bone replication.,2021-08-21,2021,journal article,Journal of forensic and legal medicine,18787487; 1752928x,Churchill Livingstone,Netherlands,Shelby O. Abraham; Gargi Jani; Vineet Vinay; William R. Belcher; Abraham Johnson,"Abstract Background Three-dimensional imaging is a rapidly growing technology that has revealed exciting insights in disparate fields of research, especially in medicine, forensics, and archaeology. Recent advancements in this technology have also made a remarkable impact in the field of anthropology and odontology. A major benefit of this technology is that they offer effective methods of creating digital records that can aid in physical documentation and can be digitally stored for later assessment and research. Aim The aim of the current study is to evaluate the metric accuracy of 3D models generated using three different 3D acquisition techniques for performing metric analytical procedures. Materials and method Twenty standard craniometric linear measurements (using both sliding and spreading callipers) were taken on two craniums and eight standard measurements were taken on 2 mandibles (using sliding callipers and a mandibulometer); these measurements were then replicated on 3D digital models. Results Statistical analysis of these dataset using Analysis of Variance (ANOVA) and post hoc Bonferroni test suggested that the physical and virtual measurements were accurate, comparable, and concordant (p > 0.05). Conclusion These findings open up numerous avenues for future study, especially in the fields of forensics and clinical studies. However, in order to overcome the limitations faced in using the digital method certain standardised protocols and guidelines must be established to record these data.",83,,102244,,Machine learning; Replication (statistics); Bonferroni correction; Artificial intelligence; Data acquisition; Metric (unit); Forensic anthropology; Calipers; Field (computer science); Computer science; Documentation,3D models; Computed tomography; Cone beam computed tomography; Craniometric measurements; Forensic anthropology; Structured light scanning,"Analysis of Variance; Cephalometry; Data Interpretation, Statistical; Humans; Imaging, Three-Dimensional/methods; Mandible/anatomy & histology; Models, Anatomic; Reproducibility of Results; Skull/anatomy & histology",,,https://www.sciencedirect.com/science/article/pii/S1752928X21001293,http://dx.doi.org/10.1016/j.jflm.2021.102244,34438227,10.1016/j.jflm.2021.102244,3194418008,,0,002-757-600-778-594; 008-374-126-620-756; 008-613-501-863-561; 009-578-762-922-350; 019-885-756-382-127; 020-998-596-326-498; 021-993-166-350-90X; 022-388-426-117-073; 024-784-179-276-92X; 024-865-808-179-781; 029-062-394-152-492; 030-086-114-748-550; 030-399-930-545-660; 038-333-291-764-259; 044-567-283-633-258; 045-617-989-546-198; 049-903-539-268-808; 052-446-300-200-518; 054-613-157-209-410; 059-572-267-613-848; 066-249-839-004-372; 078-705-620-935-166; 087-451-816-741-063; 124-684-494-161-222; 130-965-320-029-932; 149-639-016-119-438,0,false,, 009-722-526-338-869,"Special Issue: on cybercrime prevention, detection and response",,2013,journal article,International Journal of Electronic Security and Digital Forensics,1751911x,,,Ameer Al-Nemrat; George R. S. Weir,This is a special issue of the journal International Journal of Electronic Security and Digital Forensics that was guest edited by Dr. Ameer Al-Nemrat and Dr. George R. S. Weir.,5,2,,,Cybercrime; Electronic security; Computer security; Computer science; George (robot); Digital forensics,,,,,https://strathprints.strath.ac.uk/52489/ https://pureportal.strath.ac.uk/en/publications/special-issue-on-cybercrime-prevention-detection-and-response,https://strathprints.strath.ac.uk/52489/,,,233321221,,0,,0,false,, 009-862-177-957-585,Two-Step Injection Method for Collecting Digital Evidence in Digital Forensics,,2014,journal article,Journal of ICT Research and Applications,23375787; 23385499,The Institute for Research and Community Services (LPPM) ITB,Indonesia,Nana Rachmana Syambas; Naufal El Farisi,"In digital forensic investigations, the investigators take digital evidence from computers, laptops or other electronic goods. There are many complications when a  suspect or related person does not want to cooperate or has removed digital evidence. A  lot of research has been done with the goal of retrieving data from flash memory or  other digital storage media from which the content has been deleted. Unfortunately,  such methods cannot guarantee that all data will be recovered. Most data can only be  recovered partially and sometimes not perfectly, so that some or all files cannot be  opened. This paper proposes the development of a new method for the retrieval of  digital evidence called the Two-Step Injection method (TSI). It focuses on the  prevention of the loss of digital evidence through the deletion of data by suspects or  other parties. The advantage of this method is that the system works in secret and can be  combined with other digital evidence applications that already exist, so that the  accuracy and completeness of the resulting digital evidence can be improved. An  experiment to test the effectiveness of the method was set up. The developed TSI  system worked properly and had a 100% success rate.",8,2,141,156,Set (abstract data type); Suspect; Digital evidence; Digital storage; Two step; Computer security; Computer science; Digital forensics,,,,,https://doaj.org/article/c635faa0a742491a8ce8f42bde6aeb72 https://core.ac.uk/download/pdf/291851383.pdf,http://dx.doi.org/10.5614/itbj.ict.res.appl.2014.8.2.5,,10.5614/itbj.ict.res.appl.2014.8.2.5,1916494655,,0,017-335-677-993-203; 017-815-064-018-299; 018-182-926-340-45X; 028-180-038-189-484; 030-045-112-792-346; 033-970-395-033-397; 034-497-160-604-138; 054-408-281-868-875; 059-469-169-162-785; 069-164-282-798-000; 095-691-114-276-825; 155-074-178-700-550; 170-238-670-627-975; 175-791-313-672-423; 178-883-713-153-793; 180-706-989-021-884; 183-000-233-873-221,2,true,cc-by-nd,gold 010-061-391-662-193,Part 2: The Phase-oriented Advice and Review Structure (PARS) for Digital Forensic Investigations,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Nina Sunde; Graeme Horsman,"Abstract This work forms the second part of a two part series providing the necessary scaffolding for the digital forensic discipline to conduct effective peer review in their laboratories and units. The first part articulated the need for a structured approach to peer review in digital forensic investigations (Horsman and Sunde, 2020). Here in part two, the Phase-oriented Advice and Review Structure (PARS) for digital forensic investigations is offered. PARS is the first documented peer review methodology for the digital forensics field, a six staged approach designed to formally support organisations and their staff in their goal of facilitating effective peer review of DF work, from investigative tasks to forensic activities and forensic analysis processes (Pollitt et al., 2018). This article discusses how the PARS methodology can be implemented, and the available options and mechanisms available to ease the interpretation of this model into existing practices. Both the early ‘Advisor’ and later ‘Reviewer’ roles in PARS are discussed and their requirements and expectations are defined. Three template documents are provided and explained: The PARS Advisors template, the PARS Advisor Brief template and the PARS Peer Review Hierarchy template, for direct use by organisations seeking to adopt the PARS methodology.",36,,301074,,Phase (combat); Structure (mathematical logic); Advice (programming); Hierarchy; Field (computer science); Computer science; Interpretation (philosophy); Knowledge management; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/di/di36.html#SundeH21 https://research.tees.ac.uk/en/publications/part-2-the-phase-oriented-advice-and-review-structure-pars-for-di https://doi.org/10.1016/j.fsidi.2020.301074 https://www.sciencedirect.com/science/article/pii/S2666281720303711,http://dx.doi.org/10.1016/j.fsidi.2020.301074,,10.1016/j.fsidi.2020.301074,3112291764,,0,000-360-120-513-679; 001-154-498-561-997; 005-232-046-693-557; 007-067-502-103-925; 007-582-851-613-954; 007-868-297-443-532; 009-512-003-529-193; 014-466-907-950-761; 019-407-699-112-721; 019-831-293-743-518; 026-774-296-742-022; 028-963-483-424-375; 029-748-683-221-796; 032-451-540-235-796; 032-697-093-668-898; 040-907-268-218-905; 040-984-917-584-42X; 043-591-471-824-055; 047-386-524-667-691; 048-045-418-215-633; 050-994-414-657-166; 052-300-124-760-580; 059-776-023-889-13X; 064-549-392-650-90X; 065-805-363-769-350; 067-950-012-629-210; 068-659-093-553-918; 070-213-303-689-705; 075-950-021-558-098; 084-749-916-494-998; 087-342-951-350-054; 093-123-873-366-081; 093-309-498-241-337; 099-377-733-522-116; 101-436-770-235-826; 102-243-142-344-71X; 103-254-848-209-392; 111-090-978-711-139; 111-488-239-742-003; 125-939-677-745-616; 132-355-634-397-986; 171-504-261-857-61X; 197-872-262-830-083; 199-745-676-923-766,10,true,cc-by-nc-nd,hybrid 010-127-508-296-844,The Linux FAT32 allocator and file creation order reconstruction,,2014,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Wicher Minnaard,,11,3,224,233,Operating system; Stub file; Orlov block allocator; File system fragmentation; File system; Computer science; Virtual file system; Database; Everything is a file; fstab; Computer file,,,,,https://doi.org/10.1016/j.diin.2014.06.008 http://www.sciencedirect.com/science/article/pii/S1742287614000826 https://www.sciencedirect.com/science/article/pii/S1742287614000826,http://dx.doi.org/10.1016/j.diin.2014.06.008,,10.1016/j.diin.2014.06.008,2003205887,,0,016-046-803-187-724; 034-862-824-647-863; 055-967-961-527-254; 085-214-277-668-01X; 092-642-554-201-798; 095-701-116-223-192,12,false,, 010-210-521-219-242,A novel audio forensic data-set for digital multimedia forensics,2017-03-24,2017,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Muhammad Khurram Khan; Mohammed Zakariah; Hafiz Malik; Kim-Kwang Raymond Choo,"Today, digital multimedia (audio, video, images) is a common evidential source in litigation and criminal justice proceedings, and, not surprisingly, multimedia forensics is an active research area. One particular challenge faced by multimedia forensic researchers is the lack of a comprehensive and publicly available data-set for evaluating existing and new algorithms. This paper presents a digital audio forensic data-set, designed to facilitate evaluation of audio forensic algorithms (e.g. microphone identification, acoustic environment identification and splice detection). This paper also briefly describes the data-collection settings, microphones, speakers, languages and notations used. Existing tamper-detection techniques rely on artefacts due to recording devices, codec and/or the acoustic environment in the audio in question. Experimental results show that the selected approaches achieved promising results.",50,5,525,542,Codec; Microphone; Audio forensics; Multimodality; Computer science; Multimedia; Computer forensics; Identification (information); Digital forensics; Digital audio,,,,"National Plan for Science, Technology and Innovation",https://www.tandfonline.com/doi/full/10.1080/00450618.2017.1296186,http://dx.doi.org/10.1080/00450618.2017.1296186,,10.1080/00450618.2017.1296186,2602059688,,0,009-479-484-641-888; 010-994-160-373-874; 011-787-061-575-803; 012-624-635-540-803; 013-481-527-037-718; 020-369-164-109-834; 022-418-214-623-366; 023-696-400-347-613; 024-330-832-103-09X; 027-615-711-119-27X; 038-481-865-971-762; 039-614-975-031-707; 052-981-099-697-108; 057-382-531-654-885; 059-705-292-558-832; 066-192-128-170-353; 069-510-030-533-523; 083-096-013-375-486; 084-301-106-066-11X; 087-700-976-402-858; 096-850-419-858-983; 119-587-371-187-398; 128-264-428-038-749; 128-911-503-412-98X; 132-041-004-899-154; 134-927-490-231-285; 136-614-990-140-254; 138-031-180-838-106; 142-252-837-084-34X; 150-992-563-451-029; 172-545-039-527-203,12,false,, 010-360-873-080-700,Morphological variations of the anterior thoracic skeleton and their forensic significance: radiographic findings in a Spanish autopsy sample.,2014-05-21,2014,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,P. James Macaluso; Joaquín Lucena,,241,,220.e1,7,Anatomy; Rib cage; Xiphoid process; Ossicles; Sternum; Bifid rib; Autopsy; Population; Thoracic skeleton; Medicine,Digital radiographs; Forensic anthropology population data; Ribs; Skeletal morphology; Spain; Sternum,"Adult; Age Determination by Skeleton; Aged; Aged, 80 and over; Female; Forensic Anthropology; Humans; Male; Middle Aged; Osteogenesis; Ribs/abnormalities; Spain; Sternum/abnormalities; Young Adult",,,https://www.ncbi.nlm.nih.gov/pubmed/24933632 https://www.sciencedirect.com/science/article/pii/S0379073814002072,http://dx.doi.org/10.1016/j.forsciint.2014.05.009,24933632,10.1016/j.forsciint.2014.05.009,2002119217,,0,000-766-587-882-929; 001-047-656-833-684; 001-358-946-609-013; 002-670-972-474-346; 003-868-557-921-380; 005-098-808-255-525; 008-252-319-236-878; 008-884-506-388-506; 009-197-539-591-49X; 010-835-284-758-735; 023-941-025-778-37X; 029-970-803-126-222; 031-660-866-738-902; 032-127-121-494-887; 035-934-103-967-02X; 036-974-914-069-330; 038-340-748-473-685; 040-096-295-772-091; 042-484-405-596-808; 042-947-530-799-784; 045-927-744-737-950; 047-296-607-563-418; 060-429-263-604-833; 061-104-615-597-51X; 063-002-412-770-795; 064-710-761-633-645; 077-016-799-610-539; 085-026-982-303-501; 086-994-425-681-328; 087-132-051-208-997; 092-604-619-652-112; 093-100-808-465-305; 102-827-025-719-796; 129-153-355-138-654; 158-590-906-903-250; 192-058-206-767-982,14,false,, 010-490-168-139-514,Functional Requirements for Adding Digital Forensic Readiness as a Security Component in IoT Environments,2018-03-31,2018,journal article,"International Journal on Advanced Science, Engineering and Information Technology",24606952; 20885334,Insight Society,Indonesia,Victor R. Kebande; Nickson Karie Menza; Hein S. Venter,"For every contact made on a digital device, a trace is left behind; this means that every digital device contains some form of electronic evidence that may be associated to the behaviour of the users in a given environment. This evidence can be used to prove or disprove facts if a cyber-incident is detected. However, the world has seen a shift on how devices communicate and connect as a result of increased devices and connectivity, which has led to the creation of “smart environments” where the Internet of Things (IoT) plays a key role. Still, we can harness this proliferation of digital devices and smart environments to Digital Forensic (DF) technology which might help to solve the puzzle of how proactive strategies can help to minimise the time and cost needed to conduct a digital investigation. This article introduces the Functional Requirements (FRs) and processes needed when Digital Forensic Readiness (DFR) process is employed as a security component in the IoT-based environment. The paper serves as a continuation of the initially proposed architecture for adding DFR as a security component to IoT environment. The aspects and claims presented in this paper can be used as basic building blocks for implementing DFR technologies that guarantee security in the IoT-based environment. It is worth noting again that the processes that have been defined in this paper comply with the ISO/IEC 27043: 2015 International Standard.",8,2,342,349,Architecture; Smart environment; Key (cryptography); Computer security; Computer science; Process (engineering); Component (UML); Functional requirement; TRACE (psycholinguistics); Digital forensics,,,,,https://dx.doi.org/10.18517/ijaseit.8.2.2121 https://repository.up.ac.za/handle/2263/66569 http://dx.doi.org/10.18517/ijaseit.8.2.2121 http://ijaseit.insightsociety.org/index.php?option=com_content&view=article&id=9&Itemid=1&article_id=2121 https://core.ac.uk/download/pdf/296919940.pdf,http://dx.doi.org/10.18517/ijaseit.8.2.2121,,10.18517/ijaseit.8.2.2121,2796411083,,0,008-124-206-643-913; 018-552-581-098-658; 021-486-901-460-202; 025-178-552-649-015; 049-308-557-360-556; 087-665-408-966-240; 124-129-640-160-197; 133-737-424-803-878,9,true,cc-by-sa,hybrid 010-607-170-706-481,Positive dental identification using tooth anatomy and digital superimposition.,2012-12-27,2012,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Raymond J. Johansen; C. Michael Bowers,"Dental identification of unknown human remains continues to be a relevant and reliable adjunct to forensic investigations. The advent of genomic and mitochondrial DNA procedures has not displaced the practical use of dental and related osseous structures remaining after destructive incidents that can render human remains unrecognizable, severely burned, and fragmented. The ability to conclusively identify victims of accident and homicide is based on the availability of antemortem records containing substantial and unambiguous proof of dental and related osseous characteristics. This case report documents the use of digital comparative analysis of antemortem dental models and postmortem dentition, to determine a dental identification. Images of dental models were digitally analyzed using Adobe Photoshop(TM) software. Individual tooth anatomy was compared between the antemortem and postmortem images. Digital superimposition techniques were also used for the comparison. With the absence of antemortem radiographs, this method proved useful to reach a positive identification in this case.",58,2,534,536,Dental anatomy; Identification (biology); Superimposition; Dentition; Dentistry; Dental Models; Orthodontics; Adobe photoshop; Dental identification; Forensic odontology; Medicine,Adobe PhotoshopTM; dental anatomy; digital superimposition; forensic odontology; forensic science; human identification; permanent molars,"Adult; Female; Forensic Dentistry/methods; Humans; Image Processing, Computer-Assisted; Models, Dental; Molar/anatomy & histology; Software",,,https://pubmed.ncbi.nlm.nih.gov/23278438/ https://www.ncbi.nlm.nih.gov/pubmed/23278438 https://www.onlinelibrary.wiley.com/doi/abs/10.1111/1556-4029.12040,http://dx.doi.org/10.1111/1556-4029.12040,23278438,10.1111/1556-4029.12040,2008151682,,0,018-803-823-779-047; 073-732-187-364-99X; 108-285-718-831-232,8,false,, 010-620-450-221-40X,Digital transformation risk management in forensic science laboratories.,2020-09-03,2020,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Eoghan Casey; Thomas R. Souvignet,"Technological advances are changing how forensic laboratories operate in all forensic disciplines, not only digital. Computers support workflow management, enable evidence analysis (physical and digital), and new technology enables previously unavailable forensic capabilities. Used properly, the integration of digital systems supports greater efficiency and reproducibility, and drives digital transformation of forensic laboratories. However, without the necessary preparations, these digital transformations can undermine the core principles and processes of forensic laboratories. Pertinent examples of problems involving technology that have occurred in laboratories are provided, along with opportunities and risk mitigation strategies, based on the authors' experiences. Forensic preparedness concentrating on digital data reduces the cost and operational disruption of responding to various kinds of problems, including misplaced exhibits, allegations of employee misconduct, disclosure requirements, and information security breaches. This work presents recommendations to help forensic laboratories prepare for and manage these risks, to use technology effectively, and ultimately strengthen forensic science. The importance of involving digital forensic expertise in risk management of digital transformations in laboratories is emphasized. Forensic laboratories that do not adopt forensic digital preparedness will produce results based on digital data and processes that cannot be verified independently, leaving them vulnerable to challenge. The recommendations in this work could enhance international standards such as ISO/IEC 17025 used to assess and accredit laboratories.",316,,110486,,Engineering management; Digital transformation; Workflow; Preparedness; Digital data; ISO/IEC 17025; Risk management; Computer science; Information security; Digital forensics,Digital transformations; Forensic digital preparedness; Forensic laboratories; Forensic preparedness; Forensic science; ISO/IEC 17025; Risk management,"Automation, Laboratory; Data Management; Digital Technology; Efficiency, Organizational; Forensic Sciences; Human Rights; Humans; Laboratories; Quality Control; Reproducibility of Results; Risk Management",,,https://serval.unil.ch/en/notice/serval:BIB_6189637BB7F5 https://www.ncbi.nlm.nih.gov/pubmed/32919163 https://pubmed.ncbi.nlm.nih.gov/32919163/ https://www.sciencedirect.com/science/article/abs/pii/S0379073820303480 https://www.sciencedirect.com/science/article/pii/S0379073820303480,http://dx.doi.org/10.1016/j.forsciint.2020.110486,32919163,10.1016/j.forsciint.2020.110486,3083409529,,0,001-794-049-244-772; 005-232-046-693-557; 005-379-880-172-40X; 005-745-292-419-100; 006-915-702-173-584; 007-208-364-460-073; 018-211-304-758-288; 019-831-293-743-518; 032-374-559-220-723; 033-241-817-699-448; 035-031-257-128-045; 046-143-775-958-052; 048-025-676-818-922; 052-308-687-231-910; 055-074-014-409-729; 064-549-392-650-90X; 067-938-325-014-282; 086-388-908-356-52X; 087-342-951-350-054; 088-568-925-253-101; 091-343-394-509-251; 091-540-399-535-662; 101-549-415-202-81X; 112-856-054-215-074; 136-697-259-803-473,9,true,cc-by,hybrid 010-688-518-606-674,ANT/SEIT - Framework for Mobile Devices Analysis,,2016,journal article,Procedia Computer Science,18770509,Elsevier BV,,Elhadje Benkhelifa; Benjamin E. Thomas; Lo'ai Tawalbeh; Yaser Jararweh,"Abstract Nowadays mobile devices are considered an essential component of our daily lives. The smart phones not only keep us connected but also can act as a mobile office, social tool, and an entertainment center. The combination of functionality, processing power, and storage space makes smartphones a prime target for investigators. The rapid evolution in mobile computing is forcing towards the need for standards and tools to investigate and analyze these mobile devices and extract useful information that help in more protection against cyber threats and improving performance in many aspects including power consumption. Up to our knowledge, there is no mobile forensic analysis solution that maps data from different sources including calls, geographical location, multimedia, and web logs. Based on this motivation, in this paper, we aim to propose a framework solution, which could contribute to the development of a novel and potentially a market leading mobile forensic tool.",83,,1188,1193,Mobile computing; Mobile payment; Mobile device; Computer security; Mobile search; Computer science; Component (UML); Multimedia; Mobile Web; Mobile technology; Mobile business development,,,,,https://www.sciencedirect.com/science/article/pii/S1877050916302794 https://dblp.uni-trier.de/db/conf/ant/ant2016.html#BenkhelifaTTJ16 https://core.ac.uk/display/82695991 https://www.sciencedirect.com/science/article/abs/pii/S1877050916302794 https://core.ac.uk/download/pdf/82695991.pdf,http://dx.doi.org/10.1016/j.procs.2016.04.246,,10.1016/j.procs.2016.04.246,2393842582,,0,009-671-935-335-418; 016-520-590-130-251; 042-359-094-487-221; 090-390-906-646-037; 134-879-839-097-549; 135-717-892-795-412,6,true,cc-by-nc-nd,gold 010-746-409-875-309,A natural human language framework for digital forensic readiness in the public cloud,2020-07-12,2020,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Stacey O. Baror; Hein S. Venter; Richard Adeyemi,"Currently, about half of all global enterprises are adopting and using some form of cloud computing services. In cloud computing, potential digital evidence is distributed across multiple isolated ...",53,5,566,591,Semantics; Data science; Lexicon; Cybercrime; Digital evidence; Human language; Computer science; Natural (music); Cloud computing; Digital forensics,,,,,https://www.tandfonline.com/doi/full/10.1080/00450618.2020.1789742 https://www.tandfonline.com/doi/pdf/10.1080/00450618.2020.1789742 https://repository.up.ac.za/handle/2263/78877,http://dx.doi.org/10.1080/00450618.2020.1789742,,10.1080/00450618.2020.1789742,3042373905,,0,000-566-000-503-971; 005-936-716-926-037; 010-545-926-498-969; 013-568-618-083-770; 014-109-387-256-809; 017-060-167-812-521; 018-913-093-142-26X; 024-350-847-240-124; 024-462-843-796-80X; 026-934-168-279-23X; 028-563-270-358-13X; 038-504-647-023-683; 039-273-691-123-164; 039-774-603-243-832; 041-590-508-533-255; 043-826-131-546-638; 046-991-384-508-582; 052-854-707-968-783; 054-605-677-369-944; 055-727-294-167-036; 059-259-197-397-244; 063-274-848-736-685; 066-219-211-495-201; 069-669-188-847-076; 070-688-231-268-280; 070-972-916-093-637; 073-160-991-476-430; 084-816-551-401-126; 086-733-285-811-059; 092-655-509-442-333; 095-169-584-329-010; 095-691-114-276-825; 097-367-779-442-275; 101-108-234-017-881; 104-123-862-406-436; 105-796-906-658-153; 106-714-919-604-351; 112-899-744-555-295; 125-317-873-649-393; 131-189-451-119-783; 132-342-259-584-364; 145-627-679-536-968; 152-592-371-632-861; 156-313-798-378-998; 170-861-593-468-599,11,false,, 010-841-975-744-659,"Buying drugs on a Darknet market: A better deal? Studying the online illicit drug market through the analysis of digital, physical and chemical data",2016-08-31,2016,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Damien Rhumorbarbe; Ludovic Staehli; Julian Broséus; Quentin Rossy; Pierre Esseiva,"Darknet markets, also known as cryptomarkets, are websites located on the Darknet and designed to allow the trafficking of illicit products, mainly drugs. This study aims at presenting the added value of combining digital, chemical and physical information to reconstruct sellers' activities. In particular, this research focuses on Evolution, one of the most popular cryptomarkets active from January 2014 to March 2015. Evolution source code files were analysed using Python scripts based on regular expressions to extract information about listings (i.e., sales proposals) and sellers. The results revealed more than 48,000 listings and around 2700 vendors claiming to send illicit drug products from 70 countries. The most frequent categories of illicit drugs offered by vendors were cannabis-related products (around 25%) followed by ecstasy (MDA, MDMA) and stimulants (cocaine, speed). The cryptomarket was then especially studied from a Swiss point of view. Illicit drugs were purchased from three sellers located in Switzerland. The purchases were carried out to confront digital information (e.g., the type of drug, the purity, the shipping country and the concealment methods mentioned on listings) with the physical analysis of the shipment packaging and the chemical analysis of the received product (purity, cutting agents, chemical profile based on minor and major alkaloids, chemical class). The results show that digital information, such as concealment methods and shipping country, seems accurate. But the illicit drugs purity is found to be different from the information indicated on their respective listings. Moreover, chemical profiling highlighted links between cocaine sold online and specimens seized in Western Switzerland. This study highlights that (1) the forensic analysis of the received products allows the evaluation of the accuracy of digital data collected on the website, and (2) the information from digital and physical/chemical traces are complementary to evaluate the practices of the online selling of illicit drugs on cryptomarkets.",267,,173,182,Advertising; Profiling (information science); Digital data; Darknet; Physical information; Chemical data; Poison control; Illicit drug; Computer security; Medicine; Added value,Cocaine; Concealment techniques; Cryptomarket; Drug profiling; Evolution market; Source codes,,,,http://www.sciencedirect.com/science/article/pii/S0379073816303620 https://www.sciencedirect.com/science/article/pii/S0379073816303620 https://core.ac.uk/display/77172586 https://serval.unil.ch/notice/serval:BIB_670B021B4620 https://serval.unil.ch/resource/serval:BIB_670B021B4620.P001/REF.pdf https://europepmc.org/article/MED/27611957 https://www.ncbi.nlm.nih.gov/pubmed/27611957/ https://core.ac.uk/download/77172586.pdf,http://dx.doi.org/10.1016/j.forsciint.2016.08.032,27611957,10.1016/j.forsciint.2016.08.032,2507674152,,0,000-966-873-477-429; 008-793-362-021-751; 016-283-115-314-004; 016-576-957-458-038; 021-632-589-849-856; 022-031-013-040-416; 028-752-000-922-100; 031-368-601-023-612; 032-972-190-406-308; 035-623-064-902-654; 038-803-590-187-31X; 039-183-999-810-949; 046-240-766-487-724; 047-609-504-430-449; 049-300-813-134-093; 049-814-540-451-269; 051-488-881-191-38X; 052-723-051-114-389; 055-249-339-598-38X; 068-102-781-279-977; 070-952-793-249-727; 071-353-020-251-034; 077-119-494-684-774; 081-055-374-627-593; 085-676-849-933-701; 090-756-377-288-88X; 093-178-658-764-94X; 096-931-449-189-148; 107-793-773-286-403; 120-060-707-517-368; 120-702-775-675-79X; 125-565-282-820-323; 141-913-443-146-631; 145-258-399-749-837; 150-325-162-873-23X; 170-170-805-020-495; 187-515-650-100-770,63,true,,green 010-963-610-208-920,"Cognitive and human factors in digital forensics: Problems, challenges, and the way forward",,2019,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Nina Sunde; Itiel E. Dror,"Abstract Digital forensics is an important and growing forensic domain. Research on miscarriages of justice and misleading evidence, as well as various inquires in the UK and the US, have highlighted human error as an issue within forensic science. This has led to increased attention to the sources of cognitive bias and potential countermeasures within many forensic disciplines. However, the area of digital forensics has yet to pay sufficient attention to this issue. The main goal of this article is to contribute to a more scientifically sound digital forensics domain by addressing the issues of cognitive bias as a source of error. In this paper we present an analysis of seven sources of cognitive and human error specifically within the digital forensics process, and discuss relevant countermeasures. We conclude that although some cognitive and bias issues are very similar across forensic domains, others are different and dependent on the specific characteristic of the domain in question, such as digital forensics. There is a need for new directions in research with regard to cognitive and human factors in digital forensics.",29,,101,108,Domain (software engineering); Human error; Cognition; Cognitive bias; Data science; Justice (ethics); Computer science; Process (engineering); Digital forensics,,,,Norwegian Police University College,https://phs.brage.unit.no/phs-xmlui/handle/11250/2675988 https://www.sciencedirect.com/science/article/pii/S1742287619300441 https://www.duo.uio.no/handle/10852/78868 https://www.sciencedirect.com/science/article/abs/pii/S1742287619300441,http://dx.doi.org/10.1016/j.diin.2019.03.011,,10.1016/j.diin.2019.03.011,2935248465,,0,000-557-324-827-169; 001-819-537-647-480; 002-609-382-886-882; 003-168-641-529-165; 005-248-003-161-215; 005-542-560-321-688; 005-553-153-856-945; 005-715-450-998-72X; 006-851-080-715-114; 007-067-502-103-925; 007-196-753-966-726; 010-218-618-278-587; 011-267-630-776-412; 011-637-658-394-710; 011-736-096-074-814; 014-640-572-371-821; 018-182-926-340-45X; 018-345-154-485-870; 019-568-476-801-56X; 019-831-293-743-518; 030-021-909-943-264; 030-178-593-043-926; 030-313-388-601-318; 031-575-367-650-782; 037-165-077-440-310; 038-753-471-790-674; 040-710-022-171-634; 040-907-268-218-905; 042-110-216-832-385; 043-083-546-914-143; 044-487-533-779-509; 045-243-165-627-08X; 047-701-826-257-337; 049-494-674-809-588; 053-512-818-099-29X; 056-338-951-922-757; 056-511-125-319-151; 058-773-447-408-598; 064-549-392-650-90X; 065-805-363-769-350; 067-540-728-461-044; 074-592-128-180-546; 083-287-763-665-02X; 084-865-558-626-927; 088-142-137-151-413; 088-491-668-540-317; 089-143-511-793-784; 093-309-498-241-337; 095-304-046-614-403; 096-599-019-134-284; 098-950-277-295-601; 102-599-064-891-853; 105-719-937-171-816; 106-885-306-836-498; 108-249-505-350-920; 115-602-945-595-68X; 120-568-182-864-304; 122-596-518-152-484; 125-378-692-136-213; 134-927-490-231-285; 148-223-435-969-407; 164-884-026-141-973; 167-366-167-352-677; 182-670-398-460-931; 190-065-821-748-92X,48,true,cc-by-nc-nd,hybrid 010-985-077-415-59X,Digital media triage with bulk data analysis and bulk_extractor,,2013,journal article,Computers & Security,01674048,Elsevier BV,United Kingdom,Simson L. Garfinkel,"Bulk data analysis eschews file extraction and analysis, common in forensic practice today, and instead processes data in ""bulk,"" recognizing and extracting salient details (""features"") of use in the typical digital forensics investigation. This article presents the requirements, design and implementation of the bulk_extractor, a high-performance carving and feature extraction tool that uses bulk data analysis to allow the triage and rapid exploitation of digital media. Bulk data analysis and the bulk_extractor are designed to complement traditional forensic approaches, not replace them. The approach and implementation offer several important advances over today's forensic tools, including optimistic decompression of compressed data, context-based stop-lists, and the use of a ""forensic path"" to document both the physical location and forensic transformations necessary to reconstruct extracted evidence. The bulk_extractor is a stream-based forensic tool, meaning that it scans the entire media from beginning to end without seeking the disk head, and is fully parallelized, allowing it to work at the maximum I/O capabilities of the underlying hardware (provided that the system has sufficient CPU resources). Although bulk_extractor was developed as a research prototype, it has proved useful in actual police investigations, two of which this article recounts.",32,,56,72,Data mining; Forensic science; Digital media; Information retrieval; Path (computing); Context (language use); Computer science; Complement (set theory); Digital forensics,,,,NSF; Department of Defense,https://dl.acm.org/doi/10.5555/2748150.2748581 https://simson.net/clips/academic/2013.COSE.bulk_extractor.pdf https://core.ac.uk/display/82510361 http://digitalcorpora.org/downloads/bulk_extractor/doc/2013.COSE.bulk_extractor.pdf https://www.sciencedirect.com/science/article/pii/S0167404812001472 http://www.sciencedirect.com/science/article/pii/S0167404812001472 https://dblp.uni-trier.de/db/journals/compsec/compsec32.html#Garfinkel13 https://core.ac.uk/download/pdf/82510361.pdf,http://dx.doi.org/10.1016/j.cose.2012.09.011,,10.1016/j.cose.2012.09.011,2114314514,,1,004-652-388-189-304; 009-832-452-035-773; 018-618-238-562-758; 021-039-461-635-181; 027-265-141-482-204; 028-821-728-710-895; 030-089-078-880-151; 033-877-222-136-260; 042-793-944-798-15X; 043-093-846-816-675; 045-642-028-060-994; 047-630-600-014-492; 051-165-387-606-715; 056-012-069-300-774; 058-212-255-814-030; 061-549-181-856-861; 071-079-281-371-668; 097-567-011-227-46X; 101-436-770-235-826; 117-033-532-874-520; 128-940-875-499-986; 131-807-250-432-699; 134-721-566-293-80X; 134-927-490-231-285; 135-921-410-921-315; 136-037-184-633-102; 142-884-607-464-932; 152-771-716-159-330; 155-226-042-989-551; 159-785-975-003-375; 168-819-441-615-181,78,true,cc-by-nc-nd,hybrid 011-051-740-313-213,Digital forensics XML and the DFXML toolset,,2012,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Simson L. Garfinkel,"Digital Forensics XML (DFXML) is an XML language that enables the exchange of structured forensic information. DFXML can represent the provenance of data subject to forensic investigation, document the presence and location of file systems, files, Microsoft Windows Registry entries, JPEG EXIFs, and other technical information of interest to the forensic analyst. DFXML can also document the specific tools and processing techniques that were used to produce the results, making it possible to automatically reprocess forensic information as tools are improved. This article presents the motivation, design, and use of DFXML. It also discusses tools that have been creased that both ingest and emit DFXML files. Published by Elsevier Ltd.",8,3,161,174,World Wide Web; JPEG; Technical information; Data subject; Computer science; Microsoft Windows; Computer forensics; Digital forensics; XML,,,,,https://www.sciencedirect.com/science/article/pii/S1742287611000910 https://dblp.uni-trier.de/db/journals/di/di8.html#Garfinkel12 http://simson.net/ref/2011/dfxml.pdf https://core.ac.uk/display/36736443,http://dx.doi.org/10.1016/j.diin.2011.11.002,,10.1016/j.diin.2011.11.002,2119668875,,0,004-652-388-189-304; 007-600-137-439-078; 010-891-876-474-089; 017-792-082-122-197; 024-216-399-693-64X; 024-735-069-822-749; 033-241-817-699-448; 035-419-064-781-495; 039-673-098-036-580; 047-955-569-661-805; 060-650-561-577-338; 061-549-181-856-861; 089-513-628-343-627; 098-945-991-157-04X; 104-758-205-558-797; 124-473-078-841-747; 126-889-572-055-698; 144-739-881-928-041; 186-993-770-394-232,73,true,,green 011-115-133-098-072,Prelim i - Editorial Board,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,43,,301466,301466,Editorial board; Computer science; Library science,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00147-0,,10.1016/s2666-2817(22)00147-0,,,0,,0,true,,bronze 011-121-476-287-626,Copy-move forgery detection through stationary wavelets and local binary pattern variance for forensic analysis in digital images.,2017-08-04,2017,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Toqeer Mahmood; Aun Irtaza; Zahid Mehmood; Muhammad Tariq Mahmood,,279,,8,21,Image (mathematics); Color image; Artificial intelligence; Translation (geometry); Artifact (error); Computer vision; Computer science; Digital image; Wavelet; Lossless compression; Digital forensics,Circular block; Digital forensic; Forged region detection; Image tampering; Passive authentication,,,National Research Foundation of Korea; Ministry of Education,https://www.ncbi.nlm.nih.gov/pubmed/28841507 https://pubmed.ncbi.nlm.nih.gov/28841507/ https://www.sciencedirect.com/science/article/pii/S0379073817302967,http://dx.doi.org/10.1016/j.forsciint.2017.07.037,28841507,10.1016/j.forsciint.2017.07.037,2742839880,,0,000-627-740-782-01X; 004-036-879-442-301; 009-887-450-783-581; 014-505-479-140-920; 015-575-115-442-557; 016-304-367-136-064; 018-023-020-822-956; 018-037-484-424-937; 021-822-507-493-073; 021-835-902-614-35X; 022-276-450-278-946; 023-727-904-976-738; 023-832-093-857-894; 029-093-526-590-26X; 034-121-155-020-714; 040-331-306-755-615; 041-734-295-672-023; 042-074-416-956-571; 043-267-257-223-422; 052-188-230-175-054; 068-446-370-600-681; 070-077-021-085-897; 076-704-896-134-67X; 080-794-266-877-942; 081-081-882-271-916; 089-827-974-487-852; 093-043-856-342-66X; 094-936-739-708-890; 113-589-762-076-215; 121-629-470-912-852; 124-874-123-332-712; 133-788-221-347-278; 143-794-839-992-635; 156-617-457-861-888; 176-485-747-937-063; 181-797-068-816-79X; 183-682-743-695-729; 196-251-404-109-016,46,false,, 011-153-981-274-232,Exploring Myths in Digital Forensics: Separating Science From Ritual,2017-10-01,2017,journal article,International Journal of Interdisciplinary Telecommunications and Networking,19418663; 19418671,IGI Global,,Gary C. Kessler; Gregory H. Carlton,"Digital forensic methodology deviates significantly relative to the methods of other forensic sciences for numerous practical reasons, and it has been largely influenced by factors derived from the inception and evolution of this relatively new and rapidly changing field. Digital forensics methodology was developed more by practitioners in its early days rather than by computer scientists. This led to accepted best practices in the field that may not represent the best or, at least, tested, science. This paper explores some of these differences in the practice and evolution between digital and other forensic sciences, and recommends scientific approaches to apply to many digital forensic practice rituals.",9,4,1,9,Internet privacy; Best practice; Data science; Field (computer science); Computer science; Mythology; Computer forensics; Digital forensics,,,,,https://works.bepress.com/gary_kessler/82/ https://commons.erau.edu/cgi/viewcontent.cgi?article=2766&context=publication https://dl.acm.org/doi/10.4018/IJITN.2017100101 https://commons.erau.edu/publication/1614/ https://dblp.uni-trier.de/db/journals/ijitn/ijitn9.html#KesslerC17 https://ideas.repec.org/a/igg/jitn00/v9y2017i4p1-9.html https://www.igi-global.com/chapter/exploring-myths-in-digital-forensics/252700 https://doi.org/10.4018/IJITN.2017100101,http://dx.doi.org/10.4018/ijitn.2017100101,,10.4018/ijitn.2017100101,2750191588,,0,008-909-091-746-356; 013-829-755-696-381; 019-831-293-743-518; 027-062-355-180-009; 049-971-447-533-250; 067-429-157-490-697; 081-447-017-308-327; 094-227-042-630-139; 116-704-244-437-017; 123-275-701-676-787; 124-466-422-768-986; 133-508-126-407-763; 167-398-164-200-13X,0,false,, 011-505-697-523-453,Digital image cross-correlation technique for bite mark investigations,,1997,journal article,Science & justice : journal of the Forensic Science Society,13550306,Forensic Science Society,United Kingdom,A.S. Naru; E. Dykes,,37,4,251,258,Information retrieval; Bite mark; Digital image; Pattern matching; Medicine; Forensic engineering,,"Bites, Human; Dental Casting Technique; Female; Forensic Medicine/methods; Humans; Image Processing, Computer-Assisted",,,https://www.sciencedirect.com/science/article/pii/S1355030697721993 http://www.sciencedirect.com/science/article/pii/S1355030697721993 https://europepmc.org/abstract/MED/9519540,http://dx.doi.org/10.1016/s1355-0306(97)72199-3,9519540,10.1016/s1355-0306(97)72199-3,2120643782,,0,002-315-070-655-176; 004-417-604-789-671; 011-655-690-172-447; 014-021-855-427-01X; 034-944-246-318-986; 046-153-612-238-308; 051-750-906-873-100; 084-105-635-579-641; 172-628-253-636-703,12,false,, 012-089-942-653-099,Fast contraband detection in large capacity disk drives,,2015,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Philip Penrose; William J Buchanan; Richard Macfarlane,"In recent years the capacity of digital storage devices has been increasing at a rate that has left digital forensic services struggling to cope. There is an acknowledgement that current forensic tools have failed to keep up. The workload is such that a form of 'administrative triage' takes place in many labs where perceived low priority jobs are delayed or dropped without reference to the data itself. In this paper we investigate the feasibility of first responders performing a fast initial scan of a device by sampling on the device itself. A Bloom filter is used to store the block hashes of large collections of contraband data. We show that by sampling disk clusters, we can achieve 99.9% accuracy scanning for contraband data in minutes. Even under the constraints imposed by low specification legacy equipment, it is possible to scan a device for contraband with a known and controllable margin of error in a reasonable time. We conclude that in this type of case it is feasible to boot the device into a forensically sound environment and do a pre-imaging scan to prioritise the device for further detailed investigation.",12,,S22,S29,Sampling (signal processing); Bloom filter; Block (data storage); Acknowledgement; Workload; Computer science; Margin of error; Digital forensics; Computer hardware; Hash function,,,,,https://dblp.uni-trier.de/db/journals/di/di12.html#PenroseBM15 https://core.ac.uk/display/81123678 https://doi.org/10.1016/j.diin.2015.01.007 https://www.sciencedirect.com/science/article/pii/S1742287615000080 https://core.ac.uk/download/74028968.pdf,http://dx.doi.org/10.1016/j.diin.2015.01.007,,10.1016/j.diin.2015.01.007,2139164455,,0,003-982-227-180-136; 007-213-544-126-482; 010-985-077-415-59X; 030-121-862-351-330; 032-451-540-235-796; 038-086-141-413-386; 058-052-081-943-595; 061-317-181-338-930; 073-524-789-009-542; 074-012-101-472-334; 090-752-043-508-733; 093-482-620-988-83X; 109-598-947-309-943; 116-317-110-770-148; 128-940-875-499-986; 131-516-331-360-906; 134-927-490-231-285; 141-887-999-680-518,11,true,cc-by-nc-nd,hybrid 012-100-302-576-245,The Application of Exif in Digital Photo Authentication,,2012,journal article,Chinese Journal of Forensic Sciences,16712072,,,Shi Shao-pei,"Exif analysis of digital photos is an important aspect in image authentication.It is crucial to thoroughly extract and fully apply the Exif information in the examination.Based on the analysis of JPEG format,the extraction method of Exif information is presented and the application of the thumbnails and image quality in Exif is discussed.",,,,,Artificial intelligence; Thumbnail; Digital photography; Authentication; JPEG; Extraction methods; Computer vision; Computer science; Image quality,,,,,http://en.cnki.com.cn/Article_en/CJFDTOTAL-SFJD201205011.htm,http://en.cnki.com.cn/Article_en/CJFDTOTAL-SFJD201205011.htm,,,2368985265,,0,,0,false,, 012-303-847-612-349,Macrophotography: An Innovative Technique to Study Morphological Variations of Lip Patterns,,2020,journal article,International Journal of Forensic Odontology,25425013,MM Publishers,,Dhruv Patel; Harsh Jadav; Gargie Rampurkar; Abraham Johnson,"Background: In the past, certain morphological traits of the human body such as fingerprints, footprints, iris, gait pattern, voice characteristics, and DNA fingerprinting, etc., have effectively been used in forensic circumstances as well as in the identification of perpetrators. As other features of the human body, the lip also exhibits some individualistic trait and is unique owing to variation in the anatomical structure. Aim: The aim of this study was to introduce a new approach for assessing lip patterns using macrophotography and for assessing the lip patterns for sex determination. Materials and Methods: The present study was conducted in a total of 200 participants (100 males and 100 females) between 20 and 30 years. The lip patterns of participants were studied under normal conditions using digital macrophotography. The classification scheme suggested by Suzuki and Tsuchihashi was used to classify the lip patterns in the experiment. The lips of each person were divided into four compartments, and the digits “1” to “4” were allocated in a clockwise sequence beginning from the upper right side of the lips. Result: The most prominent pattern in the whole sample population was found to be Type I (84 [38.2% followed by Type III (72 [32.7%]), Type I (19 [8.6%]), Type II (11 [5.00%]), Type IV (7 [3.2%]), and Type V (7 [3.2%]). The statistical study of lip prints in relation to sex of an individual was conducted using the Chi-square test, and the value was found to be statistically significant (P ≤ 0.001). Conclusion: Cheiloscopy using a macrophotographic technique can be used for individual recognition as lip prints are unique to an individual. Macrophotographic technique allows properly imaging, quickly recognizing, and archiving the permanent ante-mortem record of the lip pattern.",5,2,68,,Classification scheme; LIP PRINTS; Orthodontics; Digital analysis; Gait pattern; Biology,,,,,https://www.ijofo.org/article.asp?issn=2542-5013;year=2020;volume=5;issue=2;spage=68;epage=70;aulast=Patel;type=0,http://dx.doi.org/10.4103/ijfo.ijfo_24_20,,10.4103/ijfo.ijfo_24_20,3127181092,,0,,0,false,, 012-408-224-860-371,Audio Forensics on Smartphone with Digital Forensics Research Workshop (DFRWS) Method,2021-03-20,2021,journal article,CommIT (Communication and Information Technology) Journal,24607010; 19792484,Universitas Bina Nusantara,,Sunardi Sunardi; Riadi; Rusydi Umar; Muhammad Fauzan Gustafi,"Audio is one of the digital items that can reveal a happened case. However, audio evidence can also be manipulated and changed to hide information. Forensics audio is a technique to identify the sound’s owner from the audio using pitch, formant, and spectrogram parameters. The conducted research examines the similarity of the original sound with the manipulated voice to determine the owner of the sound. It analyzes the level of similarity or identical sound using spectrogram analysis with the Digital Forensics Research Workshop (DFRWS) Method. The research objects are original and manipulated files. Both files are in mp3 format, which is encoded to WAV format. Then, the live forensics method is used by picking up the data on a smartphone. Several applications are also used. The results show that the research successfully gets digital evidence on a smartphone with the Oxygen Forensic application. It extracts digital evidence in the form of two audio files and two video files. Then, by the hashing process, the four obtained files are proven to be authentic. Around 90% of the data are identical to the original voice recording. Only 10% of the data are not identical.",15,1,41,47,Similarity (geometry); Formant; Information retrieval; Audio forensics; Digital evidence; Computer science; Spectrogram; Digital forensics; Process (computing); Hash function,,,,,https://journal.binus.ac.id/index.php/commit/article/view/6739 https://journal.binus.ac.id/index.php/commit/article/download/6739/4061,http://dx.doi.org/10.21512/commit.v15i1.6739,,10.21512/commit.v15i1.6739,3155633725,,0,003-859-311-319-037; 004-872-169-627-620; 012-448-728-338-495; 014-392-524-539-984; 016-895-117-049-07X; 018-131-159-478-609; 032-965-475-729-463; 044-748-607-433-299; 048-141-687-795-752; 066-723-990-557-549; 070-740-822-724-693; 080-380-859-922-809; 086-275-312-205-017; 086-306-719-131-186; 090-025-387-755-139; 110-093-106-787-619; 124-980-593-548-795; 156-266-881-506-824,0,true,cc-by-sa,gold 012-515-256-028-110,A note on digital dental radiography in forensic odontology.,,2014,journal article,Journal of forensic dental sciences,09751475,,India,Sher-Lin Chiam,"Digital dental radiography, intraoral and extraoral, is becoming more popular in dental practice. It offers convenience, such as lower exposure to radiation, ease of storing of images, and elimination of chemical processing. However, it also has disadvantages and drawbacks. One of these is the potential for confusion of the orientation of the image. This paper outlines one example of this, namely, the lateral inversion of the image. This source of confusion is partly inherent in the older model of phosphor storage plates (PSPs), as they allow both sides to be exposed without clue to the fact that the image is acquired on the wrong side. The native software allows digital manipulation of the X-ray image, permitting both rotation and inversion. Attempts to orientate the X-ray according to the indicator incorporated on the plate can then sometimes lead to inadvertent lateral inversion of the image. This article discusses the implications of such mistakes in dental digital radiography to forensic odontology and general dental practice.",6,3,197,201,Artificial intelligence; Dentistry; Dental radiography; Confusion; Digital radiography; Dental digital radiography; Dental practice; Forensic odontology; Computer vision; Medicine,Forensic odontology; dental; digital radiography; identification,,,,http://www.jfds.org/article.asp?issn=0975-1475;year=2014;volume=6;issue=3;spage=197;epage=201;aulast= http://www.jfds.org/article.asp?issn=0975-1475;year=2014;volume=6;issue=3;spage=197;epage=201;aulast=;type=2 https://pubmed.ncbi.nlm.nih.gov/25177144/ https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4142412,http://dx.doi.org/10.4103/0975-1475.137072,25177144,10.4103/0975-1475.137072,2263591821,PMC4142412,0,008-808-484-847-913; 009-388-146-311-655; 010-187-630-340-102; 011-993-115-696-078; 013-370-437-817-823; 016-280-565-793-109; 018-416-669-363-552; 020-549-519-272-496; 021-933-004-881-201; 023-206-215-450-817; 040-489-203-925-132; 041-000-684-146-868; 045-469-044-155-700; 048-243-629-690-693; 053-497-499-142-760; 055-269-570-855-201; 056-100-946-880-281; 073-732-187-364-99X; 082-409-255-188-075; 084-753-272-397-27X; 088-170-464-779-599,12,true,, 012-676-496-211-536,Crowdsourcing forensics: Creating a curated catalog of digital forensic artifacts.,2022-07-11,2022,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Eoghan Casey; Lam Nguyen; Jeffrey Mates; Scott Lalliss,"The increasing volume, variety, velocity, distribution, structural intricacy, and complexity of use of digital evidence can make it difficult for practitioners to find and understand the most forensically useful information (Casey E. Digital evidence and computer crime: Forensic science, computers, and the Internet. Academic Press; 2011. p. 31; Pollitt M. The hermeneutics of the hard drive: Using narratology, natural language processing, and knowledge management to improve the effectiveness of the digital forensic process [PhD dissertation]. University of Central Florida; 2011). Digital forensic practitioners currently search for information and solutions in an ad hoc manner, leading to results that are unstructured, unverified, and sometimes incomplete. As a result, certain digital evidence is being missed or misinterpreted. To mitigate risks of knowledge gaps, there is a pressing need for a systematic mechanism that practitioners can use to codify and combine their collective knowledge. This work presents the design and development of a solution that catalogs crowdsourced knowledge of digital forensic artifacts in a well-structured, easily searchable form to support efficient and automated extraction of pertinent information, improving availability and reliability of interpretation of artifacts (general acceptance). Technical implementation and artifact curation are discussed with illustrative examples and recommendations for future work.",67,5,1846,1857,Digital forensics; Computer science; Crowdsourcing; Digital evidence; Data science; Artifact (error); Variety (cybernetics); The Internet; Process (computing); Computer forensics; World Wide Web,crowdsourcing forensics; digital forensic artifact; digital transformation; forensic technology innovation; general acceptance; tool testing automation,Artifacts; Crowdsourcing; Forensic Medicine; Forensic Sciences/methods; Reproducibility of Results,,American Academy of Forensic Sciences,,http://dx.doi.org/10.1111/1556-4029.15053,35816182,10.1111/1556-4029.15053,,PMC9543441,0,012-676-496-211-536; 019-508-480-187-000; 028-399-721-856-065; 049-182-076-079-260,1,true,, 012-735-685-969-861,Editorial: Cutting corners: Trading justice for cost savings,,2006,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Eoghan Casey,,3,4,185,186,Finance; Justice (ethics); Cost savings; Computer science,,,,,https://www.sciencedirect.com/science/article/pii/S1742287606001277 https://dblp.uni-trier.de/db/journals/di/di3.html#Casey06e,http://dx.doi.org/10.1016/j.diin.2006.10.006,,10.1016/j.diin.2006.10.006,1995617428,,0,,4,false,, 012-753-117-168-379,State of the Field: Digital History,2020-05-14,2020,journal article,History,00182648; 1468229x,Wiley,United States,C. Annemieke Romein; Max Kemman; Julie M. Birkholz; James Baker; Michel de Gruijter; Albert Meroño-Peñuela; Thorsten Ries; Ruben Ros; Stefania Scagliola,"Computing and the use of digital sources and resources is an everyday and essential practice in current academic scholarship. The present article gives a concise overview of approaches and methods within digital historical scholarship, focussing on the question: How have the Digital Humanities evolved and what has that evolution brought to historical scholarship? We begin by discussing techniques in which data are generated and machine searchable, such as OCR/HTR, born-digital archives, computer vision, scholarly editions, and Linked Data. In the second section, we provide examples of how data is made more accessible through quantitative text and network analysis. We close with a section on the need for hermeneutics and data-awareness in digital historical scholarship.; ; The technologies described in this article have had varying degrees of effect on historical scholarship, usually in indirect ways. For example, technologies such as OCR and search engines may not be directly visible in a historical argument; however, these technologies do shape how historians interact with sources and whether sources can be accessed at all. It is with this article that we aim to start to take stock of the digital approaches and methods used in historical scholarship which may serve as starting points for scholars to understand the digital turn in the field and how and when to implement such approaches in their work.",105,365,291,312,Sociology; Digital history; Digital humanities; Data science; Scholarship; Network analysis; Hermeneutics; Linked data,,,,Fonds Wetenschappelijk Onderzoek; H2020 European Research Council,https://onlinelibrary.wiley.com/doi/pdf/10.1111/1468-229X.12969 https://onlinelibrary.wiley.com/doi/full/10.1111/1468-229X.12969 https://www.narcis.nl/publication/RecordID/oai%3Aresearch.vu.nl%3Apublications%2F9bb52f83-56b9-4b03-b4b7-c9402a7ae95f https://biblio.ugent.be/publication/8639239/file/8704801.pdf http://sro.sussex.ac.uk/id/eprint/89927/ https://biblio.ugent.be/publication/8639239 https://research.vu.nl/en/publications/state-of-the-field-digital-history https://core.ac.uk/download/287601121.pdf,http://dx.doi.org/10.1111/1468-229x.12969,,10.1111/1468-229x.12969,2995864995,,0,,7,true,cc-by,hybrid 012-772-407-519-521,Digital image fraudulence: A curse to forensic odontology.,,2018,journal article,Journal of forensic dental sciences,09751475,Informatics Publishing Limited,India,Geeta Karyakarte; Alka Dive; Ashish Bodhade; Shubhangi Khandekar,"In today's era of forensic investigations, hard copies of forensic data have been replaced by digital records. However, wide availability of image processing software makes digital image manipulation an easy and low-cost way to distort or conceal facts. This review article aims to understand fraudulence in the digital records in forensic odontology and the various ways to detect as well as prevent it to an appreciable extent. Types of image fraudulence, ways to detect this fraudulence, and measures to prevent it to an appreciable extent have been discussed. Knowledge about digital image fraudulence, detection, and prevention is the desperate need of the hour in today's technology-driven forensic investigations. This review article attempts to focus on this pestering issue and aid the evolving technologies driven by great needs for valid forensic technique trying to claw out their way through the malignant fraudulence rooted in today's evolving digitization.",10,2,67,70,Data science; Digitization; Curse; Image processing software; Digital records; Forensic odontology; Focus (computing); Computer science; Digital image,Digital image; forensic odontology; fraudulence; investigations,,,,https://www.jfds.org/article.asp?issn=0975-1475;year=2018;volume=10;issue=2;spage=67;epage=70;aulast=Karyakarte;type=2 https://europepmc.org/article/PMC/PMC6344785 https://pubmed.ncbi.nlm.nih.gov/30745779/ http://www.jfds.org/article.asp?issn=0975-1475;year=2018;volume=10;issue=2;spage=67;epage=70;aulast=Karyakarte https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6344785,http://dx.doi.org/10.4103/jfo.jfds_16_18,30745779,10.4103/jfo.jfds_16_18,2908784086,PMC6344785,0,005-390-140-295-540; 008-390-936-800-337; 008-492-595-740-053; 008-711-761-932-497; 027-871-423-903-054; 140-241-199-301-269; 140-836-414-294-667; 155-899-306-652-415; 192-530-015-339-025,2,true,cc-by-nc-sa,green 012-950-061-245-269,FraaS: A Framework for Digital Forensic Services in a Cloud-based Environment,2015-12-02,2015,journal article,The International Journal of Forensic Computer Science,18099807; 19807333,ABEAT - Associacao Brasileira de Especialistas em Alta Tecnologia,,Mohit Soni; Manish Kumar Bharti,,10,1,15,22,Cloud computing; Digital forensics; Computer science; Forensic science; Computer security; Internet privacy; Data science; Geography; Archaeology; Operating system,,,,,,http://dx.doi.org/10.5769/j201501002,,10.5769/j201501002,,,0,,1,false,, 012-976-343-182-644,Implementation of Image Enhancement Algorithm for Image Forensics using Mathlab,2020-02-14,2020,journal article,Jurnal Online Informatika,25279165; 25281682,Sunan Gunung Djati State Islamic University of Bandung,,Fauzan Novaldi Suteja; Eka Wahyu Hidayat; Nur Widiyasono,"The purpose of this journal is to explain the implementation of the image enhancement algorithm for image forensics. Image Forensic deals with the types of digital evidence in the form of digital image files. One of the most commonly used digital devices in providing digital evidence for forensic analysis is CCTV (Closed-Circuit Television). CCTV images have a low quality such as noise, blur, lack of light intensity, etc., so that the image must be enhanced so that forensic analysis can be done. To enhance image quality, an application is needed by applying the image enhancement algorithm. The algorithm applied to the application is a Low Pass Filter to increase low pixel intensity, High Pass Filter to increase high pixel intensity, Median Filter to replaces the original pixel value with the pixel center value of the image, Mean Filter to replaces the original pixel value with a value the average pixel of the image, the Gaussian Filter for reducing noise in the image, the Wiener Filter to reduce blur in the image, the Histogram Equalization spreads the image histogram value, Contrast Stretching to stretch the contrast intensity in the image and Bicubic Interpolation to increase the image size and resize the image. In this study, the application was built using MATLAB and the testing process for each algorithm was based on Timing-Run, MSE and PSNR parameters. From the test, the average MSE value is 1058.512083 and the PSNR value is 541.61875 dB, which means that the resulting image has a fairly high level of similarity and the average time needed to process the algorithm for the image is 0.114627915 seconds.",4,2,79,84,Algorithm; Histogram equalization; High-pass filter; Pixel; Image resolution; Computer science; Digital image; Image quality; Median filter; Image histogram,,,,,http://join.if.uinsgd.ac.id/index.php/join/article/view/314 https://join.if.uinsgd.ac.id/index.php/join/article/download/314/137 https://core.ac.uk/download/pdf/295600540.pdf,http://dx.doi.org/10.15575/join.v4i2.314,,10.15575/join.v4i2.314,3006539061,,0,,0,true,cc-by-nc-nd,gold 013-063-668-345-122,Prelim i - Editorial Board,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,36,,301158,301158,Editorial board; Political science,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00063-9,,10.1016/s2666-2817(21)00063-9,,,0,,0,true,,bronze 013-215-371-215-386,"The forensic examination of black, brown, blond, and red hairs using digital imaging and colour analysis",,2010,journal article,Science & Justice,13550306,Elsevier BV,United Kingdom,L. Masaki; Elizabeth Brooks; James Robertson; Philip Maynard; Claude Roux,,50,1,39,,Anatomy; Digital imaging; Art; Forensic examination,,,,,https://www.sciencedirect.com/science/article/pii/S1355030609002238,http://dx.doi.org/10.1016/j.scijus.2009.11.051,,10.1016/j.scijus.2009.11.051,2112467923,,0,,1,false,, 013-370-475-929-519,Digital Forensic Investigation for Non-Volatile Memory Architecture by Hybrid Evaluation Based on ISO/IEC 27037:2012 and NIST SP800-86 Framework,2022-02-22,2022,journal article,IT Journal Research and Development,25284053; 25284061,UIR Press,,Rizdqi Akbar Ramadhan; Panji Rachmat Setiawan; Dedy Hariyadi,"In the implementation of Digital Forensics, one of the derivatives of practice is the handling of Digital Evidence. Handling Digital Evidence requires important steps and procedures. Digital evidence is a source of artifacts in handling a digital-based crime case, one of which comes from digital storage. In this research, the author will design a framework for Digital Forensic investigations by simulating digital evidence in the form of a non-volatile architecture. The reference commonly used by researchers in previous articles is the National Institute of Justice (NIST). The framework is a reference and steps in the practice of acquiring digital evidence. The purpose of designing this framework is as a legal procedure that is specifically implemented in the practice of acquiring non-volatile digital evidence. In the design, the author conducted a literature study on the NIST SP 800-86 and ISO 27037:2012 standards and then combined them in a hybrid terminology. The output of this research is to combine the two standards to become framework as reference for handling and investigating Digital Forensic science.",,,162,168,Digital forensics; NIST; Digital evidence; Terminology; Computer science; Architecture; Software engineering; Data science; Computer security; Art; Linguistics; Philosophy; Natural language processing; Visual arts,,,,,,http://dx.doi.org/10.25299/itjrd.2022.8968,,10.25299/itjrd.2022.8968,,,0,,1,true,cc-by-sa,gold 013-473-351-226-135,An automated multispecies bioacoustics sound classification method based on a nonlinear pattern: Twine-pat,,2022,journal article,Ecological Informatics,15749541; 18780512,Elsevier BV,Netherlands,Erhan Akbal; Sengul Dogan; Turker Tuncer,,68,,101529,101529,Bioacoustics; Computer science; Artificial intelligence; Classifier (UML); Pattern recognition (psychology); Feature (linguistics); Feature extraction; Machine learning; Telecommunications; Philosophy; Linguistics,,,,,,http://dx.doi.org/10.1016/j.ecoinf.2021.101529,,10.1016/j.ecoinf.2021.101529,,,0,006-697-972-006-695; 007-367-899-253-888; 012-063-021-691-781; 012-750-129-425-56X; 017-878-265-650-766; 018-565-254-420-673; 020-308-627-052-645; 021-576-603-866-289; 021-835-700-859-850; 022-032-095-214-380; 028-221-850-747-211; 029-113-753-904-105; 032-218-297-033-13X; 033-959-377-142-453; 034-664-033-394-954; 035-370-354-940-357; 037-037-924-922-673; 037-096-675-409-253; 044-015-045-463-542; 044-165-881-887-926; 051-878-628-243-805; 055-017-121-287-893; 055-580-948-472-432; 056-114-742-941-57X; 056-747-465-730-925; 057-404-972-141-422; 059-078-123-235-768; 061-008-197-627-623; 061-329-782-735-841; 061-642-027-743-320; 066-194-208-799-599; 073-549-836-677-991; 074-413-729-032-390; 078-857-006-890-191; 082-629-669-226-97X; 085-236-522-178-311; 089-160-406-114-246; 097-638-032-040-034; 098-234-082-320-443; 098-736-215-366-286; 099-315-738-160-501; 099-664-169-123-924; 100-047-371-754-455; 102-720-561-772-371; 105-703-117-877-69X; 116-281-604-285-829; 130-308-435-133-65X; 136-940-094-377-214; 154-828-479-054-03X,0,false,, 013-481-527-037-718,Authenticity examination of compressed audio recordings using detection of multiple compression and encoders' identification.,2014-02-18,2014,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Rafal Korycki,,238,,33,46,Encoder; Speech coding; Artificial intelligence; Audio mining; Speech recognition; Computer vision; Computer science; Anti-aliasing; Data compression; Feature vector; Digital forensics; Digital audio,Binary decision tree; Detection of montage; Digital audio authenticity; Digital forensics; Discriminant analysis; MDCT coefficients; MP3 encoder classification; Multiple compression; SVM,,,,https://www.sciencedirect.com/science/article/pii/S0379073814000693 https://www.ncbi.nlm.nih.gov/pubmed/24637036,http://dx.doi.org/10.1016/j.forsciint.2014.02.008,24637036,10.1016/j.forsciint.2014.02.008,2006072643,,5,000-111-656-358-841; 002-339-017-887-310; 002-890-793-739-219; 006-261-450-834-912; 006-364-806-553-428; 006-698-117-158-334; 007-141-734-571-464; 010-410-943-186-731; 016-736-880-761-249; 018-172-332-749-013; 020-790-687-868-388; 022-418-214-623-366; 024-085-101-696-497; 026-163-602-249-656; 027-746-342-202-026; 037-460-283-073-875; 039-216-783-233-597; 045-002-530-413-569; 049-209-305-832-496; 063-679-660-896-279; 071-537-440-452-939; 073-840-322-963-388; 073-911-854-128-151; 075-766-494-168-698; 077-009-437-168-880; 088-280-783-668-535; 089-662-206-683-698; 093-427-308-175-939; 100-559-549-797-890; 111-360-832-170-381; 129-720-338-413-00X; 132-041-004-899-154; 133-304-307-761-214; 135-726-154-118-975; 184-689-319-016-457; 197-055-276-601-409,17,false,, 013-492-966-231-188,Forensic Analysis for AI Speaker with Display Echo Show 2nd Generation as a Case Study,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Min-A Youn; Yirang Lim; Kangyoun Seo; Hyunji Chung; Sangjin Lee,,38,,301130,,Echo (computing); Speech recognition; Computer science,,,,,https://dfrws.org/presentation/forensic-analysis-for-ai-speaker-with-display/ https://dfrws.org/wp-content/uploads/2021/01/2021_APAC_paper-forensic_analysis_for_ai_speaker_with_display_echo_show_2nd_generation_as_a_case_study.pdf,http://dx.doi.org/10.1016/j.fsidi.2021.301130,,10.1016/j.fsidi.2021.301130,3121447750,,0,002-189-278-854-313; 039-999-270-718-277; 095-409-130-263-862; 102-169-873-723-040; 115-380-228-622-98X,3,true,cc-by-nc-nd,hybrid 013-969-775-246-876,Editorial – Delivering digital forensic science as a service,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Eoghan Casey,,35,,301095,,Engineering; World Wide Web; Service (business); Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/di/di35.html#Casey20d https://doi.org/10.1016/j.fsidi.2020.301095,http://dx.doi.org/10.1016/j.fsidi.2020.301095,,10.1016/j.fsidi.2020.301095,3113066270,,0,,0,false,, 013-991-866-178-240,Disconnects of Specialized Mobile Digital Forensics within the Generalized Field of Digital Forensic Science,2018-07-01,2018,journal article,International Journal of Interdisciplinary Telecommunications and Networking,19418663; 19418671,IGI Global,,Gregory H. Carlton; Gary C. Kessler,"The study and practice of forensic science comprises many distinct areas that range from behavioral to biological to physical and to digital matters, and in each area forensic science is utilized to obtain evidence that will be admissible within the legal framework. This article focuses on inconsistencies within the accepted methodology of digital forensics when comparing the current best practices of mobile digital devices and traditional computer devices. Here the authors raise the awareness of this disconnect in methodology, and they posit that some specific tasks within the traditional best practices of digital forensic science are artifacts of ritual rather than based on scientific requirements.",10,3,62,65,Best practice; Data science; Field (computer science); Computer science; Digital forensics,,,,,https://jglobal.jst.go.jp/detail?JGLOBAL_ID=201802228345200270 https://works.bepress.com/gary_kessler/86/ https://dblp.uni-trier.de/db/journals/ijitn/ijitn10.html#CarltonK18a https://ideas.repec.org/a/igg/jitn00/v10y2018i3p62-65.html https://www.igi-global.com/article/disconnects-of-specialized-mobile-digital-forensics-within-the-generalized-field-of-digital-forensic-science/204579,http://dx.doi.org/10.4018/ijitn.2018070106,,10.4018/ijitn.2018070106,2802304556,,0,053-834-219-883-201; 087-788-401-737-824; 123-275-701-676-787,0,false,, 014-007-264-984-438,Forensic facial approximation: an overview of current methods used at the Victorian Institute of Forensic Medicine/Victoria Police Criminal Identification Squad.,,2005,journal article,The Journal of forensic odonto-stomatology,0258414x,International Organisation for Forensic Odonto-Stomatology,Sweden,Susan Hayes; R. Taylor; Alistair Paterson; S. Hayes,"Forensic facial approximation involves building a likeness of the head and face on the skull of an unidentified individual, with the aim that public broadcast of the likeness will trigger recognition in those who knew the person in life. This paper presents an overview of the collaborative practice between Ronn Taylor (Forensic Sculptor to the Victorian Institute of Forensic Medicine) and Detective Sergeant Adrian Paterson (Victoria Police Criminal Identification Squad). This collaboration involves clay modelling to determine an approximation of the person's head shape and feature location, with surface texture and more speculative elements being rendered digitally onto an image of the model. The advantages of this approach are that through clay modelling anatomical contouring is present, digital enhancement resolves some of the problems of visual perception of a representation, such as edge and shape determination, and the approximation can be easily modified as and when new information is received.",23,2,45,50,Forensic science; Visual arts; Representation (arts); Head shape; Medicine; Feature (computer vision); Forensic engineering; Identification (information),,"Aluminum Silicates; Clay; Computer Graphics; Face/anatomy & histology; Forensic Anthropology/methods; Humans; Models, Anatomic; Police",Aluminum Silicates; Clay,,https://ro.uow.edu.au/cgi/viewcontent.cgi?article=1431&context=smhpapers https://research-repository.uwa.edu.au/en/publications/forensic-facial-approximation-an-overview-of-current-methods-used-at-the-victorian-institute-of-forensic-medicinevictoria-police-criminal-identification-squad(d549c933-1ab9-4896-b770-4975d8bdb856)/export.html http://www.ncbi.nlm.nih.gov/pubmed/16353755 https://research-repository.uwa.edu.au/en/publications/forensic-facial-approximation-an-overview-of-current-methods-used-at-the-victorian-institute-of-forensic-medicinevictoria-police-criminal-identification-squad(d549c933-1ab9-4896-b770-4975d8bdb856).html https://ro.uow.edu.au/smhpapers/419/,https://www.ncbi.nlm.nih.gov/pubmed/16353755,16353755,,2127031787,,0,028-560-716-647-945; 030-351-980-143-982; 034-119-823-526-401; 035-727-225-552-891; 047-923-549-693-221; 050-265-533-360-031; 050-632-390-689-332; 055-035-190-656-305; 083-608-114-781-893; 096-294-704-835-460; 112-593-385-572-891; 120-360-271-457-222; 124-024-187-542-961; 144-816-564-472-825; 146-862-315-442-932; 154-684-040-785-346; 167-149-224-109-550; 171-925-497-674-014; 183-012-891-853-140,9,false,, 014-021-855-427-01X,The use of a digital imaging technique to aid bite mark analysis,,1996,journal article,Science & justice : journal of the Forensic Science Society,13550306,Forensic Science Society,United Kingdom,A.S. Naru; E. Dykes,"Criminal cases occasionally involve the analysis of bite mark injuries. This paper presents a method of digital image enhancement of an injury and an overlay production method to improve the comparison between the dentition of a suspect and the image of the injury. A comparison method entirely within the digital image software is also illustrated. The use of digitally-produced overlays appears to provide a more objective method of comparison. The use of this method for shoe print, tyre mark and other blunt instrument injury analysis is noted. Language: en",36,1,47,50,Digital imaging; Engineering; Overlay; Artificial intelligence; Software; Suspect; Objective method; Poison control; Bite mark; Computer vision; Computer security; Digital image,,"Acetates; Adult; Bites, Human; Dentition; Female; Forensic Medicine; Humans; Image Enhancement/methods",Acetates,,https://europepmc.org/article/MED/8612056 https://www.ncbi.nlm.nih.gov/pubmed/8612056 https://www.sciencedirect.com/science/article/pii/S1355030696725546 http://www.sciencedirect.com/science/article/pii/S1355030696725546 https://www.sciencedirect.com/science/article/pii/S1355030696725546#!,http://dx.doi.org/10.1016/s1355-0306(96)72554-6,8612056,10.1016/s1355-0306(96)72554-6,1991409403,,0,,29,false,, 014-128-892-662-502,Color separation of signature and stamp inks to facilitate handwriting examination.,2003-11-01,2003,journal article,Journal of forensic sciences,00221198,Wiley-Blackwell,United States,Alan Chaikovsky; Sharon Brown; Laser Sin David; Alex Balman; Avner Barzovski,"The questioned documents laboratory often encounters cases where handwriting that is to be examined intersects with some interfering factor such as a rubber stamp, typewriting or background printing. In these cases, line direction, beginning and ending features of letters and other fine details of the handwriting may be lost in the ""noise"" of the intersecting ink. The purpose of this paper is to show several new digital photography methods that may be used to ""subtract"" the effect of the intersecting ink, thereby enhancing that of the handwriting ink in order to enable the document examiner to conduct a complete examination. These methods have the advantage of being fast and do not involve the use of expensive material or equipment. Several new methods are described that may be used to separate the colors of the handwriting ink from that of the intersecting ink: the analog method and several digital methods such as RGB-HSB-CMYK, L*a*b color, and color separation using the Channel Mixer function of Adobe Photoshop. Successful application of these color separation methods to specific handwriting ink/rubber stamp ink color combinations shows that the effect of the intersecting ink may indeed be minimalized if not canceled altogether. Application of the suggested methods may well make the difference between a nonconclusive handwriting examination and a full analysis of the questioned handwriting.",48,6,1396,1405,Inkwell; Computer graphics (images); Engineering; Signature (logic); Artificial intelligence; Digital photography; Line (geometry); Rubber stamp; Handwriting; Computer vision; Channel (digital image); Noise (video),,,,,https://www.ncbi.nlm.nih.gov/pubmed/14640292 https://pubmed.ncbi.nlm.nih.gov/14640292/,http://dx.doi.org/10.1520/jfs2002425,14640292,10.1520/jfs2002425,2417841405,,0,005-496-359-304-11X; 043-035-183-323-099; 053-719-784-683-508; 068-626-785-227-645; 084-854-825-448-026,10,false,, 014-168-575-959-392,Study on advanced analysis method based on timeline chart for Digital Forensic Investigation,2014-02-28,2014,journal article,The Journal of Korea Navigation Institute,12269026,The Korea Navigation Institute,,Keungi Lee; Seongjin Hwang; Changhoon Lee; Sangjin Lee,"Recently, importance of digital forensics has increased and using analysis methods of digital evidence in the analysis of evidence of various types. However, analysis time and effort is steadily increasing because personal disk capacity is too big and it has many number of files. Most digital evidence has time property, such as access time, creation time, and modification time. These time information of digital evidence is one of most important factors in the digital forensic area. But if digital examiner simply analyze based on binary source only, it is possible to have wrong result because time has various types. In this paper, we classify various type of time in the digital evidence and describe advanced analysis method based on timeline chart for digital forensic investigation.",18,1,50,55,Engineering; Chart; Access time; Information retrieval; Digital evidence; Timeline; Binary number; Multimedia; Computer forensics; Digital forensics; Property (programming),,,,,http://www.koreascience.or.kr/article/ArticleFullRecord.jsp?cn=HHHHBI_2014_v18n1_50,http://dx.doi.org/10.12673/jkoni.2014.18.1.50,,10.12673/jkoni.2014.18.1.50,2065930911,,0,096-415-102-126-454,0,true,,bronze 014-403-336-708-18X,Describing and Categorizing Disk-Avoiding Anti-Forensics Tools,2007-06-22,2007,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Aaron D. Smith,"ABSTRACT Disk-avoiding anti-forensics tools are now being used to prevent current forensics tools from detecting their activities. These new tools must be described and categorized in order for forensics investigators to be aware of and therefore able to detect the tools and collect the information they produce. This article builds upon existing categories used to classify anti-forensics methods, such as evidence source elimination and data contraception, and provides useful information for understanding the current and anticipated trends in anti-forensics.",1,4,309,313,Data science; Order (business); Computer science,,,,,https://dblp.uni-trier.de/db/journals/jdfp/jdfp1.html#Smith06 https://www.tandfonline.com/doi/full/10.1080/15567280701418155,http://dx.doi.org/10.1080/15567280701418155,,10.1080/15567280701418155,2056851541,,0,063-257-284-816-393; 078-598-867-814-365; 097-567-011-227-46X; 106-166-309-388-976,4,true,,bronze 014-530-173-462-227,Performance of the FearID earprint identification system,2007-03-02,2007,journal article,Forensic science international,03790738; 18726283,Elsevier Ireland Ltd,Netherlands,Ivo Alberink; Arnout C.C. Ruifrok,,166,2,145,154,Artificial intelligence; Matching (statistics); Crime scene; Pattern recognition; Sample (material); Identification system; Reference database; Word error rate; Simulation; Medicine; Identification (information); Segmentation,,"Databases, Factual; Ear, External/anatomy & histology; Forensic Medicine; Humans; Image Processing, Computer-Assisted; Logistic Models",,,https://www.ncbi.nlm.nih.gov/pubmed/16772109 https://www.sciencedirect.com/science/article/pii/S0379073806002763 https://www.infona.pl/resource/bwmeta1.element.elsevier-2e12c379-6513-3e46-ba24-1319971505cd,http://dx.doi.org/10.1016/j.forsciint.2006.05.001,16772109,10.1016/j.forsciint.2006.05.001,2007768278,,0,007-932-530-313-421; 014-367-686-446-268; 055-078-260-055-557; 089-961-115-838-172; 092-054-561-229-843,41,false,, 014-655-184-900-164,Digital whole-slide image analysis for automated diatom test in forensic cases of drowning using a convolutional neural network algorithm,2019-08-08,2019,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Yuanyuan Zhou; Ji Zhang; Jiao Huang; Kaifei Deng; Jianhua Zhang; Zhiqiang Qin; Zhenyuan Wang; Xiaofeng Zhang; Ya Tuo; Chen Liqin; Yi-jiu Chen; Ping Huang,,302,,109922,109922,Artificial intelligence; Pattern recognition; Test (assessment); Diatom; Accident prevention; Poison control; Extraction methods; Whole slide image; Injury control; Computer science; Convolutional neural network,Artificial intelligence; Convolutional neural network; Diatom examination; Drowning; Forensic pathology,"Algorithms; Deep Learning; Diatoms; Drowning/diagnosis; Forensic Pathology/methods; Humans; Lung/pathology; Neural Networks, Computer; Sensitivity and Specificity",,National Key R&D Program of China; National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; Science and Technology Committee of Shanghai Municipality; Science and Technology Committee of Shanghai Municipality; Shanghai Key Laboratory of Forensic Medicine,https://www.safetylit.org/citations/index.php?fuseaction=citations.viewdetails&citationIds[]=citjournalarticle_620974_37 https://pubmed.ncbi.nlm.nih.gov/31442682/ https://www.sciencedirect.com/science/article/pii/S0379073819303342 https://www.ncbi.nlm.nih.gov/pubmed/31442682 https://europepmc.org/article/MED/31442682,http://dx.doi.org/10.1016/j.forsciint.2019.109922,31442682,10.1016/j.forsciint.2019.109922,2968603830,,0,003-102-477-464-707; 004-269-574-716-057; 006-965-295-950-66X; 010-802-999-479-958; 011-381-092-477-835; 014-590-025-295-804; 015-813-601-387-97X; 016-269-848-088-621; 017-477-781-505-533; 021-062-199-937-12X; 024-329-953-127-321; 024-443-882-056-405; 024-478-001-131-461; 029-596-977-717-535; 034-628-642-481-449; 041-052-257-914-046; 042-189-952-746-631; 043-209-288-339-537; 045-085-525-295-189; 047-774-212-125-396; 048-511-449-134-989; 055-463-893-774-499; 057-567-246-168-045; 063-010-960-602-119; 066-042-439-542-747; 083-029-502-178-942; 091-469-922-460-804; 093-530-739-304-785; 096-532-070-721-701; 101-787-928-774-112; 109-178-379-830-069; 112-462-961-696-703; 118-148-117-272-158; 120-177-417-650-08X; 140-230-090-524-289; 162-300-681-613-979; 180-559-374-049-445,27,false,, 014-767-056-602-687,An Automated Approach for Digital Forensic Analysis of Heterogeneous Big Data,,2016,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Hussam J. Mohammed; Nathan Clarke; Fudong Li,"The major challenges with big data examination and analysis are volume, complex interdependence across content, and heterogeneity. The examination and analysis phases are considered essential to a digital forensics process. However, traditional techniques for the forensic investigation use one or more forensic tools to examine and analyse each resource.  In addition, when multiple resources are included in one case, there is an inability to cross-correlate findings which often leads to inefficiencies in processing and identifying evidence. Furthermore, most current forensics tools cannot cope with large volumes of data. This paper develops a novel framework for digital forensic analysis of heterogeneous big data. The framework mainly focuses upon the investigations of three core issues: data volume, heterogeneous data and the investigators cognitive load in understanding the relationships between artefacts. The proposed approach focuses upon the use of metadata to solve the data volume problem, semantic web ontologies to solve the heterogeneous data sources and artificial intelligence models to support the automated identification and correlation of artefacts to reduce the burden placed upon the investigator to understand the nature and relationship of the artefacts.",11,2,137,152,Volume (computing); Semantic Web; Data science; Computer science; Process (engineering); Cognitive load; Big data; Identification (information); Digital forensics; Metadata,,,,,https://commons.erau.edu/cgi/viewcontent.cgi?article=1384&context=jdfsl https://core.ac.uk/display/81695607 https://paperity.org/p/84115528/an-automated-approach-for-digital-forensic-analysis-of-heterogeneous-big-data https://commons.erau.edu/jdfsl/vol11/iss2/9/ https://doi.org/10.15394/jdfsl.2016.1384 https://ro.ecu.edu.au/ecuworkspost2013/2548/ https://dblp.uni-trier.de/db/journals/jdfsl/jdfsl11.html#MohammedCL16 http://commons.erau.edu/jdfsl/vol11/iss2/9/ https://ro.ecu.edu.au/cgi/viewcontent.cgi?article=3554&context=ecuworkspost2013 https://core.ac.uk/download/81695607.pdf,http://dx.doi.org/10.15394/jdfsl.2016.1384,,10.15394/jdfsl.2016.1384,2529303197,,1,000-750-047-594-348; 009-885-874-541-907; 012-229-066-466-307; 033-877-222-136-260; 038-869-864-206-517; 041-967-137-787-551; 046-505-842-788-23X; 053-706-401-396-999; 080-734-222-929-339; 082-395-432-624-372; 086-048-728-181-733; 092-039-178-633-223; 115-471-022-347-349; 133-752-203-150-119; 145-259-135-487-292; 149-798-016-481-910; 150-249-549-372-358; 167-311-879-371-915,21,true,cc-by-nc,gold 014-841-768-720-828,Digitalization of dental recording,,1982,journal article,Forensic science international,03790738; 18726283,Elsevier Ireland Ltd,Netherlands,S. Keiser-Nielsen,,20,2,153,161,Dentistry; Medical education; Medicine; Identification (information),,Computers; Dental Care; Dental Records; Forensic Dentistry; Humans; Mathematics; Terminology as Topic,,,https://www.sciencedirect.com/science/article/pii/0379073882901402#! https://europepmc.org/article/MED/7118026 http://www.ncbi.nlm.nih.gov/pubmed/7118026 https://www.sciencedirect.com/science/article/abs/pii/0379073882901402,http://dx.doi.org/10.1016/0379-0738(82)90140-2,7118026,10.1016/0379-0738(82)90140-2,1979689347,,0,075-041-363-933-929; 078-970-947-793-232,4,false,, 014-859-901-321-603,Forensic analysis of video file formats,,2014,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Thomas Gloe; André Fischer; Matthias Kirchner,"Abstract Video file format standards define only a limited number of mandatory features and leave room for interpretation. Design decisions of device manufacturers and software vendors are thus a fruitful resource for forensic video authentication. This paper explores AVI and MP4-like video streams of mobile phones and digital cameras in detail. We use customized parsers to extract all file format structures of videos from overall 19 digital camera models, 14 mobile phone models, and 6 video editing toolboxes. We report considerable differences in the choice of container formats, audio and video compression algorithms, acquisition parameters, and internal file structure. In combination, such characteristics can help to authenticate digital video files in forensic settings by distinguishing between original and post-processed videos, verifying the purported source of a file, or identifying the true acquisition device model or the processing software used for video processing.",11,,S68,S76,Smacker video; Non-linear editing system; Video capture; Matroska; Video editing; Computer science; Multimedia; Image file formats; Video processing; Design rule for Camera File system,,,,,https://dfrws.org/presentation/forensic-analysis-of-video-file-formats/ http://www.sciencedirect.com/science/article/pii/S1742287614000140 https://core.ac.uk/display/82097955 https://doi.org/10.1016/j.diin.2014.03.009 https://dfrws.org/wp-content/uploads/2019/06/2014_EU_paper-forensic_analysis_of_video_file_formats.pdf https://www.wi.uni-muenster.de/de/forschung/publikationen/98281 https://www.sciencedirect.com/science/article/pii/S1742287614000140 https://core.ac.uk/download/pdf/82097955.pdf,http://dx.doi.org/10.1016/j.diin.2014.03.009,,10.1016/j.diin.2014.03.009,2081326817,,0,005-315-703-269-523; 013-610-410-193-416; 015-717-506-603-742; 020-790-687-868-388; 031-542-664-705-080; 034-287-835-960-531; 034-927-240-304-052; 035-497-590-517-946; 039-932-911-478-60X; 056-148-934-103-963; 063-532-297-436-449; 066-406-874-464-629; 073-831-288-159-200; 077-323-690-290-738; 085-503-660-748-099; 085-816-961-933-906; 089-538-052-450-649; 094-933-978-324-364; 127-601-219-775-046; 140-408-113-219-371; 144-920-871-189-384; 150-280-000-852-253,40,true,cc-by-nc-nd,hybrid 014-864-005-189-321,Digital Data Stealing from ATM using Data Skimmers: Challenge to the Forensic Examiner,2017-01-19,2017,journal article,Journal of Forensic Sciences & Criminal Investigation,24761311,Juniper Publishers,,Mukesh Sharma,,1,4,,,Forensic science; Digital data; Computer security; Computer science,,,,,https://juniperpublishers.com/jfsci/JFSCI.MS.ID.555567.php,http://dx.doi.org/10.19080/jfsci.2017.01.555567,,10.19080/jfsci.2017.01.555567,2781742967,,0,,0,true,cc-by,hybrid 014-907-222-101-733,The determination of identity and uniqueness of color laser printouts of Ricoh ® brand by Adobe ® Creative Cloud Photoshop ® 2018,2019-07-17,2019,journal article,Egyptian Journal of Forensic Sciences,20905939; 2090536x,Springer Science and Business Media LLC,Egypt,Ahmad S. Salim; Asmaa Abdel Monsef Abdalla,"Printer forensics is a sub-branch of digital forensic science encompassing the identification of the source of any printout by different means. Over the world, still today, there is no digital forensic lab able to identify the source of the color laser printer seized in forgery crimes by a certain scientific method. Therefore, the determination for the identity and uniqueness of color laser printouts have become one of the most challenging recently investigated in digital forensic labs. In the present study, one type of the most common brand of color laser printers called Ricoh® was selected. Three defined steps, printing, scanning, and extracting, were applied to measure and calculate the obtained data for achieving our target. Adobe Creative Cloud Photoshop 2018 was used as a forensic tool for image processing. In our study, 400 color laser printout samples from 93 Ricoh® color laser printers with different serial numbers were investigated. The study results successfully present the basic coded dot matrix pattern (CDMP) that characterizes and corresponds to the Ricoh® color laser machines with a 100% accuracy ratio. The determination of identity and uniqueness of color laser printouts of Ricoh® brand was achieved with a high accuracy ratio (100%). Adobe Creative Cloud Photoshop 2018 was a versatile software applied as a steganalysis tool for extracting the steganography information embedded in all undertaken color laser printouts.",9,1,1,7,Steganalysis; Steganography; Computer graphics (images); Dot matrix; Software; Computer science; Laser; Identification (information); Digital forensics; Image processing,,,,,https://link.springer.com/content/pdf/10.1186/s41935-019-0140-8.pdf https://ejfs.springeropen.com/articles/10.1186/s41935-019-0140-8 https://link.springer.com/article/10.1186/s41935-019-0140-8,http://dx.doi.org/10.1186/s41935-019-0140-8,,10.1186/s41935-019-0140-8,2958185387,,0,011-490-575-896-009; 015-965-984-560-348; 032-071-655-359-41X; 089-173-568-435-053; 099-719-353-310-40X; 104-850-344-003-339; 135-396-441-868-382,1,true,cc-by,gold 015-093-091-045-167,"Effects of oils, lotions, hand sanitizers, and mehendi on fingerprints captured through digital fingerprint scanner",2021-05-14,2021,journal article,Egyptian Journal of Forensic Sciences,20905939; 2090536x,Springer Science and Business Media LLC,Egypt,Vinita Kumari; Mukesh Kumar Thakar; Biswajit Mondal; Surender Kumar Pal,"In this modern era, advancement in technology is seen in every aspect of our life making it comparatively much easier. Likewise, in the field of fingerprinting, the digital scanners have replaced conventional methods of taking fingerprints, as it is accurate and less time-consuming. In daily life, people often apply oils, lotions, hand sanitizers, and occasionally mehendi on their hands. These cosmetic and daily use products affect the digital recording of fingerprints, thus making it difficult for forensic experts to identify the real offender in many cases. The purpose of the study was to check the effect of oils, lotions, hand sanitizers, and mehendi on the fingerprint pattern. The present study was undertaken by taking 2700 fingerprints from 30 individuals. These fingerprints were recorded with the help of the SecuGen Hamster IV fingerprint scanner under controlled environmental conditions. The examination and comparison of fingerprint patterns were done on the basis of visibility (clarity and intensity). The presence of cosmetic and daily use products affected the visibility of digitally captured fingerprints. Different products caused different effects based on their properties. Synthetic mehendi, alcohol-based hand sanitizer, greasy lotion, and viscous oil caused significant differences in the fingerprint images by degrading the fingerprint quality. The non-greasy lotion and non-alcohol-based hand sanitizer showed less effect, whereas non-viscous oil and natural mehendi caused a minimal effect on the quality of fingerprint images. The application of cosmetic and daily use products added an additional layer on the fingers which is not present naturally. The additional layer caused alterations in the fingerprint pattern of an individual. So, digital fingerprints should be collected after proper washing of hands.",11,1,1,7,Hand sanitizer; Artificial intelligence; Fingerprint recognition; Fingerprint (computing); Scanner; Digital fingerprint; Viscous oil; Minimal effect; Computer vision; Computer science,,,,,https://link.springer.com/content/pdf/10.1186/s41935-021-00222-w.pdf https://link.springer.com/article/10.1186/s41935-021-00222-w https://ejfs.springeropen.com/articles/10.1186/s41935-021-00222-w,http://dx.doi.org/10.1186/s41935-021-00222-w,,10.1186/s41935-021-00222-w,3164583942,,0,002-574-690-906-884; 019-313-265-814-008; 030-672-645-606-115; 066-353-371-492-517; 075-136-991-324-974; 080-551-143-232-814; 097-011-408-631-969; 128-360-529-628-385,1,true,cc-by,gold 015-093-633-802-899,First Annual DFRWS APAC Conference,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Andrew Marrington,,38,,301304,,,,,,,https://api.elsevier.com/content/article/PII:S2666281721002274?httpAccept=text/xml,http://dx.doi.org/10.1016/j.fsidi.2021.301304,,10.1016/j.fsidi.2021.301304,3215199437,,0,,0,true,,bronze 015-109-005-171-807,Automatic forensic face recognition from digital images.,,2004,journal article,Science & justice : journal of the Forensic Science Society,13550306,Forensic Science Society,United Kingdom,C. Peacock; A. Goode; A. Brett,"Digital image evidence is now widely available from criminal investigations and surveillance operations, often captured by security and surveillance CCTV. This has resulted in a growing demand from law enforcement agencies for automatic person-recognition based on image data. In forensic science, a fundamental requirement for such automatic face recognition is to evaluate the weight that can justifiably be attached to this recognition evidence in a scientific framework. This paper describes a pilot study carried out by the Forensic Science Service (UK) which explores the use of digital facial images in forensic investigation. For the purpose of the experiment a specific software package was chosen (Image Metrics Optasia). The paper does not describe the techniques used by the software to reach its decision of probabilistic matches to facial images, but accepts the output of the software as though it were a 'black box'. In this way, the paper lays a foundation for how face recognition systems can be compared in a forensic framework. The aim of the paper is to explore how reliably and under what conditions digital facial images can be presented in evidence.",44,1,29,34,Digital imaging; Criminal investigation; Artificial intelligence; Face Recognition Grand Challenge; Information retrieval; Software; Image analysis; Facial recognition system; Computer vision; Service (systems architecture); Computer science; Digital image,,"Electronic Data Processing; Face; Forensic Medicine/methods; Humans; Image Processing, Computer-Assisted; Photography; Pilot Projects; Recognition, Psychology",,,http://europepmc.org/abstract/MED/14964819 https://www.sciencedirect.com/science/article/abs/pii/S1355030604716822#! https://www.ncbi.nlm.nih.gov/pubmed/14964819 https://www.sciencedirect.com/science/article/pii/S1355030604716822,http://dx.doi.org/10.1016/s1355-0306(04)71682-2,14964819,10.1016/s1355-0306(04)71682-2,2050916336,,0,006-583-372-683-929; 036-373-966-333-478; 059-216-039-945-794; 130-486-254-361-92X; 174-512-052-542-24X,21,false,, 015-123-182-480-038,A new method for the recovery and evidential comparison of footwear impressions using 3D structured light scanning,2018-02-06,2018,journal article,Science & justice : journal of the Forensic Science Society,13550306,Forensic Science Society,United Kingdom,Tim Thompson; Paul Norris,"Abstract Footwear impressions are one of the most common forms of evidence to be found at a crime scene, and can potentially offer the investigator a wealth of intelligence. Our aim is to highlight a new and improved technique for the recovery of footwear impressions, using three-dimensional structured light scanning. Results from this preliminary study demonstrate that this new approach is non-destructive, safe to use and is fast, reliable and accurate. Further, since this is a digital method, there is also the option of digital comparison between items of footwear and footwear impressions, and an increased ability to share recovered footwear impressions between forensic staff thus speeding up the investigation.",58,3,237,243,Human–computer interaction; Digital transformation; Crime scene; Structured-light 3D scanner; Structured light; Computer science,Digital transformation; Footwear impression; Forensic evidence; Non-contact scanning; Rapid prototyping; Structured light,,,,https://core.ac.uk/display/151186262 https://www.ncbi.nlm.nih.gov/pubmed/29685306 https://www.sciencedirect.com/science/article/pii/S1355030618300261 https://research.tees.ac.uk/ws/files/4358613/621670.pdf https://research.tees.ac.uk/en/publications/a-new-method-for-the-recovery-and-evidential-comparison-of-footwe https://core.ac.uk/download/pdf/196166430.pdf,http://dx.doi.org/10.1016/j.scijus.2018.02.001,29685306,10.1016/j.scijus.2018.02.001,2791600245,,0,004-692-514-828-661; 013-064-849-740-249; 013-821-112-405-687; 022-144-597-505-520; 023-979-445-661-710; 035-695-109-423-853; 042-532-192-386-113; 047-348-590-414-767; 049-785-672-887-582; 053-525-211-728-03X; 057-285-200-424-503; 101-319-200-902-022; 112-908-468-673-712; 124-684-494-161-222; 133-860-527-273-48X; 150-202-679-950-146; 173-779-991-377-816; 178-456-110-092-227,17,true,,green 015-190-002-984-600,Shifting forensic science focus from means to purpose: A path forward for the discipline?,2021-08-25,2021,journal article,Science & justice : journal of the Forensic Science Society,18764452; 13550306,Forensic Science Society,United Kingdom,Claude Roux; Sheila Willis; Céline Weyermann,"Abstract Forensic science is facing a persistent crisis that is often addressed by organizational responses, with a strong focus on the improvement and standardisation of means and processes. However, organisations and processes are highly dependent on the political, economical and legal structures in which they operate. This may explain why most proposed solutions had difficulties in addressing the crisis up to now, as they could hardly be applied transversally to all forensic science models. Moreover, new tools and technologies are continuously developed by a quasi-infinite number of different scientific disciplines, thus leading to further diversity and fragmentation of forensic science. In this paper, it is proposed to shift the focus from means to purpose and consider forensic science current challenges in terms of discipline, before addressing organisations’ specific issues. As a distinct discipline, forensic science can refocus research and development on shared principles and purposes, such as reconstructing, monitoring, and preventing crime and security issues. This focus change will facilitate a better understanding of the trace as the object of study of forensic science and eventually lead to a more impactful and long-lasting effect. This approach will also foster the development of a forensic science culture (instead of a primarily technological culture) unified by purpose rather than means through more relevant education and research.",61,6,678,686,Digital transformation; Relevance (law); Market fragmentation; Political science; Diversity (politics); Object (philosophy); Focus (computing); Engineering ethics; TRACE (psycholinguistics); Politics,Digital transformation; Forensic science; Interdisciplinarity; Relevance; Research & Development; Technology; Trace,Crime; Forensic Sciences; Humans; Technology,,,https://www.sciencedirect.com/science/article/pii/S1355030621001076 https://discovery.dundee.ac.uk/en/publications/shifting-forensic-science-focus-from-means-to-purpose-a-path-forw,http://dx.doi.org/10.1016/j.scijus.2021.08.005,34802641,10.1016/j.scijus.2021.08.005,3195180911,,0,000-495-961-319-57X; 000-527-643-661-947; 003-116-283-970-238; 003-880-861-094-991; 008-005-869-275-689; 010-295-766-340-310; 010-620-450-221-40X; 012-364-349-886-717; 014-882-983-684-517; 015-648-596-572-532; 015-792-608-310-334; 018-960-538-999-613; 020-367-257-654-197; 022-205-914-899-364; 022-837-571-402-576; 023-418-828-545-549; 024-658-716-111-817; 025-214-545-266-265; 027-622-464-078-831; 028-802-373-898-820; 030-043-392-965-213; 030-714-770-580-172; 031-131-546-286-261; 031-831-612-786-158; 034-550-710-478-165; 041-386-226-263-017; 042-425-800-946-273; 042-746-308-855-318; 045-008-933-708-932; 047-976-235-338-816; 049-727-163-757-717; 050-409-150-735-49X; 051-530-206-170-696; 052-960-331-823-760; 053-645-487-516-798; 056-237-195-342-243; 057-464-433-580-893; 067-307-278-774-180; 068-834-253-493-332; 070-441-011-026-955; 073-465-620-491-92X; 076-698-947-460-953; 077-589-464-357-875; 077-607-479-314-655; 083-838-947-389-849; 085-711-945-887-590; 085-957-453-072-619; 087-342-951-350-054; 097-935-957-085-542; 098-257-569-529-312; 101-793-011-130-674; 113-374-734-943-168; 116-576-909-772-933; 117-605-535-046-57X; 120-656-428-748-152; 123-573-244-607-342; 126-020-943-002-210; 140-800-803-852-701; 144-139-280-049-333; 145-743-906-992-348; 160-094-617-602-389; 163-376-020-626-884; 179-776-256-587-344; 184-932-778-204-737; 189-248-751-370-250; 199-566-397-751-128,8,true,cc-by-nc-nd,hybrid 015-340-476-560-675,Improving Forensic Triage Efficiency through Cyber Threat Intelligence,2019-07-23,2019,journal article,Future Internet,19995903,MDPI AG,Switzerland,Nikolaos Serketzis; Vasilios Katos; Christos Ilioudis; Dimitrios Baltatzis; G. Pangalos,"The complication of information technology and the proliferation of heterogeneous security devices that produce increased volumes of data coupled with the ever-changing threat landscape challenges have an adverse impact on the efficiency of information security controls and digital forensics, as well as incident response approaches. Cyber Threat Intelligence (CTI)and forensic preparedness are the two parts of the so-called managed security services that defendants can employ to repel, mitigate or investigate security incidents. Despite their success, there is no known effort that has combined these two approaches to enhance Digital Forensic Readiness (DFR) and thus decrease the time and cost of incident response and investigation. This paper builds upon and extends a DFR model that utilises actionable CTI to improve the maturity levels of DFR. The effectiveness and applicability of this model are evaluated through a series of experiments that employ malware-related network data simulating real-world attack scenarios. To this extent, the model manages to identify the root causes of information security incidents with high accuracy (90.73%), precision (96.17%) and recall (93.61%), while managing to decrease significantly the volume of data digital forensic investigators need to examine. The contribution of this paper is twofold. First, it indicates that CTI can be employed by digital forensics processes. Second, it demonstrates and evaluates an efficient mechanism that enhances operational DFR.",11,7,162,,Volume (computing); Information technology; Security controls; Preparedness; Triage; Maturity (finance); Computer security; Computer science; Information security; Digital forensics,,,,,http://eprints.bournemouth.ac.uk/32570/ https://www.mdpi.com/1999-5903/11/7/162 https://dblp.uni-trier.de/db/journals/fi/fi11.html#SerketzisKIBP19 https://www.mdpi.com/1999-5903/11/7/162/pdf https://doaj.org/article/57748e69a34d417bb9a2efba0274d641 https://core.ac.uk/download/222828992.pdf,http://dx.doi.org/10.3390/fi11070162,,10.3390/fi11070162,2963912653,,0,001-228-339-410-349; 002-383-410-319-043; 002-464-138-461-933; 002-625-978-577-247; 007-375-375-758-869; 010-791-676-072-730; 020-195-870-396-757; 021-486-901-460-202; 028-222-770-579-89X; 035-565-993-122-262; 046-143-775-958-052; 049-283-049-875-723; 072-914-021-179-250; 073-490-335-781-535; 103-028-372-925-311; 107-802-050-888-509; 115-036-799-197-654; 126-101-628-029-477; 126-281-444-894-256; 137-755-137-054-864; 174-186-817-525-708; 184-069-302-229-82X; 198-084-387-305-951,8,true,cc-by,gold 015-351-482-914-752,Research on the Architecture Model of Volatile Data Forensics,,2012,journal article,Procedia Engineering,18777058,Elsevier BV,,Liang Hu; Xiaolu Zhang; Feng Wang; Wenbo Wang; Kuo Zhao,"Abstract This paper proposed a new architecture model of volatile data forensic. The model applied to all the volatile data sources is a general model. It can rebuild the evidence data fragment to chains of evidence which contains the behavior characteristics, so as to assist investigators to do case analysis. With the accumulated experience, the model can help judicial officers to intelligently analyze the same type of computer crimes, and based on currently available information to predict the impending crimes.",29,,4254,4258,Engineering; Architecture model; Data fragment; Computer security; Computer forensics; Case analysis,,,,,http://www.sciencedirect.com/science/article/pii/S1877705812006637 https://core.ac.uk/display/81118767 https://www.sciencedirect.com/science/article/pii/S1877705812006637 https://core.ac.uk/download/pdf/81118767.pdf,http://dx.doi.org/10.1016/j.proeng.2012.01.653,,10.1016/j.proeng.2012.01.653,2025022410,,0,008-475-550-011-549; 030-155-118-042-252; 037-821-713-720-130; 046-973-884-620-547; 065-459-442-784-779; 087-287-912-803-488; 106-102-265-775-524; 118-722-872-870-470; 139-495-561-188-858,3,true,,gold 015-455-002-340-996,Intelligent Software Agent Applied To Digital Forensic and Its Usefulness,,2013,journal article,International Journal of Computer Science and Informatics,22315292,Institute for Project Management Pvt. Ltd,,Inikpi O Ademu; Chris Imafidon; David Preston,"Due to the large amount of information produced, accumulated, and distributed via electronic means, it is necessary for forensic experts during crime investigation to increase their abilities to search for important evidence in a timely manner because this is essential to the success of digital forensic examinations. The inadequacy of resources both in tools and human and also limitation in time have a negative impact in result obtained during digital forensic investigation. Previous researchers state that the chances of success in criminal prosecution by law enforcement agencies depend heavily on the availability of strong evidence. The coming out of intelligent software agents that function autonomously with little or no human intervention during crime investigation is significant to the success of digital forensic investigation. Better use of tools is necessary, beyond the capabilities of the currently used forensic tools. In this paper, we discuss the usefulness of intelligent software agent in digital forensic. The goal of the paper is to provide a better knowledge and understand the concepts of intelligent software agent in digital forensic. The findings presents in this paper came from thoroughly review of previous digital forensic literature.",,,277,280,Software engineering; Computer science; Software agent; Digital forensics,,,,,http://dx.doi.org/10.47893/ijcsi.2013.1105,http://dx.doi.org/10.47893/ijcsi.2013.1105,,10.47893/ijcsi.2013.1105,3114545121,,0,008-737-773-604-701; 157-954-859-648-506,3,true,,gold 015-461-906-719-684,A forensic visual aid: Traces versus knowledge.,2018-09-08,2018,journal article,Science & justice : journal of the Forensic Science Society,13550306,Forensic Science Society,United Kingdom,Harm van Beek,"In this paper, I introduce the Forensic Field Map (FFM) that provides a two-dimensional view on the forensic field. This field is by definition very broad, encompassing a wide range of scientific areas and activities. The forensic work that supports solving criminal cases ranges from recognizing and preserving traces at crime scenes to explaining forensic results as expert witness in court. This goes hand in hand with the development of scientifically based methods and tooling as well as legal, forensic and laboratory procedures. Although the FFM came into being while developing a (visual) framework for digital forensic investigations, the framework turned out to be generically applicable to other forensic disciplines.",58,6,425,432,Forensic science; Crime scene; Data science; Expert witness; Field (computer science); Computer science; Digital forensics,Forensic Field Map; Forensic investigation; Forensic knowledge; Unifying framework; Visual aid,,,,https://www.sciencedirect.com/science/article/pii/S1355030618301527 https://www.ncbi.nlm.nih.gov/pubmed/30446071 https://pubmed.ncbi.nlm.nih.gov/30446071/ https://www.sciencedirect.com/science/article/pii/S1355030618301527#! http://europepmc.org/abstract/MED/30446071,http://dx.doi.org/10.1016/j.scijus.2018.08.006,30446071,10.1016/j.scijus.2018.08.006,2890545749,,0,000-360-120-513-679; 002-311-011-049-194; 004-668-612-287-432; 005-615-208-426-450; 005-715-450-998-72X; 006-168-292-618-483; 021-462-566-432-813; 023-776-660-217-911; 026-774-296-742-022; 029-748-683-221-796; 032-306-447-977-364; 035-672-281-328-899; 046-397-041-213-000; 047-859-979-695-194; 058-052-081-943-595; 060-587-291-443-153; 064-549-392-650-90X; 067-938-325-014-282; 067-950-012-629-210; 068-331-084-959-845; 075-950-021-558-098; 083-312-117-071-763; 083-578-059-674-117; 085-370-444-410-812; 090-124-826-842-394; 103-925-107-039-394; 106-229-562-693-558; 118-838-969-146-870; 125-939-677-745-616; 130-217-725-914-477; 142-527-962-979-521; 142-790-196-752-819; 144-139-280-049-333; 145-743-906-992-348; 173-145-269-859-717; 173-779-991-377-816; 179-397-843-259-628,2,false,, 015-631-389-767-096,Neural AutoForensics: Comparing Neural Sample Search and Neural Architecture Search for malware detection and forensics,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Mohit Sewak; Sanjay K. Sahay; Hemant Rathore,,43,,301444,301444,Computer science; Artificial intelligence; Machine learning; Margin (machine learning); Artificial neural network; Malware; Inference; Sample (material); Field (mathematics); Data science; Dimension (graph theory); Identification (biology); Data mining,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301444,,10.1016/j.fsidi.2022.301444,,,0,008-662-973-866-788; 009-645-845-385-033; 039-051-052-503-239; 050-479-181-817-555; 109-126-066-519-89X; 152-886-339-041-555,0,false,, 015-687-713-380-145,ACPO principles for digital evidence: Time for an update?,,2020,journal article,Forensic Science International: Reports,26659107,Elsevier BV,,Graeme Horsman,"Abstract Despite remaining largely unchanged for over 10 years, the Association of Chief Police Officers’s [ 1 ] Good Practice Guides for Digital Evidence and their four governing principles for evidence handling are amongst some of the most cited pieces of digital forensic best practice advice. However, given the pace of change in both technology and the field of digital forensics, this work debates whether it may be time to evaluate whether these principles remain wholly valid given the current forensic analysis landscape and their lack of updating or periodic evaluation. A discussion of the existing four ACPO principles is provided followed by an offering of eight new revised principles as a means of acknowledging the current challenges faced by practitioners in this field. It is hoped that this piece will spark a debate surrounding the principles we so frequently acknowledge as a mark of quality assurance in our investigations, and be a catalyst for evaluative considerations in this area.",2,,100076,,Work (electrical); Political science; Best practice; Pace; Thesaurus; SPARK (programming language); Digital evidence; Field (computer science); Engineering ethics; Digital forensics,,,,,https://jglobal.jst.go.jp/en/detail?JGLOBAL_ID=202102259523808363 https://research.tees.ac.uk/en/publications/acpo-principles-for-digital-evidence-time-for-an-update https://www.sciencedirect.com/science/article/pii/S2665910720300220,http://dx.doi.org/10.1016/j.fsir.2020.100076,,10.1016/j.fsir.2020.100076,3007919010,,0,014-835-460-139-85X; 017-792-811-186-108; 050-618-920-212-97X; 082-589-789-111-858; 083-312-117-071-763; 106-885-306-836-498,2,true,"CC BY, CC BY-NC-ND",gold 015-858-904-277-590,Toward Effective and Reliable Digital Forensics,2012-02-16,2012,journal article,The Computer Journal,00104620; 14602067,Oxford University Press (OUP),United Kingdom,Wojciech Mazurczyk; Krzysztof Szczypiorski,"Digital forensics is a recently emerged research area, and it has attracted the attention of computer professionals, law enforcement experts and practitioners. It is a multidisciplinary area that includes multiple fields, i.e. law, computer science, finance, networking, data mining and criminal justice. We believe that papers enclosed in this Special Issue will enhance knowledge in digital forensics and will stimulate further research in the important areas of information and network security.",55,6,651,652,Criminal justice; Internet privacy; Network security; Multidisciplinary approach; Law enforcement; Computer security; Computer science; Computer forensics; Digital forensics,,,,,https://academic.oup.com/comjnl/article-pdf/55/6/651/989417/bxs012.pdf https://dblp.uni-trier.de/db/journals/cj/cj55.html#MazurczykS12,http://dx.doi.org/10.1093/comjnl/bxs012,,10.1093/comjnl/bxs012,2133813966,,0,,0,false,, 015-915-911-666-963,Reliability validation for file system interpretation,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Rune Nordvik; Radina Stoykova; Katrin Franke; Stefan Axelsson; Fergus Toolan,"Abstract This paper examines current best practices for Digital Forensic (DF) tool and method validation in the context of file system interpretation for digital evidence. In order to meet the legal and scientific requirements in criminal procedures file system (FS) reverse engineering (RE) is a necessity. Currently, there is no standard procedure for reliability testing of FS RE. Ideal validation requirements exist, but they are on high-level and practical implementation is missing. In this paper we propose a formal reliability validation procedure for file system reverse engineering, documenting the forensic process, including the tools used, ensuring reliability and reproducibility of the method and the results. The procedure is based on legal and scientific criteria and tested against file system reverse engineering methods. It is applicable to all types of reverse engineering methods in digital forensics.",37,,301174,,Software engineering; Best practice; Reverse engineering; Context (language use); File system; Digital evidence; Computer science; Process (engineering); Reliability (statistics); Digital forensics,,,,Norges Forskningsråd,https://www.sciencedirect.com/science/article/pii/S2666281721000822 http://su.diva-portal.org/smash/record.jsf?pid=diva2:1589969 https://dblp.uni-trier.de/db/journals/di/di37.html#NordvikSFAT21,http://dx.doi.org/10.1016/j.fsidi.2021.301174,,10.1016/j.fsidi.2021.301174,3164197607,,0,000-084-741-857-185; 002-098-094-127-361; 003-297-887-768-837; 004-652-388-189-304; 005-232-046-693-557; 007-375-878-067-656; 007-648-632-822-878; 009-512-003-529-193; 010-963-610-208-920; 016-133-186-133-338; 017-779-541-978-693; 020-642-663-345-131; 021-850-998-857-676; 023-848-663-068-771; 025-880-943-392-835; 026-893-174-649-526; 028-069-099-912-976; 028-733-232-313-212; 030-178-593-043-926; 033-910-524-490-275; 036-112-898-081-145; 040-759-438-863-463; 047-386-524-667-691; 048-176-799-528-659; 050-612-532-454-179; 054-004-313-233-495; 057-239-321-637-276; 061-269-967-405-492; 067-938-325-014-282; 074-299-373-252-299; 080-327-138-427-493; 085-214-277-668-01X; 096-886-288-092-504; 102-243-142-344-71X; 108-884-210-316-066; 109-435-258-852-67X; 111-488-239-742-003; 114-976-379-033-024; 118-214-115-485-064; 125-849-722-436-048; 127-053-349-240-432; 128-301-609-429-087; 134-927-490-231-285; 142-790-196-752-819; 166-196-512-408-69X; 172-364-607-042-640; 180-877-598-170-889; 181-545-693-146-583,1,true,cc-by,hybrid 016-073-660-398-930,ANT/SEIT - AlmaNebula: A Computer Forensics Framework for the Cloud,,2013,journal article,Procedia Computer Science,18770509,Elsevier BV,,Corrado Federici,"Abstract Scalability, fault tolerance and collaborative processing across possibly dispersed sites are key enablers of modern computer forensics applications, that must be able to elastically accommodate all kinds of digital investigations, without wasting resources or fail to deliver timely outcomes. Traditional tools running in a standalone or client- server setups may fall short when handling the multi terabyte scale of a case just above average or, conversely, lie mainly underutilized when dealing with few digital evidences. A new category of applications that leverage the opportunities offered by modern Cloud Computing (CC) platforms, where scalable computational power and storage capacity can be engaged and decommissioned on demand, allow one to conveniently master huge amounts of information that otherwise could be impossible to wield. This paper discusses the design goals, technical requirements and architecture of AlmaNebula, a conceptual framework for the analysis of digital evidences built on top of a Cloud infrastructure, which aims to embody the concept of “Forensics as a service”.",19,,139,146,Forensic science; Terabyte; Computer security; Computer science; Scalability; Network forensics; Computer forensics; Fault tolerance; Cloud computing,,,,,https://doi.org/10.1016/j.procs.2013.06.023 https://core.ac.uk/display/82174877 https://www.sciencedirect.com/science/article/abs/pii/S1877050913006315 https://www.sciencedirect.com/science/article/pii/S1877050913006315 https://dblp.uni-trier.de/db/conf/ant/ant2013.html#Federici13 https://core.ac.uk/download/pdf/82174877.pdf,http://dx.doi.org/10.1016/j.procs.2013.06.023,,10.1016/j.procs.2013.06.023,2060988608,,0,011-426-283-568-269; 014-026-421-277-766; 014-267-129-756-476; 035-448-415-847-226; 038-914-873-897-532; 050-513-243-638-138; 079-070-981-899-105; 108-104-619-032-237; 120-197-392-039-249; 123-304-888-889-490; 130-648-730-902-248; 134-927-490-231-285; 137-292-579-653-532; 156-313-798-378-998,9,true,,gold 016-180-173-990-746,Blockchain-based digital evidence inventory,,2019,journal article,Journal of Advances in Information Technology,17982340,Engineering and Technology Publishing,,David Billard,"This paper proposes the use of a blockchainbased structure in order to store evidences in a digital forensics investigation. The traditional chain of evidence is augmented with properties of immutability and traceability, thanks to a cryptographic process. The blockchain is constructed by forensics experts by adding evidences through the process. Since the blockchain is immutable, it can be shared among the different parties involved in a prosecution in order to review the chain of evidence and build their case. Furthermore, the blockchain structure can be applied to other forensics fields, like drugs, firearms, NDA. This blockchain is called a Digital Evidence Inventory (DEI) and is part of a wider framework encompassing a Forensics Confidence Rating (FCR) structure, in order to give experts the ability to rate the level of confidence for each evidence and a Global Digital Timeline (GDT) to order evidence through time. The whole framework is called ‘Aldiana’",10,2,41,47,Blockchain; Digital evidence; Computer security; Computer science; Digital forensics,,,,,https://hesso.tind.io/record/3610 https://hesso.tind.io/record/3610/files/Author%20postprint.pdf http://www.jait.us/uploadfile/2019/0529/20190529042106499.pdf,http://dx.doi.org/10.12720/jait.10.2.41-47,,10.12720/jait.10.2.41-47,3019070143,,0,001-170-920-458-777; 018-182-926-340-45X; 024-662-554-815-361; 026-535-638-457-216; 035-031-257-128-045; 035-448-415-847-226; 065-671-045-136-370; 134-927-490-231-285,6,true,cc-by,gold 016-208-715-898-840,"Combining Internet monitoring processes, packaging and isotopic analyses to determine the market structure: example of Gamma Butyrolactone.",2013-03-22,2013,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Diego Pazos; Pauline Giannasi; Quentin Rossy; Pierre Esseiva,"The Internet is becoming more and more popular among drug users. The use of websites and forums to obtain illicit drugs and relevant information about the means of consumption is a growing phenomenon mainly for new synthetic drugs. Gamma Butyrolactone (GBL), a chemical precursor of Gamma Hydroxy Butyric acid (GHB), is used as a ""club drug"" and also in drug facilitated sexual assaults. Its market takes place mainly on the Internet through online websites but the structure of the market remains unknown. This research aims to combine digital, physical and chemical information to help understand the distribution routes and the structure of the GBL market. Based on an Internet monitoring process, thirty-nine websites selling GBL, mainly in the Netherlands, were detected between January 2010 and December 2011. Seventeen websites were categorized into six groups based on digital traces (e.g. IP addresses and contact information). In parallel, twenty-five bulk GBL specimens were purchased from sixteen websites for packaging comparisons and carbon isotopic measurements. Packaging information showed a high correlation with digital data confirming the links previously established whereas chemical information revealed undetected links and provided complementary information. Indeed, while digital and packaging data give relevant information about the retailers, the supply routes and the distribution close to the consumer, the carbon isotopic data provides upstream information about the production level and in particular the synthesis pathways and the chemical precursors. A three-level structured market has been thereby identified with a production level mainly located in China and in Germany, an online distribution level mainly hosted in the Netherlands and the customers who order on the Internet.",230,1,29,36,The Internet; Upstream (petroleum industry); World Wide Web; Business; Market structure; Order (exchange); Digital data; Synthetic drugs; Internet monitoring; Relevant information,,,,,https://serval.unil.ch/en/notice/serval:BIB_F3637A46773C https://www.ncbi.nlm.nih.gov/pubmed/23523397 https://pubmed.ncbi.nlm.nih.gov/23523397/ https://serval.unil.ch/resource/serval:BIB_F3637A46773C.P001/REF.pdf https://core.ac.uk/display/18170701 https://www.sciencedirect.com/science/article/pii/S0379073813001199 https://core.ac.uk/download/18170701.pdf,http://dx.doi.org/10.1016/j.forsciint.2013.02.033,23523397,10.1016/j.forsciint.2013.02.033,1983417928,,0,010-399-153-259-831; 010-923-926-694-72X; 010-951-806-548-929; 014-006-018-821-882; 017-176-620-267-416; 026-746-342-036-842; 031-681-574-913-716; 050-705-772-068-042; 094-389-286-446-110; 103-372-783-907-583; 112-029-889-252-771; 129-037-451-379-062; 167-076-738-513-505; 193-990-365-558-045,20,true,,green 016-316-214-363-950,Design Architecture of Digital Evidence Case Management (DECMa): A Proposed Model for Virtual Environment Digital Forensics Examination,2017-05-01,2017,journal article,Advanced Science Letters,19366612; 19367317,American Scientific Publishers,United States,Ahmad Luthfi; Yudi Prayudi,,23,5,4192,4196,Virtual machine; Digital evidence; Design architecture; Case management; Computer science; Multimedia; Digital forensics,,,,,https://www.ingentaconnect.com/content/asp/asl/2017/00000023/00000005/art00083,http://dx.doi.org/10.1166/asl.2017.8261,,10.1166/asl.2017.8261,2792323406,,0,,2,false,, 016-419-129-147-948,Species Identification of Sarcosaprophagous Flies Based on Vein Digital Image Analysis.,,2021,journal article,Fa yi xue za zhi,10045619,Journal of Forensic Medicine,China,Y J Shang; P L Pan; X R Li; K Li; J Lin; Y D Guo,"Abstract Objective To identify species of common sarcosaprophagous flies based on digital image analysis of veins, in order to provide new idea for fast and accurate species identification of sarcosaprophagous flies in forensic entomology. Methods Random trapping of 226 male and female sarcosaprophagous flies that comprised of 7 common species, including Sarcophaga peregrina, Parasarcophaga ruficornis, Sarcophaga dux, Seniorwhitea reciproca, Bercaea cruentata, Aldrichina grahami, and Synthesiomysia nudiseta with carrion in the field was conducted. The 17 landmarks on the right wing of each fly were digitally processed and the images were analyzed. The effects of allometry were evaluated using a permutation test. Wing shape variations among 7 sarcosaprophagous fly species and female species was analyzed using canonical variate analysis (CVA). Additionally, cross-validation test was used to evaluate the reliability of classification. Results Among 7 sarcosaprophagous fly species and female species, the effect of allometry had statistical significance (P<0.05). The CVA results showed that among 7 sarcosaprophagous fly species and female species, differences in the wing shape were significant, and the first two canonical variates accounted for 82.9% and 84.1% of the total variation of vein shape. Vein digital image analysis can be used to separate the 7 common sarcosaprophagous flies, with an overall species identification accuracy of 81.2%-100.0%, and with a species identification accuracy of 75.0%-100.0% to distinguish the female flies of the 7 sarcosaprophagous flies species. Conclusion Vein digital image analysis is a relatively convenient and reliable method for identification of insect species, which can be used for species identification of common sarcosaprophagous flies.",37,3,325,331,Forensic entomology; Allometry; Carrion; Insect; Digital image analysis; Canonical variate analysis; Species identification; Common species; Biology; Zoology,forensic entomology; sarcosaprophagous flies; vein; digital image processing,Animals; Calliphoridae; Diptera; Female; Male; Reproducibility of Results,,,https://www.ncbi.nlm.nih.gov/pubmed/34379900,http://dx.doi.org/10.12116/j.issn.1004-5619.2020.400506,34379900,10.12116/j.issn.1004-5619.2020.400506,3192741251,,0,,0,false,, 016-526-859-340-786,"The Internet of Things and the Smart City: Legal challenges with digital forensics, privacy, and security",2018-04-26,2018,journal article,Security and Privacy,24756725,Wiley,,Michael Losavio; Kam-Pui Chow; Andras Koltay; Joshua I. James,,1,3,e23,,Internet privacy; Smart city; Computer science; Internet of Things; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/sap/sap1.html#LosavioCKJ18 https://onlinelibrary.wiley.com/doi/full/10.1002/spy2.23 https://core.ac.uk/download/227754884.pdf,http://dx.doi.org/10.1002/spy2.23,,10.1002/spy2.23,2801640699,,0,000-732-818-777-187; 011-895-474-307-418; 017-096-196-362-691; 017-700-647-172-124; 023-315-298-176-771; 027-616-748-861-595; 066-757-651-381-396; 073-403-475-896-395; 125-384-800-661-375; 131-343-975-970-803,39,true,,green 016-687-092-163-91X,Forensic Analysis Of ReFS Journaling,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Seonho Lee; Jungheum Park; Hyunuk Hwang; Seungyoung Lee; Sangjin Lee; Doowon Jeong,,38,,301136,,World Wide Web; Journaling file system; Computer science,,,,,https://dfrws.org/wp-content/uploads/2021/01/2021_APAC_paper-forensic_analysis_of_refs_journaling.pdf https://dfrws.org/presentation/forensic-analysis-of-refs-journaling/,http://dx.doi.org/10.1016/j.fsidi.2021.301136,,10.1016/j.fsidi.2021.301136,3123034877,,0,020-642-663-345-131; 049-198-020-808-467; 085-214-277-668-01X; 100-032-278-433-356,0,true,cc-by-nc-nd,hybrid 016-717-768-701-808,Do Health and Forensic DNA Databases Increase Racial Disparities,2011-10-04,2011,journal article,PLoS medicine,15491676; 15491277,Public Library of Science,United States,Peter A. Chow-White; Troy Duster,"The issue of the digital divide is a growing concern in health and forensic DNA databases, reflecting structural disparities in biomedical research and policing. ; Over the last decade, the majority of DNA samples in population studies are from individuals of European origin. Individuals from Asian, African, Latino, and aboriginal groups are underrepresented. ; Forensic DNA databases are growing to mirror racial disparities in arrest practices and incarceration rates. Individuals from African American and Latin1o groups are overrepresented in forensic from health DNA databases. ; Currently, there is little recognition in national and international public policy circles about the “digital divide” in health and law enforcement databases. ; To avoid reproducing structural patterns of racial inequality, regulators, policy makers, scientists, and law enforcement officials need to address these disparities by supporting policies and mechanisms designed to better protect individuals and groups through institutional practices, law, and securely encrypted digital codes.",8,10,e1001100,,Public policy; Racism; Digital divide; Political science; MEDLINE; Law enforcement; Science policy; Population; Forensic dna; Database,,"African Americans; Databases, Nucleic Acid; Forensic Genetics; Genome, Human; Healthcare Disparities; Hispanic or Latino; Humans; Racial Groups",,,https://paperity.org/p/61636518/do-health-and-forensic-dna-databases-increase-racial-disparities https://www.researchgate.net/profile/Peter_Chow-White/publication/51710284_Do_health_and_forensic_DNA_databases_increase_racial_disparities/links/00b4952cfa696b9951000000.pdf https://dx.plos.org/10.1371/journal.pmed.1001100 https://www.ncbi.nlm.nih.gov/pubmed/21990964 http://summit.sfu.ca/system/files/iritems1/13367/journal.pmed_.1001100.pdf https://drum.lib.umd.edu/handle/1903/24340 https://summit.sfu.ca/item/13367 https://core.ac.uk/display/11542928 https://europepmc.org/articles/PMC3186804 https://journals.plos.org/plosmedicine/article?id=10.1371/journal.pmed.1001100 https://pubmed.ncbi.nlm.nih.gov/21990964/ http://health-equity.pitt.edu/3810/1/journal.pmed.1001100.pdf https://core.ac.uk/download/pdf/11542928.pdf,http://dx.doi.org/10.1371/journal.pmed.1001100,21990964,10.1371/journal.pmed.1001100,2014152154,PMC3186804,0,001-870-159-081-654; 006-101-005-747-56X; 008-009-795-148-545; 011-829-918-771-25X; 019-120-924-580-794; 022-976-430-516-000; 026-479-401-518-590; 031-714-945-590-548; 036-592-996-117-303; 038-916-185-343-818; 054-929-580-851-225; 060-576-756-739-437; 063-717-823-085-53X; 071-061-771-305-086; 072-228-344-517-402; 083-570-473-240-393; 086-170-324-390-423; 101-436-770-235-826; 124-720-455-186-262; 183-471-064-116-254; 187-054-311-302-723,33,true,cc-by,gold 017-060-167-812-521,Introduction of concurrent processes into the digital forensic investigation process,2015-07-06,2015,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Aleksandar Valjarevic; Hein S. Venter,"Performing a digital forensic investigation requires a formalised process to be followed. It also requires that certain principles are applied, such as preserving of digital evidence and documenting actions. The need for a harmonised and standardised digital forensic investigation process has been recognised in the digital forensics community and much scientific work has been undertaken to produce digital forensic investigation process models, albeit with many disparities within the different models. The problem is that these existing models do not include any processes dealing explicitly with concurrent digital forensic principles. This leaves room for human error and omissions, as there is a lack of clear guidelines on the implementation of digital forensic principles. This paper proposes the introduction of concurrent processes into the digital forensic investigation process model. The authors define concurrent processes as the actions that should be conducted in parallel with other processes within th...",48,3,339,357,Engineering; Human error; Data science; Digital forensic process; Digital evidence; Digital forensic investigation; Computer security; Process (engineering); Process modeling; Digital forensics,,,,,https://repository.up.ac.za/bitstream/2263/50300/1/Valjarevic_Introduction_2016.pdf https://www.tandfonline.com/doi/full/10.1080/00450618.2015.1052754 https://repository.up.ac.za/handle/2263/50300,http://dx.doi.org/10.1080/00450618.2015.1052754,,10.1080/00450618.2015.1052754,1952678153,,0,012-723-051-030-715; 020-944-423-224-895; 027-062-355-180-009; 038-668-970-194-854; 041-059-041-666-09X; 044-318-946-010-004; 058-205-117-706-853; 059-259-197-397-244; 060-808-935-547-406; 073-176-805-913-104; 078-730-781-174-18X; 184-948-841-629-735; 185-786-886-555-378; 190-065-821-748-92X; 199-745-676-923-766,10,true,,green 017-335-677-993-203,The impact of full disk encryption on digital forensics,,2008,journal article,ACM SIGOPS Operating Systems Review,01635980,Association for Computing Machinery (ACM),,Eoghan Casey; Gerasimos J. Stellatos,"The integration of strong encryption into operating systems is creating challenges for forensic examiners, potentially preventing us from recovering any digital evidence from a computer. Because strong encryption cannot be circumvented without a key or passphrase, forensic examiners may not be able to access data after a computer is shut down, and must decide whether to perform a live forensic acquisition. In addition, with encryption becoming integrated into the operating system, in some cases, virtualization is the most effective approach to performing a forensic examination of a system with FDE. This paper presents the evolution of full disk encryption (FDE) and its impact on digital forensics. Furthermore, by demonstrating how full disk encryption has been dealt with in past investigations, this paper provides forensics examiners with practical techniques for recovering evidence that would otherwise be inaccessible.",42,3,93,98,Encryption; Client-side encryption; Cryptography; Computer security; Computer science; Passphrase; Computer forensics; Disk encryption hardware; Digital forensics; Disk encryption,,,,,http://portal.acm.org/citation.cfm?id=1368519 https://dl.acm.org/doi/10.1145/1368506.1368519 https://dl.acm.org/citation.cfm?id=1368519,http://dx.doi.org/10.1145/1368506.1368519,,10.1145/1368506.1368519,2090540886,,0,004-441-167-148-170; 064-134-391-901-629; 069-256-079-734-894; 102-822-532-339-461,67,false,, 017-616-094-974-749,An Introduction to Computer Forensics,,2006,journal article,"Medicine, science, and the law",00258024; 20421818,SAGE Publications Ltd,United Kingdom,Nick Furneaux,"This paper provides an introduction to the discipline of Computer Forensics. With computers being involved in an increasing number, and type, of crimes the trace data left on electronic media can play a vital part in the legal process. To ensure acceptance by the courts, accepted processes and procedures have to be adopted and demonstrated which are not dissimilar to the issues surrounding traditional forensic investigations. This paper provides a straightforward overview of the three steps involved in the examination of digital media: Acquisition of data. Investigation of evidence. Reporting and presentation of evidence. Although many of the traditional readers of Medicine, Science and the Law are those involved in the biological aspects of forensics, I believe that both disciplines can learn from each other, with electronic evidence being more readily sought and considered by the legal community and the long, tried and tested scientific methods of the forensic community being shared and adopted by the computer forensic world.",46,3,213,218,Internet privacy; Electronic media; Digital media; Presentation; Legal process; Computer science; Engineering ethics; Computer forensics; Accreditation; TRACE (psycholinguistics); Digital forensics,,Accreditation; Computers; Forensic Sciences; Humans,,,https://www.ncbi.nlm.nih.gov/pubmed/16909643 https://pubmed.ncbi.nlm.nih.gov/16909643/ https://europepmc.org/article/MED/16909643 https://core.ac.uk/display/74390811 https://journals.sagepub.com/doi/abs/10.1258/rsmmsl.46.3.213,http://dx.doi.org/10.1258/rsmmsl.46.3.213,16909643,10.1258/rsmmsl.46.3.213,1982756929,,0,,5,false,, 017-709-374-060-311,Case study: Forensic analysis of a Samsung digital video recorder,,2008,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Wouter S. Van Dongen,,5,1,19,28,Carving; Hard disk recorder; Digital video; Child abuse; Computer science; Multimedia; Digital forensics; MPEG-4,,,,,http://www.sciencedirect.com/science/article/pii/S1742287608000261 https://www.sciencedirect.com/science/article/abs/pii/S1742287608000261 https://www.sciencedirect.com/science/article/pii/S1742287608000261#! https://dblp.uni-trier.de/db/journals/di/di5.html#Dongen08,http://dx.doi.org/10.1016/j.diin.2008.04.001,,10.1016/j.diin.2008.04.001,2081615172,,0,008-654-953-495-473,7,false,, 017-779-541-978-693,Rethinking Digital Forensics,2019-04-01,2019,journal article,Annals of Emerging Technologies in Computing,2516029x; 25160281,International Association for Educators and Researchers (IAER),,Andrew Jones; Stilianos Vidalis,"In the modern socially-driven, knowledge-based virtual computing environment in which organisations are operating, the current digital forensics tools and practices can no longer meet the need for scientific rigour. There has been an exponential increase in the complexity of the networks with the rise of the Internet of Things, cloud technologies and fog computing altering business operations and models. Adding to the problem are the increased capacity of storage devices and the increased diversity of devices that are attached to networks, operating autonomously. We argue that the laws and standards that have been written, the processes, procedures and tools that are in common use are increasingly not capable of ensuring the requirement for scientific integrity. This paper looks at a number of issues with current practice and discusses measures that can be taken to improve the potential of achieving scientific rigour for digital forensics in the current and developing landscape.",3,2,41,53,Business operations; Data science; Diversity (business); Fog computing; Virtual computing; Scientific integrity; Computer science; Rigour; Cloud computing; Digital forensics,,,,,http://www.aetic.theiaer.org/archive/v3/v3n2/p5.html http://aetic.theiaer.org/archive/v3/v3n2/p5.pdf https://ro.ecu.edu.au/ecuworkspost2013/11326/ https://uhra.herts.ac.uk/handle/2299/21240?show=full https://core.ac.uk/download/287581623.pdf,http://dx.doi.org/10.33166/aetic.2019.02.005,,10.33166/aetic.2019.02.005,2927460906,,0,000-226-390-590-140; 002-288-358-355-198; 009-168-289-731-644; 009-194-179-981-967; 009-683-571-404-360; 017-176-620-267-416; 056-122-492-187-163; 064-549-392-650-90X; 073-545-912-961-452; 077-532-025-251-756; 100-025-452-820-357; 170-108-067-251-840,5,true,cc-by,gold 017-949-188-301-241,Theoretical and methodological model of criminalistics and its new directions,2021-12-30,2021,journal article,Theory and Practice of Forensic Science and Criminalistics,19930917,Hon. Prof. M.S. Bokarius Kharkiv Research Institute of Forensic Examinations,,Valerii Shepitko,"This research paper purpose is to find out tendencies of development of criminalistics in globalized world, define its borders, forecast emergence of new directions and to characterize them. ; Theoretical and methodological model of criminalistics is studied, tendencies and specifics of formation of criminalistics in modern conditions are traced. ; Formation of internal structure of criminalistics (its system) is considered, connection with other sciences (natural sciences, humanities, social, formal) is determined, relationship with forensic sciences (forensicmedicine, forensic toxicology, forensic psychology, forensic chemistry, etc.) and forensic expertology is established. Attention is drawn to the orientation of the forensic vector of Ukraine to a single forensic European space. Necessity of creating a new section in the structure of criminology, namely: forensic strategy is substantiated. ; Origin specifics, formation and development of new branches (directions) of criminology are considered: competitive, judicial, medical, genotypic, aerospace, computer (digital) and nuclear ones. Necessity of using forensic knowledge by different parties in criminal proceedings both in while of pretrial investigation and in legal proceedings is argued. The subjects of specific expertise application of forensic knowledge should be not only the investigator, but prosecutor, investigating judge, interrogator, detective, judge, lawyer. ; Emergence of new branches of criminology is associated with scientific and technological progress, the emergence of new technologies, the need to work with specific traces and complexity of collecting and examining evidence. Special attention is paid to development and formation of medical, digital and nuclear forensics.",25,3,9,20,Forensic science; Digital forensics; Engineering ethics; Space (punctuation); Epistemology; Sociology; Psychology; Criminology; Law; Political science; Computer science; Engineering; Medicine; Philosophy; Computer security; Veterinary medicine; Operating system,,,,,,http://dx.doi.org/10.32353/khrife.3.2021.02,,10.32353/khrife.3.2021.02,,,0,,1,true,cc-by,gold 018-203-874-457-567,Holistic digital forensic readiness framework for IoT-enabled organizations,,2020,journal article,Forensic Science International: Reports,26659107,Elsevier BV,,Victor R. Kebande; Phathutshedzo P. Mudau; Richard Adeyemi Ikuesan; Hein S. Venter; Kim-Kwang Raymond Choo,"Abstract Internet of Things (IoT) are becoming commonplace in homes, buildings, cities, and nations, and IoT networks are also getting more complex and interconnected. The complexity, interconnectivity, and heterogeneity of IoT systems, however, complicate digital (forensic) investigations. The challenge is compounded due to the lack of holistic and standardized approaches. Hence, building on the ISO/IEC 27043 international standard, we present a holistic digital forensic readiness (DFR) framework. We also qualitatively evaluate the utility of the proposed DFR framework.",2,,100117,,Data science; Interconnectivity; International standard; Computer science; Internet of Things; Digital forensics,,,,,http://www.sciencedirect.com/science/article/pii/S2665910720300669 https://pubag.nal.usda.gov/catalog/7019735 https://www.sciencedirect.com/science/article/pii/S2665910720300669,http://dx.doi.org/10.1016/j.fsir.2020.100117,,10.1016/j.fsir.2020.100117,3042075030,,0,001-832-084-895-073; 002-223-356-480-043; 002-625-978-577-247; 005-695-308-125-439; 007-394-596-774-68X; 008-751-783-762-210; 010-284-227-477-250; 018-552-581-098-658; 018-948-094-812-86X; 021-486-901-460-202; 022-018-675-286-961; 022-564-463-934-451; 024-350-847-240-124; 025-178-552-649-015; 025-484-846-284-184; 027-183-541-281-234; 035-859-793-614-223; 047-125-525-662-686; 049-225-570-879-682; 060-294-953-084-788; 068-738-318-932-034; 070-618-823-419-27X; 073-346-374-643-139; 079-858-593-881-513; 081-746-298-679-238; 082-779-824-282-060; 088-553-642-323-93X; 091-540-399-535-662; 092-193-807-943-562; 093-117-308-515-186; 093-802-069-130-697; 103-113-677-538-597; 113-529-751-754-389; 120-492-390-090-755; 127-364-049-570-112; 129-623-020-572-540; 143-959-640-326-451; 143-973-998-351-302; 158-400-418-434-934,18,true,"CC BY, CC BY-NC-ND",gold 018-688-665-352-310,Video-Based Evidence Analysis and Extraction in Digital Forensic Investigation,,2019,journal article,IEEE Access,21693536,Institute of Electrical and Electronics Engineers (IEEE),United States,Jianyu Xiao; Shancang Li; Qingliang Xu,"As a result of the popularity of smart mobile devices and the low cost of surveillance systems, visual data are increasingly being used in digital forensic investigation. Digital videos have been widely used as key evidence sources in evidence identification, analysis, presentation, and report. The main goal of this paper is to develop advanced forensic video analysis techniques to assist the forensic investigation. We first propose a forensic video analysis framework that employs an efficient video/image enhancing algorithm for the low quality of footage analysis. An adaptive video enhancement algorithm based on contrast limited adaptive histogram equalization (CLAHE) is introduced to improve the closed-circuit television (CCTV) footage quality for the use of digital forensic investigation. To assist the video-based forensic analysis, a deep-learning-based object detection and tracking algorithm are proposed that can detect and identify potential suspects and tools from footages.",7,,55432,55442,Artificial intelligence; Mobile device; Object detection; Forensic video analysis; Digital forensic investigation; Adaptive histogram equalization; Facial recognition system; Computer vision; Computer science; Histogram; Identification (information); Digital forensics,,,,"Planned Science and Technology Projects of Hunan Province, China; Planned Science and Technology Projects of Hunan Province, China; Planned Science and Technology Project of Changsha, China; Central South University",https://dblp.uni-trier.de/db/journals/access/access7.html#XiaoLX19a https://ieeexplore.ieee.org/document/8700194 https://uwe-repository.worktribe.com/output/3733121/video-based-evidence-analysis-and-extraction-in-digital-forensic-investigation https://core.ac.uk/download/323907298.pdf,http://dx.doi.org/10.1109/access.2019.2913648,,10.1109/access.2019.2913648,2942466912,,0,002-362-753-162-196; 003-546-075-971-973; 004-454-686-543-933; 008-557-954-363-275; 014-827-157-078-88X; 014-859-901-321-603; 015-468-366-273-424; 024-329-390-901-634; 024-891-705-629-451; 027-516-434-033-14X; 032-949-001-808-530; 033-050-227-346-544; 033-149-401-127-989; 039-677-547-033-392; 042-318-537-868-808; 043-717-844-464-939; 048-099-870-585-386; 050-027-508-811-343; 052-307-383-963-210; 065-442-229-334-524; 065-559-783-996-17X; 066-291-489-087-284; 074-998-399-714-87X; 077-653-761-053-337; 079-483-436-132-684; 081-843-765-870-125; 083-340-435-542-637; 090-794-300-074-346; 091-048-622-639-68X; 098-810-752-237-749; 102-169-873-723-040; 130-084-251-293-800; 132-417-646-634-88X; 135-177-042-837-845; 154-964-035-656-423; 162-592-454-502-125,20,true,"CC BY, CC BY-NC-ND",gold 018-773-609-741-377,Live Forensics Analysis of Line App on Proprietary Operating System,2019-10-30,2019,journal article,"Kinetik: Game Technology, Information System, Computer Network, Computing, Electronics, and Control",25032267; 25032259,Universitas Muhammadiyah Malang,," Riadi; Sunardi Sunardi; Muhamad Ermansyah Rauli","The development of computer technology is increasing rapidly. This has positive and negative effects. One of the negative effects that occurred was the use of Line applications to conduct online shop fraud. Line is one of the instant messenger applications that can be used on computers, especially on Windows 8.1 operating system computers. Applications that run on the computer leave traces of data on Random Access Memory (RAM). Data left in RAM can be obtained using digital forensic techniques, namely live forensics which is used when the computer is running and connected to the internet. This study aims to find digital evidence regarding cases of online shop fraud using the National Institute of Standards and Technology (NIST) method. Digital evidence can be obtained using forensic tools, namely RamCapturer, FTK Imager and Winhex. RamCapturer is used to acquire data in RAM, FTK Imager is used for imaging and Winhex is used to analyze data that has been taken. The results obtained in this study were conversational recordings consisting of conversation time, conversation content and conversation status which could be digital evidence in uncovering the online shop fraud crime that occurred.",4,4,305,314,The Internet; NIST; Operating system; Conversation; Digital evidence; Live forensics; Computer technology; Computer science; Line (text file); Digital forensics,,,,,https://kinetik.umm.ac.id/index.php/kinetik/article/view/850 https://core.ac.uk/download/pdf/295172135.pdf,http://dx.doi.org/10.22219/kinetik.v4i4.850,,10.22219/kinetik.v4i4.850,2982383923,,0,006-700-167-776-341; 008-656-244-710-010; 032-168-640-185-294; 055-473-899-043-485; 087-287-435-836-200; 114-239-357-516-674; 121-266-887-418-366; 150-042-119-479-43X; 185-798-265-234-254,2,true,,gold 018-948-094-812-86X,Novel digital forensic readiness technique in the cloud environment,2017-01-17,2017,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Victor R. Kebande; Hein S. Venter,This paper examines the design and implementation of a feasible technique for performing Digital Forensic Readiness (DFR) in cloud computing environments. The approach employs a modified obfuscated...,50,5,552,591,Engineering; Digital evidence; Computer security; Cloud computing; Digital forensics,,,,South African Agency for Science and Technology Advancement,https://www.tandfonline.com/doi/full/10.1080/00450618.2016.1267797 https://repository.up.ac.za/handle/2263/60013 https://repository.up.ac.za/bitstream/2263/60013/1/Kebande_Novel_2017.pdf,http://dx.doi.org/10.1080/00450618.2016.1267797,,10.1080/00450618.2016.1267797,2573841943,,0,000-132-422-881-51X; 002-166-357-516-716; 006-435-365-660-88X; 009-544-868-935-533; 010-286-028-596-352; 012-447-467-503-151; 017-060-167-812-521; 019-119-495-482-994; 020-944-423-224-895; 021-486-901-460-202; 022-564-463-934-451; 024-894-908-869-686; 025-178-552-649-015; 032-697-093-668-898; 035-379-098-730-238; 041-879-975-858-398; 042-417-058-634-055; 042-969-030-470-170; 043-386-830-253-686; 043-819-525-860-747; 045-701-748-075-614; 048-696-883-701-804; 052-152-063-024-042; 061-960-915-134-527; 069-754-697-292-909; 074-503-636-433-987; 076-610-287-185-407; 079-566-660-187-886; 083-322-626-930-350; 086-091-202-010-191; 087-665-408-966-240; 087-932-943-720-094; 090-612-776-502-502; 095-691-114-276-825; 096-289-210-165-616; 101-091-831-428-576; 102-734-676-905-303; 103-284-731-368-055; 104-436-211-123-27X; 121-704-965-852-836; 122-901-706-101-367; 144-124-797-675-052; 157-954-859-648-506; 159-477-048-665-066; 163-330-758-807-944; 174-186-817-525-708; 175-990-204-400-543; 176-945-140-902-977; 199-745-676-923-766,43,true,,green 018-965-628-187-398,Artifacts of CD burning in the Microsoft Windows master file table.,2011-10-07,2011,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,B A Douglas Elrick,"Abstract:  When theft of a physical item occurs it is detectable by the fact that the object is missing, however, when the theft of a digital item occurs it can go unnoticed as exact replicas can be created. The original file is left intact but valuable information has been absconded. One of the challenges facing digital forensic examiners is detecting when files have been copied off of a computer system in some fashion. While certain methods do leave residual evidence behind, CD Burning has long been held as a copying method that cannot be identified. Through testing of the burning process and close examination of the New Technology File System (NTFS), artifacts from the master file table in the various versions of Microsoft Windows, markers have been found that are associated with copying or “burning” files to CD or DVD. Potential evidence that was once overlooked may now be detectable.",57,1,103,107,Operating system; Symbolic link; Fork (file system); SYSTEM.INI; File system; Master file; ZAP File; Transactional NTFS; Computer science; Computer file,,,,,https://onlinelibrary.wiley.com/doi/full/10.1111/j.1556-4029.2011.01919.x https://onlinelibrary.wiley.com/doi/10.1111/j.1556-4029.2011.01919.x/abstract https://www.ncbi.nlm.nih.gov/pubmed/21981315,http://dx.doi.org/10.1111/j.1556-4029.2011.01919.x,21981315,10.1111/j.1556-4029.2011.01919.x,2107487218,,1,097-541-981-128-766,0,false,, 018-996-827-041-158,Part 2:- Quality assurance mechanisms for digital forensic investigations: knowledge sharing and the Capsule of Digital Evidence (CODE),,2020,journal article,Forensic Science International: Reports,26659107,Elsevier BV,,Graeme Horsman,"Abstract Despite potential numerous benefits, the field-wide sharing of knowledge in digital forensics is arguably still yet to be attained. Achieving this has attracted much practitioner and academic debate, yet solutions to two fundamental hurdles have yet to arguably be addressed; ‘how do we share knowledge’, and ‘what do we share’. Currently there a few viable protocols in place which tackle either of these issues forming a barrier to field-wide sharing. The focus of this work is to address the latter issue and guide practitioners on what content must be shared for any data to be of value to fellow professionals. This paper proposes the Capsule of Digital Evidence (CODE), a framework designed to set out the required elements for the sharing of reliable digital forensic knowledge. The CODE structure and its requisite contents are examined along with its applicability for supporting field-wide knowledge sharing in digital forensics.",2,,100035,,Set (psychology); Code (semiotics); Structure (mathematical logic); Data science; Value (ethics); Knowledge sharing; Digital evidence; Focus (computing); Computer science; Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S2665910719300350 https://research.tees.ac.uk/ws/files/8652528/Part_2_Quality_assurance_mechanisms_for_digital_forensic_investigations_knowledge_sharing_and_the_Capsule_of_Digital_Evidence_CODE_.pdf http://www.sciencedirect.com/science/article/pii/S2665910719300350 https://research.tees.ac.uk/en/publications/part-2-quality-assurance-mechanisms-for-digital-forensic-investig https://core.ac.uk/download/pdf/232941018.pdf,http://dx.doi.org/10.1016/j.fsir.2019.100035,,10.1016/j.fsir.2019.100035,2980699189,,0,000-360-120-513-679; 004-652-388-189-304; 005-116-312-278-527; 006-933-430-647-14X; 007-790-059-029-953; 032-451-540-235-796; 036-112-898-081-145; 049-182-076-079-260; 058-052-081-943-595; 065-452-675-566-99X; 065-671-045-136-370; 065-873-523-989-876; 072-649-380-391-806; 077-287-216-746-675; 081-437-161-307-223; 111-061-578-674-84X; 111-488-239-742-003; 118-838-969-146-870; 159-513-941-346-557; 179-703-555-795-891,2,true,"CC BY, CC BY-NC-ND",gold 019-268-703-108-809,Qualitative assessment of the dental groove pattern and its uniqueness for forensic identification.,,2019,journal article,Journal of forensic dental sciences,09751475,Informatics Publishing Limited,India,Jyotirmoy Roy; M. M. Rohith; Debesh Nilendu; Abraham Johnson,"Introduction: Teeth are invaluable in both the living and the deceased for forensic identification and profiling purposes. The occlusal surface patterns in the molars of an individual depend on both intrinsic and extrinsic factors. The individualistic nature of the groove pattern can be used to determine the identity of an individual by the process of comparative identification. Aim and Objective: The objective of this study is to determine the uniqueness of the groove pattern among individuals by the means of digital analysis. Materials and Methods: An experimental study was conducted on 80 dental casts where the occlusal groove patterns of 1st and 2nd molars from each cast were traced digitally using image analysis software GIMP (v 2.10.6). The traced patterns were then examined to determine their uniqueness. Results: The most common groove patterns for the maxillary 1st and 2nd molars were found to resemble “Branched H” and “H”, respectively. “Y” pattern was observed to be the most common in mandibular 1st molar, whereas mandibular 2nd molar most commonly exhibited “+” pattern. No two groove patterns were similar in the analysis. Conclusion: Digital method of analysis is preferable over conventional manual methods as it is noninvasive and precise. The individualistic nature of occlusal groove patterns may play an important role in comparative forensic identification.",11,1,42,47,Psychology; Molar; Uniqueness; Forensic identification; Image analysis; Occlusal surface; Orthodontics; Digital analysis; Method of analysis; Mandibular second molar,Antimere; digital analysis; groove pattern; identification; molars; uniqueness,,,,https://europepmc.org/article/MED/31680755 https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6822311 https://pubmed.ncbi.nlm.nih.gov/31680755/ https://www.jfds.org/article.asp?issn=0975-1475;year=2019;volume=11;issue=1;spage=42;epage=47;aulast=Roy,http://dx.doi.org/10.4103/jfo.jfds_73_19,31680755,10.4103/jfo.jfds_73_19,2980894233,PMC6822311,0,009-137-519-650-638; 015-249-012-496-452; 018-562-810-662-080; 020-004-914-459-453; 020-582-673-772-522; 027-717-012-592-09X; 030-048-830-249-536; 037-263-725-891-005; 048-533-814-100-267; 050-039-908-326-011; 054-786-586-950-640; 055-663-445-756-832; 067-633-696-421-592; 070-492-240-043-716; 078-308-705-230-713; 096-591-475-205-633; 118-502-108-827-069,2,true,cc-by-nc-sa,green 019-302-334-316-560,Tainted digital evidence and privacy protection in blockchain-based systems,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,David Billard,,32,,300911,,Internet privacy; Blockchain; Digital evidence; Privacy protection; Computer science,,,,,https://www.sciencedirect.com/science/article/pii/S2666281720300068 https://arodes.hes-so.ch/record/5505/files/Published%20version.pdf https://arodes.hes-so.ch/record/5505 https://hesso.tind.io/record/5505/files/Published%20version.pdf https://hesso.tind.io/record/5505,http://dx.doi.org/10.1016/j.fsidi.2020.300911,,10.1016/j.fsidi.2020.300911,3030857466,,0,,1,true,cc-by-nc-nd,hybrid 019-508-480-187-000,"Inter-regional digital forensic knowledge management: needs, challenges, and solutions",2020-11-06,2020,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Eoghan Casey; Anna Zehnder,"Increasing demand for digital evidence in criminal investigations is driving decentralization of forensic capabilities closer to the crime scene. Law enforcement agencies are struggling to keep pace with technological developments, cybercrime growth, and scientific advances. In federated environments, digital forensic knowledge and practices vary widely across regions. To reduce delays, wasted resources, missed opportunities, mistakes, and misinterpretations, there is a pressing need to balance the democratization of digital forensic capabilities with knowledge management and sharing between decentralized regions. There are multiple forms of knowledge to be managed, including procedural, technical, investigative, scientific, behavioral, crime analysis, and forensic intelligence. In addition, there are multiple knowledge producers and consumers, including police investigators, digital forensic practitioners, criminal intelligence analysts, attorneys, and judges. Knowledge management becomes even more challenging when multiple interdependent regions are involved, speaking different languages. Taking all of these factors into consideration, this work presents an inter-regional knowledge management solution for improving the quality, consistency, reliability, efficiency, cost-effectiveness, and return on investment of digital forensic capabilities. The basis of this work is a community-driven initiative of Swiss regional police authorities. Interviews were conducted with 15 digital forensic units to determine their current knowledge management practices and needs. The results were then generalized into a prioritized set of requirements for inter-regional digital forensic knowledge management that may be applicable in other countries. These requirements were used to evaluate knowledge management platforms, and one was selected. Implementation, operations, and maintenance challenges of an inter-regional digital forensic knowledge management platform are discussed.",66,2,619,629,Criminal investigation; Business; Return on investment; Crime scene; Crime analysis; Cybercrime; Law enforcement; Digital evidence; Knowledge management; Digital forensics,IT investigation; collaboration; communication; digital forensics; digital investigation; efficiency; knowledge management and exchange; optimization,,,,https://pubmed.ncbi.nlm.nih.gov/33156519/ https://onlinelibrary.wiley.com/doi/10.1111/1556-4029.14613 https://www.ncbi.nlm.nih.gov/pubmed/33156519,http://dx.doi.org/10.1111/1556-4029.14613,33156519,10.1111/1556-4029.14613,3096266278,,0,007-898-145-584-667; 012-564-492-558-122; 030-177-879-793-402; 035-798-220-182-973; 051-975-164-698-08X; 085-482-775-276-618; 087-342-951-350-054; 102-277-601-213-467; 132-309-864-704-323; 135-988-931-214-479; 159-513-941-346-557; 171-620-328-325-465,1,false,, 019-550-446-572-545,Сhallenging Questions of Development and Application of DNA Banks for the Purposes of Criminology and Related Disciplines,2019-05-05,2019,journal article,Digital Transformation,25242822; 25229613,Belarusian State University of Informatics and Radioelectronics,,M. V. Sprindzuk; L. P. Titov; A. P. Konchits,"Review article presents essential information on DNA databases, forensic genomics for human identification and suspect characteristics. Author reports the essential information on the topic of forensic DNA databases and data processing. DNA databases are important tools for the improvement of performance of the security organizations and services with a final goal of national security enhancement.",,1,49,59,DNA bank; Genomics; Data science; Suspect; Forensic dna; Computer science; National security; Identification (information),,,,,https://doaj.org/article/06c5bdb7f0c2419cad6bc952b532f0ba https://dt.giac.by/jour/article/download/106/88 https://dt.giac.by/jour/article/view/106 https://core.ac.uk/download/pdf/231303804.pdf,http://dx.doi.org/10.38086/2522-9613-2019-1-49-59,,10.38086/2522-9613-2019-1-49-59,2948398854,,0,000-367-862-743-854; 001-819-345-341-575; 002-301-832-046-282; 003-896-895-268-925; 005-929-435-449-558; 006-968-575-957-528; 010-178-139-449-816; 013-816-330-780-42X; 015-675-160-635-073; 019-743-206-640-503; 021-169-842-643-295; 021-318-351-187-287; 026-878-963-858-376; 029-165-991-519-40X; 031-008-980-140-464; 031-404-258-218-564; 032-918-031-107-709; 035-596-156-442-850; 036-321-477-661-783; 037-116-183-105-486; 055-423-378-053-279; 061-730-393-105-150; 068-208-482-500-470; 071-956-415-511-569; 078-005-835-620-084; 080-854-297-696-126; 083-855-235-254-107; 084-091-423-094-269; 085-485-126-147-430; 086-878-381-444-161; 097-265-100-329-448; 097-571-014-876-694; 100-530-807-160-616; 101-583-678-301-974; 104-834-769-750-735; 107-159-491-953-53X; 112-987-303-958-451; 114-135-632-273-405; 117-116-221-630-637; 118-817-876-327-59X; 122-045-319-491-917; 125-778-630-031-11X; 133-804-239-808-738; 162-578-611-281-960; 197-498-215-193-125,1,true,cc-by,gold 019-625-620-542-530,What Is Open-Access Publishing and What It Means for the Forensic Enterprise,2019-06-28,2019,journal article,Forensic science international. Synergy,2589871x,Elsevier BV,Netherlands,Max M. Houck; Graeme Horsman; Georgina Sauzier; Mubarak A. Bidmos,"In 2008, the U.S. National Institutes of Health (NIH) mandated that researchers submit final peer-reviewed journal manuscripts to the digital archive PubMed Central no later than 12 months after they had been accepted for publication. Following the European Commission's announcement about open access publishing, the U.S. Office of Science and Technology Policy (OSTP) advised all U.S. funding agencies that spend more than $100 million on external research and development to make publications on supported research freely available online after a suggested 12-month embargo. The Registry of Open Access Repository Mandates and Policies (ROARMAP 2 2 http://roarmap.eprints.org/ . ) provides a searchable international database of agencies with open access requirements. As of February 2019, mandates have been registered by over 700 universities (including Harvard, MIT, Stanford, University College London, and University of Edinburgh) and over 100 research funders worldwide.",1,,290,293,Library science; Political science; Scholarly communication; MEDLINE; Science and technology policy; International database; Open access publishing; European commission,,,,,https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7219116 http://pubmed.ncbi.nlm.nih.gov/32411984/ https://pubmed.ncbi.nlm.nih.gov/32411984/ https://research.tees.ac.uk/ws/files/8027895/What_is_open_access_publishing_and_what_it_means_for_the_forensic_enterprise.pdf https://research.tees.ac.uk/en/publications/what-is-open-access-publishing-and-what-it-means-for-the-forensic https://qspace.qu.edu.qa/handle/10576/15673 https://core.ac.uk/download/pdf/225624896.pdf,http://dx.doi.org/10.1016/j.fsisyn.2019.06.045,32411984,10.1016/j.fsisyn.2019.06.045,2954065082,PMC7219116,0,014-069-410-581-703; 029-177-918-089-202; 039-167-614-704-548; 098-115-815-057-40X; 117-215-715-563-191; 118-576-215-843-592,1,true,"CC BY, CC BY-NC-ND",gold 019-885-756-382-127,Digital reconstruction of fragmented tooth remains in forensic context,2020-04-21,2020,journal article,Forensic sciences research,24711411; 20961790,Informa UK Limited,England,Abraham Johnson; Gargi Jani; Joe Adserias Garriga; Astha Pandey,Forensic odontology majorly focuses on the identification of victims through the analyses of oral and para–oral structures. Exposure to high temperatures and trauma can occur in mass disasters and ...,7,1,1,6,Identification (biology); Forensic science; Data science; Context (language use); Three dimensional printing; Digital reconstruction; Forensic odontology; Computer science,Forensic sciences; forensic odontology; forensic reconstruction; three-dimensional printing; three-dimensional surface scanning,,,,https://www.tandfonline.com/doi/full/10.1080/20961790.2020.1737462,http://dx.doi.org/10.1080/20961790.2020.1737462,35341125,10.1080/20961790.2020.1737462,3018557567,PMC8942516,0,014-265-262-881-082; 017-798-761-087-706; 024-123-842-118-517; 024-784-179-276-92X; 030-048-830-249-536; 032-625-551-023-227; 045-932-907-295-787; 059-572-267-613-848; 066-686-649-470-677; 077-449-305-818-238; 103-904-801-997-936; 113-690-919-585-162; 141-999-667-096-215; 197-422-013-209-01X; 197-955-680-614-846,7,true,"CC BY, CC BY-NC",gold 019-886-690-125-068,Packet analysis for network forensics: A comprehensive survey,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Leslie F. Sikos,"Abstract Packet analysis is a primary traceback technique in network forensics, which, providing that the packet details captured are sufficiently detailed, can play back even the entire network traffic for a particular point in time. This can be used to find traces of nefarious online behavior, data breaches, unauthorized website access, malware infection, and intrusion attempts, and to reconstruct image files, documents, email attachments, etc. sent over the network. This paper is a comprehensive survey of the utilization of packet analysis, including deep packet inspection, in network forensics, and provides a review of AI-powered packet analysis methods with advanced network traffic classification and pattern identification capabilities. Considering that not all network information can be used in court, the types of digital evidence that might be admissible are detailed. The properties of both hardware appliances and packet analyzer software are reviewed from the perspective of their potential use in network forensics.",32,,200892,,Network packet; Traffic classification; Deep packet inspection; Computer network; Intrusion detection system; Computer science; Network forensics; Malware; Network monitoring; Packet analyzer,,,,,https://ro.ecu.edu.au/cgi/viewcontent.cgi?article=8610&context=ecuworkspost2013 https://www.sciencedirect.com/science/article/pii/S1742287619302002 https://ro.ecu.edu.au/ecuworkspost2013/7605/ https://doi.org/10.1016/j.fsidi.2019.200892,http://dx.doi.org/10.1016/j.fsidi.2019.200892,,10.1016/j.fsidi.2019.200892,3008603700,,1,000-849-836-632-925; 002-057-492-581-147; 002-249-154-444-197; 002-644-568-703-777; 003-837-665-844-106; 007-820-956-568-249; 007-930-276-732-444; 009-093-501-952-644; 009-832-452-035-773; 010-809-989-317-092; 011-013-114-831-630; 012-815-797-127-829; 013-027-044-919-513; 014-147-422-032-729; 015-466-606-675-352; 018-523-398-247-35X; 018-698-938-868-515; 022-600-654-769-730; 024-342-433-373-656; 025-317-658-668-203; 025-612-673-009-478; 027-119-168-565-629; 027-138-157-519-567; 028-078-473-155-958; 028-819-938-186-961; 029-438-728-080-63X; 030-124-664-939-057; 033-440-500-523-569; 035-829-068-594-103; 036-410-769-010-397; 036-947-876-218-708; 037-242-269-057-70X; 039-663-369-087-859; 043-789-925-320-892; 044-214-224-814-012; 045-971-575-936-278; 046-681-677-962-582; 046-853-903-212-252; 049-089-707-664-583; 052-062-043-871-245; 056-940-464-186-344; 057-974-052-340-343; 058-748-412-870-761; 058-856-079-884-403; 061-166-098-230-35X; 061-867-439-567-594; 062-941-010-577-879; 063-405-959-136-487; 063-428-065-806-586; 069-737-156-469-48X; 071-378-897-833-015; 078-076-784-684-405; 078-190-337-665-412; 080-617-004-841-889; 082-402-248-348-358; 082-746-024-018-906; 083-405-908-808-541; 083-511-718-481-524; 085-049-092-321-849; 085-289-045-854-08X; 095-651-576-134-075; 101-189-364-354-47X; 101-591-639-730-442; 101-727-729-405-707; 102-441-399-953-42X; 107-272-816-064-541; 108-799-603-782-432; 110-055-204-185-42X; 113-083-780-431-614; 116-552-317-758-12X; 122-034-921-627-940; 123-812-106-637-469; 148-082-654-194-326; 148-564-233-172-083; 149-791-491-147-864; 152-775-561-028-915; 155-172-467-850-474; 175-840-536-452-987,29,true,cc-by-nc-nd,hybrid 020-023-076-322-047,Exploring Raspberry Pi - The internet of things,,2014,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Bradley Schatz; Pavel Gladyshev; Ronald M. van der Knijff,,11,3,141,142,Sociology of the Internet; Internet privacy; The Internet; Internet research; Internet appliance; Computer science; Internet of Things,,,,,https://www.sciencedirect.com/science/article/pii/S1742287614000954 https://doi.org/10.1016/j.diin.2014.09.001,http://dx.doi.org/10.1016/j.diin.2014.09.001,,10.1016/j.diin.2014.09.001,2481787633,,0,,1,false,, 020-140-834-798-099,Improved JPEG anti-forensics with better image visual quality and forensic undetectability.,2017-06-10,2017,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Gurinder Singh; Kulbir Singh,,277,,133,147,Artificial intelligence; JPEG; Quantization (image processing); Computer vision; Smoothing; Computer science; Digital image; Image quality; JPEG 2000; Lossless JPEG; Image processing,Blocking artifacts; Digital image forensics; Double JPEG compression; JPEG anti-forensics,,,"Department of Electronics and Information Technology, Ministry of Communications and Information Technology, Government of India",https://www.ncbi.nlm.nih.gov/pubmed/28648761 https://pubmed.ncbi.nlm.nih.gov/28648761/ https://europepmc.org/abstract/MED/28648761 https://www.sciencedirect.com/science/article/pii/S0379073817302104,http://dx.doi.org/10.1016/j.forsciint.2017.06.003,28648761,10.1016/j.forsciint.2017.06.003,2622891046,,0,004-530-492-547-92X; 005-021-673-285-683; 010-520-450-059-352; 013-974-329-685-015; 017-204-518-291-44X; 035-858-800-759-785; 039-742-416-961-250; 040-639-509-253-00X; 041-838-544-052-666; 044-860-657-165-931; 047-526-773-255-825; 051-035-217-903-949; 053-217-455-972-392; 058-535-586-038-159; 064-665-774-871-511; 067-320-468-684-094; 068-082-205-208-585; 072-936-991-584-107; 074-602-449-941-680; 076-346-829-732-533; 079-895-886-182-831; 080-418-584-620-246; 090-549-892-639-865; 095-036-957-604-048; 101-218-430-388-564; 106-688-419-298-857; 112-077-011-771-30X; 118-809-666-753-347; 120-453-234-664-794; 125-522-019-183-785; 132-802-162-553-005; 134-221-241-049-015; 139-901-566-639-372; 150-280-000-852-253; 161-459-893-930-499; 172-112-498-122-981,22,false,, 020-149-267-617-001,Calculating LRs for presence of body fluids from mRNA assay data in mixtures.,2021-01-15,2021,journal article,Forensic science international. Genetics,18780326; 18724973,Elsevier Ireland Ltd,Netherlands,Rolf J. F. Ypma; P.A. Maaskant van Wijk; Richard D. Gill; Marjan Sjerps; M. van den Berge,,52,,102455,,Statistical model; Calibration (statistics); Artificial intelligence; Test data; Pattern recognition; Probabilistic classification; Body fluid; Classifier (linguistics); Computer science; Probabilistic logic; Robustness (computer science),Body fluid typing; Calibration; LR system; Machine learning; mRNA profile,"Blood Chemical Analysis; Cervix Mucus/chemistry; Female; Forensic Genetics/methods; Genetic Markers; Humans; Likelihood Functions; Machine Learning; Male; Menstruation; Nasal Mucosa/chemistry; RNA, Messenger/analysis; Saliva/chemistry; Semen/chemistry; Skin/chemistry","Genetic Markers; RNA, Messenger",,https://www.sciencedirect.com/science/article/pii/S1872497320302271 https://www.ncbi.nlm.nih.gov/pubmed/33461104 https://pubmed.ncbi.nlm.nih.gov/33461104/,http://dx.doi.org/10.1016/j.fsigen.2020.102455,33461104,10.1016/j.fsigen.2020.102455,3120718634,,0,000-744-025-662-062; 001-198-901-888-178; 001-680-991-240-230; 002-914-447-841-273; 004-562-487-736-159; 006-101-714-460-131; 006-299-463-890-28X; 006-493-172-971-273; 009-121-559-836-713; 011-799-646-287-557; 020-045-639-781-210; 020-541-972-037-746; 020-652-717-185-903; 022-477-796-652-430; 025-010-654-468-777; 030-388-052-894-774; 033-097-628-947-728; 033-764-933-443-506; 039-204-711-327-772; 041-632-112-142-883; 042-391-319-022-215; 045-879-473-111-775; 046-064-694-919-734; 048-672-020-380-850; 048-915-547-176-171; 063-429-877-327-446; 074-695-197-880-37X; 078-591-164-124-681; 079-333-264-309-637; 082-925-985-516-270; 096-986-617-825-552; 097-196-452-994-509; 097-621-383-589-159; 098-868-907-313-710; 119-261-946-266-987; 120-388-714-246-243; 134-213-804-511-155; 142-527-962-979-521; 166-043-248-700-036,7,false,, 020-198-087-727-466,CURRENT TRENDS IN FORENSIC INFORMATION TECHNOLOGY,2018-04-02,2018,journal article,Theory and Practice of Forensic Science,25877275; 18192785,Russian Federal Centre of Forensic Science of the Ministry of Justice (RFCFS),,Nikolai A. Khatuntsev,"The paper presents current trends in computer forensic  science, drawing on the outcomes of the 20th annual meeting of the Forensic Information Technology Working Group (FIT-WG) of the European Network of Forensic Science Institutes (ENFSI) held in November 2017 in Spain.",13,1,121,124,Information technology; Engineering; Forensic science; Medical education; Computer forensics,,,,,https://www.tipse.ru/jour/article/download/398/386 https://doaj.org/article/b4ff05ab83fa483c8b23948de0facc6a https://www.tipse.ru/jour/article/view/398 https://core.ac.uk/download/pdf/235675351.pdf,http://dx.doi.org/10.30764/1819-2785-2018-13-1-121-124,,10.30764/1819-2785-2018-13-1-121-124,2796467446,,0,,0,true,cc-by,gold 020-402-775-494-34X,2020 - A new decade of forensic science,,2020,journal article,Forensic Science International: Reports,26659107,Elsevier BV,,Graeme Horsman; Mubarak A. Bidmos; Georgina Sauzier; Martin Bodner,,2,,100074,,Engineering; Forensic science; Engineering ethics,,,,,https://research.tees.ac.uk/en/publications/2020-a-new-decade-of-forensic-science,http://dx.doi.org/10.1016/j.fsir.2020.100074,,10.1016/j.fsir.2020.100074,3010919026,,0,,0,true,"CC BY, CC BY-NC-ND",gold 020-514-357-686-409,Digital Forensics : Challenges and Opportunities for Future Studies,2020-04-01,2020,journal article,International Journal of Organizational and Collective Intelligence,19479344; 19479352,IGI Global,,Reza Montasari; Richard Hill; Simon Parkinson; Pekka Peltola; Amin Hosseinian-Far; Alireza Daneshkhah,"Considering the ever-growing ubiquity of technology, there is an associated growth in the possibility of digital devices related to a criminal investigation or civil litigation. As the variety of digital devices is increasing, the storage capacity of each is also rising exponentially. Due to the varied and large volumes of data produced, law enforcement agencies (LEAs) worldwide are facing a significant backlog of cases. This has culminated in significant delays in dealing with cases that urgently require digital forensic investigations (DFIs). It is of paramount importance that new research approaches be adopted to address such challenges. This article evaluates the existing set of circumstances surrounding the field of digital forensics (DF). The article provides two important contributions to the field of DF; it identifies and analyses the most important mid- and long-term challenges that need to be considered by LEAs. It also proposes important specific future research directions, the undertaking of which can assist LEAs in adopting a new approach to addressing these challenges.",10,2,37,53,Risk analysis (engineering); Criminal investigation; Variety (cybernetics); Encryption; Set (psychology); Law enforcement; Field (computer science); Computer science; Big data; Digital forensics,,,,,https://www.igi-global.com/article/digital-forensics/250211 https://pure.hud.ac.uk/en/publications/digital-forensics-challenges-and-opportunities-for-future-studies http://nectar.northampton.ac.uk/12638/ https://dblp.uni-trier.de/db/journals/ijoci/ijoci10.html#MontasariHPPFD20 http://nectar.northampton.ac.uk/id/document/28120 https://doi.org/10.4018/IJOCI.2020040103 https://pure.northampton.ac.uk/en/publications/digital-forensics-challenges-and-opportunities-for-future-studies https://core.ac.uk/download/287595994.pdf,http://dx.doi.org/10.4018/ijoci.2020040103,,10.4018/ijoci.2020040103,2980113193,,0,000-086-616-947-367; 000-534-406-835-275; 004-668-612-287-432; 009-590-693-941-065; 009-885-874-541-907; 015-286-421-212-53X; 016-526-859-340-786; 017-335-677-993-203; 017-700-647-172-124; 023-858-572-607-02X; 024-462-843-796-80X; 027-031-165-049-753; 033-917-669-644-935; 034-008-964-356-002; 034-190-709-015-829; 040-567-901-099-238; 043-295-959-292-738; 047-382-227-529-112; 050-162-262-069-952; 054-502-354-794-645; 056-122-492-187-163; 059-697-278-686-056; 067-840-274-503-047; 068-520-918-599-405; 077-963-490-848-763; 081-447-017-308-327; 081-833-857-658-915; 083-091-368-558-414; 083-998-931-919-617; 092-233-656-399-603; 092-426-219-217-737; 094-295-279-676-447; 095-691-114-276-825; 111-746-829-685-861; 121-830-676-400-128; 127-526-081-978-336; 130-080-242-566-434; 133-456-103-290-986; 134-927-490-231-285; 137-755-137-054-864; 146-021-806-272-345; 163-330-758-807-944; 179-161-770-608-928,6,true,,green 020-515-076-107-276,Considerations on the ASTM Standards 1789-04 and 1422-05 on the Forensic Examination of Ink,2010-09-01,2010,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Cedric Neumann; Pierre Margot,"The ASTM standards on Writing Ink Identification (ASTM 1789-04) and on Writing Ink Comparison (ASTM 1422-05) are the most up-to-date guidelines that have been published on the forensic analysis of ink. The aim of these documents is to cover most aspects of the forensic analysis of ink evidence, from the analysis of ink samples, the comparison of the analytical profile of these samples (with the aim to differentiate them or not), through to the interpretation of the result of the examination of these samples in a forensic context. Significant evolutions in the technology available to forensic scientists, in the quality assurance requirements brought onto them, and in the understanding of frameworks to interpret forensic evidence have been made in recent years. This article reviews the two standards in the light of these evolutions and proposes some practical improvements in terms of the standardization of the analyses, the comparison of ink samples, and the interpretation of ink examination. Some of these suggestions have already been included in a DHS funded project aimed at creating a digital ink library for the United States Secret Service.",55,5,1304,1310,Quality assurance; Construction engineering; Inkwell; Engineering; Standardization; Context (language use); Forensic examination; Digital ink; Forensic engineering,,,,,https://www.onlinelibrary.wiley.com/doi/abs/10.1111/j.1556-4029.2010.01454.x http://core.ac.uk/display/18151534 https://www.ncbi.nlm.nih.gov/pubmed/20487143 https://europepmc.org/article/MED/20487143 https://serval.unil.ch/notice/serval:BIB_68D66A485BDD,http://dx.doi.org/10.1111/j.1556-4029.2010.01454.x,20487143,10.1111/j.1556-4029.2010.01454.x,1725002818,,0,006-141-613-109-197; 006-853-996-914-921; 010-112-045-589-779; 011-236-545-123-589; 021-157-302-205-00X; 024-553-820-630-659; 034-681-502-398-996; 035-381-032-883-605; 037-230-642-037-742; 041-609-733-912-769; 047-755-379-162-590; 052-721-524-636-939; 054-313-127-228-341; 054-726-182-402-811; 063-671-223-859-748; 069-242-488-576-121; 071-324-172-566-155; 083-701-807-720-66X; 086-565-009-861-48X; 086-817-008-454-469; 088-481-935-108-416; 092-054-561-229-843; 106-696-198-291-482; 109-435-258-852-67X; 112-793-195-262-725; 122-988-175-691-701; 133-562-199-454-496; 137-423-367-754-515; 144-075-868-271-234; 160-667-600-933-750; 174-960-493-752-559,9,false,, 020-529-077-208-623,A Forensic approach to Perform Android Mobile Forensic Analysis and Locating Artifacts from Digital Evidence,2020-04-30,2020,journal article,International Journal for Research in Applied Science and Engineering Technology,23219653,International Journal for Research in Applied Science and Engineering Technology (IJRASET),,Laishram Hemanta Singh,,8,4,1770,1791,Forensic science; Digital evidence; Computer science; Multimedia; Android (operating system),,,,,http://dx.doi.org/10.22214/ijraset.2020.4291,http://dx.doi.org/10.22214/ijraset.2020.4291,,10.22214/ijraset.2020.4291,3023760733,,0,,0,true,,gold 020-577-952-995-503,Research on Methods of Audio Recorder Forensic Identification,,2014,journal article,Chinese Journal of Forensic Sciences,16712072,,,Zeng Jin-hu,"Objective With the popularity of cell phones and digital recorders, traditional analog recordings have been largely replaced by digital ones in the audio forensic examination. Digital recordings are important parts of audio-visual materials, and the research on novel forensic authentication methods is of great importance both in theoretical significance and practical value.In this paper, the method of audio forensic authentication through identifying audio recorders was studied. Method Silent segments were firstly extracted in digital recordings, and the key equipment-related statistical features, i.e., sampling histogram distribution and spectral mean, were computed. Digital recordings were classified with the usage of the method in the fields of machine learning and pattern classification. Results The best classification accuracy in the experiments was up to 97.09%. On the basis of the result that digital recorders could be successfully identified, a feasible implementing scheme for forensic identification of digital recorders was proposed. Conclusion The audio recorder forensic identification based on signal statistical analysis is feasible and accurate.",,,,,Signal; Sampling (signal processing); Authentication; Key (cryptography); Scheme (programming language); Forensic identification; Speech recognition; Forensic examination; Computer science; Histogram,,,,,https://en.cnki.com.cn/Article_en/CJFDTotal-SFJD201406006.htm,https://en.cnki.com.cn/Article_en/CJFDTotal-SFJD201406006.htm,,,2365924721,,0,,0,false,, 021-032-360-247-284,Surveillance arbitration in the era of digital policing,2020-10-29,2020,journal article,Theoretical Criminology,13624806; 14617439,SAGE Publications,United States,Pete Fussey; Ajay Sandhu,"This article analyses adoptions of innovative technology into police surveillance activities. Extending the nascent body of empirical research on digital policing, the article draws on qualitative ...",26,1,136248062096702,22,Empirical research; Arbitration; Political science; Public administration; Corporate governance,,,,Economic and Social Research Council,https://journals.sagepub.com/doi/full/10.1177/1362480620967020 http://repository.essex.ac.uk/29070/ https://journals.sagepub.com/doi/pdf/10.1177/1362480620967020 https://core.ac.uk/download/349055538.pdf,http://dx.doi.org/10.1177/1362480620967020,,10.1177/1362480620967020,3096623286,,0,001-821-831-894-186; 012-270-767-861-662; 014-097-783-355-109; 023-152-021-041-854; 023-186-803-177-268; 025-286-695-569-774; 026-588-717-166-301; 038-688-112-403-574; 041-722-528-532-809; 045-870-136-062-369; 050-753-667-628-358; 060-960-673-273-578; 063-432-677-340-141; 073-286-086-811-562; 078-301-215-510-630; 079-935-205-118-038; 095-550-658-655-488; 104-097-365-152-221; 105-178-045-344-444; 110-276-215-023-281; 117-146-333-003-475; 117-878-192-802-09X; 125-744-074-128-58X; 140-450-619-266-350; 143-844-869-567-114; 146-668-365-375-206; 163-883-785-921-320; 168-895-491-328-708,2,true,cc-by,hybrid 021-090-150-149-921,"Observed and expected numbers of (partially) randomly matching profiles in the Dutch DNA database, and in international DNA searches",,2010,journal article,Science & Justice,13550306,Elsevier BV,United Kingdom,Marjan Sjerps; K.P. van der Beek; Ate D. Kloosterman,,50,1,47,48,Data mining; Matching (statistics); DNA database; Mathematics; DNA; Computational biology,,,,,http://linkinghub.elsevier.com/retrieve/pii/S1355030609002494 http://www.scienceandjusticejournal.com/article/S1355030609002494/abstract http://www.sciencedirect.com/science/article/pii/S1355030609002494,http://dx.doi.org/10.1016/j.scijus.2009.11.077,,10.1016/j.scijus.2009.11.077,2095146838,,0,,2,false,, 021-286-019-586-450,Another brick in the wall: An exploratory analysis of digital forensics programs in the United States,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Syria McCullough; Stella Abudu; Ebere Onwubuariri; Ibrahim Baggili,"Abstract We present a comprehensive review of digital forensics programs offered by universities across the United States (U.S.). While numerous studies on digital forensics standards and curriculum exist, few, if any, have examined digital forensics courses offered across the nation. Since digital forensics courses vary from university to university, online course catalogs for academic institutions were evaluated to curate a dataset. Universities were selected based on online searches, similar to those that would be made by prospective students. Ninety-seven (n = 97) degree programs in the U.S. were evaluated. Overall, results showed that advanced technical courses are missing from curricula. We conclude that most degree programs evaluated offer legal/cyber law & ethics, investigative processes, and lab & forensic operations courses. The courses offered the least were memory forensics, Internet of Things (IoT) forensics, and program & software forensics. The data shows that some universities with the Forensic Science Education Programs Accreditation Commission (FEPAC) accreditation are lacking instruction in timely digital forensics topics such as memory forensics (0%), hardware security (0%), program & software forensics (0%), and ethical hacking (0%). Investigative processes (100%), network forensics (100%), lab & forensic operations (100%), and a senior design/capstone project (100%) are offered at all FEPAC accredited universities in digital forensics and digital evidence. Undergraduate degree programs with the National Centers of Digital Forensics Academic Excellence (CDFAE) designation had over a 50% offering rate for 11 out of the 22 courses we evaluated. However, memory forensics (0%) and IoT forensics (12.5%) were largely underrepresented. Our work provides an overview of the current state of digital forensics programs and discusses the importance of these courses to educate the next digital forensics workforce.",37,,301187,,Certified Ethical Hacker; Memory forensics; Excellence; Digital evidence; Computer science; Curriculum; Network forensics; Medical education; Accreditation; Digital forensics,,,,,https://dfrws.org/presentation/another-brick-in-the-wall-an-exploratory-analysis-of-digital-forensics-programs-in-the-united-states/ https://digitalcommons.newhaven.edu/cgi/viewcontent.cgi?article=1101&context=electricalcomputerengineering-facpubs https://dfrws.org/wp-content/uploads/2021/09/2021-usa-paper-11-another_brick_in_the_wall_an_exploratory_analysis_of_digital_forensics_programs_in_the_united_states.pdf https://digitalcommons.newhaven.edu/electricalcomputerengineering-facpubs/100/ https://www.sciencedirect.com/science/article/pii/S2666281721000950,http://dx.doi.org/10.1016/j.fsidi.2021.301187,,10.1016/j.fsidi.2021.301187,3162582693,,0,013-568-618-083-770; 042-997-613-590-885; 065-459-442-784-779; 078-327-902-374-330; 095-738-791-161-430; 097-939-114-561-254; 112-145-333-308-520; 118-244-930-021-861; 134-927-490-231-285; 150-535-534-813-410; 175-879-272-175-020; 184-804-094-399-813; 198-476-125-680-623,1,true,cc-by-nc-nd,hybrid 021-561-259-505-377,LDPC Codes and Digital Forensics – A Perspective Approach,2019-04-29,2019,journal article,Iete Journal of Research,03772063,,,Madhusmita Mishra,Forensic science (or forensics) is the quisling of sciences and technologies to enquire and demonstrate facts of interest in relation to criminal or civil law. Although forensics has greatly enhanc...,,,1,8,Perspective (graphical); Relation (database); Computer science; Civil law (common law); Engineering ethics; Low-density parity-check code; Digital forensics,,,,,https://www.tandfonline.com/doi/full/10.1080/03772063.2019.1604170,https://www.tandfonline.com/doi/full/10.1080/03772063.2019.1604170,,,2943640087,,0,016-706-194-029-958; 021-822-507-493-073; 055-469-788-465-739; 060-983-905-471-058; 077-836-533-581-906; 113-342-977-472-720; 132-031-780-001-846; 153-501-219-904-367,1,false,, 021-688-526-901-955,Prelim iii - Contents List,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,36,,301145,301145,Computer science; Information retrieval,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00043-3,,10.1016/s2666-2817(21)00043-3,,,0,,0,false,, 021-850-998-857-676,FORZA - Digital forensics investigation framework that incorporate legal issues,,2006,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Ricci S. C. Ieong,"What is Digital Forensics? Mark Pollitt highlighted in DFRWS 2004 [Politt MM. Six blind men from Indostan. Digital forensics research workshop (DFRWS); 2004] that digital forensics is not an elephant, it is a process and not just one process, but a group of tasks and processes in investigation. In fact, many digital forensics investigation processes and tasks were defined on technical implementation details Investigation procedures developed by traditional forensics scientist focused on the procedures in handling the evidence, while those developed by the technologist focused on the technical details in capturing evidence. As a result, many digital forensics practitioners simply followed technical procedures and forget about the actual purpose and core concept of digital forensics investigation. With all these technical details and complicated procedures, legal practitioners may have difficulties in applying or even understanding their processes and tasks in digital forensics investigations. In order to break the technical barrier between information technologists, legal practitioners and investigators, and their corresponding tasks together, a technical-independent framework would be required. In this paper, we first highlighted the fundamental principle of digital forensics investigations (Reconnaissance, Reliability and Relevancy). Based on this principle, we re-visit the investigation tasks and outlined eight different roles and their responsibilities in a digital forensics investigation. For each role, we defined the sets of six key questions. They are the What (the data attributes), Why (the motivation), How (the procedures), Who (the people), Where (the location) and When (the time) questions. In fact, among all the investigation processes, there are six main questions that each practitioner would always ask. By incorporating these sets of six questions into the Zachman's framework, a digital forensics investigation framework - FORZA is composed. We will further explain how this new framework can incorporate legal advisors and prosecutors into a bigger picture of digital forensics investigation framework. Usability of this framework will be illustrated in a web hacking example. Finally, the road map that interconnects the framework to automatically zero-knowledge data acquisition tools will be briefly described.",3,,29,36,Usability; Road map; Key (cryptography); Data science; Zachman Framework; Computer security; Computer science; Process (engineering); Computer forensics; Digital forensics; Hacker,,,,,https://www.sciencedirect.com/science/article/abs/pii/S1742287606000661 https://www.sciencedirect.com/science/article/pii/S1742287606000661 https://doi.org/10.1016/j.diin.2006.06.004 https://dblp.uni-trier.de/db/journals/di/di3.html#Ieong06 https://dl.acm.org/doi/abs/10.1016/j.diin.2006.06.004,http://dx.doi.org/10.1016/j.diin.2006.06.004,,10.1016/j.diin.2006.06.004,2031533739,,0,020-944-423-224-895; 034-916-306-834-918; 038-668-970-194-854; 040-823-216-153-224; 129-360-320-775-188; 190-065-821-748-92X; 199-172-967-270-034,136,true,cc-by-nc-nd,hybrid 021-883-413-405-000,A novel ensemble local graph structure based feature extraction network for EEG signal analysis,,2020,journal article,Biomedical Signal Processing and Control,17468094,Elsevier BV,Netherlands,Turker Tuncer; Sengul Dogan; Fatih Ertam; Abdulhamit Subasi,,61,,102006,,Graph (abstract data type); Artificial intelligence; Pattern recognition; Zigzag; Eeg signal analysis; Signal classification; Structure based; Computer science; Discrete wavelet transform; Feature extraction; Pooling,,,,"Effat university, Jeddah, Saudi Arabia",https://dblp.uni-trier.de/db/journals/bspc/bspc61.html#TuncerDES20 https://www.sciencedirect.com/science/article/pii/S1746809420301622,http://dx.doi.org/10.1016/j.bspc.2020.102006,,10.1016/j.bspc.2020.102006,3031127640,,0,002-948-215-996-677; 003-137-879-936-770; 003-456-545-749-041; 004-682-041-586-770; 004-740-760-358-304; 005-680-902-488-994; 006-634-128-055-848; 007-394-731-818-842; 008-087-721-994-89X; 009-747-634-499-863; 010-927-821-808-24X; 015-569-141-394-471; 018-227-296-667-429; 018-956-172-682-15X; 019-240-036-568-128; 020-860-857-007-38X; 022-368-409-764-115; 022-805-867-427-59X; 025-839-677-069-976; 026-130-763-246-076; 027-033-791-744-445; 027-774-243-358-015; 028-652-904-965-922; 029-514-536-519-70X; 032-876-188-691-373; 034-704-081-645-037; 034-752-336-084-814; 035-097-137-030-74X; 035-485-787-290-193; 036-538-884-427-000; 039-692-928-843-845; 043-048-580-828-165; 043-090-187-893-621; 044-408-940-833-463; 048-384-579-772-226; 049-653-969-180-700; 052-605-448-386-430; 054-799-635-473-629; 054-992-088-578-273; 056-448-038-271-090; 060-580-092-863-268; 065-868-141-870-646; 070-324-685-266-725; 071-753-676-462-435; 073-525-070-998-954; 076-378-169-364-697; 076-440-878-381-662; 079-310-940-223-758; 080-289-754-708-462; 081-521-824-189-881; 084-709-694-673-037; 087-104-631-733-618; 106-335-104-403-831; 118-681-411-201-196; 126-739-760-592-024; 136-987-517-025-746; 142-371-159-896-921; 156-037-985-747-789; 156-998-272-765-074; 162-048-251-761-195; 169-078-130-361-381; 175-051-419-243-543,28,false,, 022-036-544-197-474,SEKILAS MENGENAI FORENSIK DIGITAL,,2013,journal article,Jurnal Sosioteknologi,2443258x,The Institute for Research and Community Services (LPPM) ITB,,Budi Raharjo,"Forensik digital merupakan bagian dari ilmu forensik yang melingkupi penemuan dan investigasi materi (data) yang ditemukan pada perangkat digital. Sebagai ilmu yang masih baru, masih dibutuhkan pemahaman dan kemampuan untuk menguasai ilmu ini. Penguasaan ilmu ini tidak hanya ditujukan pada kemampuan teknis semata tetapi juga terkait dengan bidang lain, seperti bidang hukum. Makalah ini menguraikan secara singkat mengenai forensik digital. Kata kunci: forensik, keamanan, teknologi informasi Digital forensic is considered a new field of study. It is a branch of forensic science encompassing the recovery and investigation of data found in digital devices. Digital forensic is needed to solve cyber crimes and related security problems. As a new field, awareness and skills are needed to master this field. Digital forensic is not only related to technical but also legal aspects. This paper describes digital forensic in a nut shell. Keywords: forensic, information technology, security",12,29,384,387,,,,,,https://www.neliti.com/publications/41700/sekilas-mengenai-forensik-digital https://media.neliti.com/media/publications/41700-ID-sekilas-mengenai-forensik-digital.pdf,http://dx.doi.org/10.5614/sostek.itbj.2013.12.29.3,,10.5614/sostek.itbj.2013.12.29.3,2132883088,,0,,5,true,,bronze 022-067-716-858-366,Image matching algorithms for breech face marks and firing pins in a database of spent cartridge cases of firearms.,2001-06-01,2001,journal article,Forensic science international,03790738; 18726283,Elsevier Ireland Ltd,Netherlands,Zeno Geradts; Jurrien Bijhold; Rob Hermsen; Fionn Murtagh,,119,1,97,106,Algorithm; Log-polar coordinates; Pattern recognition (psychology); Wavelet transform; Face (geometry); Cartridge; Computer science; Wavelet; Database; Firing pin; Image processing,,"Algorithms; Databases, Factual; Firearms/classification; Forensic Medicine/methods; Humans; Image Enhancement/methods; Netherlands; Pattern Recognition, Automated; Registries; Sensitivity and Specificity; Wounds, Gunshot/pathology",,,https://www.ncbi.nlm.nih.gov/pubmed/11348799 https://www.sciencedirect.com/science/article/abs/pii/S0379073800004205 https://pure.hud.ac.uk/en/publications/image-matching-algorithms-for-breech-face-marks-and-firing-pins-i https://pubmed.ncbi.nlm.nih.gov/11348799/,http://dx.doi.org/10.1016/s0379-0738(00)00420-5,11348799,10.1016/s0379-0738(00)00420-5,2152953104,,3,010-387-567-422-549; 010-492-687-027-150; 011-709-870-101-882; 014-387-543-681-197; 032-478-117-006-486; 033-364-231-006-368; 034-658-632-090-521; 034-950-014-733-698; 043-668-169-308-335; 065-752-377-083-783; 066-838-377-313-773; 099-034-512-437-052; 123-381-914-685-520; 133-379-900-165-401; 177-574-227-276-004; 184-138-262-178-998,32,false,, 022-264-235-998-870,A Forensic Examination of Online Search Facility URL Record Structures,2018-05-29,2018,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Graeme Horsman,"The use of search engines and associated search functions to locate content online is now common practice. As a result, a forensic examination of a suspect’s online search activity can be a critical aspect in establishing whether an offense has been committed in many investigations. This article offers an analysis of online search URL structures to support law enforcement and associated digital forensics practitioners interpret acts of online searching during an investigation. Google, Bing, Yahoo!, and DuckDuckGo searching functions are examined, and key URL attribute structures and metadata have been documented. In addition, an overview of social media searching covering Twitter, Facebook, Instagram, and YouTube is offered. Results show the ability to extract embedded metadata from search engine URLs which can establish online searching behaviors and the timing of searches.",64,1,236,242,World Wide Web; Online search; Key (cryptography); Suspect; Law enforcement; Computer science; Social media; Digital forensics; Metadata; Search engine,Bing; Google; crime; digital forensics; forensic science; search engines,,,,https://www.ncbi.nlm.nih.gov/pubmed/29813188 https://onlinelibrary.wiley.com/doi/10.1111/1556-4029.13818 https://dialnet.unirioja.es/servlet/articulo?codigo=6794310 https://research.tees.ac.uk/en/publications/a-forensic-examination-of-online-search-facility-url-record-struc,http://dx.doi.org/10.1111/1556-4029.13818,29813188,10.1111/1556-4029.13818,2806803749,,0,015-151-927-036-299; 015-804-986-088-895; 019-645-930-990-548; 020-332-639-640-030; 079-533-810-174-95X; 136-860-523-508-973; 148-957-735-097-711; 151-054-166-397-140,1,true,cc-by-nc-nd,green 022-297-576-546-283,Enhancing procedure of using new means of technologies in criminal proceedings,,2020,journal article,IUS ET SCIENTIA,24448478,Editorial Universidad de Sevilla,,Delia Magherescu,"The new era of technology is currently of high interest for the judicial proceedings in criminal matters. Although digital technologies have been increased in the last decades, both legislator and judicial authorities being involved in developing more and more efficient means of forensic investigation in purpose to prevent and combat the criminal phenomena, the criminal organizations are also interested in breaking such legal digital framework and achieving their own scope - a financial one. On the one hand, they are permanently interested in committing serious crimes including those in digital environment, whose consequences are one of the most dangerous crimes for the entire contemporary society. On the other hand, the law enforcement agencies are working in close cooperation with experts in digital field in order to gather information on how to improve the situation itself and investigate the criminal activities by means of digital evidence. In this context, the digitalization is an efficient tool of providing information, data and other instruments the judicial bodies need in achieving their goals in criminal proceedings. The current paper focuses on the techniques and methods that judicial bodies use in the investigation activity of gathering digital evidence that may serve in making decision in criminal cases the judicial bodies are invested with. The paper is structured in five chapters, each of them providing referential elements on the proposed topic. Its structure is designed as follows: Introduction; Aims; Methodology of Research; Achievements and failures through using new technologies; Doctrinal and jurisprudence approach, and Conclusion section, which advances a de lege ferenda proposal",6,1,8,21,Contemporary society; Political science; Emerging technologies; Context (language use); Law enforcement; Scope (project management); Legislator; Digital evidence; Engineering ethics; Jurisprudence,,,,,https://revistascientificas.us.es/index.php/ies/article/view/13344 https://dialnet.unirioja.es/servlet/articulo?codigo=7575063 https://core.ac.uk/download/334817883.pdf,http://dx.doi.org/10.12795/iestscientia.2020.i01.02,,10.12795/iestscientia.2020.i01.02,3046140244,,0,,0,true,cc-by-nc-nd,gold 022-564-463-934-451,On digital forensic readiness in the cloud using a distributed agent-based solution : issues and challenges,2016-06-17,2016,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Victor R. Kebande; Hein S. Venter,"The need to perform digital investigations has, over the years, led to the exponential growth of the field of Digital Forensics (DF). However, quite a number of challenges face the act of proving – for purposes of Digital Forensic Readiness (DFR) – that an electronic event has occurred in cyberspace. The problem that this research addresses involves the challenges faced when an Agent-Based Solution (ABS) is used in the cloud to extract Potential Digital Evidence (PDE) for DFR purposes. Throughout the paper the authors have modified the functionality of an initially malicious botnet to act as a distributed forensic agent to conduct this process. The paper focuses on the general, technical and operational challenges that are encountered when trying to achieve DFR in the cloud environment. The authors finally propose a contribution by assessing the possible solutions from a general, technical and operational point of view.",50,2,209,238,Engineering; Botnet; Cyberspace; Digital evidence; Field (computer science); Computer security; Process (engineering); Event (computing); Cloud computing; Digital forensics,,,,National Research Foundation,https://repository.up.ac.za/bitstream/2263/57045/1/Kebande_On_2018.pdf https://repository.up.ac.za/handle/2263/57045 https://www.tandfonline.com/doi/full/10.1080/00450618.2016.1194473,http://dx.doi.org/10.1080/00450618.2016.1194473,,10.1080/00450618.2016.1194473,2428850758,,0,000-900-727-061-212; 002-288-358-355-198; 007-321-225-339-593; 012-447-467-503-151; 013-568-618-083-770; 021-486-901-460-202; 023-471-707-127-597; 024-894-908-869-686; 025-723-055-730-999; 028-290-062-141-840; 029-008-872-980-253; 040-652-005-186-639; 045-701-748-075-614; 049-977-511-720-26X; 050-618-920-212-97X; 051-368-118-380-383; 052-152-063-024-042; 052-325-754-641-659; 054-507-171-824-189; 057-364-465-490-560; 058-631-300-195-90X; 059-619-693-632-836; 059-697-278-686-056; 061-960-915-134-527; 068-459-443-764-162; 077-532-025-251-756; 081-894-044-312-297; 086-332-277-098-225; 091-540-399-535-662; 091-619-263-117-914; 091-694-208-796-635; 095-691-114-276-825; 097-742-985-330-217; 101-091-831-428-576; 102-734-676-905-303; 105-559-966-983-565; 106-997-247-556-643; 110-860-381-892-442; 116-056-471-784-278; 116-798-667-947-625; 118-336-147-449-792; 121-704-965-852-836; 122-269-963-751-911; 129-517-593-148-609; 133-197-850-732-190; 133-508-126-407-763; 136-745-511-009-321; 137-107-551-448-433; 141-182-449-198-823; 144-074-853-958-370; 144-124-797-675-052; 148-732-709-522-772; 153-374-589-802-692; 156-972-666-676-888; 157-758-877-154-229; 163-330-758-807-944; 174-186-817-525-708; 181-298-179-296-700,35,true,,green 022-616-939-786-039,High performance computer analysis for indexing emails in digital forensic analysis (Computer Forensics),2020-08-25,2020,journal article,International Journal of Advanced Trends in Computer Science and Engineering,22783091,The World Academy of Research in Science and Engineering,,Enrique Lee Huamaní,,9,4,5867,5871,Computer analysis; Computer science; Multimedia; Computer forensics; Search engine indexing; Digital forensics,,,,,http://dx.doi.org/10.30534/ijatcse/2020/247942020,http://dx.doi.org/10.30534/ijatcse/2020/247942020,,10.30534/ijatcse/2020/247942020,3086051105,,0,,1,true,,bronze 022-630-199-236-859,Cross-border co-operation and education in digital investigations: A European perspective,,2011,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Elisabetta Allegra; Roberto Di Pietro; Mauro La Noce; Valerio Ruocco; Nino Vincenzo Verde,,8,2,106,113,Training program; Co operation; Assessment data; Training course; Computer security; Public relations; Computer science; If and only if; Leverage (finance); Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S1742287611000673 https://dblp.uni-trier.de/db/journals/di/di8.html#AllegraPNRV11 https://iris.uniroma3.it/handle/11590/120358,http://dx.doi.org/10.1016/j.diin.2011.09.001,,10.1016/j.diin.2011.09.001,2061524388,,0,002-569-181-368-890; 012-314-515-683-048; 012-806-731-619-471; 014-261-775-435-338; 014-425-849-204-654; 015-359-317-833-656; 036-590-204-023-319; 076-829-473-854-033; 102-826-496-109-404; 136-872-921-499-96X; 159-639-976-080-289; 167-592-705-831-583; 172-965-192-520-527,1,false,, 022-694-669-764-676,Digital forensics laboratory projects,2006-05-01,2006,journal article,Journal of Computing Sciences in Colleges,19374763,,,Guillermo A. Francia,"The pervasiveness of information technology and the ever-increasing dependence of society on the availability of computers and network systems present a new frontier for business enterprises and law enforcement agencies. Attacks on these systems become an everyday occurrence. As such, every organization should assume responsibility in establishing a reasonably secure system to protect its own interests as well as those of its customers. And as computer crime steadily grows, so does the need for computer security professionals trained in gathering, correlating and analyzing digital forensic evidence. This paper presents the various digital forensics laboratory projects that are designed to be implemented in a controlled Computer Security and Forensic Analysis (CSFA) laboratory. The principal objective of the projects is to provide future computer security professionals the necessary hands-on training in digital forensics investigation.",21,5,38,44,Information technology; Forensic science; Principal (computer security); Law enforcement; Computer security; Computer science; Computer forensics; Digital forensics,,,,,https://dl.acm.org/doi/abs/10.5555/1127351.1127360,https://dl.acm.org/doi/abs/10.5555/1127351.1127360,,,2155594091,,0,002-255-931-431-413; 007-790-059-029-953; 009-817-335-436-96X; 026-595-961-209-188; 031-720-709-292-654; 040-393-580-637-973; 092-058-232-746-872,3,false,, 022-757-007-442-155,Historic cell site analysis – Overview of principles and survey methodologies,,2012,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Matthew Tart; Brodie Iain Richard; Nicholas Gleed; James Matthews,,8,3,185,193,UMTS frequency bands; Data collection; World Wide Web; Data science; Mobile phone; Phone; Handset; Subscriber identity module; Computer science; GSM; Site analysis,,,,,https://doi.org/10.1016/j.diin.2011.10.002 http://www.sciencedirect.com/science/article/pii/S1742287611000867 https://dblp.uni-trier.de/db/journals/di/di8.html#TartBGM12 https://www.sciencedirect.com/science/article/abs/pii/S1742287611000867,http://dx.doi.org/10.1016/j.diin.2011.10.002,,10.1016/j.diin.2011.10.002,1971132754,,0,,9,false,, 023-063-862-957-256,A new model for forensic data extraction from encrypted mobile devices,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Aya Fukami; Radina Stoykova; Zeno Geradts,"Abstract In modern criminal investigations, mobile devices are seized at every type of crime scene, and the data on those devices often becomes critical evidence in the case. Various mobile forensic techniques have been established and evaluated through research in order to extract possible evidence data from devices over the decades. However, as mobile devices become essential tools for daily life, security and privacy concerns grow, and modern smartphone vendors have implemented multiple types of security protection measures - such as encryption - to guard against unauthorized access to the data on their products. This trend makes forensic acquisition harder than before, and data extraction from those devices for criminal investigation is becoming a more challenging task. Today, mobile forensic research focuses on identifying more invasive techniques, such as bypassing security features, and breaking into target smartphones by exploiting their vulnerabilities. In this paper, we explain the increased encryption and security protection measures in modern mobile devices and their impact on traditional forensic data extraction techniques for law enforcement purposes. We demonstrate that in order to overcome encryption challenges, new mobile forensic methods rely on bypassing the security features and exploiting system vulnerabilities. A new model for forensic acquisition is proposed. The model is supported by a legal framework focused on the usability of digital evidence obtained through vulnerability exploitation.",38,,301169,,Criminal investigation; Encryption; Usability; Crime scene; Mobile device; Data extraction; Digital evidence; Computer security; Guard (information security); Computer science,,,,European Commission; Horizon 2020; Horizon 2020 Framework Programme,https://www.sciencedirect.com/science/article/pii/S2666281721000779,http://dx.doi.org/10.1016/j.fsidi.2021.301169,,10.1016/j.fsidi.2021.301169,3170947218,,0,000-225-165-729-99X; 010-796-974-341-129; 018-772-801-528-344; 024-385-303-080-230; 024-462-843-796-80X; 025-743-892-862-313; 029-239-733-639-707; 030-674-871-669-121; 037-142-488-024-23X; 037-711-093-033-550; 039-660-135-379-927; 040-911-574-660-701; 047-082-996-007-349; 056-576-577-387-62X; 070-707-824-841-397; 074-933-143-629-826; 080-315-501-806-220; 083-447-226-503-586; 088-938-096-763-07X; 089-857-638-358-16X; 094-468-232-325-36X; 096-530-240-259-275; 101-682-349-836-12X; 107-937-891-240-991; 116-524-914-177-261; 121-380-312-572-361; 129-484-812-268-822; 143-575-175-674-350; 163-449-110-830-007,5,true,cc-by,hybrid 023-290-127-677-354,Prelim i - Editorial Board,,2020,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,35,,301098,301098,Editorial board; Computer science; Library science,,,,,,http://dx.doi.org/10.1016/s2666-2817(20)30400-5,,10.1016/s2666-2817(20)30400-5,,,0,,0,true,,bronze 023-767-546-806-478,Acquisition and analysis of volatile memory from android devices,,2012,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Joe T. Sylve; Andrew Case; Lodovico Marziale; Golden G. Richard,,8,3,175,184,Operating system; Embedded system; Market share; Memory forensics; Phone; Memory analysis; Computer science; Android (operating system); Volatile memory; Mobile device forensics; Digital forensics,,,,,https://www.504ensics.com/uploads/publications/android-memory-analysis-DI.pdf https://dblp.uni-trier.de/db/journals/di/di8.html#SylveCMR12 https://www.sciencedirect.com/science/article/pii/S1742287611000879 http://dx.doi.org/10.1016/j.diin.2011.10.003 http://www.dfir.org/research/android-memory-analysis-DI.pdf http://www.cs.uno.edu/~golden/Papers/android-memory-analysis-DI.pdf https://www.academia.edu/1268681/Acquisition_and_analysis_of_volatile_memory_from_android_devices https://dx.doi.org/10.1016/j.diin.2011.10.003 http://www.504ensics.com/uploads/publications/android-memory-analysis-DI.pdf https://doi.org/10.1016/j.diin.2011.10.003,http://dx.doi.org/10.1016/j.diin.2011.10.003,,10.1016/j.diin.2011.10.003,1972940696,,8,036-662-510-200-483; 037-821-713-720-130; 046-973-884-620-547; 059-293-301-937-554; 065-459-442-784-779; 100-947-011-285-206; 149-895-840-689-052; 150-249-549-372-358; 171-382-822-081-880,124,false,, 023-848-663-068-771,Can computer forensic tools be trusted in digital investigations,2020-10-28,2020,journal article,Science & justice : journal of the Forensic Science Society,18764452; 13550306,Forensic Science Society,United Kingdom,Wasim Ahmad Bhat; Ali Alzahrani; Mohamad Ahtisham Wani,"Abstract This paper investigates whether computer forensic tools (CFTs) can extract complete and credible digital evidence from digital crime scenes in the presence of file system anti-forensic (AF) attacks. The study uses a well-established six stage forensic tool testing methodology based on black-box testing principles to carry out experiments that evaluate four leading CFTs for their potential to combat eleven different file system AF attacks. Results suggest that only a few AF attacks are identified by all the evaluated CFTs, while as most of the attacks considered by the study go unnoticed. These AF attacks exploit basic file system features, can be executed using simple tools, and even attack CFTs to accomplish their task. These results imply that evidences collected by CFTs in digital investigations are not complete and credible in the presence of AF attacks. The study suggests that practitioners and academicians should not absolutely rely on CFTs for evidence extraction from a digital crime scene, highlights the implications of doing so, and makes many recommendations in this regard. The study also points towards immediate and aggressive research efforts that are required in the area of computer forensics to address the pitfalls of CFTs.",61,2,198,203,White-box testing; Exploit; Crime scene; Task (project management); File system; Digital evidence; Computer security; Computer science; Computer forensics,Anti-forensics; Black-box testing; Computer forensic tools; File systems; Forensics,Computers; Crime; Forensic Medicine; Forensic Sciences/methods; Humans,,,https://www.sciencedirect.com/science/article/abs/pii/S1355030620303002 https://www.ncbi.nlm.nih.gov/pubmed/33736854 https://europepmc.org/article/MED/33736854,http://dx.doi.org/10.1016/j.scijus.2020.10.002,33736854,10.1016/j.scijus.2020.10.002,3097838915,,0,003-526-475-150-199; 005-155-472-420-600; 007-375-878-067-656; 013-475-001-854-958; 022-723-601-549-961; 030-918-415-827-067; 042-230-817-975-353; 045-567-157-439-936; 046-318-533-334-038; 047-386-524-667-691; 049-363-433-613-058; 050-694-164-774-292; 065-061-509-329-026; 069-498-762-346-193; 071-942-083-141-698; 072-152-153-447-327; 074-299-373-252-299; 075-950-021-558-098; 078-817-460-650-140; 082-216-018-661-366; 100-552-121-697-280; 103-103-595-689-579; 103-615-756-435-705; 107-065-661-568-240; 134-502-810-516-308; 144-124-797-675-052; 185-343-535-827-64X,13,false,, 023-975-433-275-646,Analysis of Cloud Forensics : Review and Impact on Digital Forensics Aspects,2021-04-25,2021,journal article,International Journal of Scientific Research in Science and Technology,2395602x; 23956011,Technoscience Academy,,Mamta Khanchandani; Nirali Dave,"Digital forensics is the science of finding evidence to digital crimes and attacks. Cloud Forensics is a part of Digital Forensics that watches over the crime that has taken place over the cloud and carries out an investigation on it. Cloud computing is an evolutionary technology based on a huge network, which spreads globally. Hence, Cloud Forensics is a part of Network Forensics, which in turn is a part of Digital Forensics. Cloud organizations along with the providers of cloud service and customers that uses cloud service, are still awaiting the establishment of an explicit forensic revolution. Without the much-needed forensic capability, they will not be able to safeguard the robustness of their system and suitability of their services that assist criminal and cybercrime investigations. In this paper, we review the forensic process, challenges in cloud forensics, and its impact on digital forensics.",,,639,646,Data science; Cloud forensics; Computer science; Digital forensics,,,,,http://ijsrst.com/IJSRST2182118,http://dx.doi.org/10.32628/ijsrst2182118,,10.32628/ijsrst2182118,3159856036,,0,000-494-082-619-950; 006-680-761-463-190; 008-584-787-077-16X; 013-360-268-975-919; 025-315-423-877-95X; 026-162-197-054-585; 040-483-012-703-353; 054-887-738-520-678; 056-058-669-641-20X; 059-697-278-686-056; 060-905-412-608-729; 078-853-715-765-416; 082-793-334-095-933; 090-980-715-883-62X; 091-694-208-796-635; 093-022-712-589-02X; 110-454-809-930-822; 114-044-297-159-678; 124-912-663-881-389; 173-952-459-161-812,0,true,,gold 024-140-201-975-396,The use of computed tomography (CT) to estimate age in the 2009 Victorian Bushfire Victims: A case report,2010-09-28,2010,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Richard Bassed; Anthony J. Hill,,205,1,48,51,Tomography; Medical physics; Forensic dentistry; Modality (human–computer interaction); Dental age; Age estimation; Radiography; Computed tomography; Medicine; Identification (information),,"Age Determination by Teeth/methods; Australia; Burns/pathology; Child, Preschool; Disasters; Fires; Forensic Dentistry; Humans; Image Processing, Computer-Assisted; Imaging, Three-Dimensional; Infant; Radiography, Dental, Digital; Tomography, X-Ray Computed",,,https://research.monash.edu/en/publications/the-use-of-computed-tomography-ct-to-estimate-age-in-the-2009-vic https://pubmed.ncbi.nlm.nih.gov/20875936/ https://www.sciencedirect.com/science/article/abs/pii/S0379073810004305 http://europepmc.org/abstract/MED/20875936 https://www.ncbi.nlm.nih.gov/pubmed/20875936,http://dx.doi.org/10.1016/j.forsciint.2010.08.024,20875936,10.1016/j.forsciint.2010.08.024,2049939687,,0,000-502-407-631-139; 004-691-975-685-961; 009-425-741-125-275; 011-592-595-162-94X; 013-854-185-838-88X; 017-450-483-881-338; 018-110-330-465-654; 018-439-915-051-805; 024-457-262-232-102; 032-812-994-226-107; 038-935-936-815-796; 043-469-249-001-796; 043-538-041-048-786; 053-752-204-166-403; 055-220-180-671-653; 090-976-986-369-612; 102-530-305-953-440; 114-676-045-180-126; 139-600-070-612-564,37,false,, 024-350-847-240-124,Digital behavioral-fingerprint for user attribution in digital forensics: Are we there yet?,,2019,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Adeyemi Richard Ikuesan; Hein S. Venter,,30,,73,89,Automaton; Machine learning; Profiling (information science); Identifier; Artificial intelligence; Biometrics; Computer science; Information security; Recommender system; Digital forensics; Hash function,,,,,https://www.sciencedirect.com/science/article/pii/S1742287619300945 https://jglobal.jst.go.jp/en/detail?JGLOBAL_ID=201902230545339274 https://repository.up.ac.za/handle/2263/73125 https://dblp.uni-trier.de/db/journals/di/di30.html#IkuesanV19,http://dx.doi.org/10.1016/j.diin.2019.07.003,,10.1016/j.diin.2019.07.003,2964150038,,0,007-699-742-278-332; 012-723-051-030-715; 013-974-737-810-970; 021-639-464-448-057; 027-441-452-913-016; 030-525-495-077-51X; 033-877-222-136-260; 036-056-361-153-483; 045-439-795-806-132; 053-817-043-443-75X; 054-446-297-875-84X; 065-885-760-486-090; 066-824-663-605-526; 067-577-414-064-539; 071-837-240-864-140; 075-962-078-452-313; 095-177-434-765-79X; 103-113-677-538-597; 103-802-229-647-283; 104-825-003-547-384; 129-623-020-572-540; 161-538-739-914-314; 164-419-392-915-461; 164-619-554-205-881; 170-220-022-529-677; 198-517-781-379-087,25,false,, 024-401-196-451-370,Digital Forensics and Crime Scene Investigation,2022-08-19,2022,journal article,ITNOW,17465702; 17465710,Oxford University Press (OUP),United Kingdom,Martin Cooper,"Abstract; You’ve watched the TV shows, but what really happens – or should happen – when a digital forensics professional arrives on a crimescene? Andrew Moore, Lecturer Practitioner at Anglia Ruskin University, shares the facts.",64,3,38,40,Digital forensics; Computer forensics; Crime scene; Criminology; Computer security; Computer science; Sociology; Media studies,,,,,,http://dx.doi.org/10.1093/combul/bwac089,,10.1093/combul/bwac089,,,0,,0,false,, 024-427-977-768-317,A Forensic Exploration of the Microsoft Windows 10 Timeline.,2018-07-26,2018,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Graeme Horsman; Alex Caithness; Costas Katsavounidis,"The Microsoft Windows operating system continues to dominate the desktop computing market. With such high levels of usage comes an inferred likelihood of digital forensic practitioners encountering this platform during their investigations. As part of any forensic examination of a digital device, operating system artifacts, which support the identification and understanding of how a user has behaved on their system provide a potential source of evidence. Now, following Microsoft’s April 2018 build 1803 release with its incorporated; “Timeline” feature, the potential for identifying and tracking user activity has increased. This work provides a timely examination of the Windows 10 Timeline feature demonstrating the ability to recover activity-based content from within its stored database log files. Examination results and underpinning experimental methodologies are offered, demonstrating the ability to recover activity tile and process information in conjunction with the Windows Timeline. Further, an SQL query has been provided to support the interpretation of data stored within the ActivitiesCache.db.; .",64,2,577,586,Transaction log; Desktop computing; Computer science; Timeline; Microsoft Windows; SQL; Feature (computer vision); Database; Identification (information); Digital forensics,Microsoft; SQLite; Timeline; Windows 10; digital forensics; forensic science,,,,https://onlinelibrary.wiley.com/doi/10.1111/1556-4029.13875 http://europepmc.org/abstract/MED/30048565 https://research.tees.ac.uk/en/publications/a-forensic-exploration-of-the-microsoft-windows-10-timeline https://www.onlinelibrary.wiley.com/doi/pdf/10.1111/1556-4029.13875 https://dialnet.unirioja.es/servlet/articulo?codigo=6865113 https://www.ncbi.nlm.nih.gov/pubmed/30048565,http://dx.doi.org/10.1111/1556-4029.13875,30048565,10.1111/1556-4029.13875,2884898947,,0,031-982-129-275-33X; 032-949-282-040-096; 040-393-580-637-973; 094-877-017-231-069; 134-927-490-231-285,3,false,, 024-445-108-979-867,Implementation of a Blind Quality Control Program in a Forensic Laboratory.,2019-12-24,2019,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Callan Hundl; Maddisen Neuman; Alicia Rairden; Preshious Rearden; Peter R. Stout,"A blind quality control (QC) program was successfully developed and implemented in the Toxicology, Seized Drugs, Firearms, Latent Prints (Processing and Comparison), Forensic Biology, and Multimedia (Digital and Audio/Video) sections at the Houston Forensic Science Center (HFSC). The program was put into practice based on recommendations set forth in the 2009 National Academy of Sciences report and is conducted in addition to accreditation required annual proficiency tests. The blind QC program allows HFSC to test its entire quality management system and provides a real-time assessment of the laboratory's proficiency. To ensure the blind QC cases mimicked real casework, the workflow for each forensic discipline and their evidence submission processes were assessed prior to implementation. Samples are created and submitted by the HFSC Quality Division to whom the expected answer is known. Results from 2015 to 2018 show that of the 973 blind samples submitted, 901 were completed, and only 51 were discovered by analysts as being blind QC cases. Implementation data suggests that this type of program can be employed at other forensic laboratories.",65,3,815,822,Forensic science; Workflow; Medical physics; Quality management system; Test (assessment); Quality (business); Computer science; Quality control; Accreditation; Forensic biology,blind quality control; blind testing; blind verification; forensic science; intralaboratory comparison; intralaboratory proficiency; intralaboratory testing; proficiency testing,,,,https://onlinelibrary.wiley.com/doi/epdf/10.1111/1556-4029.14259 https://pubmed.ncbi.nlm.nih.gov/31873940/ https://europepmc.org/article/MED/31873940 https://lib.dr.iastate.edu/csafe_pubs/33/ https://onlinelibrary.wiley.com/doi/full/10.1111/1556-4029.14259 https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7317955 https://lib.dr.iastate.edu/cgi/viewcontent.cgi?article=1054&context=csafe_pubs,http://dx.doi.org/10.1111/1556-4029.14259,31873940,10.1111/1556-4029.14259,2997726134,PMC7317955,0,012-712-896-792-187; 018-989-524-990-561; 079-415-617-851-704; 108-014-166-403-322; 130-834-395-530-692; 141-680-646-043-910,9,true,cc-by,hybrid 024-539-327-776-880,Digital Forensics to Intelligent Forensics,2014-09-12,2014,journal article,Future Internet,19995903,MDPI AG,Switzerland,Alastair Irons; Harjinder Singh Lallie,"In this paper we posit that current investigative techniques—particularly as deployed by law enforcement, are becoming unsuitable for most types of crime investigation. The growth in cybercrime and the complexities of the types of the cybercrime coupled with the limitations in time and resources, both computational and human, in addressing cybercrime put an increasing strain on the ability of digital investigators to apply the processes of digital forensics and digital investigations to obtain timely results. In order to combat the problems, there is a need to enhance the use of the resources available and move beyond the capabilities and constraints of the forensic tools that are in current use. We argue that more intelligent techniques are necessary and should be used proactively. The paper makes the case for the need for such tools and techniques, and investigates and discusses the opportunities afforded by applying principles and procedures of artificial intelligence to digital forensics intelligence and to intelligent forensics and suggests that by applying new techniques to digital investigations there is the opportunity to address the challenges of the larger and more complex domains in which cybercrimes are taking place.",6,3,584,596,Social network analysis; Cybercrime; Law enforcement; Crime investigation; Computer security; Computer science; Network forensics; Computer forensics; Digital forensics,,,,,https://www.mdpi.com/1999-5903/6/3/584/pdf https://doaj.org/article/77741ce91be44f9b94623b123f0d552f https://dblp.uni-trier.de/db/journals/fi/fi6.html#IronsL14 https://www.mdpi.com/1999-5903/6/3/584 http://sure.sunderland.ac.uk/9495/ https://doi.org/10.3390/fi6030584 https://core.ac.uk/display/25688666 https://core.ac.uk/download/157851532.pdf,http://dx.doi.org/10.3390/fi6030584,,10.3390/fi6030584,2102414025,,0,005-471-570-182-209; 009-168-289-731-644; 010-951-806-548-929; 013-853-253-052-99X; 018-245-873-246-94X; 021-850-998-857-676; 026-582-043-902-677; 034-773-286-616-44X; 035-380-397-316-182; 048-209-571-753-372; 049-122-467-585-49X; 050-513-243-638-138; 059-002-926-336-692; 066-042-782-732-898; 072-297-921-376-769; 073-847-291-567-156; 077-532-025-251-756; 078-144-022-647-386; 091-619-263-117-914; 114-621-082-012-238; 185-786-528-318-049,36,true,cc-by,gold 024-735-069-822-749,XIRAF - XML-based indexing and querying for digital forensics,,2006,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,W. Alink; R. A. F. Bhoedjang; Peter Boncz; A.P. de Vries,"This paper describes a novel, XML-based approach towards managing and querying forensic traces extracted from digital evidence. This approach has been implemented in XIRAF, a prototype system for forensic analysis. XIRAF systematically applies forensic analysis tools to evidence files (e.g., hard disk images). Each tool produces structured XML annotations that can refer to regions (byte ranges) in an evidence file. XIRAF stores such annotations in an XML database, which allows us to query the annotations using a single, powerful query language (XQuery). XIRAF provides the forensic investigator with a rich query environment in which browsing, searching, and predefined query templates are all expressed in terms of XML database queries.",3,,50,58,Efficient XML Interchange; XML database; Information retrieval; XQuery; XML Signature; XML Schema Editor; Computer science; Streaming XML; XML validation; Document Structure Description; Database,,,,,https://www.narcis.nl/publication/RecordID/oai%3Acwi.nl%3A15548 https://doi.org/10.1016/j.diin.2006.06.016 https://www.sciencedirect.com/science/article/pii/S1742287606000776 https://dl.acm.org/doi/10.1016/j.diin.2006.06.016 https://dx.doi.org/10.1016/j.diin.2006.06.016 http://www.sciencedirect.com/science/article/pii/S1742287606000776 https://core.ac.uk/display/86349398 http://dx.doi.org/10.1016/j.diin.2006.06.016 https://dblp.uni-trier.de/db/journals/di/di3.html#AlinkBBV06,http://dx.doi.org/10.1016/j.diin.2006.06.016,,10.1016/j.diin.2006.06.016,2074180730,,2,011-640-228-143-441; 029-569-577-474-673; 085-669-579-012-375; 102-213-709-367-422; 133-752-203-150-119; 191-734-947-037-017; 198-900-201-375-787; 199-745-676-923-766,63,true,cc-by-nc-nd,hybrid 024-784-179-276-92X,Digital tooth reconstruction: An innovative approach in forensic odontology.,2019-12-30,2019,journal article,The Journal of forensic odonto-stomatology,22196749; 0258414x,International Organisation for Forensic Odonto-Stomatology,Sweden,Abraham Johnson; Gargi Jani; Astha Pandey; Nimesh Patel,"In mass disasters, accidents and crime investigations, where human remains are decomposed, charred or skeletonized, teeth may dislodge due to post-mortem loss or due to mishandling of evidence during the manipulation of skeletal and dental remains. Thus, the identification process is hampered due to the loss of dental evidence. In these situations, forensic tooth reconstruction may aid in the identification process. Forensic tooth reconstruction (FTR) refers to the process that aims to reconstruct the morphology of the missing tooth from the skeletal remains from the intra-alveolar morphology of the dental socket. The study is an innovative attempt to develop a digital approach to reconstruct three-dimensional (3D) printed tooth models through recording intra-alveolar morphology of empty dental sockets which simulate the teeth which are missing post-mortem. An experimental study was conducted on the human mandible, where using volumetric scanning, 3D scanning and printing techniques the tooth was reconstructed from the intra-alveolar morphology of the socket. Through metric analysis and qualitative congruency testing it was established that there was minimal discrepancy between natural tooth and 3D printed tooth. It was determined that teeth missing post-mortem do not necessarily invalidate the identification process. Digital FTR gives accurate results with minimum error.",3,37,12,20,3D reconstruction; Forensic dentistry; Tooth loss; Mandible; Teeth missing; Orthodontics; Natural tooth; Forensic odontology; 3d printed; Computer science,,Forensic Dentistry; Humans; Mandible; Tooth; Tooth Loss,,,https://www.ncbi.nlm.nih.gov/pubmed/31894133 http://ojs.iofos.eu/index.php/Journal/article/view/1148 https://pubmed.ncbi.nlm.nih.gov/31894133/ https://europepmc.org/article/MED/31894133 https://ojs.iofos.eu/index.php/Journal/article/view/1148,https://www.ncbi.nlm.nih.gov/pubmed/31894133,31894133,,3003366639,,0,,10,false,, 024-819-009-700-350,An Evidence-Based Forensic Taxonomy of Windows Phone Communication Apps,2017-08-17,2017,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Niken Dwi Wahyu Cahyani; Ben Martini; Kim-Kwang Raymond Choo; Nurul Hidayah Ab Rahman; Helen Ashman,"Communication apps can be an important source of evidence in a forensic investigation (e.g., in the investigation of a drug trafficking or terrorism case where the communications apps were used by the accused persons during the transactions or planning activities). This study presents the first evidence-based forensic taxonomy of Windows Phone communication apps, using an existing two-dimensional Android forensic taxonomy as a baseline. Specifically, 30 Windows Phone communication apps, including Instant Messaging (IM) and Voice over IP (VoIP) apps, are examined. Artifacts extracted using physical acquisition are analyzed, and seven digital evidence objects of forensic interest are identified, namely: Call Log, Chats, Contacts, Locations, Installed Applications, SMSs and User Accounts. Findings from this study would help to facilitate timely and effective forensic investigations involving Windows Phone communication apps.",63,3,868,881,Engineering; World Wide Web; Forensic science; Evidence-based practice; Voice over IP; Phone; Digital evidence; Android (operating system); Mobile device forensics; Digital forensics,Windows Phone platform; communication apps; digital evidence; digital forensics; forensic science; forensic taxonomy; mobile forensics,,,,https://www.onlinelibrary.wiley.com/doi/epdf/10.1111/1556-4029.13624 https://onlinelibrary.wiley.com/doi/10.1111/1556-4029.13624 https://dialnet.unirioja.es/servlet/articulo?codigo=6433271 https://www.ncbi.nlm.nih.gov/pubmed/28833117,http://dx.doi.org/10.1111/1556-4029.13624,28833117,10.1111/1556-4029.13624,2745927486,,0,003-504-554-245-316; 006-299-955-350-458; 015-761-502-459-77X; 018-668-422-959-814; 026-768-011-144-301; 029-518-372-349-940; 037-056-616-072-615; 046-708-134-286-669; 049-131-797-799-081; 063-268-644-731-590; 077-859-446-810-741; 080-226-855-967-158; 094-295-279-676-447; 109-689-058-252-063; 141-164-327-638-772; 166-183-210-534-575,2,false,, 024-952-897-231-953,Blue Skies and Storm Clouds,2008-05-27,2008,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Mark Pollitt,,2,2,105,106,Storm; Meteorology; Computer science,,,,,https://doi.org/10.1080/15567280802047168 https://dblp.uni-trier.de/db/journals/jdfp/jdfp2.html#Pollitt08a http://dblp.uni-trier.de/db/journals/jdfp/jdfp2.html#Pollitt08a,http://dx.doi.org/10.1080/15567280802047168,,10.1080/15567280802047168,2005820641,,0,,2,false,, 025-153-927-220-338,A machine learning-based forensic tool for image classification - A design science approach,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Joanna Rose Del Mar-Raave; Hayretdin Bahsi; Leo Mršić; Krešimir Hausknecht,,38,,301265,,Multiple-criteria decision analysis; Machine learning; System usability scale; Artificial intelligence; Usability; Learnability; Design science; Computer science; Process (engineering); Digital forensics; Adaptation (computer science),,,,,https://www.sciencedirect.com/science/article/pii/S2666281721001827,http://dx.doi.org/10.1016/j.fsidi.2021.301265,,10.1016/j.fsidi.2021.301265,3194023013,,0,004-190-067-200-599; 009-440-190-217-215; 010-992-143-070-67X; 019-173-734-163-198; 019-530-811-391-075; 020-131-367-064-365; 020-233-013-143-936; 022-650-296-107-491; 028-209-047-370-10X; 028-489-197-812-937; 030-351-009-711-953; 030-690-153-634-290; 033-546-145-104-639; 034-190-709-015-829; 036-109-227-639-032; 036-112-898-081-145; 038-287-375-579-320; 038-413-969-488-666; 040-596-212-782-595; 041-561-245-686-942; 042-240-098-526-453; 042-300-428-446-803; 043-622-268-441-63X; 047-955-569-661-805; 057-567-246-168-045; 068-733-058-645-211; 070-875-178-006-938; 077-697-831-364-443; 078-995-601-408-182; 086-770-608-683-825; 087-950-081-760-226; 096-284-364-377-23X; 105-768-477-569-452; 110-510-842-185-282; 132-602-463-268-72X; 141-601-200-804-924; 142-388-561-082-054; 144-310-550-272-760; 150-835-310-480-666; 172-821-771-397-639; 180-559-374-049-445; 192-697-687-929-866,0,false,, 025-195-246-113-006,Advanced forensic procedure for the authentication of audio recordings generated by Voice Memos application of iOS14.,2022-03-01,2022,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Nam In Park; Kyu-Sun Shim; Ji Woo Lee; Jin-Hwan Kim; Seong Ho Lim; Jun Seok Byun; Yong Jin Kim; Oc-Yeub Jeon,"In this study, we propose an advanced forensic examination procedure for audio recordings generated by the Voice Memos application with iPhone Operation System (iOS)14, to verify that these are the original recordings and have not been manipulated. The proposed examination procedure consists of an analysis of the characteristics of audio recordings and of the file system of the device storing the audio recordings. To analyze the characteristics of audio recordings, we compare the encoding parameters (bitrate, sampling rate, timestamps, etc.) and the file structure to determine whether audio recordings were manipulated. Next, in the device examination step, we analyze the media-log history and temporary files of the file system obtained by mobile forensic tools. For comparative analysis, a total of 100 audio recording samples were obtained through the Voice Memos application from five iPhone mobile handsets of different models with iOS14 installed using Advanced audio coding (AAC) or Apple lossless audio codec (ALAC). As a result of analyzing the encoding parameters between the original and manipulated audio recordings, as well as the temporary files contained in the device file system, the difference in the encoding parameters and the very unique trace of the original audio recordings in the temporary files were confirmed when manipulating the audio recordings. In particular, the primary advantage of our proposed method is its potential ability to recover original audio recordings that were subsequently manipulated via the temporary files examined in the device file system analysis.",67,4,1534,1549,Computer science; Codec; Digital audio; Timestamp; Speech recognition; File format; Speech coding; Sound recording and reproduction,audio forensics; audio forgery detection; authentication of audio recordings; forensic integrity; iOS14; manipulation-related temporary files,,,"Ministry of Interior and Safety, Republic of Korea (NFS2022DTB03); Ministry of the Interior and Safety, Republic of Korea; National Forensic Service (NFS2022DTB03)",,http://dx.doi.org/10.1111/1556-4029.15016,35229886,10.1111/1556-4029.15016,,,0,006-794-410-339-126; 043-261-465-467-889; 046-034-142-979-678; 059-541-479-175-841,0,false,, 025-296-854-506-076,"Assessment of 'Modern Tool Usage' Attribute–Computer Forensics, a Case Study",,2017,journal article,Journal of Engineering Education Transformations,09715843,,,Shrinivas D. Desai; Prashant Narayankar,"Computer forensics is a new and fast growing form of investigative technique in which forensic specialists use modern forensic software tools, to solve digital crime cases. Choosing appropriate forensic tool for solving real-time digital crime cases is the most expected graduate attribute, for those who have opted ""Computer forensic"" as an elective course. In this paper we present pedagogy for developing the skill of choosing most appropriate software tool for analyzing and investigating digital crime cases. Assignment activities are designed to develop competencies such as i) Ability to identify, select and apply forensic tool to solve image, audio and video doctored cases. ii) Ability to evaluate the suitability and limitations of the tool used to solve problem. To solve image forensic cases, a tool having the feature of error level analysis and meta data analysis is found to be more appropriate, while for solving audio doctored cases, tool having feature of frequency response analysis as well as difference calculator is found to be more appropriate. In case of video doctored crimes, tools having feature of noise analysis, level sweep, clone detection, and magnification is found to be the most appropriate. Assessment of outcome is carried out by recording attainment of Graduate Attribute (GA), Competency (CA) and Performance Indicators (PI). The skill of identifying, choosing and applying appropriate forensic tool to solve digital crime cases is enhanced among student.",30,3,39,46,Data mining; Performance indicator; Information retrieval; Calculator; Software; Digital evidence; Computer science; Computer forensics; Feature (computer vision); Metadata; Noise (video),,,,,http://www.i-scholar.in/index.php/JEETRIT/article/view/139962,http://www.i-scholar.in/index.php/JEETRIT/article/view/139962,,,2611708703,,0,,0,false,, 025-317-379-963-736,Glass Density Measurement Using a Calculating Digital Density Meter,,1979,journal article,Canadian Society of Forensic Science Journal,00085030; 23321660,Informa UK Limited,United Kingdom,A.D. Beveridge; C. Semen,ABSTRACTA method is described for measuring the density of glass particles using a calculating digital density meter.,12,3,113,116,Optics; Metre; Materials science,,,,,https://www.tandfonline.com/doi/abs/10.1080/00085030.1979.10757323,http://dx.doi.org/10.1080/00085030.1979.10757323,,10.1080/00085030.1979.10757323,2076951137,,0,,4,false,, 025-413-390-011-47X,How to find exculpatory and inculpatory evidence using a circular digital forensics process model,,2009,journal article,International Journal of Electronic Security and Digital Forensics,1751911x; 17519128,Inderscience Publishers,United Kingdom,Marjan Khatir; Seyed Mahmood Hejazi,"With raising the number of cyber crimes, the need of having a proper digital forensic process also increases. Although digital forensics is practiced in recent years, there is still a big gap between previously suggested digital forensics processes and what is really needed to be done in real cases. Some problems with current processes are lack of flexible transition between phases, not having a clear method or a complete scenario for addressing reliable evidence, and not paying enough attention to management aspects and team roles. This article provides a process model by paying special attention to the team roles and management aspects as well as both exculpatory and inculpatory evidence.",2,1,68,76,Teamwork; Digital forensic process; Exculpatory evidence; Digital evidence; Computer security; Computer science; Process (engineering); Team Role Inventories; Computer forensics; Digital forensics,,,,,https://ui.adsabs.harvard.edu/abs/2008ges..conf...10K/abstract https://link.springer.com/content/pdf/10.1007%2F978-3-540-69403-8_2.pdf https://rd.springer.com/chapter/10.1007%2F978-3-540-69403-8_2 https://www.inderscienceonline.com/doi/abs/10.1504/IJESDF.2009.023877 https://dblp.uni-trier.de/db/journals/ijesdf/ijesdf2.html#KhatirH09 http://www.diva-portal.org/smash/record.jsf?pid=diva2:436813 https://www.inderscience.com/link.php?id=23877 https://link.springer.com/chapter/10.1007/978-3-540-69403-8_2,http://dx.doi.org/10.1504/ijesdf.2009.023877,,10.1504/ijesdf.2009.023877,2041229035,,0,001-009-008-665-240; 032-697-093-668-898; 034-916-306-834-918; 035-223-520-491-228; 056-590-277-527-716; 111-741-773-111-021; 184-948-841-629-735; 199-745-676-923-766,1,false,, 025-421-213-608-128,Solid State Drives: The Beginning of the End for Current Practice in Digital Forensic Recovery?,,2010,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Graeme Baxter Bell; Richard Boddington,"Digital evidence is increasingly relied upon in computer forensic examinations and legal proceedings in the modern courtroom. The primary storage technology used for digital information has remained constant over the last two decades, in the form of the magnetic disc. Consequently, investigative, forensic, and judicial procedures are well-established for magnetic disc storage devices (Carrier, 2005). However, a paradigm shift has taken place in technology storage and complex, transistor-based devices for primary storage are now increasingly common. Most people are aware of the transition from portable magnetic floppy discs to portable USB transistor flash devices, yet the transition from magnetic hard drives to solid-state drives inside modern computers has so far attracted very little attention from the research community.; ; ; Here we show that it is imprudent and potentially reckless to rely on existing evidence collection processes and procedures, and we demonstrate that conventional assumptions about the behaviour of storage media are no longer valid. In particular, we demonstrate that modern storage devices can operate under their own volition in the absence of computer instructions. Such operations are highly destructive of traditionally recoverable data. This can contaminate evidence; can obfuscate and make validation of digital evidence reports difficult; can complicate the process of live and dead analysis recovery; and can complicate and frustrate the post recovery forensic analysis.; ; Our experimental findings demonstrate that solid-state drives (SSDs) have the capacity to destroy evidence catastrophically under their own volition, in the absence of specific instructions to do so from a computer.",5,3,1,,Garbage collection; Volition (linguistics); Solid-state drive; Digital evidence; Computer security; Computer science; Forensic disk controller; Paradigm shift; USB; Digital forensics,,,,,https://core.ac.uk/display/11234249 https://commons.erau.edu/cgi/viewcontent.cgi?article=1078&context=jdfsl http://graemebell.net/publications/upload/bellbodd2010-preprint.pdf https://commons.erau.edu/jdfsl/vol5/iss3/1/ http://www.123seminarsonly.com/Seminar-Reports/023/50099126-Solid-State-Drives.pdf http://graemebell.net/pubs/bellbodd2010-preprint.pdf http://www.evidencegrade.com/file/Solid%20State%20Drives%20-%20The%20Beginning%20of%20the%20End.pdf https://securit.se/wp-content/uploads/2011/09/JDFSL-V5N3-Bell.pdf https://researchrepository.murdoch.edu.au/id/eprint/3714/ https://core.ac.uk/download/11234249.pdf,http://dx.doi.org/10.15394/jdfsl.2010.1078,,10.15394/jdfsl.2010.1078,1578425966,,2,008-215-658-916-277; 031-309-466-858-480; 046-527-367-793-765; 057-137-063-277-37X; 062-788-502-964-113; 085-214-277-668-01X; 120-697-354-224-33X; 126-044-289-253-635; 129-360-320-775-188; 160-160-097-559-323; 167-592-705-831-583; 185-038-131-679-547; 199-745-676-923-766,53,true,cc-by-nc,gold 025-484-846-284-184,Adding Digital Forensic Readiness as a Security Component to the IoT Domain,2018-02-14,2018,journal article,"International Journal on Advanced Science, Engineering and Information Technology",24606952; 20885334,Insight Society,Indonesia,Victor R. Kebande; Nickson M. Karie; Hein S. Venter,"The unique identities of remote sensing, monitoring, self-actuating, self–adapting and self-configuring “things” in Internet of Things (IoT) has come out as fundamental building blocks for the development of “smart environments”. This experience has begun to be felt across different IoT-based domains like healthcare, surveillance, energy systems, home appliances, industrial machines, smart grids and smart cities. These developments have, however, brought about a more complex and heterogeneous environment which is slowly becoming a home to cyber attackers. Digital Forensic Readiness (DFR) though can be employed as a mechanism for maximizing the potential use of digital evidence while minimizing the cost of conducting a digital forensic investigation process in IoT environments in case of an incidence. The problem addressed in this paper, therefore, is that at the time of writing this paper, there still exist no IoT architectures that have a DFR capability that is able to attain incident preparedness across IoT environments as a mechanism of preparing for post-event response process. It is on this premise, that the authors are proposing an architecture for incorporating DFR to IoT domain for proper planning and preparing in the case of security incidents. It is paramount to note that the DFR mechanism in IoT discussed in this paper complies with ISO/IEC 27043: 2015, 27030:2012 and 27017: 2015 international standards. It is the authors’ opinion that the architecture is holistic and very significant in IoT forensics.",8,1,1,11,Smart grid; Architecture; Smart environment; Domain (software engineering); Digital evidence; Computer security; Computer science; Process (engineering); Component (UML); Digital forensics,,,,,http://dx.doi.org/10.18517/ijaseit.8.1.2115 https://repository.up.ac.za/handle/2263/66602 http://ijaseit.insightsociety.org/index.php?option=com_content&view=article&id=9&Itemid=1&article_id=2115 https://dx.doi.org/10.18517/ijaseit.8.1.2115 https://core.ac.uk/download/pdf/296920476.pdf,http://dx.doi.org/10.18517/ijaseit.8.1.2115,,10.18517/ijaseit.8.1.2115,2788400765,,0,002-625-978-577-247; 004-782-154-475-151; 010-791-676-072-730; 018-552-581-098-658; 018-948-094-812-86X; 025-178-552-649-015; 029-434-105-390-369; 065-873-523-989-876; 079-081-348-724-83X; 089-048-294-489-077; 118-838-969-146-870; 124-129-640-160-197,25,true,cc-by-sa,green 025-711-739-047-121,Cryptographic Accumulator and Its Application: A Survey,2022-03-07,2022,journal article,Security and Communication Networks,19390122; 19390114,Hindawi Limited,United Kingdom,Yongjun Ren; Xinyu Liu; Qiang Wu; Ling Wang; Weijian Zhang,"Since the concept of cryptographic accumulators was first proposed in 1993, it has received continuous attention from researchers. The application of the cryptographic accumulator is also more extensive. This paper makes a systematic summary of the cryptographic accumulator. Firstly, descriptions and characteristics of cryptographic accumulators are given, and the one-way accumulator, collision-free accumulator, dynamic accumulator, and universal accumulator are introduced, respectively. Cryptographic accumulator can be divided into two types: symmetric accumulator and asymmetric accumulator. In the asymmetric accumulator, three different cryptographic accumulator schemes were classified based on three security assumptions. Finally, this paper summarized the applications of cryptographic accumulators in ring signature, group signature, encrypted data search, anonymous credentials, and cryptographic promise.",2022,,1,13,Accumulator (cryptography); Hydraulic accumulator; Cryptography; Computer science; Cryptographic primitive; Computer security,,,,Civil Aviation University of China; Civil Aviation University of China,,http://dx.doi.org/10.1155/2022/5429195,,10.1155/2022/5429195,,,0,001-860-635-443-11X; 003-560-730-266-826; 007-756-735-057-556; 011-044-760-955-226; 011-144-572-473-105; 014-185-273-467-629; 015-348-800-884-847; 018-608-909-353-625; 020-348-478-789-323; 023-925-881-579-496; 025-167-872-164-064; 026-541-043-321-943; 030-870-743-906-848; 035-437-044-634-980; 039-724-427-948-36X; 043-575-225-323-132; 055-413-369-983-82X; 057-687-890-206-176; 064-618-848-820-02X; 067-806-059-149-306; 071-257-023-475-658; 077-132-889-008-54X; 078-148-742-665-898; 079-964-759-945-484; 081-856-597-518-300; 088-786-993-161-271; 091-547-919-119-403; 097-147-310-487-682; 097-598-021-490-431; 100-717-322-423-561; 102-657-558-857-535; 106-662-546-745-837; 113-327-875-911-299; 116-317-110-770-148; 134-053-878-733-009; 139-643-046-489-412; 140-114-492-608-954,0,true,cc-by,gold 025-712-308-656-835,Digital image forensics.,,2008,journal article,Scientific American,00368733,Scientific American Inc.,United States,Hany Farid,"The article discusses the field of digital image forensics, which involves the detection of photographic fraud, which has become increasingly problematic given the widespread availability of digital image manipulation software. Simple tests such as looking for incompatible shadows are discussed, as are more advanced mathematical methods involving the encoding algorithms used in the compression of images. INSETS: IN A DIFFERENT LIGHT;EYES AND POSITION;TELLTALE TWINKLES;SEND IN THE CLONES",298,6,66,71,Artificial intelligence; Software; Digital image forensics; Encoding algorithm; Computer vision; Field (computer science); Computer science; Digital image,,Computers; Eye; Forensic Sciences/methods; Fraud/legislation & jurisprudence; Light; Photography/legislation & jurisprudence; Posture; Software,,,https://dialnet.unirioja.es/servlet/articulo?codigo=6029789 https://www.ncbi.nlm.nih.gov/pubmed/18642544 http://ui.adsabs.harvard.edu/abs/2008SciAm.298f..66F/abstract,http://dx.doi.org/10.1038/scientificamerican0608-66,18642544,10.1038/scientificamerican0608-66,2984516443,,1,,58,false,, 025-880-943-392-835,The interface between forensic science and technology: how technology could cause a paradigm shift in the role of forensic institutes in the criminal justice system.,2015-08-05,2015,journal article,"Philosophical transactions of the Royal Society of London. Series B, Biological sciences",14712970; 09628436,Royal Society of London,United Kingdom,Ate D. Kloosterman; Anna Mapes; Zeno Geradts; Erwin van Eijk; Carola Koper; Jorrit van den Berg; Saskia Verheij; Marcel van der Steen; Arian C. van Asten,"In this paper, the importance of modern technology in forensic investigations is discussed. Recent technological developments are creating new possibilities to perform robust scientific measurements and studies outside the controlled laboratory environment. The benefits of real-time, on-site forensic investigations are manifold and such technology has the potential to strongly increase the speed and efficacy of the criminal justice system. However, such benefits are only realized when quality can be guaranteed at all times and findings can be used as forensic evidence in court. At the Netherlands Forensic Institute, innovation efforts are currently undertaken to develop integrated forensic platform solutions that allow for the forensic investigation of human biological traces, the chemical identification of illicit drugs and the study of large amounts of digital evidence. These platforms enable field investigations, yield robust and validated evidence and allow for forensic intelligence and targeted use of expert capacity at the forensic institutes. This technological revolution in forensic science could ultimately lead to a paradigm shift in which a new role of the forensic expert emerges as developer and custodian of integrated forensic platforms.",370,1674,20140264,,Criminal justice; Forensic profiling; Engineering; Forensic science; Data science; Technological revolution; Quality (business); Digital evidence; Paradigm shift; Identification (information),digital forensic evidence; forensic DNA analysis; forensic science; illicit drugs; integrated forensic platform; technology,Forensic Sciences/standards; Jurisprudence; Technology/standards,,,https://pubmed.ncbi.nlm.nih.gov/26101289/ https://core.ac.uk/display/85907193 https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4581008/ https://dare.uva.nl/personal/pure/en/publications/the-interface-between-forensic-science-and-technology(6feed386-c7ba-448f-a85f-36cd69d339ff).html https://royalsocietypublishing.org/doi/10.1098/rstb.2014.0264 https://www.hbo-kennisbank.nl/details/amsterdam_pure:oai:pure.hva.nl:publications%2F48066502-97bb-41cf-b289-c080b87a73e7 https://www.narcis.nl/publication/RecordID/oai%3Adare.uva.nl%3Apublications%2F6feed386-c7ba-448f-a85f-36cd69d339ff https://pure.uva.nl/ws/files/2563045/173358_502134.pdf https://www.ncbi.nlm.nih.gov/pubmed/26101289 https://royalsocietypublishing.org/doi/pdf/10.1098/rstb.2014.0264 http://rstb.royalsocietypublishing.org/content/370/1674/20140264 https://research.hva.nl/en/publications/the-interface-between-forensic-science-and-technology-how-technol https://europepmc.org/article/MED/26101289,http://dx.doi.org/10.1098/rstb.2014.0264,26101289,10.1098/rstb.2014.0264,2217082185,PMC4581008,0,000-360-120-513-679; 008-234-812-210-154; 013-862-376-378-732; 015-356-437-161-192; 016-609-780-602-820; 016-647-542-440-122; 016-787-034-342-993; 018-182-926-340-45X; 018-961-447-963-601; 024-399-932-762-872; 025-806-670-032-344; 026-234-371-530-306; 026-290-088-195-051; 027-818-314-997-554; 030-376-211-949-261; 031-765-874-952-715; 034-276-542-592-225; 036-776-877-755-261; 037-338-121-499-68X; 038-056-372-333-781; 039-686-535-953-145; 040-003-374-304-143; 042-768-610-240-741; 047-225-255-168-749; 048-720-273-620-449; 049-587-533-012-340; 050-832-697-966-687; 058-381-416-493-002; 059-075-566-882-389; 064-983-989-994-678; 078-144-022-647-386; 078-785-022-820-951; 080-388-010-789-232; 084-072-674-071-199; 088-808-658-665-442; 090-678-559-137-90X; 091-371-394-000-55X; 094-825-970-135-94X; 103-499-993-757-673; 105-299-327-516-938; 120-396-778-559-45X; 134-173-092-558-006; 155-327-699-210-875; 161-102-320-012-920; 163-330-758-807-944; 164-742-648-681-014,36,true,,green 025-924-527-170-602,Forensics and Digital Criminal Investigation Challenges in Cloud Computing and Virtualization,,2019,journal article,American Journal of Networks and Communications,2326893x,Science Publishing Group,,Pedro Ramos Brandao,"I'll address the fundamentals of Cloud Computing and Virtualization. The types of cloud computing deployment models and their relationship with the responsibility of the users are developed. The fundamentals of digital criminal investigation applied to Cloud Computing are discussed, and the most significant challenges are presented to criminal investigation and forensic sciences in this type and digital environment. The implications of Virtualization used in Cloud Computing in Criminal Investigation and Forensic Science are discussed. The paradigm case of Nested Virtualization technology is presented as an obstacle to Criminal investigation and forensic investigation. In cases of criminal investigations in traditional environments, it is common practice for computer expertise to turn off the equipment and make a copy of the disks that will be analysed later in the laboratory. This is unfeasible in a cloud computing environment, due to the large storage capacity, legal issues, geographic distribution and data control, which may vary depending on the model of service contracted. In addition, lack of physical access to data collection and lack of control over the system make information acquisition a challenging task for cloud expertise. Therefore, forensic computing has been restructured, bringing new techniques, solutions and research methods, giving rise to cloud forensics or expertise in the cloud. Thus, the so-called Forensic as a Service (FaaS) is dedicated to solving the security challenges inherent in the cloud environment. In this paper we will analyse some of these challenges.",8,1,23,,Software deployment; Criminal investigation; Physical access; Data collection; Data science; Service (systems architecture); Computer science; Virtualization; Cloud computing; Digital forensics,,,,,https://membership.sciencepublishinggroup.com/journal/paperinfo?journalid=132&doi=10.11648/j.ajnc.20190801.13 https://article.sciencepublishinggroup.com/pdf/10.11648.j.ajnc.20190801.13.pdf http://www.sciencepublishinggroup.com/journal/paperinfo?journalid=132&doi=10.11648/j.ajnc.20190801.13,http://dx.doi.org/10.11648/j.ajnc.20190801.13,,10.11648/j.ajnc.20190801.13,2956886574,,0,,1,true,cc-by,gold 025-962-349-677-765,A memory-based game-theoretic defensive approach for digital forensic investigators,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Saeed Shafiee Hasanabadi; Arash Habibi Lashkari; Ali A. Ghorbani,,38,,301214,,Fictitious play; Set (psychology); Reliability (computer networking); Action (philosophy); Space (commercial competition); Computer science; Nash equilibrium; Theoretical computer science; Digital forensics; Reduction (complexity),,,,,https://doi.org/10.1016/j.fsidi.2021.301214 https://www.sciencedirect.com/science/article/abs/pii/S2666281721001220,http://dx.doi.org/10.1016/j.fsidi.2021.301214,,10.1016/j.fsidi.2021.301214,3193654456,,0,005-560-290-519-705; 009-293-796-361-476; 011-167-475-273-787; 016-182-913-003-021; 018-678-258-353-042; 020-694-429-474-714; 026-154-621-809-909; 029-953-620-264-695; 031-974-228-201-694; 039-989-054-508-639; 055-628-965-684-111; 056-128-746-951-406; 059-283-555-888-204; 061-815-463-722-756; 062-887-226-019-687; 073-058-999-066-363; 073-082-463-242-605; 074-858-129-095-891; 075-951-555-454-394; 082-535-987-751-297; 082-607-667-713-101; 099-550-969-605-475; 103-983-382-640-024; 111-196-895-302-212; 120-279-128-409-377; 129-284-192-877-216; 129-570-949-797-11X; 140-726-241-135-766; 148-588-574-643-310; 155-444-284-938-883; 176-652-143-857-842; 193-397-772-894-612,1,false,, 025-975-470-531-20X,Application of Artificial Intelligence Automatic Diatom Identification System in Practical Cases.,,2020,journal article,Fa yi xue za zhi,10045619,Journal of Forensic Medicine,China,Yuanyuan Zhou; Yongjie Cao; Y Yang; Y L Wang; K F Deng; K J; Y J Chen; Z Q Qin; J H Zhang; P Huang; J Zhang; Chen Liqin,"Abstract Objective To discuss the application of artificial intelligence automatic diatom identification system in practical cases, to provide reference for quantitative diatom analysis using the system and to validate the deep learning model incorporated into the system. Methods Organs from 10 corpses in water were collected and digested with diatom nitric acid; then the smears were digitally scanned using a digital slide scanner and the diatoms were tested qualitatively and quantitatively by artificial intelligence automatic diatom identification system. Results The area under the curve (AUC) of the receiver operator characteristic (ROC) curve of the deep learning model incorporated into the artificial intelligence automatic diatom identification system, reached 98.22% and the precision of diatom identification reached 92.45%. Conclusion The artificial intelligence automatic diatom identification system is able to automatically identify diatoms, and can be used as an auxiliary tool in diatom testing in practical cases, to provide reference to drowning diagnosis.",36,2,239,242,Deep learning; Artificial intelligence; Diatom; Identification system; Digital slide; Poison control; Injury control; Computer science; Receiver operating characteristic; Identification (information),forensic pathology; artificial intelligence; diatoms; death from drowning,Artificial Intelligence; Cadaver; Diatoms; Drowning; Humans; Lung,,,https://pubmed.ncbi.nlm.nih.gov/32530174/ https://www.ncbi.nlm.nih.gov/pubmed/32530174,http://dx.doi.org/10.12116/j.issn.1004-5619.2020.02.017,32530174,10.12116/j.issn.1004-5619.2020.02.017,3034175005,,0,,0,false,, 026-013-819-578-115,Modern post-mortem imaging: an update on recent developments,2017-04-03,2017,journal article,Forensic sciences research,24711411; 20961790,Informa UK Limited,England,Silke Grabherr; Coraline Egger; Raquel Vilarino; Lorenzo Campana; Melissa Jotterand; Fabrice Dedouit,"Modern post-mortem investigations use an increasing number of digital imaging methods, which can be collected under the term “post-mortem imaging”. Most methods of forensic imaging are from the radiology field and are therefore techniques that show the interior of the body with technologies such as X-ray or magnetic resonance imaging. To digitally image the surface of the body, other techniques are regularly applied, e.g. three-dimensional (3D) surface scanning (3DSS) or photogrammetry. Today's most frequently used techniques include post-mortem computed tomography (PMCT), post-mortem magnetic resonance imaging (PMMR), post-mortem computed tomographic angiography (PMCTA) and 3DSS or photogrammetry. Each of these methods has specific advantages and limitations. Therefore, the indications for using each method are different. While PMCT gives a rapid overview of the interior of the body and depicts the skeletal system and radiopaque foreign bodies, PMMR allows investigation of soft tissues and parenchymal organs. PMCTA is the method of choice for viewing the vascular system and detecting sources of bleeding. However, none of those radiological methods allow a detailed digital view of the body's surface, which makes 3DSS the best choice for such a purpose. If 3D surface scanners are not available, photogrammetry is an alternative. This review article gives an overview of different imaging techniques and explains their applications, advantages and limitations. We hope it will improve understanding of the methods.",2,2,52,64,Digital imaging; Photogrammetry; Magnetic resonance imaging; Medical physics; Foreign Bodies; Computed tomographic angiography; Forensic imaging; Surface scanning; Computed tomography; Medicine,3D scanning; Forensic science; forensic imaging; photogrammetry; post-mortem angiography; post-mortem computed tomography; post-mortem magnetic resonance imaging; post-mortem radiology,,,,https://archive-ouverte.unige.ch/unige:111125 https://serval.unil.ch/resource/serval:BIB_E82428F503C7.P001/REF.pdf https://tandfonline.com/doi/pdf/10.1080/20961790.2017.1330738 https://www.tandfonline.com/doi/full/10.1080/20961790.2017.1330738 https://pubmed.ncbi.nlm.nih.gov/30483621/ https://europepmc.org/article/MED/30483621 https://serval.unil.ch/notice/serval:BIB_E82428F503C7 https://core.ac.uk/display/132562624 https://archive-ouverte.unige.ch/unige:111125/ATTACHMENT01 https://www.ncbi.nlm.nih.gov/pubmed/30483621 https://core.ac.uk/download/132562624.pdf,http://dx.doi.org/10.1080/20961790.2017.1330738,30483621,10.1080/20961790.2017.1330738,2623691468,PMC6197109,0,000-622-801-548-882; 002-127-138-459-748; 002-574-835-495-255; 002-874-351-141-228; 003-288-645-126-693; 004-692-514-828-661; 005-271-468-458-479; 005-385-722-585-875; 005-744-469-931-78X; 006-383-943-065-184; 008-353-301-692-448; 008-925-276-895-235; 010-497-322-130-270; 010-979-737-394-536; 011-196-068-159-517; 011-334-678-161-545; 012-477-285-701-154; 013-618-191-018-883; 014-891-588-695-51X; 015-870-129-775-59X; 015-871-457-778-196; 016-152-057-380-336; 016-278-047-306-961; 017-673-613-513-460; 018-552-682-550-607; 019-894-758-909-476; 020-054-223-617-171; 020-388-216-071-924; 024-065-202-822-642; 024-727-552-496-541; 025-551-782-270-556; 026-064-357-674-355; 026-099-814-244-466; 026-114-544-965-820; 026-827-572-488-005; 026-968-540-363-880; 027-949-211-469-505; 028-269-942-715-076; 029-209-349-655-481; 029-955-038-737-871; 031-218-734-086-250; 032-080-025-754-25X; 032-771-472-833-964; 033-226-440-805-865; 033-819-272-738-045; 034-546-868-328-739; 034-956-127-392-41X; 039-727-846-991-462; 040-820-097-367-479; 042-970-251-928-737; 044-181-122-446-214; 045-642-791-465-645; 047-260-450-130-870; 047-971-654-176-409; 048-100-698-601-414; 050-753-360-246-697; 050-820-575-491-670; 052-010-126-807-228; 052-263-051-603-890; 052-305-956-442-887; 052-332-973-851-731; 052-467-571-113-902; 052-908-122-139-219; 054-013-424-803-109; 056-227-819-043-307; 056-881-934-166-982; 057-208-033-815-70X; 057-605-261-251-95X; 058-516-908-563-367; 060-366-850-711-777; 060-568-856-274-497; 061-386-617-595-057; 062-022-043-022-477; 063-480-645-715-582; 063-847-062-569-139; 068-563-649-232-997; 071-514-048-492-205; 073-496-527-695-102; 073-990-255-764-904; 074-731-446-248-128; 074-946-715-487-732; 075-473-525-645-866; 075-878-592-413-876; 076-040-513-310-72X; 077-629-723-919-259; 077-907-720-152-766; 083-721-999-786-505; 085-258-379-896-552; 087-261-927-597-36X; 087-467-945-131-719; 088-410-261-239-234; 093-530-465-458-137; 095-996-376-519-142; 098-709-078-473-048; 099-306-624-143-717; 101-314-377-334-558; 102-257-392-263-901; 110-303-084-774-528; 112-438-520-850-330; 112-652-864-630-830; 120-994-288-569-33X; 126-486-980-769-44X; 126-946-909-645-545; 132-497-400-193-36X; 133-480-479-235-918; 147-924-841-513-400,41,true,"CC BY, CC BY-NC",gold 026-129-197-578-229,Insider Threat Prediction Based on Unsupervised Anomaly Detection Scheme for Proactive Forensic Investigation,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Yichen Wei; Kam-Pui P Chow; Siu-Ming Yiu,,38,,301126,,Scheme (programming language); Insider threat; Computer security; Computer science; Anomaly detection,,,,,https://dfrws.org/wp-content/uploads/2021/01/2021_APAC_paper-insider_threat_prediction_based_on_unsupervised_anomaly_detection_scheme_for_proactive_forensic_investigation.pdf https://dfrws.org/presentation/insider-threat-prediction-based-on-unsupervised-anomaly-detection-scheme-for-proactive-forensic-investigation/,http://dx.doi.org/10.1016/j.fsidi.2021.301126,,10.1016/j.fsidi.2021.301126,3124852128,,0,001-134-660-509-890; 009-452-389-564-781; 014-294-779-021-838; 016-575-189-412-269; 024-430-994-116-844; 025-712-409-728-543; 028-394-442-354-684; 044-937-786-034-906; 046-590-593-651-572; 053-094-537-530-97X; 055-820-586-264-010; 088-097-202-235-825; 103-708-848-416-467; 126-300-901-020-679; 133-416-067-270-358; 134-926-807-852-182,6,true,cc-by-nc-nd,hybrid 026-228-290-740-116,Digital forensic analysis of mobile automotive maintenance applications,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Faisal Sumaila; Hayretdin Bahsi,,43,,301440,301440,Digital forensics; Computer science; Automotive industry; Popularity; Global Positioning System; Mobile device; Triage; Computer security,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301440,,10.1016/j.fsidi.2022.301440,,,0,016-322-663-058-127; 021-199-821-854-824; 066-235-037-082-291; 081-447-017-308-327; 090-496-255-429-009; 094-142-794-127-63X,0,false,, 026-290-088-195-051,Improving source camera identification using a simplified total variation based noise removal algorithm,,2013,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Floris Gisolf; Anwar Malgoezar; Teun Baar; Zeno Geradts,,10,3,207,214,Algorithm; Noise; Artificial intelligence; Noise reduction; Digital camera; Variation (game tree); Camera identification; Computer vision; Computer science; Wavelet; Identification (information); Process (computing),,,,,https://www.researchgate.net/profile/Floris_Gisolf/publication/259164871_Improving_source_camera_identification_using_a_simplified_total_variation_based_noise_removal_algorithm/links/5460fea20cf27487b452684b.pdf https://dare.uva.nl/personal/search?identifier=1be12d32-53f0-46eb-9e99-72c5497a9e6b https://dl.acm.org/doi/10.1016/j.diin.2013.08.002 http://dblp.uni-trier.de/db/journals/di/di10.html#GisolfMBG13 https://www.narcis.nl/publication/RecordID/oai%3Adare.uva.nl%3Apublications%2F1be12d32-53f0-46eb-9e99-72c5497a9e6b http://dx.doi.org/10.1016/j.diin.2013.08.002 https://www.sciencedirect.com/science/article/pii/S1742287613000777 https://dblp.uni-trier.de/db/journals/di/di10.html#GisolfMBG13 https://dx.doi.org/10.1016/j.diin.2013.08.002 https://core.ac.uk/display/132739752 https://doi.org/10.1016/j.diin.2013.08.002,http://dx.doi.org/10.1016/j.diin.2013.08.002,,10.1016/j.diin.2013.08.002,2009136431,,0,003-009-062-014-855; 012-412-270-035-761; 036-162-322-223-660; 036-277-431-302-085; 045-226-923-439-105; 048-955-603-721-071; 053-781-637-768-867; 060-043-515-260-052; 069-847-568-544-420; 073-556-368-991-677; 077-828-134-917-257; 083-097-133-928-799; 093-664-113-855-239; 098-249-353-282-074; 106-295-038-562-776; 160-685-922-453-820; 163-715-300-552-254; 179-834-398-565-338; 180-088-494-514-913; 184-897-235-429-285,29,false,, 026-391-308-774-913,Sequencing the intersections of printed strokes with writing instrument strokes using DocuCentre expert (PIA 6000-EDF).,2012-09-19,2012,journal article,Science & justice : journal of the Forensic Science Society,13550306,Forensic Science Society,United Kingdom,Ridamjeet Kaur; Komal Saini; N.C. Sood,"Introduction of the digital techniques in document examination has encouraged the Forensic Document Examiners to work with better accuracy in non-destructive ways. In this study, the examination of sequence of intersecting strokes of printers (inkjet printer, laser printer, dot-matrix printer) and typewriters with writing instruments (gel ink pen, ballpoint pen and fountain pen) of different colors was carried out by using Docucenter Expert via PIA-6000 software utilizing extended depth of focus. The continuity of the stroke is the only characteristic which has been observed at the point of intersection.",53,2,206,211,Computer graphics (images); Engineering; Intersection (Euclidean geometry); Point (typography); Engineering drawing; Software; Extended depth of focus,,,,,https://www.sciencedirect.com/science/article/abs/pii/S1355030612001104 http://www.sciencedirect.com/science/article/pii/S1355030612001104 https://www.ncbi.nlm.nih.gov/pubmed/23601730,http://dx.doi.org/10.1016/j.scijus.2012.08.005,23601730,10.1016/j.scijus.2012.08.005,2014793617,,0,000-130-523-165-329; 011-562-988-102-991; 035-592-822-881-970; 064-641-762-527-151,8,false,, 026-431-673-944-953,Convergências e divergências entre a Diplomática Digital e a Ciência Forense Digital,2020-09-25,2020,journal article,Brazilian Journal of Information Science: research trends,19811640,Faculdade de Filosofia e Ciências,,Raquel Torrão Valentim; Natália Bolfarini Tognoli,"Based on recent discussions in the scope of archival studies on the theoretical-methodological development of Diplomatics in the creation, maintenance and preservation of authentic digital records, what has agreed to call Digital Diplomatics, a proposal which research to contribute for studies of digital records to propose a joint analysis with also emerging Digital Forensic Science. The research consists of a systematization of the concepts, definitions and, mainly, existing projects about Digital Diplomatics comparing them with Digital Forensic Science. An analysis of the scientific literature of the area found in international databases was carried out comparing it with Digital Forensic Science. The results demonstrate that the areas converge concerning the use of tools, the understanding of the legal context in which the records are inserted, the search for impartially identifying the context of their digital objects, the application of similar concepts and methods and the capacity that its professionals have to certify the integrity, authenticity, and reliability of digital objects in legal processes.",14,4,3,,Data science; Context (language use); Scope (project management); Scientific literature; Digital records; Joint analysis; Computer science; Archival science; Diplomatics; Digital forensics,,,,,https://dialnet.unirioja.es/descarga/articulo/7586088.pdf https://dialnet.unirioja.es/servlet/articulo?codigo=7586088,http://dx.doi.org/10.36311/1940-1640.2020.v14n4.10528,,10.36311/1940-1640.2020.v14n4.10528,3089238597,,0,,0,true,cc-by-sa,gold 026-470-386-734-808,A Holistic Perspective on the Science of Computer Forensics,,2005,journal article,Journal of Information Privacy and Security,15536548; 2333696x,Informa UK Limited,,Matthew J. Stippich; Christopher J. Stippich,"AbstractRecent development in the field of information technology has raised new challenges and problems for the prevention and control of computer crime. Criminal exploitation of digital technologies requires not only research and development to counter these crimes but to also implement strong security policies. Proactive stance on issues such as network intrusion are extremely important but when criminal activity does take place, the field of compute forensics can be invaluable in addressing the problems in such complicated crimes. This article discusses some of the key tenets in the field of forensic computing and makes the case for a need to approach computer forensics as a science. The process view of a forensic investigation is also discussed.",1,1,27,39,Information technology; Security policy; Key (cryptography); Data science; Field (computer science); Computer security; Computer science; Process (engineering); Computer forensics; Digital forensics; Metadata,,,,,https://www.tandfonline.com/doi/abs/10.1080/15536548.2005.10855760,http://dx.doi.org/10.1080/15536548.2005.10855760,,10.1080/15536548.2005.10855760,1997934611,,0,,2,false,, 026-696-579-759-886,Computed Dental Radiography Used to Reproduce Antemortem Film Position,1999-03-01,1999,journal article,Journal of forensic sciences,00221198,Wiley-Blackwell,United States,J. S. Hubar; Ronald F. Carr,"Visual comparison of conventional antemortem and postmortem dental radiographs is often included in forensic identification. Ten forensic cases employing dry mandibular and maxillary bones and a dry study skull were exposed using the CDR digital dental X-ray system developed by Schick Technologies, Inc. Exposures of 0.08s at 10 mA and 70 kVp were taken with an INTREX intraoral dental X-ray unit. Digital radiography has the ability to produce an image instantaneously, allowing an operator to retake an incorrectly aligned radiograph almost immediately. It gives the forensic scientist a simplified method for reproducing antemortem radiographic position more efficiently and often with greater accuracy than conventional radiography.",44,2,401,404,Dentistry; Skull; Dental radiography; Forensic identification; Digital radiography; Maxillary Bones; Orthodontics; Digital radiology; Conventional radiography; Radiography; Medicine,,"Forensic Dentistry/methods; Humans; Postmortem Changes; Radiography, Dental, Digital/methods; Signal Processing, Computer-Assisted",,,https://pubmed.ncbi.nlm.nih.gov/10097371/ https://www.astm.org/DIGITAL_LIBRARY/JOURNALS/FORENSIC/PAGES/JFS14473J.htm https://www.ncbi.nlm.nih.gov/pubmed/10097371,http://dx.doi.org/10.1520/jfs14473j,10097371,10.1520/jfs14473j,158065391,,0,006-304-126-615-045; 009-240-453-510-637; 064-700-443-343-475; 116-027-108-531-759; 130-781-276-719-576; 132-472-349-396-178; 135-735-499-961-276; 136-518-050-403-739,11,false,, 026-766-854-469-439,Information Retrieval From Internet Applications For Digital Forensic,2012-08-31,2012,journal article,"International Journal of Security, Privacy and Trust Management",22775498,Academy and Industry Research Collaboration Center (AIRCC),,Ipsita Mohanty; R. Leela Velusamy,"Advanced internet technologies providing services like e-mail, social networking, online banking, online shopping etc., have made day-to-day activities simple and convenient. Increasing dependency on the internet, convenience, and decreasing cost of electronic devices have resulted in frequent use of online services. However, increased indulgence over the internet has also accelerated the pace of digital crimes. The increase in number and complexity of digital crimes has caught the attention of forensic investigators. The Digital Investigators are faced with the challenge of gathering accurate digital evidence from as many sources as possible. In this paper, an attempt was made to recover digital evidence from a system's RAM in the form of information about the most recent browsing session of the user. Four different applications were chosen and the experiment was conducted across two browsers. It was found that crucial information about the target user such as, user name, passwords, etc., was recoverable.",1,3,15,30,Internet privacy; Password; The Internet; World Wide Web; Forensic science; Session (web analytics); Digital evidence; Computer science; Digital forensics; Pace; Frequent use,,,,,https://arxiv.org/pdf/1209.3590 https://ui.adsabs.harvard.edu/abs/2012arXiv1209.3590M/abstract https://arxiv.org/abs/1209.3590 https://core.ac.uk/display/24765074 http://arxiv.org/abs/1209.3590,http://dx.doi.org/10.5121/ijsptm.2012.1302,,10.5121/ijsptm.2012.1302,2033633358; 3100770702,,0,016-926-540-950-809; 037-483-791-552-006; 038-668-970-194-854; 039-774-603-243-832; 068-383-476-721-435; 109-603-269-791-542; 120-462-880-448-150; 123-516-057-579-584; 134-181-885-341-288; 136-745-511-009-321; 171-637-120-942-780,3,true,,green 026-774-296-742-022,Integrated digital forensic process model,,2013,journal article,Computers & Security,01674048,Elsevier BV,United Kingdom,Michael Köhn; Mariki M. Eloff; Jan H. P. Eloff,"Digital forensics is an established research and application field. Various process models exist describing the steps and processes to follow during digital forensic investigations. During such investigations, it is not only the digital evidence itself that needs to prevail in a court of law; the process followed and terminology used should also be rigorous and generally accepted within the digital forensic community. Different investigators have been refining their own investigative methods, resulting in a variety of digital forensic process models. This paper proposes a standardized Digital Forensic Process Model to aid investigators in following a uniform approach in digital forensic investigations.",38,,103,115,Variety (cybernetics); Data science; Digital forensic process; Digital evidence; Computer security; Computer science; Process (engineering); Computer forensics; Process modeling; Digital forensics,,,,,https://repository.up.ac.za/handle/2263/41922 https://dl.acm.org/citation.cfm?id=2622894 http://dx.doi.org/10.1016/j.cose.2013.05.001 https://www.sciencedirect.com/science/article/pii/S0167404813000849 https://dblp.uni-trier.de/db/journals/compsec/compsec38.html#KohnEE13 https://repository.up.ac.za/bitstream/2263/25433/1/dissertation.pdf https://dl.acm.org/doi/10.1016/j.cose.2013.05.001,http://dx.doi.org/10.1016/j.cose.2013.05.001,,10.1016/j.cose.2013.05.001,2110760901,,0,002-495-833-326-831; 020-944-423-224-895; 021-486-901-460-202; 021-850-998-857-676; 026-893-174-649-526; 031-234-153-523-379; 032-697-093-668-898; 034-916-306-834-918; 035-464-818-494-517; 037-789-654-228-885; 041-100-433-941-603; 047-630-600-014-492; 050-513-243-638-138; 074-014-335-505-388; 085-214-277-668-01X; 087-665-408-966-240; 111-741-773-111-021; 133-508-126-407-763; 134-927-490-231-285; 138-097-495-143-351; 140-821-103-436-654; 157-954-859-648-506; 159-477-048-665-066; 170-299-458-679-224; 179-881-224-143-743; 184-948-841-629-735; 190-065-821-748-92X; 199-172-967-270-034; 199-745-676-923-766,110,true,,green 026-828-038-317-200,Technology Corner Visualising Forensic Data: Evidence (Part 1),,2013,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Damian Schofield; Ken Fowle,"Visualisation is becoming increasingly important for understanding information, such as investigative data (for example: computing, medical and crime scene evidence) and analysis (for example: network capability assessment, data file reconstruction and planning scenarios). Investigative data visualisation is used to reconstruct a scene or item and is used to assist the viewer (who may well be a member of the general public with little or no understanding of the subject matter) to understand what is being presented. Analysis visualisations, on the other hand, are usually developed to review data, information and assess competing scenario hypotheses for those who usually have an understanding of the subject matter.   Visualisation represents information that has been digitally recorded (for example: pictures, video and sound), hand written and/or spoken data, to show what may have, could have, did happen or is believed to have happened. That is why visualising data is an important development in the analysis and investigation realms, as visualisation explores the accuracies, inconsistencies and discrepancies of the collected data and information.   This paper presents introduces some of the various graphical techniques and technology used to display digital information in a courtroom. The advantages and disadvantages involved in the implementation of this technology are also discussed. This paper is part one of a two part series that aims to describe the use of, and provide guidelines for, the use of graphical displays in courtrooms.",8,1,73,90,Data file; Crime scene; Data visualization; Data science; Statistical graphics; Subject matter; Visualization; Computer science; Multimedia; Computer graphics; Digital forensics,,,,,https://doi.org/10.15394/jdfsl.2013.1141 https://ro.ecu.edu.au/ecuworks2013/559/ https://core.ac.uk/display/41530605 https://research-repository.uwa.edu.au/en/publications/technology-corner-visualising-forensic-data-evidence-part-1 https://commons.erau.edu/cgi/viewcontent.cgi?article=1141&context=jdfsl https://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1559&context=ecuworks2013 https://dblp.uni-trier.de/db/journals/jdfsl/jdfsl8.html#Schofield13 https://research-repository.uwa.edu.au/en/publications/technology-corner-visualising-forensic-data-evidence-part-1(c9ce62f2-cf9e-4a9d-a322-5f6f9051d8a6)/export.html https://commons.erau.edu/jdfsl/vol8/iss1/4/ https://core.ac.uk/download/41530605.pdf,http://dx.doi.org/10.15394/jdfsl.2013.1141,,10.15394/jdfsl.2013.1141,783930876,,0,006-147-481-193-848; 006-235-266-433-570; 010-423-042-177-734; 010-776-638-956-310; 011-266-643-505-000; 011-500-992-597-292; 015-100-629-641-706; 020-202-179-993-592; 020-586-575-720-110; 026-876-385-709-061; 027-681-577-683-835; 035-006-796-654-12X; 050-034-746-610-825; 052-777-665-876-04X; 053-122-526-126-117; 053-882-233-294-91X; 058-523-110-758-515; 059-642-431-151-966; 069-555-512-168-003; 080-033-497-003-701; 087-307-809-242-788; 088-043-607-018-040; 088-400-884-660-771; 096-415-102-126-454; 105-722-396-170-542; 114-467-161-751-159; 122-923-448-139-246; 125-462-406-091-58X; 135-877-639-591-128; 140-858-447-005-005; 153-397-602-755-694; 166-111-907-375-073; 167-778-772-736-055; 177-965-894-694-179; 182-962-922-039-081,5,true,cc-by-nc,gold 026-831-743-825-769,DEEP: Extending the Digital Forensics Process Model for Criminal Investigations,2020-08-10,2020,journal article,ATHENS JOURNAL OF SCIENCES,22418466,Athens Institute for Education and Research ATINER,,Jan Collie; Richard E. Overill,"The importance of high quality, reliable forensic analysis –an issue that is central to the delivery of justice– has become a topic for marked debate with scientists, specialists and government bodies calling for improved standards and procedures. At the same time, Law Enforcement agencies are under pressure to cut the cost of criminal investigations. The detrimental impact that this has had on all forensic disciplines has been noted internationally, with the UK’s House of Lords warning that if the trend continues, crimes could go unsolved and miscarriages of justice may increase. The pivotal role that digital forensics plays in investigating and solving modern crimes is widely acknowledged: in Britain, the police estimate it features in 90% of cases. In fact, today’s law enforcement officers play a key part in the recovery, handling and automated processing of digital devices yet they are often poorly trained to do so. They are also left to interpret outputs, with the results being presented in court. This, it is argued, is a dangerous anomaly and points to a significant gap in the current, four-stage digital forensics process model (DFPM). This paper presents an extension to that model, the Digital Evidence Enhanced Process (DEEP), with the aim of fine-tuning the mechanism and ensuring that all digital evidence is scrutinised by a qualified digital forensics analyst. The consequence of adopting DEEP in actual criminal investigations will be to ensure that all digital evidence is analysed and evaluated to the highest professional and technical competency standards, resulting in the enhanced reliability of digital evidence presented in court which will serve the cause of justice in terms of reduced instances of associated unsafe convictions and/or unjustified exculpations.",7,4,225,240,Criminal investigation; Government; Political science; Justice (ethics); Quality (business); Law enforcement; Digital evidence; Public relations; Process (engineering); Digital forensics,,,,,http://oro.open.ac.uk/72738/ https://core.ac.uk/download/337616554.pdf,http://dx.doi.org/10.30958/ajs.7-4-3,,10.30958/ajs.7-4-3,3047867809,,0,000-659-280-122-390; 009-512-003-529-193; 010-963-610-208-920; 058-052-081-943-595; 061-269-967-405-492; 074-014-335-505-388; 075-529-701-912-32X; 090-752-043-508-733; 102-243-142-344-71X; 126-591-597-706-715,0,true,cc-by-nc,green 026-836-874-575-053,Analisis Forensik Solid State Drive (SSD) Menggunakan Framework Rapid Response,2019-10-08,2019,journal article,Jurnal Teknologi Informasi dan Ilmu Komputer,25286579; 23557699,Fakultas Ilmu Komputer Universitas Brawijaya,,Mahfudl Nasrulloh; Sunardi Sunardi; Riadi,"Teknologi komputer pada empat tahun terahir ini mengalami perkembangan yang pesat. Bersamaan dengan itu juga berdampak negatif salah satunya adalah berupa kejahatan komputer. Kejahatan komputer akan meninggalkan jejak aktivitas kejahatan, maka perlu dilakukan analisa dengan ilmu dan metode forensik untuk mendapatkan barang bukti. Bagaimana jika terjadi kejahatan komputer pada media penyimpanan komputer berjenis non-volatile memory dan dilakukan secara live forensik . Pada penelitian ini dilakukan proses forensik pada Solid State Drive (SSD) dengan framework Grr Rapid Response pada kasus kehilangan data (lost data) suatu organisasi. Langkah kerja forensik mengimplementasikan dari National Institute of Standards Technology (NIST). Framework Grr Rapid Response digunakan untuk memberikan tanggapan terhadap insiden forensik digital yang difokuskan pada lingkungan forensik jarak jauh, f ramework ini berbasis arsitektur client server . Hasil penelitian ini menunjukkan langkah kerja forensik NIST dapat diimplementasikan pada proses pengambilan bukti digital dengan metode akuisisi secara live forensik,  kemampuan tool forensik pada proses eksaminasi Grr Rapid Response pada Workstation ( Client Grr) dengan media simpan SSD , bukti digital dapat ditemukan dan dikembalikan. Bukti digital yang dapat dikembalikan berupa file dokumen, dan hasil validasi pada bukti digital tersebut memiliki nilai hash yang sama dari dua algoritma validasi bukti digital yang diimplementasikan, MD5 dan SHA-1. Sehingga hasil integritas dari dokumen tersebut menunjukkan bahwa bukti digital tersebut identik. Abstract Computer technology in the last four years has experienced rapid development. At the same time, it also has a negative impact, one of which is a computer crime. Computer crime will leave traces of criminal activity, so it is necessary to analyze with forensic science and methods to obtain evidence. What if there is a computer crime on a computer storage medium of a type of non-volatile memory and carried out live forensics In this study a forensic process on Solid State Drive (SSD) was carried out with the Grr Rapid Response framework for lost data in an organization. The forensic work step is implemented from the National Institute of Standards Technology (NIST). The Grr Rapid Response Framework is used to provide responses to incidents of digital forensics focused on remote forensic environments, this framework is based on a client server architecture. The results of this study indicate that NIST's forensic work steps can be implemented in the process of taking digital evidence with live forensic acquisition methods, the ability of forensic tools in the Grr Rapid Response examination process on Workstations (Client Grr) with SSD storage media, digital evidence can be found and returned. Digital evidence that can be returned is a document file, and the results of the validation of digital evidence have the same hash value from the two digital proof validation algorithms implemented, MD5 and SHA-1. So the results of the integrity of the document so that the digital evidence is identical.",6,5,509,518,,,,,,https://jtiik.ub.ac.id/index.php/jtiik/article/view/1516 https://www.mendeley.com/catalogue/025f2922-94c3-3caf-888e-7e4537f49d54/ https://jtiik.ub.ac.id/index.php/jtiik/article/download/1516/pdf https://core.ac.uk/download/pdf/290148872.pdf,http://dx.doi.org/10.25126/jtiik.2019651516,,10.25126/jtiik.2019651516,2979886871,,0,,1,true,cc-by-sa,gold 027-438-881-109-248,USB Storage Device Forensics for Windows 10,2017-07-18,2017,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Ayesha Arshad; Waseem Iqbal; Haider Abbas,"Significantly increased use of USB devices due to their user-friendliness and large storage capacities poses various threats for many users/companies in terms of data theft that becomes easier due to their efficient mobility. Investigations for such data theft activities would require gathering critical digital information capable of recovering digital forensics artifacts like date, time, and device information. This research gathers three sets of registry and logs data: first, before insertion; second, during insertion; and the third, after removal of a USB device. These sets are analyzed to gather evidentiary information from Registry and Windows Event log that helps in tracking a USB device. This research furthers the prior research on earlier versions of Microsoft Windows and compares it with latest Windows 10 system. Comparison of Windows 8 and Windows 10 does not show much difference except for new subkey under USB Key in registry. However, comparison of Windows 7 with latest version indicates significant variances.",63,3,856,867,Operating system; DLL Hell; Engineering; Windows Rally; Next-Generation Secure Computing Base; Commit charge; SYSTEM.INI; Microsoft Windows; Windows Vista; Server Message Block,Microsoft event log; Registry; USB forensics investigation; USB storage device; Windows 10 forensics; forensic science,,,,http://onlinelibrary.wiley.com/doi/10.1111/1556-4029.13596/abstract https://pubmed.ncbi.nlm.nih.gov/28718907/ https://www.ncbi.nlm.nih.gov/pubmed/28718907 https://europepmc.org/abstract/MED/28718907 https://onlinelibrary.wiley.com/doi/10.1111/1556-4029.13596 https://dialnet.unirioja.es/servlet/articulo?codigo=6433272,http://dx.doi.org/10.1111/1556-4029.13596,28718907,10.1111/1556-4029.13596,2737870796,,0,012-940-401-456-451; 018-697-434-245-678; 028-560-659-547-672; 043-230-303-743-607; 141-125-834-658-119,6,false,, 027-573-285-446-936,Maintaining Hard Disk Integrity With Digital Legal Professional Privilege (LPP) Data,,2013,journal article,IEEE Transactions on Information Forensics and Security,15566013; 15566021,Institute of Electrical and Electronics Engineers (IEEE),United States,Zoe Lin Jiang; Junbin Fang; Frank Y. W. Law; Pierre K. Y. Lai; Ricci S. C. Ieong; Michael Y. K. Kwan; Kam-Pui Chow; Lucas C. K. Hui; Siu-Ming Yiu; K. H. Pun,"The concept of legal professional privilege (LPP) in the Common Law is to enable a client to make full disclosure to his legal advisor for seeking advice without worrying that anything so disclosed will be used against him. Thus, some of the communications and documents between a legal advisor and his client can be excluded as evidence for prosecution. Protection of LPP information in the physical world is well addressed and proper procedures for handling LPP documents have been established. However, there does not exist a forensically sound procedure for protecting digital LPP information. In this correspondence, motivated by a real case of a commercial crime investigation, we introduce the LPP data integrity problem. While finding an ideal solution to solve the problem is difficult, we propose a practical solution that was adopted to solve the real case investigation. We also analyze the performance of our solution based on simulated data.",8,5,821,828,Full disclosure; Forensic science; Information protection policy; Common law; Legal professional privilege; Legislation; Electronic document; Data integrity; Computer security; Computer science; Computer forensics; Jurisprudence; Digital forensics,,,,,https://ieeexplore.ieee.org/document/6494289/ https://doi.org/10.1109/TIFS.2013.2256784 http://ieeexplore.ieee.org/document/6494289 https://dblp.uni-trier.de/db/journals/tifs/tifs8.html#JiangFLLIKCHYP13 https://core.ac.uk/download/38033432.pdf,http://dx.doi.org/10.1109/tifs.2013.2256784,,10.1109/tifs.2013.2256784,2064936519,,0,021-850-998-857-676; 059-210-387-604-18X; 060-650-561-577-338; 063-025-851-141-669; 117-239-595-156-183; 142-646-443-466-70X; 191-179-787-895-863,1,true,, 027-658-395-615-692,OpenLV: Empowering investigators and first-responders in the digital forensics process,,2014,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Timothy Vidas; Brian Kaplan; Matthew K. Geiger,"Abstract The continuing decline in the cost-per-megabyte of hard disk storage has inevitably led to a ballooning volume of data that needs to be reviewed in digital investigations. The result: case backlogs that commonly stretch for months at forensic labs, and per-case processing that occupies days or weeks of analytical effort. Yet speed is critical in situations where delay may render the evidence useless or endanger personal safety, such as when a suspect may flee, a victim is at risk, criminal tactics or control infrastructure may change, etc. In these and other cases, investigators need tools to enable quick triage of computer evidence in order to answer urgent questions, maintain the pace of an investigation and assess the likelihood of acquiring pertinent information from the device. This paper details the design and application of a tool, OpenLV, that not only meets the needs for speedy initial triage, but also can facilitate the review of digital evidence at later stages of investigation. With OpenLV, an investigator can quickly and safely interact with collected evidence, much as if they had sat down at the computer at the time the evidence was collected. Since OpenLV works without modifying the evidence, its use in triage does not preclude subsequent, in-depth forensic analysis. Unlike many popular forensics tools, OpenLV requires little training and facilitates a unprecedented level of interaction with the evidence.",11,,S45,S53,First responder; Triage; Pace; Suspect; Digital evidence; Computer security; Computer science; Process (engineering); Virtualization; Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S1742287614000115#! https://doi.org/10.1016/j.diin.2014.03.006 https://users.ece.cmu.edu/~tvidas/papers/DFRWSEU14.pdf https://www.sciencedirect.com/science/article/pii/S1742287614000115 https://core.ac.uk/display/82096948 https://core.ac.uk/download/pdf/82096948.pdf,http://dx.doi.org/10.1016/j.diin.2014.03.006,,10.1016/j.diin.2014.03.006,2059636126,,0,002-633-789-384-681; 004-260-804-798-107; 020-944-423-224-895; 032-286-659-568-014; 037-483-791-552-006; 038-668-970-194-854; 039-166-557-492-520; 047-630-600-014-492; 049-146-576-773-816; 049-313-374-093-607; 067-987-558-984-619; 081-458-407-971-603; 092-058-232-746-872; 094-295-279-676-447; 102-822-532-339-461; 142-884-607-464-932; 153-153-144-072-106; 167-592-705-831-583; 199-745-676-923-766,19,true,cc-by-nc-nd,hybrid 027-808-234-888-72X,An Approach for Validation of Digital Anti-Forensic Evidence,,2011,journal article,Information Security Journal: A Global Perspective,19393555; 19393547,Informa UK Limited,United Kingdom,Karthikeyan Shanmugam; Roger Powell; Thomas Owens,"e-crime is increasing and e-criminals are becoming better at masking their activities. The task of forensic data analysis is becoming more difficult and a systematic approach towards evidence validation is necessary. With no standard validation framework, the skills and interpretation of forensic examiners are unchecked. Standard practices in forensics have emerged in recent years, but none has addressed the development of a model of valid digital evidence. Various security and forensic models exist, but they do not address the validity of the digital evidence collected. Research has addressed the issues of validation and verification of forensic software tools but failed to address the validation of forensic evidence. The forensic evidence collected using forensic software tools can be questioned using an anti-forensic approach. The research presented in this paper is not intended to question the skills of forensic examiners in using forensic software tools but rather to guide forensic examiners to look at evidence in an anti-forensic way. This paper proposes a formal procedure to validate evidence of computer crime.",20,4,219,230,Forensic science; Data science; Software; Task (project management); Digital evidence; Computer security; Computer science; Masking (Electronic Health Record); Computer forensics,,,,,https://www.tandfonline.com/doi/full/10.1080/19393555.2011.604667 https://dblp.uni-trier.de/db/journals/isjgp/isjgp20.html#ShanmugamPO11 https://dl.acm.org/doi/10.1080/19393555.2011.604667,http://dx.doi.org/10.1080/19393555.2011.604667,,10.1080/19393555.2011.604667,1972019064,,0,007-532-413-242-967; 027-832-300-612-191; 037-423-792-391-123; 047-101-175-100-694; 050-044-888-092-612; 055-590-023-850-939; 062-049-901-374-904; 062-217-186-853-075; 078-598-867-814-365; 085-092-969-969-072; 118-969-096-928-979; 131-161-724-039-419; 136-745-511-009-321; 145-002-823-706-838; 161-074-241-095-611; 182-962-922-039-081; 192-741-199-953-58X,6,false,, 028-034-242-516-483,The Forensic Curator: Digital Forensics as a Solution to Addressing the Curatorial Challenges Posed by Personal Digital Archives,2012-10-23,2012,journal article,International Journal of Digital Curation,17468256,Edinburgh University Library,,Gareth Knight,"The growth of computing technology during the previous three decades has resulted in a large amount of content being created in digital form. As their creators retire or pass away, an increasing number of personal data collections, in the form of digital media and complete computer systems, are being offered to the academic institutional archive. For the digital curator or archivist, the handling and processing of such digital material represents a considerable challenge, requiring development of new processes and procedures. This paper outlines how digital forensic methods, developed by the law enforcement and legal community, may be applied by academic digital archives. It goes on to describe the strategic and practical decisions that should be made to introduce forensic methods within an existing curatorial infrastructure and how different techniques, such as forensic hashing, timeline analysis and data carving, may be used to collect information of a greater breadth and scope than may be gathered through manual activities.",7,2,40,63,World Wide Web; Digital media; Carving; Archivist; Law enforcement; Scope (project management); Computer science; Timeline; Computer forensics; Digital forensics,,,,,https://doi.org/10.2218/ijdc.v7i2.228 https://researchonline.lshtm.ac.uk/id/eprint/2192853/ http://doi.org/10.2218/ijdc.v7i2.228 https://core.ac.uk/display/42633111 http://www.ijdc.net/article/view/218 https://paperity.org/p/275612301/the-forensic-curator-digital-forensics-as-a-solution-to-addressing-the-curatorial https://dblp.uni-trier.de/db/journals/ijdc/ijdc7.html#Knight12a https://core.ac.uk/download/42633111.pdf,http://dx.doi.org/10.2218/ijdc.v7i2.228,,10.2218/ijdc.v7i2.228,2127988978,,0,019-698-064-288-240; 032-192-641-675-455; 037-647-066-964-858; 038-668-970-194-854; 061-326-248-978-030; 089-550-797-690-956; 132-355-634-397-986; 142-884-607-464-932; 164-812-767-509-816; 170-299-458-679-224; 182-420-694-496-099,2,true,cc-by,gold 028-144-125-400-817,Digital investigations: relevance and confidence in disclosure,2021-09-21,2021,journal article,ERA Forum,18639038; 16123093,Springer Verlag,Germany,Philip Anderson; Dave Sampson; Seanpaul Gilroy,"The field of digital forensics has grown exponentially to include a variety of digital devices on which digitally stored information can be processed and used for different types of crimes. As a result, as this growth continues, new challenges for those conducting digital forensic examinations emerge. Digital forensics has become mainstream and grown in importance in situations where digital devices used in the commission of a crime need examining. This article reviews existing literature and highlights the challenges while exploring the lifecycle of a mobile phone examination and how the disclosure and admissibility of digital evidence develops.",,,1,13,Variety (cybernetics); Data science; Mobile phone; Mainstream; Transparency (behavior); Digital evidence; Field (computer science); Digital forensics; Relevance (information retrieval),,,,,https://researchportal.northumbria.ac.uk/en/publications/digital-investigations-relevance-and-confidence-in-disclosure https://link.springer.com/content/pdf/10.1007/s12027-021-00687-1.pdf https://link.springer.com/article/10.1007/s12027-021-00687-1 https://paperity.org/p/272916707/digital-investigations-relevance-and-confidence-in-disclosure,https://researchportal.northumbria.ac.uk/en/publications/digital-investigations-relevance-and-confidence-in-disclosure,,,3199727879,,0,009-284-801-057-774; 015-537-092-918-913; 018-093-184-946-852; 048-141-687-795-752; 050-618-920-212-97X; 074-614-672-576-143; 088-938-096-763-07X; 094-468-232-325-36X; 167-751-222-897-487; 194-940-035-354-905,0,false,, 028-180-038-189-484,Digital Forensics and Cyber Crime Datamining,,2012,journal article,Journal of Information Security,21531234; 21531242,"Scientific Research Publishing, Inc.",,K. K. Sindhu; Bandu B. Meshram,"Digital forensics is the science of identifying, extracting, analyzing and presenting the digital evidence that has been stored in the digital devices. Various digital tools and techniques are being used to achieve this. Our paper explains forensic analysis steps in the storage media, hidden data analysis in the file system, network forensic methods and cyber crime data mining. This paper proposes a new tool which is the combination of digital forensic investigation and crime data mining. The proposed system is designed for finding motive, pattern of cyber attacks and counts of attacks types happened during a period. Hence the proposed tool enables the system administrators to minimize the system vulnerability.",3,3,196,201,Data mining; File system; Digital evidence; Hidden data; Cyber crime; Digital forensic investigation; Computer security; Computer science; Computer forensics; Digital forensics; Vulnerability (computing),,,,,http://doi.org/10.4236/jis.2012.33024 http://dx.doi.org/10.4236/jis.2012.33024 https://doi.org/10.4236/jis.2012.33024 https://file.scirp.org/Html/3-7800083_21340.htm https://m.scirp.org/papers/21340 https://www.scirp.org/Journal/PaperInformation.aspx?paperID=21340 https://file.scirp.org/pdf/JIS20120300002_13729911.pdf https://www.scirp.org/Journal/PaperDownload.aspx?paperID=21340 http://www.scirp.org/Journal/PaperInformation.aspx?paperID=21340 https://dblp.uni-trier.de/db/journals/jisec/jisec3.html#SindhuM12,http://dx.doi.org/10.4236/jis.2012.33024,,10.4236/jis.2012.33024,1982246970,,0,007-832-595-971-443; 019-698-064-288-240; 055-425-122-624-954; 085-214-277-668-01X; 101-944-590-282-271; 117-626-618-645-095; 136-947-053-479-806; 139-567-850-350-938; 159-584-170-360-868; 177-597-414-067-285,28,true,,gold 028-254-822-298-261,The Feasibility of Creating a Universal Digital Forensics Framework,2019-08-05,2019,journal article,"Forensic, Legal & Investigative Sciences",2473733x,Herald Scholarly Open Access,,Gareth Davies; Kim Smith,,5,1,1,9,Computer science; Multimedia; Digital forensics,,,,,http://dx.doi.org/10.24966/flis-733x/100027,http://dx.doi.org/10.24966/flis-733x/100027,,10.24966/flis-733x/100027,2969490955,,0,,0,true,cc-by,gold 028-274-575-795-698,A glance at digital forensic academic research demographics.,2020-06-18,2020,journal article,Science & justice : journal of the Forensic Science Society,18764452; 13550306,Forensic Science Society,United Kingdom,Graeme Horsman; Aney Biju Mammen,"Abstract Whilst the field of digital forensics is now well established, its research community can be considered relatively emerging in comparison to the associated areas of traditional forensic and computer sciences. As a result, this comment article takes a quick look at the demographics of digital forensics research over the last 20 years, with metadata from 6589 articles being extracted and analysed from Scopus in order to provide a brief insight into this field’s research activity.",60,5,399,402,Data science; Demographics; Research community; Field (computer science); Scopus; Digital forensics; Metadata,Digital Forensics; Forensics; Publication; Research,Computers; Demography; Forensic Medicine; Forensic Sciences; Humans,,,https://research.tees.ac.uk/en/publications/a-glance-at-digital-forensic-academic-research-demographics https://www.sciencedirect.com/science/article/abs/pii/S1355030620301623 https://www.ncbi.nlm.nih.gov/pubmed/32873378,http://dx.doi.org/10.1016/j.scijus.2020.06.003,32873378,10.1016/j.scijus.2020.06.003,3036329069,,0,006-933-430-647-14X; 070-665-150-453-490; 078-327-902-374-330; 087-950-081-760-226,1,false,, 028-290-062-141-840,Cloud Forensic Technical Challenges and Solutions: A Snapshot,,2014,journal article,IEEE Cloud Computing,23256095,Institute of Electrical and Electronics Engineers (IEEE),United States,Ben Martini; Kim-Kwang Raymond Choo,"As cloud computing becomes more prevalent, there is a growing need for forensic investigations involving cloud technologies. The field of cloud forensics seeks to address the challenges to digital forensics presented by cloud technologies. This article reviews current research in the field of cloud forensics, with a focus on ""forensics in the cloud""--that is, cloud computing as an evidence source for forensic investigations.",1,4,20,25,Digital forensics cloud computing; Cloud forensics; Computer security; Computer science; Snapshot (computer storage); Cloud computing; Digital forensics; Server,,,,,http://dblp.uni-trier.de/db/journals/cloudcomp/cloudcomp1.html#MartiniC14 https://doi.org/10.1109/MCC.2014.69 http://ieeexplore.ieee.org/document/7057622/ https://www.computer.org/csdl/mags/cd/2014/04/mcd2014040020.pdf https://dblp.uni-trier.de/db/journals/cloudcomp/cloudcomp1.html#MartiniC14 https://ieeexplore.ieee.org/abstract/document/7057622,http://dx.doi.org/10.1109/mcc.2014.69,,10.1109/mcc.2014.69,2034493311,,0,000-087-695-314-553; 002-768-711-065-857; 007-803-508-283-309; 016-817-717-158-92X; 024-894-908-869-686; 025-723-055-730-999; 027-158-847-348-062; 028-041-981-721-013; 030-658-837-957-277; 041-879-975-858-398; 042-603-990-097-418; 045-701-748-075-614; 051-368-118-380-383; 056-205-328-777-528; 058-631-300-195-90X; 061-960-915-134-527; 068-459-443-764-162; 095-691-114-276-825; 116-056-471-784-278; 120-283-434-693-435; 121-704-965-852-836; 122-269-963-751-911; 130-093-060-692-651; 136-798-153-498-59X; 144-124-797-675-052; 185-535-557-419-117,41,false,, 028-399-721-856-065,Digital evidence exceptionalism? A review and discussion of conceptual hurdles in digital evidence transformation.,2020-08-28,2020,journal article,Forensic science international. Synergy,2589871x,Elsevier BV,Netherlands,Alex Biedermann; Kyriakos N. Kotsoglou,"Forensic science is currently undergoing a transformation and expansion to include modern types of evidence, such as evidence generated by digital investigations. This development is said to raise a series of challenges, both in operational and conceptual dimensions. This paper reviews and discusses a series of convoluted conceptual hurdles that are encountered in connection with the use of digital evidence as part of evidence and proof processes at trial, in contradistinction to investigative uses of such types of evidence. As a recent example raising such hurdles, we analyse and discuss assertions and proposals made in the article ""Digital Evidence Certainty Descriptors (DECDs)"" by Graeme Horsman (32 Forensic Science International: Digital Investigation (2020) 200896).",2,,262,274,Political science; Exceptionalism; Digital evidence; Weight of evidence; Engineering ethics; Certainty,Digital evidence; Evaluative reporting; Probability; Weight of evidence,,,Schweizerischer Nationalfonds zur Förderung der Wissenschaftlichen Forschung,https://www.ncbi.nlm.nih.gov/pubmed/32944711 https://serval.unil.ch/resource/serval:BIB_2D70F52A6C50.P001/REF.pdf https://pubmed.ncbi.nlm.nih.gov/32944711/ https://serval.unil.ch/en/notice/serval:BIB_2D70F52A6C50 https://researchportal.northumbria.ac.uk/en/publications/digital-evidence-exceptionalism-a-review-and-discussion-of-concep https://www.sciencedirect.com/science/article/pii/S2589871X2030053X https://core.ac.uk/download/334593742.pdf,http://dx.doi.org/10.1016/j.fsisyn.2020.08.004,32944711,10.1016/j.fsisyn.2020.08.004,3081942181,PMC7481130,0,000-178-375-284-248; 000-680-610-076-187; 001-794-049-244-772; 004-244-530-471-560; 007-545-564-801-255; 009-803-691-567-926; 013-430-618-958-58X; 014-401-428-086-120; 015-238-949-406-002; 016-976-912-187-206; 017-053-145-452-574; 017-532-588-960-752; 017-646-033-380-522; 017-676-770-095-833; 020-867-396-119-347; 022-799-618-827-180; 026-831-936-435-919; 026-943-588-349-358; 028-568-241-747-171; 030-561-874-846-524; 031-488-685-515-070; 038-406-981-485-542; 038-927-473-835-01X; 040-382-558-131-008; 043-832-112-590-677; 044-895-263-937-02X; 046-469-721-997-646; 049-861-007-939-866; 055-601-228-676-162; 056-285-104-372-145; 058-717-000-287-105; 060-224-586-183-448; 060-336-293-255-723; 064-107-009-692-27X; 073-790-480-897-758; 076-459-003-064-111; 079-046-994-186-390; 079-152-497-703-763; 081-453-315-841-69X; 085-370-444-410-812; 086-687-838-854-880; 088-306-589-450-500; 089-973-732-045-205; 093-053-768-366-548; 096-423-057-147-490; 099-407-105-258-080; 101-549-415-202-81X; 101-660-041-166-10X; 105-127-902-669-64X; 111-590-691-227-607; 117-555-147-368-574; 119-850-082-064-135; 146-400-282-561-102; 151-795-409-748-215; 152-902-067-717-677; 155-902-134-782-014; 159-382-983-272-683; 163-535-540-190-872; 173-145-269-859-717; 190-320-022-663-482,3,true,"CC BY, CC BY-NC-ND",gold 028-656-707-596-927,Privacy-preserving email forensics,,2015,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Frederik Armknecht; Andreas Dewald,"In many digital forensic investigations, email data needs to be analyzed. However, this poses a threat to the privacy of the individual whose emails are being examined and in particular becomes a problem if the investigation clashes with privacy laws. This is commonly addressed by allowing the investigator to run keyword searches and to reveal only those emails that contain at least some of the keywords. While this could be realized with standard cryptographic techniques, further requirements are present that call for novel solutions: (i) for investigation-tactical reasons the investigator should be able to keep the search terms secret and (ii) for efficiency reasons no regular interaction should be required between the investigator and the data owner. We close this gap by introducing a novel cryptographic scheme that allows to encrypt entire email boxes before handing them over for investigation. The key feature is that the investigator can non-interactively run keyword searches on the encrypted data and decrypt those emails (and only those) for which a configurable number of matches occurred. Our implementation as a plug-in for a standard forensic framework confirms the practical applicability of the approach.",14,,S127,S136,Dictionary attack; Encryption; Privacy laws of the United States; Cryptography; Key (cryptography); Scheme (programming language); Computer security; Feature (machine learning); Computer science; Digital forensics,,,,,https://dl.acm.org/doi/10.1016/j.diin.2015.05.003 https://doi.org/10.1016/j.diin.2015.05.003 https://madoc.bib.uni-mannheim.de/58940/ https://dblp.uni-trier.de/db/journals/di/di14.html#ArmknechtD15 https://core.ac.uk/display/82223728 https://www.sciencedirect.com/science/article/pii/S1742287615000481 https://core.ac.uk/download/pdf/82223728.pdf,http://dx.doi.org/10.1016/j.diin.2015.05.003,,10.1016/j.diin.2015.05.003,1458597112,,0,000-262-148-303-383; 003-148-232-365-149; 005-562-210-668-153; 009-701-742-236-493; 019-831-293-743-518; 026-552-102-453-350; 030-682-441-981-123; 035-877-258-121-493; 036-761-554-539-335; 042-899-662-274-361; 043-577-777-308-888; 050-308-742-156-878; 056-948-462-432-827; 063-278-462-775-305; 065-302-661-316-398; 072-007-911-851-839; 073-278-265-810-776; 083-007-771-970-738; 085-214-277-668-01X; 099-932-436-097-395; 134-443-873-876-071; 145-002-823-706-838; 150-313-223-289-945; 181-095-475-426-346; 198-865-562-521-769,18,true,cc-by-nc-nd,hybrid 028-659-014-565-320,Science Column: Reconstruction: The Experimental Side of Digital Forensics,,2013,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Fred Cohen,Many in digital forensics seem to forget that the science part of digital forensics means experimentation and that implies a whole lot of things that most practitioners never learned. (see PDF for full column),8,4,49,56,Column (database); Computer security; Computer science; Digital forensics,,,,,https://core.ac.uk/display/92189626 https://dblp.uni-trier.de/db/journals/jdfsl/jdfsl8.html#Cohen13a https://commons.erau.edu/jdfsl/vol8/iss4/3/ https://doaj.org/article/02612ed83f68498ab3c56377b490d9d7 https://commons.erau.edu/cgi/viewcontent.cgi?article=1155&context=jdfsl https://oaji.net/articles/2014/1095-1408891324.pdf,http://dx.doi.org/10.15394/jdfsl.2013.1155,,10.15394/jdfsl.2013.1155,1583161680,,0,,0,true,cc-by-nc,gold 028-703-682-549-92X,Instrumen Evaluasi Framework Investigasi Forensika Digital Menggunakan SNI 27037:2014,2016-11-07,2016,journal article,JISKA (Jurnal Informatika Sunan Kalijaga),25280074; 25275836,Al-Jamiah Research Centre,,Didik Sudyana; Bambang Sugiantoro; Ahmad Luthfi,"Hal penting yang harus diperhatikan oleh setiap petugas investigator forensika digital dalam menjalankan aktivitas forensika digital adalah diikutinya setiap tahapan dan prosedur dalam forensika digital. Tahapan tersebut dikenal dengan istilah framework s ataupun SOP investigasi. Tahapan dalam proses forensika digital harus sesuai dengan aturan hukum dan juga mekanisme yang tepat.  Namun framework investigasi yang berkembang saat ini ternyata masih terdapat kekurangan dimana ada tahapan-tahapan yang diatur dalam standar yang berlaku seperti SNI 27037:2014, ternyata tidak diatur dalam framework tersebut. Sehingga ketika tahapan tersebut terlewatkan dalam proses investigasi, tentu akan menjadi sebuah masalah dan bisa digugat di pengadilan serta dibatalkannya hasil investigasi yang dilakukan terkait adanya prosedur yang tidak dilaksanakan. Oleh karena itu dilakukan penelitian dengan melakukan identifikasi terhadap ketentuan dan proses penting dalam dokumen SNI 27037:2014 untuk kemudian menghasilkan instrument evaluasi yang dapat digunakan oleh penyidik atau praktisi forensika digital untuk melakukan penyesuaian atau evaluasi terhadap framework yang digunakan selama ini.",1,2,75,83,,,,,,http://ejournal.uin-suka.ac.id/saintek/JISKA/article/download/1116/1017 https://ejournal.uin-suka.ac.id/saintek/JISKA/article/view/12-03 https://core.ac.uk/download/267117320.pdf,http://dx.doi.org/10.14421/jiska.2016.12-03,,10.14421/jiska.2016.12-03,2993500824,,0,,1,true,cc-by-nc,gold 028-874-299-732-939,A Proposed Digital Forensics Business Model to Support Cybercrime Investigation in Indonesia,2015-10-08,2015,journal article,International Journal of Computer Network and Information Security,20749090; 20749104,MECS Publisher,,Yudi Prayudi; Ahmad Ashari; Tri Kuntoro Priyambodo,"Digital forensics will always include at least human as the one who performs activities, digital evidence as the main object, and process as a reference for the activities followed. The existing framework has not provided a description of the interaction between human, interaction between human and digital evidence, as well as interaction between human and the process itself. A business model approach can be done to provide the idea regarding the interaction in question. In this case, what has been generated by the author in the previous study through a business model of the digital chain of custody becomes the first step in constructing a business model of a digital forensics. In principle, the proposed business model already accommodates major components of digital forensics (human, digital evidence, process) and also considers the interactions among the components. The business model suggested has contained several basic principles as described in The Regulation of Chief of Indonesian National Police (Perkap) No 10/2010. This will give support to law enforcement to deal with cybercrime cases that are more frequent and more sophisticated, and can be a reference for each institution and organization to implement digital forensics activities.",7,11,1,8,Chain of custody; Cybercrime; Law enforcement; Digital evidence; Computer security; Computer science; Business model; Process (engineering); Computer forensics; Digital forensics,,,,,http://www.mecs-press.org/ijcnis/ijcnis-v7-n11/IJCNIS-V7-N11-1.pdf http://www.mecs-press.org/ijcnis/ijcnis-v7-n11/v7n11-1.html,http://dx.doi.org/10.5815/ijcnis.2015.11.01,,10.5815/ijcnis.2015.11.01,2106442285,,0,004-872-169-627-620; 020-944-423-224-895; 025-697-732-683-864; 026-774-296-742-022; 029-043-587-641-360; 035-565-993-122-262; 038-668-970-194-854; 040-772-996-011-165; 045-458-395-510-15X; 066-219-211-495-201; 067-950-012-629-210; 068-199-942-987-426; 074-059-805-644-745; 074-869-044-681-879; 078-730-781-174-18X; 079-608-463-065-647; 082-073-790-023-516; 093-778-033-321-400; 094-014-111-514-467; 097-475-798-512-089; 109-480-920-508-017; 111-090-978-711-139; 124-066-378-359-073; 125-384-800-661-375; 133-397-275-695-990; 134-927-490-231-285; 170-299-458-679-224; 192-955-966-543-738; 199-745-676-923-766,17,true,,bronze 029-025-254-650-825,Digital Forensics Tools,2019-12-30,2019,journal article,International Journal of Engineering and Advanced Technology,22498958,Blue Eyes Intelligence Engineering and Sciences Engineering and Sciences Publication - BEIESP,,Vedanta Kapoor; Sanya Taneja; Kakelli Anil Kumar,In this paper we will we reviewing the basic fundamentals of digital forensics and all go through the various types of forensics investigation teams available to us. We will also discuss about the different types of digital crimes that take place and the various tools present in order to counteract the crimes that are being committed. There will also be a comparative review among all the tools present based on various factors present giving the reader an abstract view about which tool to use for the best type of results.,9,2,3965,3969,,,,,,,http://dx.doi.org/10.35940/ijeat.b3980.129219,,10.35940/ijeat.b3980.129219,,,0,,0,true,,gold 029-046-626-135-174,Effect of common fingerprint detection techniques on subsequent STR profiling,,2011,journal article,Forensic Science International: Genetics Supplement Series,18751768,Elsevier BV,Netherlands,Bryan Bhoelai; Bas J. de Jong; Marcel de Puit; Titia Sijen,,3,1,e429,e430,Molecular biology; Fingerprint; Safranin; Ninhydrin; DNA Contamination; Fingerprint detection; Chromatography; DNA; Staining; DNA profiling; Biology,,,,,https://www.fsigeneticssup.com/article/S1875-1768(11)00215-0/fulltext https://www.fsigeneticssup.com/article/S1875-1768(11)00215-0/pdf https://www.ifm.liu.se/edu/coursescms/TFKI18/literature/Bhoelai-2011.pdf https://www.sciencedirect.com/science/article/abs/pii/S1875176811002150 http://www.sciencedirect.com/science/article/pii/S1875176811002150,http://dx.doi.org/10.1016/j.fsigss.2011.09.076,,10.1016/j.fsigss.2011.09.076,2166828564,,0,054-138-670-884-484; 087-296-219-841-229,32,false,, 029-200-392-412-396,Practical and Legal Challenges of Cloud Investigations,2014-12-31,2014,journal article,"The Journal of the Institute of Webcasting, Internet and Telecommunication",22890238,"The Institute of Webcasting, Internet and Telecommunication",,Joshua I. James; Yunsik Jake Jang,"An area presenting new opportunities for both legitimate business, as well as criminal organizations, is Cloud computing. This work gives a strong background in current digital forensic science, as well as a basic understanding of the goal of Law Enforcement when conducting digital forensic investigations. These concepts are then applied to digital forensic investigation of cloud environments in both theory and practice, and supplemented with current literature on the subject. Finally, legal challenges with digital forensic investigations in cloud environments are discussed.",14,6,33,39,Work (electrical); Data science; Law enforcement; Digital forensic investigation; Computer security; Computer science; Computer forensics; Cloud computing; Digital forensics; Key (cryptography); Subject (documents); Digital evidence; Cloud forensics,,,,,https://arxiv.org/pdf/1502.01133.pdf https://ui.adsabs.harvard.edu/abs/2015arXiv150201133J/abstract https://www.arxiv.org/abs/1502.01133 http://arxiv.org/abs/1502.01133,http://dx.doi.org/10.7236/jiibc.2014.14.6.33,,10.7236/jiibc.2014.14.6.33,2001577875; 3101178665,,0,022-818-830-693-539; 043-386-830-253-686; 059-002-926-336-692; 059-697-278-686-056; 124-912-663-881-389; 152-143-492-651-125; 163-856-773-893-859; 173-952-459-161-812,6,true,,green 029-268-367-041-280,Automated inference of past action instances in digital investigations,2014-07-01,2014,journal article,International Journal of Information Security,16155262; 16155270,Springer Science and Business Media LLC,Germany,Joshua I. James; Pavel Gladyshev,"As the amount of digital devices suspected of containing digital evidence increases, case backlogs for digital investigations are also increasing in many organizations. To ensure timely investigation of requests, this work proposes the use of signature-based methods for automated action instance approximation to automatically reconstruct past user activities within a compromised or suspect system. This work specifically explores how multiple instances of a user action may be detected using signature-based methods during a postmortem digital forensic analysis. A system is formally defined as a set of objects, where a subset of objects may be altered on the occurrence of an action. A novel action-trace update time threshold is proposed that enables objects to be categorized by their respective update patterns over time. By integrating time into event reconstruction, the most recent action instance approximation as well as limited past instances of the action may be differentiated and their time values approximated. After the formal theory if signature-based event reconstruction is defined, a case study is given to evaluate the practicality of the proposed method.",14,3,249,261,Data mining; Theory; Signature (logic); Cryptography; Event reconstruction; Inference; Action (philosophy); Digital evidence; Computer science; Digital forensics; Set (abstract data type),,,,,https://dblp.uni-trier.de/db/journals/ijisec/ijisec14.html#JamesG15 https://arxiv.org/abs/1407.5714 https://core.ac.uk/display/25044554 https://link.springer.com/article/10.1007/s10207-014-0249-6 https://rd.springer.com/article/10.1007/s10207-014-0249-6 https://dblp.uni-trier.de/db/journals/corr/corr1407.html#JamesG14 https://doi.org/10.1007/s10207-014-0249-6 https://link.springer.com/article/10.1007/s10207-014-0249-6/fulltext.html http://arxiv.org/abs/1407.5714,http://dx.doi.org/10.1007/s10207-014-0249-6,,10.1007/s10207-014-0249-6,2160266583; 3100399861,,0,001-829-135-644-040; 007-832-595-971-443; 013-441-842-090-74X; 015-995-636-621-324; 037-105-622-240-257; 045-439-795-806-132; 062-032-128-092-406; 064-988-327-019-067; 073-847-291-567-156; 080-609-913-435-255; 083-366-581-383-158; 087-690-831-820-163; 094-295-279-676-447; 111-471-986-310-852; 133-197-850-732-190; 134-927-490-231-285,21,true,,green 029-421-646-146-286,The Theory of Information and Computer Provision of Forensic Activity as the Basis of Innovative Development of Forensic Science in the Conditions of Digitalization,2020-06-15,2020,journal article,Legal Science in China and Russia,25879723,Kutafin Moscow State Law University,,E. R. Rossinskay,,,3,115,119,Engineering; Forensic science; Engineering ethics,,,,,https://chiruslaw.elpub.ru/jour/article/viewFile/23/23,http://dx.doi.org/10.17803/2587-9723.2020.3.115-119,,10.17803/2587-9723.2020.3.115-119,3035071703,,0,127-686-813-769-023; 131-166-072-114-710,1,true,cc-by,hybrid 029-686-297-425-327,Detection of inter-frame forgeries in digital videos.,2018-05-26,2018,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,K. Sitara; Babu M. Mehtre,,289,,186,206,Zoom; Frame (networking); Artificial intelligence; Shuffling; Computer vision; Inter frame; Computer science; Rest (physics); Event (computing); False positive paradox; Data compression,Digital multimedia forensics; Video anti-forensics; Video compression; Video forensics; Video forgery; Video tampering detection,,,GOP structure,https://europepmc.org/article/MED/29894923 https://www.sciencedirect.com/science/article/abs/pii/S0379073818302809 http://www.sciencedirect.com/science/article/pii/S0379073818302809 https://www.sciencedirect.com/science/article/pii/S0379073818302809#!,http://dx.doi.org/10.1016/j.forsciint.2018.04.056,29894923,10.1016/j.forsciint.2018.04.056,2803129486,,0,000-679-477-475-489; 004-454-686-543-933; 006-066-260-482-289; 008-543-630-968-22X; 016-077-398-922-212; 016-145-301-135-450; 016-183-275-816-304; 016-980-274-634-092; 017-589-130-722-16X; 017-826-560-912-576; 022-297-088-924-425; 022-766-835-371-983; 025-613-105-756-285; 026-163-602-249-656; 027-083-618-870-750; 027-527-644-893-782; 027-897-902-068-979; 029-151-741-190-472; 029-331-903-414-060; 030-797-085-560-938; 032-151-005-529-157; 032-362-262-096-276; 036-415-084-882-283; 037-680-775-427-216; 039-997-077-156-824; 042-565-172-176-961; 043-541-517-984-519; 047-624-181-866-904; 053-637-494-162-668; 060-826-481-716-218; 061-073-654-192-268; 062-781-051-017-106; 063-532-297-436-449; 064-927-034-471-405; 065-559-221-714-29X; 067-504-974-724-040; 074-302-952-168-459; 077-323-690-290-738; 080-118-922-891-58X; 080-219-450-393-218; 081-645-420-395-35X; 083-091-575-566-417; 083-230-211-800-097; 085-816-961-933-906; 093-350-254-783-353; 096-289-706-423-826; 098-440-015-522-27X; 100-880-837-233-791; 102-360-837-793-397; 122-276-883-832-311; 125-908-242-290-315; 140-408-113-219-371; 150-115-527-453-516; 152-832-145-694-001; 159-524-792-135-812; 171-816-823-359-94X,13,false,, 029-713-997-802-761,Estimation of sex from the metric assessment of digital hand radiographs in a Western Australian population,2014-09-16,2014,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Rebecca DeSilva; Ambika Flavel; Daniel Franklin,,244,244,314.e1,7,Sexual dimorphism; Anatomy; Statistics; Metric (unit); Forensic anthropology; Geography; Appendicular skeleton; Population; Radiography; Discriminant function analysis; Estimation,Forensic anthropology population data; Hand bone measurements; Population standards; Sex discrimination; Sexual dimorphism,Adolescent; Adult; Aged; Australia; Discriminant Analysis; Finger Phalanges/anatomy & histology; Forensic Anthropology; Humans; Metacarpal Bones/anatomy & histology; Middle Aged; Sex Determination by Skeleton/methods; Young Adult,,,https://research-repository.uwa.edu.au/en/publications/estimation-of-sex-from-the-metric-assessment-of-digital-hand-radi https://europepmc.org/article/MED/25263690 http://www.sciencedirect.com/science/article/pii/S0379073814003430 https://www.sciencedirect.com/science/article/pii/S0379073814003430 http://www.ncbi.nlm.nih.gov/pubmed/25263690,http://dx.doi.org/10.1016/j.forsciint.2014.08.019,25263690,10.1016/j.forsciint.2014.08.019,2152657851,,0,002-261-304-397-560; 007-135-955-034-661; 007-790-606-175-010; 008-979-078-658-769; 009-212-923-567-518; 009-627-859-626-046; 009-688-178-200-882; 011-214-809-963-163; 014-109-799-221-020; 015-089-871-459-430; 019-395-681-162-899; 021-228-661-656-393; 023-292-608-737-943; 024-619-739-816-252; 024-978-671-278-201; 028-293-803-528-502; 029-251-445-186-776; 034-801-697-417-280; 034-803-999-822-424; 041-885-061-169-474; 045-014-687-924-285; 051-681-094-969-003; 056-720-508-670-425; 059-508-172-390-622; 060-518-556-275-767; 064-653-759-333-928; 070-342-990-188-152; 081-683-292-310-557; 085-411-973-730-65X; 087-039-017-884-290; 087-351-485-660-85X; 098-904-499-621-540; 099-119-987-641-973; 102-373-890-825-039; 107-311-830-340-732; 114-112-752-476-459; 122-774-592-696-585; 129-141-063-336-597; 129-278-379-106-365; 138-010-225-853-391; 149-695-343-063-781; 161-199-308-271-763; 171-524-746-880-031,25,false,, 030-031-636-555-061,"Analysis on unidentified cases in which dental information was collected from 2014 to 2019 in Miyagi Prefecture, Japan.",2022-01-10,2022,journal article,"Legal medicine (Tokyo, Japan)",18734162; 13446223,Elsevier,Netherlands,Moe Kosaka; Yuka Hatano; Kie Yoshida; Khongorzul Tsogtsaikhan; Isuruni Kuruppuarachchige; Toshihiko Suzuki,,55,,102015,102015,Medicine; Demography; Identification (biology); Age groups; Statistical analysis; Dentistry; Statistics; Botany; Mathematics; Sociology; Biology,Autopsy; Dental identification; Forensic odontology; Japan; Miyagi prefecture,"Adolescent; Aged, 80 and over; Autopsy; Databases, Factual; Female; Forensic Medicine; Humans; Japan; Male; Surveys and Questionnaires",,,,http://dx.doi.org/10.1016/j.legalmed.2022.102015,35093787,10.1016/j.legalmed.2022.102015,,,0,003-298-351-894-768; 009-032-611-393-776; 026-863-223-435-130; 028-313-003-380-373; 028-929-527-559-847; 041-000-684-146-868; 041-053-770-651-587; 042-755-502-015-560; 043-543-201-722-562; 045-041-636-567-613; 053-603-321-932-702; 053-706-643-522-468; 058-202-045-330-40X; 060-557-197-043-316; 062-144-988-268-658; 067-781-550-667-893; 071-617-496-196-540; 072-501-463-865-420; 077-564-327-499-016; 078-168-531-520-881; 078-329-809-879-181; 090-578-282-408-421; 105-367-836-087-977; 107-909-266-296-422; 116-207-427-049-255; 136-699-567-258-437,0,false,, 030-165-905-299-371,Expert prevention in the context of digitalization of forensic activities,,2020,journal article,TRENDS IN THE DEVELOPMENT OF SCIENCE AND EDUCATION,,"Private Enterprise, Vladislav Ivanov",,A.V. Smirnova,The article discusses the basics of the origin and development of the Institute of expert prevention. The aspects that cause changes in expert prevention measures in view of the global transition to information technologies are highlighted. The directions and features of the implementation of forensic prevention in the conditions of digitalization are revealed. The types of programs used for committing crimes in the IT sphere are given.,,,,,Forensic science; Sociology; Context (language use); Engineering ethics,,,,,http://dx.doi.org/10.18411/lj-11-2020-243,http://dx.doi.org/10.18411/lj-11-2020-243,,10.18411/lj-11-2020-243,3116284009,,0,,0,true,,bronze 030-178-593-043-926,A review of quality procedures in the UK forensic sciences: What can the field of digital forensics learn?,2018-09-23,2018,journal article,Science & justice : journal of the Forensic Science Society,13550306,Forensic Science Society,United Kingdom,Helen Page; Graeme Horsman; Anna Sarna; Julienne Foster,"With a reliance on the various forms of forensic science evidence in complex criminal investigations, the measures for ensuring its quality are facing increasing scrutiny. Improvements to quality management systems, to ensure both the robust application of scientific principles and the accurate interpretation and reporting of results, have arisen as a consequence of high-profile rebuttals of forensic science evidence, combined with process improvements driven by evaluation of current practice. These improvements are crucial to ensure validity of results as well as providing assurance for all those involved in the Criminal Justice System. This work first examines the quality management systems utilised for the examination and analysis of fingerprint, body fluid and DNA evidence. It then proceeds to highlight an apparent lack of comparable quality assurance mechanisms within the field of digital forensics, one of the newest branches of forensic science. Proposals are provided for the improvement of quality assurance for the digital forensics arena, drawing on the experiences of, and more well-established practices within, other forensic disciplines.",59,1,83,92,Criminal justice; Quality assurance; Criminal investigation; Quality management system; Scrutiny; Quality (business); Computer science; Process (engineering); Engineering ethics; Digital forensics,Codes of practice and conduct; DNA Fingerprint; Digital forensics; Forensic science; Peer review,Accreditation; Body Fluids/chemistry; Computers; DNA/analysis; Dermatoglyphics; Female; Forensic Sciences/organization & administration; Guidelines as Topic/standards; Humans; Information Storage and Retrieval/standards; Male; Peer Review; Quality Control; Specimen Handling/standards; Total Quality Management/standards; United Kingdom,DNA,,https://research.tees.ac.uk/en/publications/a-review-of-quality-procedures-in-the-uk-forensic-sciences-what-c https://www.ncbi.nlm.nih.gov/pubmed/30654972 http://europepmc.org/abstract/MED/30654972 https://research.tees.ac.uk/ws/files/6504479/DF_FP_and_DNA_Standards_1_.pdf https://www.sciencedirect.com/science/article/pii/S1355030618302211 https://core.ac.uk/download/pdf/196167610.pdf,http://dx.doi.org/10.1016/j.scijus.2018.09.006,30654972,10.1016/j.scijus.2018.09.006,2893292743,,0,000-613-227-505-807; 003-168-641-529-165; 004-200-813-216-207; 012-410-670-929-028; 013-568-618-083-770; 026-193-200-552-529; 027-462-218-331-336; 032-306-447-977-364; 042-230-817-975-353; 043-083-546-914-143; 045-243-165-627-08X; 046-108-923-988-488; 068-781-516-754-885; 093-650-425-263-585; 101-436-770-235-826; 102-275-304-340-962; 108-249-505-350-920; 111-090-978-711-139; 132-355-634-397-986; 133-397-275-695-990; 133-508-126-407-763; 142-653-171-956-478; 142-790-196-752-819; 154-855-895-914-987,23,true,cc-by-nc-nd,green 030-182-469-313-388,Digital forensics and the DSAR effect,2021-01-21,2021,journal article,ERA Forum,16123093; 18639038,Springer Science and Business Media LLC,Germany,Damir Kahvedžić,"The digital forensics field has seen much evolution over the last thirty years. Methods for data extraction and protocols for accuracy and admissibility are the cornerstones on which the field is based. Recently these protocols have been used for responses to data subject access requests (DSARs). The cost to an organisation of servicing DSARs can run into millions of Euro per year. Every organisation working with EU citizens is affected. Their far-reaching scope, cost and the penalties for non-compliance have stimulated the development of solutions addressing this regulatory requirement. This paper charts the evolution of the DSAR process and how improvements have in turn led to the advancement of the digital forensics field itself.",22,1,59,73,Data extraction; Scope (project management); Data subject; Field (computer science); Computer security; Process (engineering); Digital forensics,,,,,https://link.springer.com/article/10.1007/s12027-021-00651-z,http://dx.doi.org/10.1007/s12027-021-00651-z,,10.1007/s12027-021-00651-z,3123281616,,0,087-932-019-848-789; 089-638-379-171-949; 116-403-897-260-803; 131-098-454-741-849,1,false,, 030-264-284-537-878,Aspects of Digital Forensics in South Africa,,2016,journal article,"Interdisciplinary Journal of Information, Knowledge, and Management",15551229; 15551237,Informing Science Institute,United States,Alastair Irons; Jacques Ophoff,"This paper explores the issues facing digital forensics in South Africa. It examines particular cyber threats and cyber threat levels for South Africa and the challenges in addressing the cybercrimes in the country through digital forensics. The paper paints a picture of the cy-bercrime threats facing South Africa and argues for the need to develop a skill base in digi-tal forensics in order to counter the threats through detection of cybercrime, by analyzing cybercrime reports, consideration of current legislation, and an analysis of computer foren-sics course provision in South African universities. The paper argues that there is a need to develop digital forensics skills in South Africa through university programs, in addition to associated training courses. The intention in this paper is to promote debate and discussion in order to identify the cyber threats to South Africa and to encourage the development of a framework to counter the threats – through legislation, high tech law enforcement structures and protocols, digital forensics education, digital forensics skills development, and a public and business awareness of cybercrime threats.",11,,273,283,Internet privacy; Engineering; High tech; Legislation; Cybercrime; Law enforcement; Cyber threats; Digital forensics,,,,,https://rke.abertay.ac.uk/en/publications/aspects-of-digital-forensics-in-south-africa https://sure.sunderland.ac.uk/id/eprint/6806 https://www.informingscience.org/Publications/3576 https://core.ac.uk/display/88802163 http://www.ijikm.org/Volume11/IJIKMv11p273-283Irons2689.pdf https://core.ac.uk/download/74369166.pdf,http://dx.doi.org/10.28945/3576,,10.28945/3576,2578671149,,0,020-354-875-394-852; 044-244-941-027-350; 100-324-495-343-319; 150-069-198-380-365; 165-790-897-987-965; 167-592-705-831-583,3,true,,gold 030-332-224-913-896,Deepfake forensics: Cross-manipulation robustness of feedforward- and recurrent convolutional forgery detection methods,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Frederic Chamot; Zeno Geradts; Evert Haasdijk,,40,,301374,301374,Computer science; Artificial intelligence; Replicate; Generalizability theory; Robustness (evolution); Machine learning,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301374,,10.1016/j.fsidi.2022.301374,,,0,154-201-379-823-568; 173-875-051-173-370,0,false,, 030-333-349-393-032,Modelling and refinement of forensic data acquisition specifications,,2014,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Benjamin Aziz,"This paper defines a model of a special type of digital forensics tools, known as data acquisition tools, using the formal refinement language Event-B. The complexity and criticality of many types of computer and Cyber crime nowadays combined with improper or incorrect use of digital forensic tools calls for more robust and reliable specifications of the functionality of digital forensics applications. As a minimum, the evidence produced by such tools must meet the minimum admissibility standards the legal system requires, in general implying that it must be generated from reliable and robust tools. Despite the fact that some research and effort has been spent on the validation of digital forensics tools by means of testing, the verification of such tools and the formal specification of their expected behaviour remains largely under-researched. The goal of this work is to provide a formal specification against which implementations of data acquisition procedures can be analysed.",11,2,90,101,Software engineering; Formal specification; Refinement; Data acquisition; Implementation; Event b method; Cyber crime; Computer security; Computer science; Computer forensics; Digital forensics,,,,,https://researchportal.port.ac.uk/en/publications/modelling-and-refinement-of-forensic-data-acquisition-specificati https://puredev.port.ac.uk/en/publications/modelling-and-refinement-of-forensic-data-acquisition-specificati https://researchportal.port.ac.uk/portal/files/1151700/elsarticle_template_4_harv.pdf https://www.sciencedirect.com/science/article/pii/S1742287614000346 http://www.sciencedirect.com/science/article/pii/S1742287614000346 https://core.ac.uk/download/29587147.pdf,http://dx.doi.org/10.1016/j.diin.2014.04.001,,10.1016/j.diin.2014.04.001,2039790515,,0,001-009-008-665-240; 001-752-080-318-279; 004-652-388-189-304; 006-731-367-983-371; 020-944-423-224-895; 021-039-461-635-181; 021-850-998-857-676; 028-995-053-119-836; 030-359-893-882-572; 032-477-197-285-256; 035-403-390-260-816; 041-855-656-823-650; 043-499-798-259-789; 045-439-795-806-132; 064-531-736-566-934; 070-946-535-584-257; 075-128-417-091-483; 094-183-392-175-808; 099-482-594-708-125; 117-821-177-762-731; 119-551-188-032-545; 123-082-630-503-713; 133-508-126-407-763; 142-653-298-375-689; 158-170-674-288-488; 184-948-841-629-735; 190-065-821-748-92X; 199-172-967-270-034,7,true,cc-by-nc-nd,green 030-496-066-969-472,Standardizing digital forensic examination procedures: A look at Windows 10 in cases involving images depicting child sexual abuse,2021-05-06,2021,journal article,WIREs Forensic Science,25739468,Wiley,,Graeme Horsman,,3,6,,,Quality (business); Child sexual abuse; Computer science; Applied psychology; Digital forensics,,,,,https://research.tees.ac.uk/en/publications/standardizing-digital-forensic-examination-procedures-a-look-at-w https://onlinelibrary.wiley.com/doi/10.1002/wfs2.1417 https://wires.onlinelibrary.wiley.com/doi/full/10.1002/wfs2.1417,http://dx.doi.org/10.1002/wfs2.1417,,10.1002/wfs2.1417,3162989540,,0,001-334-079-265-518; 003-982-227-180-136; 005-578-292-466-235; 009-512-003-529-193; 010-963-610-208-920; 014-713-031-827-317; 018-552-581-098-658; 030-178-593-043-926; 032-451-540-235-796; 034-190-709-015-829; 040-567-901-099-238; 041-528-761-358-879; 061-269-967-405-492; 062-168-384-023-533; 064-549-392-650-90X; 066-032-563-680-259; 067-844-385-207-96X; 069-164-282-798-000; 073-790-480-897-758; 075-292-269-073-172; 078-730-781-174-18X; 079-273-634-331-435; 097-378-094-309-766; 101-549-415-202-81X; 102-243-142-344-71X; 111-488-239-742-003; 120-454-127-510-479; 121-830-022-805-361; 142-790-196-752-819; 143-959-640-326-451; 163-330-758-807-944,0,true,cc-by,hybrid 030-549-796-030-148,Design and Implementation of Linux based Workflow for Digital Forensics Investigation,2019-04-11,2019,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,Moses Ashawa; Morris Ntonja,"Window based digital forensic workflow has been the traditional investigation model for digital evidence. Investigating using Linux based platform tends challenging since there is no specific investigation workflow for Linux platform. This study designed and implemented a Linux forensic based-workflow for digital investigation. The workflow was divided into different investigation phases. The digital investigations processes in all the phases were performed using Linux riggings. The work-flow was tested and evidence such as (E01) Image was accurately acquired. This paper is presented in the following sections. Section one and two provided introduction and literature on existing forensic workflow using windows-based workflow respectively. Section three provided the approach to window workflow. The experimental design and tools used were presented in section four. The rest of the sections considered the research analysis, discussion and conclusion respectively. The implication of the test conducted, tools used with their corresponding weakness and strengths were highlighted in the appendix",181,49,40,46,Software engineering; Workflow; Digital evidence; Computer science; Digital forensics,,,,,https://dspace.lib.cranfield.ac.uk/handle/1826/14412 https://www.ijcaonline.org/archives/volume181/number49/ashawa-2019-ijca-918684.pdf https://www.ijcaonline.org/archives/volume181/number49/30491-2019918684,http://dx.doi.org/10.5120/ijca2019918684,,10.5120/ijca2019918684,2938074275,,0,020-959-006-156-504; 028-457-962-572-453; 032-487-265-797-544; 039-627-889-157-293; 056-674-370-113-188; 064-549-392-650-90X; 077-114-085-988-723; 082-490-100-922-264; 111-488-239-742-003; 130-080-242-566-434; 145-635-013-548-735; 154-912-841-322-255; 190-795-233-892-655,0,true,cc-by-nc,gold 030-688-016-727-252,The information privacy domain,,2016,journal article,"International Journal of Information Privacy, Security and Integrity",17418496; 1741850x,Inderscience Publishers,,Aftab Ahmad; Preeti Misra; Frank Ono; Cody Priest; Jessica Suarez; Alexander Urcioli,"A definition of information privacy is elusive due to its multi-facetted aspects. The paper presents the position that information privacy is a domain and not a property, and elaborates various components of this domain. It goes on to use the provided definition of information privacy domain to test Gramm-Leach-Bliley Act. The definition provided can be employed in enacting new laws, designing new information systems and in analysing privacy and security technologies.",2,4,307,329,Internet privacy; Information privacy; Information sensitivity; Personally identifiable information; Privacy laws of the United States; Information system; Privacy by Design; Computer security; Computer science; Privacy software; Information security,,,,,https://doi.org/10.1504/IJIPSI.2016.10003023 https://www.inderscienceonline.com/doi/abs/10.1504/IJIPSI.2016.082124 https://dblp.uni-trier.de/db/journals/ijipsi/ijipsi2.html#AhmadMOPSU16 http://www.inderscience.com/link.php?id=82124 http://doi.org/10.1504/IJIPSI.2016.10003023,http://dx.doi.org/10.1504/ijipsi.2016.10003023,,10.1504/ijipsi.2016.10003023,2584630729,,0,009-235-111-192-572; 037-023-568-978-306; 088-469-368-357-472; 153-273-270-714-364; 162-492-531-934-055,1,false,, 030-873-326-014-594,Classification and evaluation of digital forensic tools,2020-12-01,2020,journal article,TELKOMNIKA (Telecommunication Computing Electronics and Control),23029293; 16936930; 2087278x,Universitas Ahmad Dahlan,Indonesia,Azra Parveen; Zishan H. Khan; Syed Naseem Ahmad,"Digital forensic tools (DFTs) are used to detect the authenticity of digital images. Different DFTs have been developed to detect the forgery like (i) forensic focused operating system, (ii) computer forensics, (iii) memory forensics, (iv) mobile device forensics, and (v) software forensics tools (SFTs). These tools are dedicated to detect the forged images depending on the type of the applications. Based on our review, we found that in literature of the DFTs less attention is given to the evaluation and analysis of the forensic tools. Among various DFTs, we choose SFTs because it is concerned with the detection of the forged digital images. Therefore,the purpose of this study is to classify the different DFTs and evaluate the software forensic tools (SFTs) based on the different features which are present in the SFTs. In our work, we evaluate the following five SFTs, i.e.,“FotoForensics”, “JPEGsnoop”, “Ghiro”, “Forensically”, and “Izitru”, based on different features so that new research directions can be identified for the development of the SFTs.",18,6,3096,3106,Data mining; Memory forensics; Software; Software forensics; Image forensics; Computer science; Digital image; Computer forensics; Mobile device forensics; Digital forensics,,,,,http://journal.uad.ac.id/index.php/TELKOMNIKA/article/view/15295/9288 https://core.ac.uk/download/pdf/349572707.pdf,http://dx.doi.org/10.12928/telkomnika.v18i6.15295,,10.12928/telkomnika.v18i6.15295,3087843939,,0,,2,true,cc-by-sa,hybrid 030-941-913-345-349,Ensuring the Legality of the Digital Forensics Process in South Africa,2013-04-18,2013,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,Jason Jordaan,"In most legal systems, it is crucial that evidence that is obtained for use in any judicial proceedings, especially criminal prosecutions, is obtained lawfully. In other words, no crimes should be committed in the obtaining and examining of any evidence, which will be later, be relied upon in court. Section 86 of the Electronic Communications and Transactions Act 25 of 2002 in South Africa creates a criminal offence of unauthorized access to data, which has a significant potential impact on the acquisition, examination, and analysis of digital evidence; in that traditional digital forensic processes, unless legally authorized, may potentially be in contravention of this law. The legal ramifications for both digital forensics practitioners and the cases that they are engaged on are identified, and appropriate legal solutions are provided to ensure that digital forensic practitioners do not contravene the existing legislation.",68,23,36,39,Internet privacy; Legislation; Contravention; Digital evidence; Computer science; Principle of legality; Process (engineering); Digital forensics,,,,,https://research.ijcaonline.org/volume68/number23/pxc3887432.pdf http://ui.adsabs.harvard.edu/abs/2013IJCA...68w..36J/abstract http://www.lex-informatica.org/Ensuring%20the%20Legality%20of%20the%20Digital%20Forensics%20Process%20in%20South%20Africa.pdf https://www.ijcaonline.org/archives/volume68/number23/11722-7432,http://dx.doi.org/10.5120/11722-7432,,10.5120/11722-7432,2148128673,,0,072-712-275-844-913; 100-767-382-538-470; 106-885-306-836-498; 113-193-394-996-104; 130-217-725-914-477; 136-745-511-009-321; 142-108-488-120-966; 154-255-264-599-600; 154-778-607-714-379,0,true,,green 031-084-814-192-60X,Positive control tests for fingermark development reagents.,2020-03-16,2020,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Roy Janssen-Bouwmeester; Christiaan Bremmer; Linda Koomen; Shermayne Siem-Gorré; Marcel de Puit,,310,,110259,110259,Detection limit; Ninhydrin; Amino acid solution; Visualisation techniques; Positive control; Mathematics; Reagent; Chromatography,Fingermark; Fingerprint; Indanedione; Ninhydrin; Positive control; Simulated fingermark,Dermatoglyphics; Forensic Pathology; Humans; Indans/chemistry; Indicators and Reagents/chemistry; Ninhydrin/chemistry,"1,2-indanedione; Indans; Indicators and Reagents; Ninhydrin",,https://europepmc.org/article/MED/32224429 https://pubmed.ncbi.nlm.nih.gov/32224429/ https://www.sciencedirect.com/science/article/abs/pii/S0379073820301213 https://www.ncbi.nlm.nih.gov/pubmed/32224429 https://pubag.nal.usda.gov/catalog/6873781,http://dx.doi.org/10.1016/j.forsciint.2020.110259,32224429,10.1016/j.forsciint.2020.110259,3011610514,,0,012-201-418-741-452; 025-446-907-258-629; 027-173-519-900-466; 032-085-055-912-741; 043-920-955-434-20X; 045-830-532-366-077; 053-551-505-531-143; 061-498-418-875-132; 065-064-295-242-016; 066-353-371-492-517; 067-030-451-906-169; 080-172-774-926-919; 092-849-252-226-832; 099-942-614-217-599; 103-647-471-157-031; 143-081-462-230-20X,4,false,, 031-522-316-310-252,"Research toward a Partially-Automated, and Crime Specific Digital Triage Process Model",2012-02-28,2012,journal article,Computer and Information Science,19138997; 19138989,Canadian Center of Science and Education,,Gary D Cantrell; David A. Dampier; Yoginder S. Dandass; Nan Niu; A. Chris Bogen,"The digital forensic process as traditionally laid out begins with the collection, duplication, and authentication of every piece of digital media prior to examination. These first three phases of the digital forensic process are by far the most costly. However, complete forensic duplication is standard practice among digital forensic laboratories. The time it takes to complete these stages is quickly becoming a serious problem. Digital forensic laboratories do not have the resources and time to keep up with the growing demand for digital forensic examinations with the current methodologies. One solution to this problem is the use of pre-examination techniques commonly referred to as digital triage. Pre-examination techniques can assist the examiner with intelligence that can be used to prioritize and lead the examination process. This work discusses a proposed model for digital triage that is currently under development at Mississippi State University.",5,2,29,38,Authentication (law); Digital media; Data science; Digital forensic process; Triage; Computer security; Computer science; Process (engineering); State (computer science); Computer forensics; Digital forensics,,,,,https://mds.marshall.edu/wdcs_faculty/61/ https://works.bepress.com/david-dampier/1/ https://www.ccsenet.org/journal/index.php/cis/article/view/13527/10382 https://mds.marshall.edu/cgi/viewcontent.cgi?article=1060&context=wdcs_faculty https://www.ccsenet.org/journal/index.php/cis/article/download/13527/10382,http://dx.doi.org/10.5539/cis.v5n2p29,,10.5539/cis.v5n2p29,2136654754,,0,004-652-388-189-304; 017-335-677-993-203; 020-944-423-224-895; 021-850-998-857-676; 025-421-213-608-128; 032-697-093-668-898; 040-911-574-660-701; 041-561-245-686-942; 062-217-186-853-075; 125-384-800-661-375; 140-821-103-436-654; 154-407-233-384-826; 184-948-841-629-735; 186-993-770-394-232; 190-065-821-748-92X; 199-745-676-923-766,27,true,cc-by,hybrid 031-586-036-745-174,Digital Forensics Subdomains: The State of the Art and Future Directions,,2021,journal article,IEEE Access,21693536,Institute of Electrical and Electronics Engineers (IEEE),United States,Arafat Al-Dhaqm; Richard Adeyemi Ikuesan; Victor R. Kebande; Shukor Abd Razak; George Grispos; Kim-Kwang Raymond Choo; Bander Ali Saleh Al-rimy; AbdulRahman A. Alsewari,"For reliable digital evidence to be admitted in a court of law, it is important to apply scientifically proven digital forensic investigation techniques to corroborate a suspected security incident. Mainly, traditional digital forensics techniques focus on computer desktops and servers. However, recent advances in digital media and platforms have seen an increased need for the application of digital forensic investigation techniques to other subdomains. This includes mobile devices, databases, networks, cloud-based platforms, and the Internet of Things (IoT) at large. To assist forensic investigators to conduct investigations within these subdomains, academic researchers have attempted to develop several investigative processes. However, many of these processes are domain-specific or describe domain-specific investigative tools. Hence, in this paper, we hypothesize that the literature is saturated with ambiguities. To further synthesize this hypothesis, a digital forensic model-orientated Systematic Literature Review (SLR) within the digital forensic subdomains has been undertaken. The purpose of this SLR is to identify the different and heterogeneous practices that have emerged within the specific digital forensics subdomains. A key finding from this review is that there are process redundancies and a high degree of ambiguity among investigative processes in the various subdomains. As a way forward, this study proposes a high-level abstract metamodel, which combines the common investigation processes, activities, techniques, and tasks for digital forensics subdomains. Using the proposed solution, an investigator can effectively organize the knowledge process for digital investigation.",9,,152476,152502,Digital media; Mobile device; Data science; Database forensics; Digital evidence; Computer science; Process (engineering); Network forensics; Digital forensics; Server,,,,Open Access Funding provided by the Qatar National Library,https://experts.nebraska.edu/en/publications/digital-forensics-subdomains-the-state-of-the-art-and-future-dire https://dblp.uni-trier.de/db/journals/access/access9.html#Al-DhaqmIKRGCAA21,http://dx.doi.org/10.1109/access.2021.3124262,,10.1109/access.2021.3124262,3210059387,,0,000-281-222-726-856; 001-187-036-977-606; 001-255-768-346-633; 001-888-175-704-116; 002-044-330-972-492; 002-718-328-889-719; 003-486-118-011-680; 003-504-554-245-316; 003-905-226-015-068; 004-706-447-836-905; 005-203-277-885-748; 005-296-771-590-748; 005-630-640-664-939; 005-899-402-239-840; 006-296-899-452-535; 007-120-713-093-456; 007-458-210-702-991; 007-915-233-613-511; 008-733-401-864-23X; 010-057-765-527-665; 010-490-168-139-514; 010-992-143-070-67X; 011-630-546-757-650; 011-850-183-685-719; 012-219-343-221-633; 012-587-637-705-413; 013-360-329-054-671; 013-956-680-903-674; 014-510-444-730-433; 014-836-131-915-39X; 015-440-921-647-313; 015-503-477-862-142; 017-085-756-392-642; 018-203-874-457-567; 018-552-581-098-658; 018-648-349-943-059; 018-912-441-468-836; 019-360-393-097-72X; 019-960-255-195-267; 020-357-351-995-538; 020-509-746-088-705; 021-326-325-055-045; 021-435-335-955-453; 022-429-101-476-586; 023-063-862-957-256; 023-568-228-590-323; 023-767-546-806-478; 024-350-847-240-124; 024-385-303-080-230; 025-212-642-751-095; 025-308-544-437-672; 025-484-846-284-184; 025-487-313-702-455; 025-815-030-235-519; 026-676-242-548-364; 026-947-517-566-556; 027-099-591-941-569; 028-403-698-637-145; 028-457-962-572-453; 028-864-123-938-045; 029-239-733-639-707; 029-489-501-199-089; 029-637-803-083-286; 030-173-318-402-776; 030-674-871-669-121; 031-982-129-275-33X; 032-244-297-444-421; 032-329-531-945-092; 034-380-704-636-551; 034-643-583-457-718; 034-940-557-037-083; 035-565-993-122-262; 035-739-618-778-849; 037-713-961-742-146; 038-473-718-695-630; 038-645-193-387-077; 040-562-863-527-963; 041-100-433-941-603; 041-635-805-946-810; 042-672-276-006-565; 043-127-893-811-79X; 043-382-723-887-378; 043-742-356-311-540; 043-817-597-356-962; 044-021-303-931-726; 045-040-308-009-79X; 045-222-856-841-787; 045-742-323-849-793; 046-314-745-466-915; 047-782-671-230-742; 047-833-989-327-699; 048-104-507-351-773; 048-141-687-795-752; 048-926-061-987-648; 049-136-302-275-079; 050-035-884-812-921; 051-330-401-796-575; 052-301-201-093-481; 052-919-508-917-670; 054-529-421-844-076; 055-811-656-615-740; 055-850-354-942-609; 055-942-104-612-963; 055-996-756-667-066; 059-014-234-603-671; 059-151-526-215-807; 059-259-197-397-244; 059-829-333-909-69X; 060-294-953-084-788; 060-743-410-850-643; 062-185-276-692-750; 062-440-552-219-966; 062-987-450-662-878; 063-229-337-814-634; 063-475-319-066-007; 064-345-083-918-701; 065-322-784-190-818; 065-654-832-541-493; 065-671-045-136-370; 066-034-062-322-233; 066-784-622-207-480; 067-601-110-201-327; 068-254-594-204-681; 069-007-833-693-813; 069-321-740-091-392; 069-754-697-292-909; 070-295-309-596-202; 071-095-478-422-879; 071-218-059-184-033; 071-451-467-450-231; 072-323-530-728-727; 073-099-928-352-670; 073-876-103-481-172; 073-910-371-295-970; 074-933-143-629-826; 075-264-586-699-234; 075-268-039-596-63X; 075-770-629-919-738; 076-610-287-185-407; 077-859-446-810-741; 078-730-781-174-18X; 079-699-370-692-859; 080-037-699-095-630; 080-160-133-326-173; 081-746-298-679-238; 083-656-249-691-365; 085-001-408-364-683; 085-266-631-589-774; 090-230-721-671-962; 090-390-906-646-037; 090-933-338-506-017; 092-043-845-339-506; 092-784-374-989-892; 093-117-308-515-186; 093-148-968-798-507; 094-143-534-138-927; 094-182-197-652-715; 094-800-645-372-553; 095-177-434-765-79X; 095-577-771-481-790; 097-103-869-237-065; 098-520-592-151-771; 099-261-139-480-588; 100-246-306-965-821; 101-083-734-725-35X; 102-182-774-566-752; 103-864-806-347-808; 104-098-703-521-179; 105-940-731-754-568; 106-229-562-693-558; 106-759-637-118-717; 108-328-029-181-42X; 110-958-082-190-809; 112-181-239-331-730; 112-333-992-894-015; 113-529-751-754-389; 114-473-027-477-559; 115-095-105-779-204; 115-795-118-970-339; 117-065-920-586-287; 117-066-639-504-133; 117-614-574-133-806; 119-460-081-257-61X; 119-484-500-569-383; 119-955-810-605-798; 120-338-862-399-078; 121-487-767-415-637; 121-898-094-801-790; 122-134-821-866-125; 123-308-339-215-803; 125-519-560-533-563; 126-403-505-438-119; 128-603-018-655-844; 131-143-098-374-420; 133-120-498-513-750; 134-072-762-404-610; 134-353-085-289-803; 134-842-711-365-699; 137-166-264-059-953; 137-569-254-769-800; 138-851-840-986-301; 139-320-230-645-968; 140-574-046-885-14X; 142-416-286-909-584; 142-657-351-097-509; 144-924-692-716-271; 146-334-817-842-70X; 154-808-033-424-405; 155-706-225-696-164; 158-400-418-434-934; 158-871-132-407-288; 158-956-574-262-541; 159-094-605-033-945; 159-105-758-152-663; 159-516-414-584-397; 159-967-408-705-781; 161-773-313-365-549; 163-009-701-904-62X; 164-959-263-715-575; 169-263-821-393-379; 170-306-506-317-395; 170-876-547-256-175; 172-334-888-811-073; 175-252-436-865-02X; 177-255-583-875-742; 177-706-139-538-803; 180-706-989-021-884; 196-559-417-455-648,3,true,"CC BY, CC BY-NC-ND",gold 031-614-539-275-181,Investigation of Indecent Images of Children cases: Challenges and suggestions collected from the trenches,,2018,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Virginia N. L. Franqueira; Joanne Bryce; Noora Al Mutawa; Andrew Marrington,"Previous studies examining the investigative challenges and needs of Digital Forensic (DF) practitioners have typically taken a sector-wide focus. This paper presents the results of a survey which collected text-rich comments about the challenges experienced and related suggestions for improvement in the investigation of Indecent Images of Children (IIOC) cases. The comments were provided by 153 international DF practitioners (28.1% survey response rate) and were processed using Thematic Analysis. This resulted in the identification of 4 IIOC-specific challenge themes, and 6 DF-generic challenges which directly affect IIOC. The paper discusses these identified challenges from a practitioner perspective, and outlines their suggestions for addressing them.",24,,95,105,Child pornography; Computer science; Medical education; Thematic analysis; Identification (information); Digital forensics,,,,,http://clok.uclan.ac.uk/25415/ https://www.sciencedirect.com/science/article/pii/S1742287617302669 https://doi.org/10.1016/j.diin.2017.11.002 https://derby.openrepository.com/handle/10545/622013 https://core.ac.uk/download/162910350.pdf,http://dx.doi.org/10.1016/j.diin.2017.11.002,,10.1016/j.diin.2017.11.002,2774251861,,0,000-490-412-762-138; 007-790-059-029-953; 013-717-900-010-205; 018-629-200-923-814; 019-154-145-141-325; 021-201-295-792-01X; 021-419-434-022-915; 025-040-502-489-402; 025-319-861-345-580; 025-743-892-862-313; 026-918-579-601-799; 036-269-075-303-806; 037-539-210-056-689; 037-550-015-414-716; 038-542-054-276-658; 046-240-766-487-724; 049-359-052-711-074; 056-754-398-867-512; 064-733-456-850-063; 066-725-012-180-620; 068-691-484-845-897; 071-831-413-869-242; 073-403-475-896-395; 075-292-269-073-172; 078-598-867-814-365; 080-196-042-005-758; 084-415-045-900-451; 098-748-261-333-651; 105-703-978-819-336; 124-912-663-881-389; 130-834-531-769-009; 137-755-137-054-864; 140-402-089-386-286; 142-388-561-082-054; 163-330-758-807-944,13,true,,green 031-655-872-268-787,Triaging digital device content at-scene:- Formalising the decision-making process.,2021-12-09,2021,journal article,Science & justice : journal of the Forensic Science Society,18764452; 13550306,Forensic Science Society,United Kingdom,Graeme Horsman,"The prominence of technology usage in society has inevitably led to increasing numbers of digital devices being seized, where digital evidence often features in criminal investigations. Such demand has led to well documented backlogs placing pressure on digital forensic labs, where in an effort to combat this issue, the 'at-scene triage' of devices has been touted as a solution. Yet such triage approaches are not straightforward to implement with multiple technical and procedural issues existing, including determining when it is actually appropriate to triage the contents of a device at-scene. This work remains focused on this point due to the complexities associated with it, and to support first responders a nine-stage triage decision model is offered which is designed to promote consistent and transparent practice when determining if a device should be triaged.",62,1,86,93,Triage; Digital forensics; Process (computing); Computer science; Point (geometry); Crime scene; Computer security; Data science; Medical emergency; Medicine; Psychology; Geometry; Mathematics; Criminology; Operating system,Crime scene; Digital evidence; Digital forensics; Investigation; Triage,Humans; Triage,,,,http://dx.doi.org/10.1016/j.scijus.2021.12.001,35033331,10.1016/j.scijus.2021.12.001,,,0,000-750-047-594-348; 003-982-227-180-136; 010-985-077-415-59X; 015-340-476-560-675; 016-873-099-383-893; 032-451-540-235-796; 062-137-637-964-947; 066-235-037-082-291; 074-706-219-689-754; 076-508-293-079-677; 079-273-634-331-435; 090-752-043-508-733; 094-142-794-127-63X; 126-591-597-706-715; 131-516-331-360-906; 142-790-196-752-819; 182-719-735-421-509,1,false,, 031-800-007-340-922,A Review on Mobile Device's Digital Forensic Process Models,2014-07-15,2014,journal article,"Research Journal of Applied Sciences, Engineering and Technology",20407459; 20407467,Maxwell Scientific Publication Corp.,United Kingdom,Anahita Farjamfar; Mohd Taufik Abdullah; Ramlan Mahmod; Nur Izura Udzir,"The main purpose of this study is to discuss the different comparative studies on digital forensics process models specially in the field of mobile devices. In order to legally pursue digital criminals, investigation should be conducted in a forensically sound manner so that the acquired evidence would be accepted in the court of law. Digital forensic process models define the important steps that should be followed to assure the investigation is performed successfully. There are a number of digital forensic process models developed by various organizations worldwide, but yet, there is no agreement among forensics investigation and legislative delegation which procedures to adhere to; specially in the case of facing mobile devices with latest technologies. This is vital, as mobile phones and other mobile devices such as PDAs or tablets are becoming ever-present as the main technology platform around the world and people are obtaining and using mobile phones more than ever. In this study we will give a review of the proposed digital forensics process models within last 7 years and to discuss the need for a consensus to follow the same underlying approaches while continually updating digital forensics process models to cover new emerging technologies and devices.",8,3,358,366,Engineering; Mobile device; Emerging technologies; Data science; Digital forensic process; Digital evidence; Computer security; Computer forensics; Process modeling; Digital forensics; Delegation,,,,,https://maxwellsci.com/jp/mspabstract.php?jid=RJASET&doi=rjaset.8.981 http://psasir.upm.edu.my/id/eprint/36269/ https://core.ac.uk/display/153816752 https://core.ac.uk/download/153816752.pdf,http://dx.doi.org/10.19026/rjaset.8.981,,10.19026/rjaset.8.981,2165854381,,0,004-652-388-189-304; 004-872-169-627-620; 006-569-049-717-630; 010-086-703-646-194; 014-299-240-901-551; 017-815-064-018-299; 023-780-269-449-092; 030-359-893-882-572; 035-223-520-491-228; 041-059-041-666-09X; 048-141-687-795-752; 050-618-920-212-97X; 052-120-212-583-360; 066-602-804-060-133; 078-730-781-174-18X; 083-582-672-677-836; 090-390-906-646-037; 093-148-968-798-507; 095-613-498-169-127; 101-436-770-235-826; 133-397-275-695-990; 145-616-913-856-289; 168-476-681-195-292; 170-299-458-679-224,8,true,cc-by,hybrid 031-831-612-786-158,Is the (traditional) Galilean science paradigm well suited to forensic science,2019-06-03,2019,journal article,WIREs Forensic Science,25739468,Wiley,,Frank Crispino; Claude Roux; Olivier Delémont; Olivier Ribaux,"Abstract For more than 10 years, forensic science has been at best, criticized for its lack of scientific foundations and at worst, presented as an oxymoron. An exclusive focus on standard operating procedures and quality management could cause forensic science to fall short of addressing the epistemological issue initiated by judges. This is particularly so in rapidly changing times, including digital transformation of society and decentralization of forensic services. As a consequence, the present understanding of forensic science by both scientists and its stakeholders is questioned. It is argued that that forensic science fundamental principles and, more broadly, forensic science philosophy are pivotal to the reliable application of science to address security and justice questions.; This article is categorized under: Forensic Science in Action/Crime Scene Investigation > Epistemology and Method Jurisprudence and Regulatory Oversight > Communication across Science and Law Jurisprudence and Regulatory Oversight > Expert Evidence and Narrative",1,6,,,Digital transformation; Decentralization; Sociology; Crime scene; Narrative; Justice (ethics); Action (philosophy); Engineering ethics; Jurisprudence; Oxymoron,,,,Australian Research Council; Australian Research Council,https://onlinelibrary.wiley.com/doi/full/10.1002/wfs2.1349 https://depot-e.uqtr.ca/id/eprint/9178/ https://wires.onlinelibrary.wiley.com/doi/epdf/10.1002/wfs2.1349 https://core.ac.uk/download/288802614.pdf,http://dx.doi.org/10.1002/wfs2.1349,,10.1002/wfs2.1349,2948469274,,0,001-263-839-810-289; 001-781-290-711-194; 003-118-882-692-806; 004-105-653-753-525; 004-127-818-562-784; 005-615-208-426-450; 006-910-228-459-901; 007-394-681-300-446; 008-005-869-275-689; 008-549-078-351-695; 009-794-627-830-644; 009-803-691-567-926; 011-917-049-802-949; 014-207-319-411-255; 014-882-983-684-517; 016-033-143-009-953; 021-518-216-842-214; 022-799-618-827-180; 024-303-555-608-167; 025-880-943-392-835; 026-300-487-698-330; 027-492-558-867-396; 030-043-392-965-213; 030-714-770-580-172; 030-753-435-923-440; 030-765-513-766-793; 032-188-929-321-136; 032-752-166-385-784; 035-728-555-251-148; 037-426-130-251-15X; 044-092-676-577-529; 045-008-933-708-932; 051-530-206-170-696; 053-099-937-604-838; 054-443-253-103-684; 060-435-460-095-960; 064-107-009-692-27X; 067-307-278-774-180; 070-990-169-980-388; 071-697-920-432-649; 071-940-409-825-573; 076-246-136-468-831; 085-482-775-276-618; 085-957-453-072-619; 086-917-646-619-748; 087-296-012-368-454; 087-342-951-350-054; 088-915-622-151-021; 092-048-715-807-802; 092-077-998-984-704; 092-666-504-839-351; 097-935-218-765-712; 113-374-734-943-168; 118-581-173-693-78X; 119-750-040-153-81X; 122-443-279-879-581; 122-988-175-691-701; 126-020-943-002-210; 135-483-615-695-705; 143-754-569-760-239; 156-775-249-745-245; 161-376-397-916-379; 164-575-338-888-452; 174-239-669-727-485; 187-532-195-483-865,9,true,"publisher-specific, author manuscript",green 031-893-069-294-517,Morphologic variations of lip-print patterns in a Central Indian population: A preliminary study.,2015-10-05,2015,journal article,"Medicine, science, and the law",20421818; 00258024,SAGE Publications Ltd,United Kingdom,Ashish Badiye; Neeti Kapoor,"Lip prints can provide vital information that may be useful for the purposes of forensic investigations. The current study was undertaken with the aims of determining the distribution and predominant lip-print patterns in a Central Indian (Marathi) population and evaluating whether any sex differences exist. The study subjects were 400 healthy consenting volunteers - 200 males and 200 females - aged 18-25 years, from the Marathi community. A simpler and more convenient method of data collection - digital photography - was used. The central (most motile) 1 cm(2) portion of both upper and lower lips was analysed digitally. As per Suzuki and Tsuchihashi's classification, overall, Type IV (27.5%) and Type III (6.25%) were found to be the most and least prevalent patterns, respectively. The Type II (32%) lip-print pattern was found to be most predominant in males, while Type IV (32.5%) was found to be most commonly occurring in females. Statistically significant differences (p < .01) were observed between lip-print pattern types in males and females.",56,3,200,204,Forensic science; Pathology; Demography; Marathi; Population; LIP PRINTS; Indian population; Biology,Forensic; Indian population; cheiloscopy; forensic identification; lip-print patterns,Adolescent; Adult; Asians; Female; Forensic Sciences; Humans; India; Lip/anatomy & histology; Male; Photography; Young Adult,,,https://www.ncbi.nlm.nih.gov/pubmed/26438391 https://pubmed.ncbi.nlm.nih.gov/26438391/ https://journals.sagepub.com/doi/abs/10.1177/0025802415605538 http://journals.sagepub.com/doi/abs/10.1177/0025802415605538 https://europepmc.org/article/MED/26438391 http://journals.sagepub.com/doi/pdf/10.1177/0025802415605538,http://dx.doi.org/10.1177/0025802415605538,26438391,10.1177/0025802415605538,2291270088,,0,009-799-147-134-415; 013-109-805-235-749; 016-308-501-475-373; 017-721-415-063-183; 020-932-202-648-418; 023-131-676-016-235; 024-348-175-937-523; 040-564-788-010-145; 043-873-653-982-367; 050-227-729-981-051; 053-705-296-288-915; 055-356-945-440-922; 058-998-237-936-365; 068-298-475-283-465; 068-556-377-252-592; 072-758-474-045-712; 075-025-797-442-043; 075-741-536-331-764; 084-449-009-264-801; 086-629-816-352-243; 087-391-588-830-272; 092-332-800-675-574; 092-616-262-222-950; 118-858-927-323-195; 120-916-951-244-723; 146-318-430-472-775,3,false,, 031-935-242-453-239,"An ""order of data acquisition"" for digital forensic investigations.",2022-01-07,2022,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Graeme Horsman,"Data acquisition is a fundamental stage of the digital forensic workflow, where without it, it may not be possible to conduct many criminal inquiries effectively. While any investigative team may want access to all digital data available, it is no longer an approach that is considered justifiable or proportionate in all cases. There is now an increasing narrative highlighting the invasiveness of digital data acquisition processes and their impact upon privacy, with calls to ensure greater scrutiny is placed upon their use. This work proposes the ""Order of Data Acquisition"" which defines 10 digital data acquisition methods that are available to practitioners as a part of a forensic examination, derived from a review of existing literature and best practice acquisition approaches, and arranged by their ""invasiveness."" Each method is discussed with examples provided in order to clarify and formalize the process of determining a suitable acquisition method in every case while acknowledging privacy invasion concerns. Finally, conclusions are drawn.",67,3,1215,1220,Workflow; Computer science; Data acquisition; Scrutiny; Process (computing); Digital forensics; Digital evidence; Data science; Digital data; Order (exchange); Computer security; Narrative,acquisition; data extraction; digital forensics; evidence,Forensic Medicine; Workflow,,,,http://dx.doi.org/10.1111/1556-4029.14979,34997585,10.1111/1556-4029.14979,,,0,000-225-165-729-99X; 003-982-227-180-136; 010-061-391-662-193; 010-963-610-208-920; 010-985-077-415-59X; 021-850-998-857-676; 044-161-230-287-523; 074-706-219-689-754; 090-752-043-508-733; 094-142-794-127-63X; 172-425-036-894-271; 183-000-233-873-221,0,false,, 032-048-799-213-502,Forensic analysis of Twitch video streaming activities on Android.,2021-05-31,2021,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Ali Alzahrani; Mohamad Ahtisham Wani; Wasim Ahmad Bhat,"Video streaming abuses range from copyright infringement and piracy to child sexual abuse and murder. This paper performs proactive forensics of Twitch video streaming activities on Android devices. We designed our experiments using a methodology based on black-box testing principles and conducted them on Android devices using a forensic framework. The results of our experiments suggest that forensic investigators can extract evidences of streams broadcast, shared, and watched by the user, and associate them with the Twitch account of the user. We detail all the recoverable artifacts of forensic significance, provide mechanisms to extract them based on the identified anchors, and interpret their significance in forensic investigations.",66,5,1721,1741,Forensic science; Copyright infringement; Video streaming; Child sexual abuse; Computer science; Multimedia; Android (operating system); Digital forensics,Android; Twitch; digital forensics; smartphone; streaming; video,,,"Deanship of Scientific Research, Islamic University of Madinah, Takamul (275)",https://www.ncbi.nlm.nih.gov/pubmed/34057746 https://pubmed.ncbi.nlm.nih.gov/34057746/ https://europepmc.org/article/MED/34057746 https://onlinelibrary.wiley.com/doi/10.1111/1556-4029.14750,http://dx.doi.org/10.1111/1556-4029.14750,34057746,10.1111/1556-4029.14750,3165021842,,0,003-504-554-245-316; 003-526-475-150-199; 008-855-420-001-822; 015-456-259-283-207; 015-910-979-561-313; 020-405-975-217-252; 022-723-601-549-961; 023-848-663-068-771; 024-400-926-604-62X; 029-239-733-639-707; 031-362-117-710-122; 032-245-149-035-161; 034-940-557-037-083; 039-626-669-719-288; 040-794-793-001-984; 046-512-599-163-701; 048-060-373-393-81X; 048-384-957-710-162; 048-448-215-711-780; 050-982-761-039-807; 052-610-182-374-534; 052-756-057-073-54X; 053-242-584-326-535; 056-697-625-039-269; 059-285-654-503-284; 059-922-045-758-643; 061-395-179-431-451; 064-682-064-945-840; 065-061-509-329-026; 068-110-711-047-134; 069-498-762-346-193; 077-859-446-810-741; 080-793-125-599-956; 089-380-540-556-832; 092-265-021-685-792; 093-949-513-452-753; 094-263-641-294-77X; 100-552-121-697-280; 102-169-873-723-040; 102-664-242-084-236; 102-699-432-261-272; 105-558-367-234-752; 110-038-432-739-194; 111-660-495-762-929; 121-305-792-390-494; 124-930-179-375-897; 128-985-340-093-196; 149-736-172-241-325; 155-758-692-373-705; 166-183-210-534-575; 166-547-932-138-819; 177-638-047-045-946; 179-094-182-417-378; 191-666-593-110-923,2,false,, 032-173-768-139-787,Forensic science steps to applying on computer to process and analyze digital evidence,,2016,journal article,International Journal of Advance Research and Innovative Ideas in Education,23954396,,,Santosh Sitaram Varpe,"Digital investigators collect the crime related information from the crime scene then making document and preserving digital evidence. To perform this task properly digital investigators need a methodology and also need help to find the scientific truth.; For this forensic science is useful, it offer tested methods for processing and analyzing evidence and reaching to final conclusion. This paper provide seven stages of forensic science to process and analyze digital evidence. When applying all this stages of forensic science investigator easily collect and analyze digital evidence.",2,6,286,289,World Wide Web; Forensic science; Crime scene; Computational criminology; Data science; Task (project management); Digital evidence; Scientific truth; Computer science; Process (engineering); Computer forensics,,,,,https://ijariie.com/AdminUploadPdf/Forensic_science_steps_to_applying_on_computer_to_process_and_analyze_digital_evidence_ijariie3311.pdf https://ijariie.com/FormDetails.aspx?MenuScriptId=2201,https://ijariie.com/FormDetails.aspx?MenuScriptId=2201,,,2740244222,,0,,0,false,, 032-177-035-917-99X,SSL based Webmail Forensic Engine,,2017,journal article,International Journal of Advanced Computer Science and Applications,21565570; 2158107x,The Science and Information Organization,,Abdalla Alameen; Manesh Thankappan; Bhadran V K; Abraham Varghese; Mohamed Yacoab; Mohamed Mustaq Ahmed Abdulhammed,"—In this era of information technology, email; applications are the foremost and extensively used electronic; communication technology. Emails are profusely used to; exchange data and information using several frontend; applications from various service providers by its users.; Currently most of the email clients and service providers now; moved to secured data communications using SSL or TLS; security for their data exchanged. Cyber criminals and terrorists; have started by means of this mode for exchanging their; malicious information in their transactions. Forensic experts; have to face greater difficulty and multiple challenges in tracing; crucial forensic information from network packets as the; communication is secured. These challenges might affect the; digital forensic experts in procuring substantial evidences against; such criminals from their working environments. This research; work revels working background of SSL based webmail forensic; engine, which decrypt respective communication or network; session and also reconstruct the actual message contents of; webmail applications. This digital forensic engine is compatible; to work with in proxy servers and other computing environments; and enables forensic reconstruction followed by analysis of; webmail clients. Proposed forensic engine employs is a highspeed; packet capturing hardware module, a sophisticated packet; reformation algorithm; restores email header and messages from; encrypted stream of SMTP and POP3 network sessions.; Proposed forensic engine also support cyber investigation team; with generated forensic report and prosecution of culprits by; judiciary system of the specific country",8,1,,,Service provider; Information technology; World Wide Web; Forensic science; Encryption; Network packet; Session (computer science); Computer security; Computer science; Header; Digital forensics; Server,,,,,https://thesai.org/Downloads/Volume8No1/Paper_23-SSL_based_Webmail_Forensic_Engine.pdf https://thesai.org/Publications/ViewPaper?Volume=8&Issue=1&Code=IJACSA&SerialNo=23 https://repository.psau.edu.sa/xmlui/handle/123456789/1496,http://dx.doi.org/10.14569/ijacsa.2017.080123,,10.14569/ijacsa.2017.080123,2583558861,,0,,1,true,cc-by,hybrid 032-255-760-335-854,"The dark side of I2P, a forensic analysis case study",2017-06-12,2017,journal article,Systems Science & Control Engineering,21642583,Informa UK Limited,,Behnam Bazli; Maxim Wilson; William Hurst,"ABSTRACTFile sharing applications, which operate as a form of Peer-to-Peer (P2P) network, are popular amongst users and developers due to their heterogeneity, decentralized approach and rudimentary deployment features. However, they are also used for illegal online activities and often are infested with malicious content such as viruses and contraband material. This brings new challenges to forensic investigations in detecting, retrieving and examining the P2P applications. Within the domain of P2P applications, the Invisible Internet Project (IP2) is used to allow applications to communicate anonymously. As such, this work discusses its use by network node operators and known attacks against privacy or availability of I2P routers. Specifically, we investigate the characteristics of I2P networks in order to outline the security flaws and the issues in detecting artefacts within the I2P. Furthermore, we present a discussion on new methods to detect the presence of I2P using forensic tools and reconstruct s...",5,1,278,286,Software deployment; The Internet; Engineering; Domain (software engineering); Order (exchange); Computer security; Great Rift,,,,,http://eprints.staffs.ac.uk/3650/ https://tandfonline.com/doi/pdf/10.1080/21642583.2017.1331770 https://researchonline.ljmu.ac.uk/id/eprint/9026/ https://core.ac.uk/display/84146920 https://www.tandfonline.com/doi/full/10.1080/21642583.2017.1331770 https://core.ac.uk/download/pdf/159993277.pdf,http://dx.doi.org/10.1080/21642583.2017.1331770,,10.1080/21642583.2017.1331770,2626935999,,0,019-826-952-127-692; 022-828-531-707-629; 023-081-910-050-261; 023-287-370-052-365; 026-462-639-811-374; 034-059-262-602-512; 041-639-661-898-538; 047-555-580-476-51X; 065-915-174-722-374; 070-784-128-942-628; 101-101-223-029-893; 108-488-345-047-41X; 139-174-151-529-085; 145-258-399-749-837,5,true,"CC BY, CC BY-NC",gold 032-309-709-283-332,Towards Increasing Trust In Expert Evidence Derived From Malware Forensic Tools,,2020,journal article,"The Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Ian Kennedy; Arosha K. Bandara; Blaine A. Price,"Following a series of high profile miscarriages of justice in the UK linked to questionable expert evidence, the post of the Forensic Science Regulator was created in 2008. The main objective of this role is to improve the standard of practitioner competences and forensic procedures. One of the key strategies deployed to achieve this is the push to incorporate a greater level of scientific conduct in the various fields of forensic practice. Currently there is no statutory requirement for practitioners to become accredited to continue working with the Criminal Justice System of England and Wales. However, the Forensic Science Regulator is lobbying the UK Government to make this mandatory. This paper focuses upon the challenge of incorporating a scientific methodology to digital forensic investigations where malicious software (‘malware’) has been identified. One aspect of such a methodology is the approach followed to both select and evaluate the tools used to perform dynamic malware analysis during an investigation. Based on the literature, legal, regulatory and practical needs we derive a set of requirements to address this challenge. We present a framework, called the ‘Malware Analysis Tool Evaluation Framework’ (MATEF), to address this lack of methodology to evaluate software tools used to perform dynamic malware analysis during investigations involving malware and discuss how it meets the derived requirements.",15,2,3,,Government; Statutory law; Key (cryptography); Data science; Justice (ethics); Malware analysis; Computer science; Malware; Accreditation; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/corr/corr2010.html#abs-2010-07188 http://oro.open.ac.uk/72827/ https://arxiv.org/pdf/2010.07188 https://arxiv.org/abs/2010.07188 https://commons.erau.edu/cgi/viewcontent.cgi?article=1691&context=jdfsl https://commons.erau.edu/jdfsl/vol15/iss2/3/ https://core.ac.uk/download/337616583.pdf,http://dx.doi.org/10.15394/jdfsl.2020.1691,,10.15394/jdfsl.2020.1691,3097452433,,0,,0,true,cc-by-nc,gold 032-373-300-951-303,"The materiality of digital media: The hard disk drive, phonograph, magnetic tape and optical media in technical close-up",2016-07-10,2016,journal article,New Media & Society,14614448; 14617315,SAGE Publications,United States,James Allen-Robertson,"Popular discourses surrounding contemporary digital media often misrepresent it as immaterial and ephemeral, overlooking the material devices that store and generate our media objects. This article materially ‘descends’ into a selection of prior media forms that make up the genealogy of the hard disk drive (HDD) to challenge our reliance on conceptual misrepresentations. This material analysis is used to situate digital media in a genealogy of prior media forms, to enrich our understanding of how media’s affordances arise from the interplay of both formal and forensic materiality and to demonstrate the value of reintegrating materiality back into the study of media.",19,3,455,470,Aesthetics; Optical disc; Materiality (auditing); Sociology; Digital media; Affordance; Magnetic tape; Value (ethics); Phonograph; Close-up; Multimedia,,,,,http://repository.essex.ac.uk/14709/ https://dblp.uni-trier.de/db/journals/nms/nms19.html#Allen-Robertson17 https://journals.sagepub.com/doi/abs/10.1177/1461444815606368 http://journals.sagepub.com/doi/abs/10.1177/1461444815606368?papetoc= https://core.ac.uk/download/74372881.pdf,http://dx.doi.org/10.1177/1461444815606368,,10.1177/1461444815606368,2174980630,,0,007-244-098-039-777; 026-099-393-000-411; 027-374-506-616-934; 030-587-088-332-513; 031-199-244-292-309; 032-771-764-387-214; 042-799-383-027-036; 055-449-744-123-085; 058-938-291-909-654; 074-846-441-929-477; 085-016-326-492-675; 090-138-703-598-915; 096-587-872-356-687; 120-816-758-327-414; 143-211-809-386-813; 154-287-259-389-939; 159-909-068-229-292; 163-159-853-593-959; 165-095-275-834-046; 169-932-587-419-395; 182-602-893-753-681; 194-479-478-401-317,33,true,,green 032-451-540-235-796,A case-based reasoning method for locating evidence during digital forensic device triage,,2014,journal article,Decision Support Systems,01679236,Elsevier BV,Netherlands,Graeme Horsman; Christopher Laing; Paul Vickers,"The role of triage in digital forensics is disputed, with some practitioners questioning its reliability for identifying evidential data. Although successfully implemented in the field of medicine, triage has not established itself to the same degree in digital forensics. This article presents a novel approach to triage for digital forensics. Case-Based Reasoning Forensic Triager (CBR-FT) is a method for collecting and reusing past digital forensic investigation information in order to highlight likely evidential areas on a suspect operating system, thereby helping an investigator to decide where to search for evidence. The CBR-FT framework is discussed and the results of twenty test triage examinations are presented. CBR-FT has been shown to be a more effective method of triage when compared to a practitioner using a leading commercial application.",61,61,69,78,World Wide Web; Forensic science; Case-based reasoning; Data science; Triage; Suspect; Test (assessment); Digital forensic investigation; Field (computer science); Computer science; Reliability (statistics); Digital forensics,,,,,https://research.tees.ac.uk/en/publications/a-case-based-reasoning-method-for-locating-evidence-during-digita https://dblp.uni-trier.de/db/journals/dss/dss61.html#HorsmanLV14 https://core.ac.uk/display/19479046 http://nrl.northumbria.ac.uk/15186/ https://researchportal.northumbria.ac.uk/en/publications/a-case-based-reasoning-method-for-locating-evidence-during-digita http://nrl.northumbria.ac.uk/15186/1/Horsman_et_al_Author_Accepted_Manuscript.pdf https://northumbria-test.eprints-hosting.org/id/document/264093 https://www.sciencedirect.com/science/article/pii/S0167923614000086,http://dx.doi.org/10.1016/j.dss.2014.01.007,,10.1016/j.dss.2014.01.007,1977236908,,2,003-982-227-180-136; 012-106-860-594-330; 015-353-077-946-637; 016-731-888-079-073; 018-618-238-562-758; 024-852-306-378-681; 029-938-776-068-353; 030-121-862-351-330; 032-840-153-267-455; 033-877-222-136-260; 042-423-147-359-818; 044-333-336-895-605; 047-630-600-014-492; 049-513-366-833-181; 049-896-268-388-337; 051-493-073-728-632; 057-254-747-112-851; 065-520-849-771-46X; 070-534-696-667-140; 075-056-106-679-562; 075-128-417-091-483; 089-564-665-174-244; 092-058-232-746-872; 093-007-312-043-778; 093-388-220-098-773; 094-081-969-768-185; 098-371-414-969-945; 109-598-947-309-943; 112-537-006-164-008; 145-062-913-009-934; 150-305-598-712-279; 167-398-164-200-13X; 168-819-441-615-181; 172-263-908-125-850; 191-319-072-202-754,30,true,cc-by-nc-nd,green 032-568-430-960-830,AI in digital forensics: Ontology engineering for cybercrime investigations,,2020,journal article,WIREs Forensic Science,25739468,Wiley,,Leslie F. Sikos,,3,3,,,Knowledge representation and reasoning; Automated reasoning; Data science; Ontology engineering; Cybercrime; Computer science; Digital forensics,,,,,https://onlinelibrary.wiley.com/doi/10.1002/wfs2.1394 https://wires.onlinelibrary.wiley.com/doi/epdf/10.1002/wfs2.1394 https://ro.ecu.edu.au/ecuworkspost2013/9822/,http://dx.doi.org/10.1002/wfs2.1394,,10.1002/wfs2.1394,3082637665,,0,001-507-239-208-313; 003-837-665-844-106; 005-116-312-278-527; 006-608-623-688-096; 006-639-948-169-026; 011-710-946-605-728; 011-795-937-681-185; 013-420-429-952-358; 015-087-812-098-242; 015-713-947-663-822; 019-886-690-125-068; 021-435-335-955-453; 028-743-893-820-114; 029-025-221-262-260; 035-031-257-128-045; 037-945-942-545-801; 040-918-493-878-882; 047-859-979-695-194; 047-937-309-229-62X; 054-601-093-496-749; 055-199-127-020-655; 056-451-337-159-266; 061-549-181-856-861; 065-671-045-136-370; 065-873-523-989-876; 067-342-140-206-619; 072-934-978-048-044; 073-194-524-558-213; 073-209-422-678-483; 074-210-245-746-776; 080-226-855-967-158; 085-666-602-084-614; 088-553-642-323-93X; 095-437-078-101-003; 096-679-960-335-93X; 113-713-027-851-049; 118-617-006-863-229; 143-959-640-326-451; 146-053-391-746-348; 155-063-496-030-974; 163-330-758-807-944; 163-877-074-795-849; 172-515-980-452-352,6,false,, 032-625-551-023-227,CT-scan vs. 3D surface scanning of a skull: first considerations regarding reproducibility issues,2017-04-03,2017,journal article,Forensic sciences research,24711411; 20961790,Informa UK Limited,England,Stella Fahrni; Lorenzo Campana; Alejandro Dominguez; Tanya Uldin; Fabrice Dedouit; Olivier Delémont; Silke Grabherr,"Three-dimensional surface scanning (3DSS) and multi-detector computed tomography (MDCT) are two techniques that are used in legal medicine for digitalizing objects, a body or body parts such as bones. While these techniques are more and more commonly employed, surprisingly little information is known about the quality rendering of digitalized three-dimensional (3D) models provided by each of them. This paper presents findings related to the measurement precision of 3D models obtained through observation of a study case, where a fractured skull reconstructed by an anthropologist was digitalized using both post-mortem imaging methods. Computed tomography (CT) scans were performed using an 8-row MDCT unit with two different slice thicknesses. The variability of 3D CT models superimposition allowed to assess the reproducibility and robustness of this digitalization technique. Furthermore, two 3D surface scans were done using a professional high resolution 3D digitizer. The comparison of 3D CT-scans with 3D surface scans by superimposition demonstrated several regions with significant differences in topology (average difference between +1.45 and -1.22 mm). When comparing the reproducibility between these two digitalizing techniques, it appeared that MDCT 3D models led in general to greater variability for measurement precision between scanned surfaces. Also, the reproducibility was better achieved with the 3D surface digitizer, showing 3D models with fewer and less pronounced differences (from +0.32 to -0.31 mm). These experiments suggest that MDCT provides less reproducible body models than 3D surface scanning. But further studies must be undertaken in order to corroborate this first impression, and possibly explain the reason for these findings.",2,2,93,99,Superimposition; Skull; Measurement precision; Nuclear medicine; Surface scanning; 3d model; High resolution; Computer science; Computed tomography; Reproducibility,3D surface scanning; Forensic imaging; anthropology; multi-detector computed tomography (MDCT),,,,https://www.tandfonline.com/doi/full/10.1080/20961790.2017.1334353 https://archive-ouverte.unige.ch/unige:111122/ATTACHMENT01 https://europepmc.org/article/MED/30483625 https://serval.unil.ch/resource/serval:BIB_221E3CF808F2.P001/REF.pdf https://tandfonline.com/doi/pdf/10.1080/20961790.2017.1334353 https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6197135/ https://core.ac.uk/display/132563034 https://pubmed.ncbi.nlm.nih.gov/30483625/ https://serval.unil.ch/notice/serval:BIB_221E3CF808F2 https://archive-ouverte.unige.ch/unige:111122 https://core.ac.uk/download/132563034.pdf,http://dx.doi.org/10.1080/20961790.2017.1334353,30483625,10.1080/20961790.2017.1334353,2680363168,PMC6197135,0,000-622-801-548-882; 001-443-081-330-529; 002-127-138-459-748; 004-041-617-516-186; 004-692-514-828-661; 006-053-337-346-101; 009-425-741-125-275; 011-610-093-323-543; 011-917-464-664-555; 012-477-285-701-154; 015-871-457-778-196; 016-580-313-404-132; 020-206-510-195-661; 021-237-083-615-788; 021-587-147-610-469; 024-065-202-822-642; 030-145-518-153-833; 033-494-716-108-018; 034-847-351-944-220; 039-565-056-532-406; 043-052-126-064-427; 046-389-420-549-647; 049-454-218-653-800; 059-942-525-213-35X; 061-309-114-020-746; 066-611-822-314-103; 073-990-255-764-904; 076-106-969-712-515; 077-520-389-079-338; 081-391-134-255-05X; 083-700-341-551-619; 090-002-858-421-716; 090-976-986-369-612; 102-257-392-263-901; 104-015-809-020-173; 126-486-980-769-44X; 148-938-986-519-196; 154-811-562-919-929,18,true,"CC BY, CC BY-NC",gold 032-985-315-491-140,Police Functional Adaptation to the Digital or Post Digital Age: Discussions with Cybercrime Experts:,2020-09-23,2020,journal article,The Journal of Criminal Law,00220183; 17405580,SAGE Publications,,Derek Johnson; Erin Faulkner; Georgia Meredith; Tim J. Wilson,This article examines the challenges of functional adaptation faced by the police in response to technologically driven changes in the nature of crime. It also recounts how research under the auspi...,84,5,427,450,Sociology; Cybercrime; Public relations; Adaptation (computer science),,,,nederlandse organisatie voor wetenschappelijk onderzoek; nordforsk,https://journals.sagepub.com/doi/pdf/10.1177/0022018320952559 https://journals.sagepub.com/doi/10.1177/0022018320952559 https://northumbria-test.eprints-hosting.org/id/document/272591 https://researchportal.northumbria.ac.uk/en/publications/police-functional-adaptation-to-the-digital-or-post-digital-age-d https://researchportal.northumbria.ac.uk/en/publications/police-functional-adaptation-to-the-digital-or-post-digital-age-discussions-with-cybercrime-experts(2c1f6e59-24aa-477c-97f4-ecfdf1f6d722)/export.html https://core.ac.uk/download/327952042.pdf,http://dx.doi.org/10.1177/0022018320952559,,10.1177/0022018320952559,3088317562,,0,,1,true,,green 033-096-629-217-984,Fingerprinting JPEGs With Optimised Huffman Tables,,2018,journal article,"The Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Sean McKeown; Gordon Russell; Petra Leimich,"A common task in digital forensics investigations is to identify known contraband images. This is typically achieved by calculating a cryptographic digest, using hashing algorithms such as SHA256, for each image on a given medium, and comparing individual digests with a database of known contraband. However, the large capacities of modern storage media and time pressures placed on forensics examiners necessitates the development of more efficient processing methods. This work describes a technique for fingerprinting JPEGs with optimised Huffman tables which requires only the image header to be present on the media. Such fingerprints are shown to be robust across large datasets, with demonstrably faster processing times",13,2,7,,Computer graphics (images); Computer science; Huffman coding; Digital forensics; Image processing,,,,,https://commons.erau.edu/cgi/viewcontent.cgi?article=1451&context=jdfsl https://dblp.uni-trier.de/db/journals/jdfsl/jdfsl13.html#McKeown0L18 https://commons.erau.edu/jdfsl/vol13/iss2/7/ https://core.ac.uk/download/161865936.pdf,http://dx.doi.org/10.15394/jdfsl.2018.1451,,10.15394/jdfsl.2018.1451,2896262405,,0,016-684-133-351-113; 029-518-640-859-761; 127-601-219-775-046; 163-330-758-807-944,3,true,cc-by-nc,gold 033-161-651-925-256,Review on effectiveness of deep learning approach in digital forensics,2022-10-01,2022,journal article,International Journal of Electrical and Computer Engineering (IJECE),27222578; 20888708,Institute of Advanced Engineering and Science,Indonesia,Sonali Ekhande; Uttam Patil; Kshama Vishwanath Kulhalli,"<p><span>Cyber forensics is use of scientific methods for definite description of cybercrime activities. It deals with collecting, processing and interpreting digital evidence for cybercrime analysis. Cyber forensic analysis plays very important role in criminal investigations. Although lot of research has been done in cyber forensics, it is still expected to face new challenges in near future. Analysis of digital media specifically photographic images, audio and video recordings are very crucial in forensics This paper specifically focus on digital forensics. There are several methods for digital forensic analysis. Currently deep learning (DL), mainly convolutional neural network (CNN) has proved very promising in classification of digital images and sound analysis techniques. This paper presents a compendious study of recent research and methods in forensic areas based on CNN, with a view to guide the researchers working in this area. We first, defined and explained preliminary models of DL. In the next section, out of several DL models we have focused on CNN and its usage in areas of digital forensic. Finally, conclusion and future work are discussed. The review shows that CNN has proved good in most of the forensic domains and still promise to be better.</span></p>",12,5,5481,5481,Digital forensics; Computer science; Convolutional neural network; Cybercrime; Crime analysis; Deep learning; Network forensics; Data science; Computer forensics; Face (sociological concept); Artificial intelligence; Computer security; World Wide Web; The Internet; Criminology; Sociology; Social science,,,,,,http://dx.doi.org/10.11591/ijece.v12i5.pp5481-5592,,10.11591/ijece.v12i5.pp5481-5592,,,0,,0,true,,hybrid 033-194-605-427-505,A Robust GAN-Generated Face Detection Method Based on Dual-Color Spaces and an Improved Xception,,2022,journal article,IEEE Transactions on Circuits and Systems for Video Technology,10518215; 15582205,Institute of Electrical and Electronics Engineers (IEEE),United States,Beijing Chen; Xin Liu; Yuhui Zheng; Guoying Zhao; Yun-Qing Shi,,32,6,3527,3538,,,,,National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; Natural Science Foundation of Jiangsu Province; Priority Academic Program Development of Jiangsu Higher Education Institutions (PAPD) fund,,http://dx.doi.org/10.1109/tcsvt.2021.3116679,,10.1109/tcsvt.2021.3116679,,,0,002-132-311-087-455; 006-779-782-656-573; 008-618-885-266-485; 012-906-553-254-972; 014-388-356-015-011; 020-183-786-910-970; 020-233-013-143-936; 022-365-815-444-375; 022-660-231-334-537; 027-952-199-154-195; 028-027-110-739-321; 029-610-517-151-794; 036-734-955-027-636; 036-833-936-567-876; 042-240-098-526-453; 051-718-396-534-597; 080-051-745-826-897; 086-342-670-610-968; 101-228-352-393-489; 109-299-872-389-685; 122-867-087-141-039; 123-498-859-171-509; 124-083-912-568-655; 125-924-765-016-083; 142-752-312-269-81X; 147-821-443-160-361; 151-934-660-750-160; 155-757-858-257-954; 158-804-209-744-953; 160-022-775-061-618; 166-593-301-710-660; 180-559-374-049-445; 188-340-140-468-094; 195-575-595-506-376,14,false,, 033-449-704-006-134,An Enhanced Approach for Digital Forensics using Innovative GSP Algorithm,2014-10-18,2014,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,Priyanka V. Kayarkar; Prashant Ricchariaya,"The advent of world-wide web not only changes our life view but also gives rise to advanced forms of digital crimes. Today’s era is the digital age, over the internet most of the facts are transferred through the digital devices. Cyber criminals always use Digital devices to conduct digital crime. The applicability of various forensics techniques in digital forensics helps the forensics investigators to adopt practical frameworks and methods to recover data for analysis which can comprise as evidence. In the field of Digital Forensics Data Mining has huge prospective. Computer forensics is a rising discipline investigating the computer crime. The goal of data mining technique is to find the valuable relationships between data items. This paper proposes a data mining approach for digital forensics investigations which is very important in today’s information age. Frequent Sequence Mining in data mining is one of the most important concepts used in Digital forensics Science. This thesis is an imperative work for Digital forensics investigations with maximum accuracy by using GSP algorithm.",103,6,18,22,The Internet; World Wide Web; Forensic science; Field (computer science); Computer science; Computer forensics; Digital forensics; GSP Algorithm,,,,,https://research.ijcaonline.org/volume103/number6/pxc3898308.pdf https://ui.adsabs.harvard.edu/abs/2014IJCA..103f..18K/abstract https://www.ijcaonline.org/archives/volume103/number6/18078-8308,http://dx.doi.org/10.5120/18078-8308,,10.5120/18078-8308,2131940555,,0,032-810-109-985-524; 080-816-595-560-369; 178-100-501-663-130; 181-095-475-426-346,1,true,,green 033-524-590-795-557,"RETRACTED: “A Probability Model of Covering Key Trace during Capturing Volatile Memory” Procedia Engineering Volume 29, 2012, Pages 1253–1258",,2012,journal article,Procedia Engineering,18777058,Elsevier BV,,Lianhai Wang; Hengjian Li; Zhen Su,"This article has been retracted: please see Elsevier Policy on Article Withdrawal (http://www.elsevier.com/locate/withdrawalpolicy).This article has been retracted at the request of the Editor.The authors have plagiarized part of a paper that had already appeared in Digital Investigation, 8 (2011) 3 - 22. http://dx.doi.org/10.1016/j.diin.2011.06.002. One of the conditions of submission of a paper for publication is that authors declare explicitly that their work is original and has not appeared in a publication elsewhere. Re-use of any data should be appropriately cited. As such this article represents a severe abuse of the scientific publishing system. The scientific community takes a very strong view on this matter and apologies are offered to readers of the journal that this was not detected during the submission process",29,,1253,1258,Volume (computing); Data mining; Artificial intelligence; Key (cryptography); Trace (semiology); Probability model; Computer science; Volatile memory,,,,,https://core.ac.uk/display/82620494 https://www.sciencedirect.com/science/article/pii/S1877705813003536 https://core.ac.uk/download/pdf/82620494.pdf,http://dx.doi.org/10.1016/j.proeng.2012.01.122,,10.1016/j.proeng.2012.01.122,2058167416,,0,003-412-732-826-511; 017-152-528-840-957; 030-155-118-042-252; 059-727-948-874-975; 070-537-312-031-893; 082-735-133-992-528; 093-448-702-012-591; 097-123-801-131-393; 139-495-561-188-858,1,true,,gold 033-740-867-472-387,Approaches of network forensic model for investigation,,2017,journal article,International Journal of Forensic Engineering,17449944; 17449952,Inderscience Publishers,,Gulshan Shrivastava,"Universally, the security and forensic workforce keeps up tab through newest technology of attack tools and modus operandi adopted by attackers. There is a plethora of free tools available, but they aid in enforcing the security mechanisms and analysing the attack traffic only to a certain measure. With every passing day, size of internet manifolds and so does the kind and nature of attacks. Thus, it has become difficult to analyse crime that is related with computer, as it is multiplying as fast as the web of internet itself. Digital forensic investigation is the systematic restitution of evidences/proofs collected as an outcome of exploration of concrete happenings based on digital data. After evaluating all the historical approaches used in the existing models, their pros and cons are elicited and an Encapsulated Approach of Forensic (EAF) model (proposed earlier) is extended, which engulfs all the phases of digital investigation in detail. It gives an orderly, organised and scrupulous step-by-step procedure, from identification of facts and evidences to presentation of results by the investigator in front of investigating organisation.",3,3,195,,Mathematical proof; The Internet; Engineering; Presentation; Digital data; Computer security; Network forensics; Computer forensics; Identification (information); Digital forensics,,,,,https://www.inderscienceonline.com/doi/abs/10.1504/IJFE.2017.082977,http://dx.doi.org/10.1504/ijfe.2017.082977,,10.1504/ijfe.2017.082977,2595256955,,0,,21,false,, 033-782-124-307-044,"Forensic signature for tracking storage devices: Analysis of UEFI firmware image, disk signature and windows artifacts",,2019,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Doowon Jeong; Sangjin Lee,,29,,21,27,Copying; Drawback; Device tracking; Storage type; Computer science; USB; Firmware; Digital forensics; Computer hardware,,,,,https://koreauniv.pure.elsevier.com/en/publications/forensic-signature-for-tracking-storage-devices-analysis-of-uefi- https://www.sciencedirect.com/science/article/pii/S1742287618303293,http://dx.doi.org/10.1016/j.diin.2019.02.004,,10.1016/j.diin.2019.02.004,2919464213,,0,002-710-519-237-792; 061-139-633-577-862; 064-062-472-395-879; 160-010-780-231-257,5,false,, 033-842-806-385-893,"Windows Forensic Analysis DVD Toolkit, 2nd edition. By Harlan Carvey",2010-03-18,2010,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Gary C. Kessler,The first edition of Harlan Carvey's text on Windows forensics quickly became a standard as an example of both a quality professional reference and a source of a font of practical information on th...,3,1,64,66,Human–computer interaction; Font; Quality (business); Computer science; Multimedia,,,,,https://works.bepress.com/gary_kessler/51/ https://dblp.uni-trier.de/db/journals/jdfp/jdfp3.html#Kessler10a,http://dx.doi.org/10.1080/15567280903463819,,10.1080/15567280903463819,1658603452,,0,,0,false,, 033-934-277-597-601,Bridging Disciplines to Form a New One: The Emergence of Forensic Genetic Genealogy.,2022-08-01,2022,journal article,Genes,20734425,Multidisciplinary Digital Publishing Institute (MDPI),Switzerland,Claire L Glynn,"Forensic Genetic Genealogy (FGG) has fast become a popular tool in criminal investigations since it first emerged in 2018. FGG is a novel investigatory tool that has been applied to hundreds of unresolved cold cases in the United States to generate investigative leads and identify unknown individuals. Consumer DNA testing and the public's increased curiosity about their own DNA and genetic ancestry, have greatly contributed to the availability of human genetic data. Genetic genealogy has been a field of study/interest for many years as both amateur and professional genetic genealogists use consumer DNA data to explore genetic connections in family trees. FGG encompasses this knowledge by applying advanced sequencing technologies to forensic DNA evidence samples and by performing genetic genealogy methods and genealogical research, to produce possible identities of unknown perpetrators of violent crimes and unidentified human remains. This combination of forensic genetics, genetic genealogy, and genealogical research has formed a new subdiscipline within the forensic sciences. This paper will summarize the individual disciplines that led to the emergence of FGG, its practice in forensic investigations, and current/future considerations for its use.",13,8,1381,1381,Genetic genealogy; Genealogy; Forensic science; Amateur; Forensic genetics; Genetic data; Genetics; Biology; Evolutionary biology; Sociology; History; Political science; Law; Gene; Population; Microsatellite; Allele; Demography,DNA; Forensic Genetic Genealogy; Single Nucleotide Polymorphisms; consumer DNA testing; forensic genetics; forensic science; genealogy; investigations,DNA/genetics; Forensic Genetics/methods; Humans; Pedigree; United States,DNA,,,http://dx.doi.org/10.3390/genes13081381,36011291,10.3390/genes13081381,,PMC9407302,0,012-765-961-458-476; 013-816-330-780-42X; 020-813-400-220-218; 034-842-112-294-520; 036-355-230-725-98X; 040-547-543-697-335; 040-704-767-245-49X; 046-734-276-130-271; 051-839-746-869-938; 051-865-480-104-768; 056-614-542-425-58X; 073-693-472-209-439; 077-485-891-655-117; 093-662-690-126-053; 097-212-605-057-338; 149-212-125-131-53X,1,true,cc-by,gold 034-062-967-171-107,The evidential value of distorted and rectified digital images in footwear imprint examination.,2005-09-26,2005,journal article,Forensic science international,03790738; 18726283,Elsevier Ireland Ltd,Netherlands,Yaron Shor; Alan Chaikovsky; Tsadok Tsach,,160,1,59,65,Photography; Perspective (geometry); Artificial intelligence; Digital photography; Lens (optics); Perpendicular; Forensic photography; Computer vision; Computer science; Digital image; Image processing,,"Forensic Medicine/methods; Humans; Image Processing, Computer-Assisted; Photography; Shoes; Software",,,https://pubmed.ncbi.nlm.nih.gov/16191473/ http://www.fsijournal.org/article/S0379-0738(05)00465-2/abstract https://www.ncbi.nlm.nih.gov/pubmed/16191473 https://www.sciencedirect.com/science/article/abs/pii/S0379073805004652,http://dx.doi.org/10.1016/j.forsciint.2005.08.017,16191473,10.1016/j.forsciint.2005.08.017,1968653699,,0,012-112-052-857-703; 029-097-734-172-204; 055-137-643-816-189; 057-990-628-856-087; 069-995-341-585-134; 097-001-053-310-699; 099-702-377-910-695; 152-359-824-381-081; 174-235-449-527-096; 174-521-672-841-085,5,false,, 034-146-991-345-224,TraceGen: User activity emulation for digital forensic test image generation,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Xiaoyu Du; Christopher Hargreaves; John Sheppard; Mark Scanlon,"Abstract Digital forensic test images are commonly used across a variety of digital forensic use cases including education and training, tool testing and validation, proficiency testing, malware analysis, and research and development. Using real digital evidence for these purposes is often not viable or permissible, especially when factoring in the ethical and in some cases legal considerations of working with individuals' personal data. Furthermore, when using real data it is not usually known what actions were performed when, i.e., what was the ‘ground truth’. The creation of synthetic digital forensic test images typically involves an arduous, time-consuming process of manually performing a list of actions, or following a ‘story’ to generate artefacts in a subsequently imaged disk. Besides the manual effort and time needed in executing the relevant actions in the scenario, there is often little room to build a realistic volume of non-pertinent wear-and-tear or ‘background noise’ on the suspect device, meaning the resulting disk images are inherently limited and to a certain extent simplistic. This work presents the TraceGen framework, an automated system focused on the emulation of user actions to create realistic and comprehensive artefacts in an auditable and reproducible manner. The framework consists of a series of actions contained within scripts that are executed both externally and internally to a target virtual machine. These actions use existing automation APIs to emulate a real user's behaviour on a Windows system to generate realistic and comprehensive artefacts. These actions can be quickly scripted together to form complex stories or to emulate wear-and-tear on the test image. In addition to the development of the framework, evaluation is also performed in terms of the ability to produce background artefacts at scale, and also the realism of the artefacts compared with their human-generated counterparts.",38,,301133,,Human–computer interaction; Automation; Emulation; Standard test image; Virtual machine; Digital evidence; Use case; Computer science; Scripting language; Digital forensics,,,,,https://dfrws.org/presentation/tracegen-user-activity-emulation-for-digital-forensic-test-image-generation/ https://forensicsandsecurity.com/papers/TraceGen.php https://www.sciencedirect.com/science/article/pii/S2666281721000317 https://forensicsandsecurity.com/papers/TraceGen.pdf https://dfrws.org/wp-content/uploads/2021/01/2021_APAC_paper-tracegen_user_activity_emulation_for_digital_forensic_test_image_generation.pdf,http://dx.doi.org/10.1016/j.fsidi.2021.301133,,10.1016/j.fsidi.2021.301133,3025740502,,0,003-215-589-043-553; 004-652-388-189-304; 012-534-389-932-297; 027-725-711-087-703; 029-537-963-034-821; 035-516-459-750-954; 036-112-898-081-145; 047-997-437-748-154; 052-265-945-620-031; 069-470-566-664-229; 096-838-446-149-582; 097-870-438-024-364; 105-194-296-544-889; 122-553-557-970-535; 133-760-572-035-837,8,true,cc-by-nc-nd,hybrid 034-296-835-734-643,Fourteenth Annual DFRWS Conference,,2014,journal article,Digital Investigation,17422876; 1873202x,Elsevier BV,Netherlands,,,11,,S1,S2,Computer science,,,,,https://core.ac.uk/download/pdf/82091462.pdf,http://dx.doi.org/10.1016/j.diin.2014.06.005,,10.1016/j.diin.2014.06.005,,,0,,1,true,cc-by-nc-nd,hybrid 034-450-994-409-832,A Rate-and-Trust-Based Node Selection Model for Block Transmission in Blockchain Networks,,2022,journal article,IEEE Internet of Things Journal,23274662; 23722541,Institute of Electrical and Electronics Engineers (IEEE),,PeiYun Zhang; YanHao Tao; QingLin Zhao; MengChu Zhou,,,,1,1,,,,,,,http://dx.doi.org/10.1109/jiot.2022.3210197,,10.1109/jiot.2022.3210197,,,0,,0,false,, 034-545-948-738-928,Introducing a semi-automatic method to simulate large numbers of forensic fingermarks for research on fingerprint identification.,2011-11-21,2011,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Crystal M. Rodriguez; Arent de Jongh; Didier Meuwly,"Statistical research on fingerprint identification and the testing of automated fingerprint identification system (AFIS) performances require large numbers of forensic fingermarks. These fingermarks are rarely available. This study presents a semi-automatic method to create simulated fingermarks in large quantities that model minutiae features or images of forensic fingermarks. This method takes into account several aspects contributing to the variability of forensic fingermarks such as the number of minutiae, the finger region, and the elastic deformation of the skin. To investigate the applicability of the simulated fingermarks, fingermarks have been simulated with 5-12 minutiae originating from different finger regions for six fingers. An AFIS matching algorithm was used to obtain similarity scores for comparisons between the minutiae configurations of fingerprints and the minutiae configurations of simulated and forensic fingermarks. The results showed similar scores for both types of fingermarks suggesting that the simulated fingermarks are good substitutes for forensic fingermarks. Language: en",57,2,334,342,Automated fingerprint identification; Engineering; Artificial intelligence; Pattern recognition; Fingerprint; Accident prevention; Semi automatic; Poison control; Injury control; Simulation; Minutiae,,"Algorithms; Computer Simulation; Databases, Factual; Dermatoglyphics; Humans; Image Processing, Computer-Assisted; Software",,,https://europepmc.org/article/MED/22103733 https://www.safetylit.org/citations/index.php?fuseaction=citations.viewdetails&citationIds[]=citjournalarticle_335248_38 https://onlinelibrary.wiley.com/doi/full/10.1111/j.1556-4029.2011.01950.x https://www.ncbi.nlm.nih.gov/pubmed/22103733,http://dx.doi.org/10.1111/j.1556-4029.2011.01950.x,22103733,10.1111/j.1556-4029.2011.01950.x,1530436009,,1,011-236-545-123-589; 012-820-104-216-906; 017-516-808-273-373; 082-774-205-454-334; 092-568-395-685-226; 103-857-226-889-269; 158-623-161-627-789; 174-914-215-838-312,18,false,, 034-643-583-457-718,Development and validation of a Database Forensic Metamodel (DBFM).,2017-02-01,2017,journal article,PloS one,19326203,Public Library of Science,United States,Arafat Al-Dhaqm; Shukor Abd Razak; Siti Hajar Othman; Asri Ngadi; Mohammed Nazir Ahmed; Abdulalem Ali Mohammed,"Database Forensics (DBF) is a widespread area of knowledge. It has many complex features and is well known amongst database investigators and practitioners. Several models and frameworks have been created specifically to allow knowledge-sharing and effective DBF activities. However, these are often narrow in focus and address specified database incident types. We have analysed 60 such models in an attempt to uncover how numerous DBF activities are really public even when the actions vary. We then generate a unified abstract view of DBF in the form of a metamodel. We identified, extracted, and proposed a common concept and reconciled concept definitions to propose a metamodel. We have applied a metamodelling process to guarantee that this metamodel is comprehensive and consistent.",12,2,e0170793,,Development (topology); Database forensics; Computer science; Process (engineering); Database; Metamodeling; Metadata,,"Databases, Factual; Forensic Sciences/methods; Humans; Models, Theoretical; Reproducibility of Results",,,http://eprints.utm.my/id/eprint/74902/ https://www.ncbi.nlm.nih.gov/pubmed/28146585 https://core.ac.uk/display/154349693 https://journals.plos.org/plosone/article?id=10.1371/journal.pone.0170793 https://europepmc.org/article/MED/28146585 http://ui.adsabs.harvard.edu/abs/2017PLoSO..1270793A/abstract https://core.ac.uk/download/154349693.pdf,http://dx.doi.org/10.1371/journal.pone.0170793,28146585,10.1371/journal.pone.0170793,2585519145,PMC5287479,0,000-798-288-972-437; 001-148-044-584-317; 001-255-768-346-633; 003-135-959-594-644; 007-120-713-093-456; 007-458-210-702-991; 007-803-508-283-309; 009-372-939-859-569; 010-404-860-597-016; 011-600-934-116-591; 011-751-762-940-83X; 012-513-507-858-76X; 013-948-086-796-589; 014-014-976-750-686; 016-493-098-401-733; 016-802-983-722-587; 019-119-495-482-994; 022-645-174-656-023; 025-308-544-437-672; 026-676-242-548-364; 029-518-372-349-940; 029-654-179-464-871; 029-934-518-651-564; 032-289-031-228-907; 038-459-578-783-231; 038-812-715-821-148; 040-562-863-527-963; 041-352-888-495-540; 041-635-805-946-810; 042-767-661-429-064; 043-742-356-311-540; 045-222-856-841-787; 045-423-724-955-863; 048-208-051-417-987; 050-069-243-492-978; 052-751-789-415-696; 052-919-508-917-670; 055-850-354-942-609; 059-014-234-603-671; 060-743-410-850-643; 061-960-915-134-527; 063-229-337-814-634; 063-475-319-066-007; 069-754-697-292-909; 074-503-636-433-987; 079-766-342-941-931; 080-037-699-095-630; 080-214-113-247-217; 080-226-855-967-158; 083-322-626-930-350; 087-732-503-812-490; 090-906-472-238-11X; 091-540-399-535-662; 092-296-079-186-621; 094-143-534-138-927; 095-724-825-960-55X; 097-957-515-883-413; 100-459-328-094-990; 107-073-015-957-460; 107-362-112-311-662; 108-269-238-473-894; 112-333-992-894-015; 115-095-105-779-204; 117-065-920-586-287; 117-376-836-229-111; 118-095-530-189-407; 119-895-425-385-192; 120-072-322-429-12X; 120-338-862-399-078; 120-634-732-352-200; 121-704-965-852-836; 125-519-560-533-563; 131-138-696-366-088; 133-120-498-513-750; 137-569-254-769-800; 138-851-840-986-301; 140-965-763-683-100; 141-164-327-638-772; 142-834-307-358-569; 144-229-342-149-452; 146-334-817-842-70X; 155-706-225-696-164; 158-752-499-155-521; 163-330-758-807-944; 175-252-436-865-02X; 177-706-139-538-803; 180-706-989-021-884; 193-519-071-229-591,28,true,cc-by,gold 034-651-507-138-790,Review Paper on Introduction to Cyber Forensics,2021-08-31,2021,journal article,International Journal for Research in Applied Science and Engineering Technology,23219653,International Journal for Research in Applied Science and Engineering Technology (IJRASET),,Priya R. Yadav,"Abstract: Cyber Forensics is termed as scientific methods or applications in association with the judiciary or court of laws. The aim behind these methods is to unveil the digital evidence to be utilized in court for solving crime cases. This sort of technology wasn’t practiced before therefore most criminals tend to urge away with their criminal acts without valid proof to incriminate or prosecute them. During that time the oaths, confessions, testimonies from witnesses were the sole determining factors of evidence Crimes committed within electronic or digital domains, particularly within cyberspace, have become common. Criminals are using technology to commit their offenses and make new challenges for law enforcement agents, attorneys, judges, military, and security professionals. Digital forensics has become a vital instrument in identifying and solving computer-based and computerassisted crime. This paper provides a quick introduction to cyber forensics. During this paper we present a typical model for both Incident Response and Computer Forensics processes which mixes their advantages in an exceedingly flexible way: It allows for a management oriented approach in digital investigations while retaining the chance of a rigorous forensics investigation. Keywords: cyber forensics, digital forensic science, computer forensics, evidence, judicial system.",9,8,1939,1942,Engineering; Computer security,,,,,http://dx.doi.org/10.22214/ijraset.2021.37684,http://dx.doi.org/10.22214/ijraset.2021.37684,,10.22214/ijraset.2021.37684,3195949822,,0,,0,true,,gold 034-777-902-744-524,Leveraging Decentralization to Extend the Digital Evidence Acquisition Window: Case Study on Bittorrent Sync,,2014,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Mark Scanlon; Jason Farina; Nhien An Le Khac; Tahar Kechadi,"6th International Conference on Digital Forensics and Cyber Crime (ICDF2C 2014), New Haven, Connecticut, United States, 18-20 September 2014",9,2,85,99,Haven; Digital evidence; Computer security; sync; Computer science; Network forensics; BitTorrent; Peer-to-peer; Mobile device forensics; Digital forensics,,,,,http://markscanlon.co/papers/LeveragingDecentralisationToExtendTheDigitalEvidenceAcquisitionWindow.pdf https://commons.erau.edu/jdfsl/vol9/iss2/8/ https://researchrepository.ucd.ie/bitstream/10197/6575/1/insight_publication.pdf https://forensicsandsecurity.com/papers/LeveragingDecentralisationToExtendTheDigitalEvidenceAcquisitionWindow.pdf https://forensicsandsecurity.com/papers/LeveragingDecentralisationToExtendTheDigitalEvidenceAcquisitionWindow.php https://dblp.uni-trier.de/db/journals/corr/corr1409.html#ScanlonFKK14 https://commons.erau.edu/cgi/viewcontent.cgi?article=1173&context=jdfsl https://researchrepository.ucd.ie/handle/10197/6575 https://www.markscanlon.co/papers/LeveragingDecentralisationToExtendTheDigitalEvidenceAcquisitionWindow.php,http://dx.doi.org/10.15394/jdfsl.2014.1173,,10.15394/jdfsl.2014.1173,1495154457,,0,007-326-471-789-197; 015-191-033-215-139; 025-207-270-351-448; 030-658-837-957-277; 058-631-300-195-90X; 069-007-833-693-813; 069-436-005-091-548; 121-704-965-852-836; 121-951-797-869-548; 162-583-351-915-619,13,true,cc-by-nc,gold 035-031-257-128-045,Advancing coordinated cyber-investigations and tool interoperability using a community developed specification language,,2017,journal article,Digital investigation,1873202x; 17422876,Elsevier Limited,Netherlands,Eoghan Casey; Sean Barnum; Ryan Griffith; Jonathan Snyder; Harm van Beek; Alexander J. Nelson,"Any investigation can have a digital dimension, often involving information from multiple data sources, organizations and jurisdictions. Existing approaches to representing and exchanging cyber-investigation information are inadequate, particularly when combining data sources from numerous organizations or dealing with large amounts of data from various tools. To conduct investigations effectively, there is a pressing need to harmonize how this information is represented and exchanged. This paper addresses this need for information exchange and tool interoperability with an open community-developed specification language called Cyber-investigation Analysis Standard Expression (CASE). To further promote a common structure, CASE aligns with and extends the Unified Cyber Ontology (UCO) construct, which provides a format for representing information in all cyber domains. This ontology abstracts objects and concepts that are not CASE-specific, so that they can be used across other cyber disciplines that may extend UCO. This work is a rational evolution of the Digital Forensic Analysis eXpression (DFAX) for representing digital forensic information and provenance. CASE is more flexible than DFAX and can be utilized in any context, including criminal, corporate and intelligence. CASE also builds on the Hansken data model developed and implemented by the Netherlands Forensic Institute (NFI). CASE enables the fusion of information from different organizations, data sources, and forensic tools to foster more comprehensive and cohesive analysis. This paper includes illustrative examples of how CASE can be implemented and used to capture information in a structured form to advance sharing, interoperability and analysis in cyber-investigations. In addition to capturing technical details and relationships between objects, CASE provides structure for representing and sharing details about how cyber-information was handled, transferred, processed, analyzed, and interpreted. CASE also supports data marking for sharing information at different levels of trust and classification, and for protecting sensitive and private information. Furthermore, CASE supports the sharing of knowledge related to cyber-investigations, including distinctive patterns of activity/behavior that are common across cases. This paper features a proof-of-concept Application Program Interface (API) to facilitate implementation of CASE in tools. Community members are encouraged to participate in the development and implementation of CASE and UCO.",22,,14,45,World Wide Web; Ontology (information science); Information exchange; Interoperability; Specification language; Information sharing; Computer science; Digital forensics; Data model; Application programming interface,CybOX; Cyber-investigation; DFAX; DFXML; Digital evidence exchange; Digital forensics; Evidence provenance; Information sharing; Specification language; Standard representation; Unified cyber ontology,,,Intramural NIST DOC (9999-NIST) United States,https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6774392/ https://pubmed.ncbi.nlm.nih.gov/31579279/ https://dl.acm.org/doi/10.1016/j.diin.2017.08.002 https://www.nist.gov/publications/advancing-coordinated-cyber-investigations-and-tool-interoperability-using-community https://europepmc.org/article/MED/31579279 https://www.sciencedirect.com/science/article/pii/S1742287617301007 https://csrc.nist.gov/publications/detail/journal-article/2017/advancing-coordinated-cyber-investigations https://doi.org/10.1016/j.diin.2017.08.002 https://dblp.uni-trier.de/db/journals/di/di22.html#CaseyBGSBN17 http://www.sciencedirect.com/science/article/pii/S1742287617301007 https://core.ac.uk/download/226978171.pdf,http://dx.doi.org/10.1016/j.diin.2017.08.002,31579279,10.1016/j.diin.2017.08.002,2746119360,PMC6774392,0,001-170-920-458-777; 006-008-915-210-060; 010-985-077-415-59X; 011-051-740-313-213; 024-735-069-822-749; 033-241-817-699-448; 039-663-245-950-286; 039-835-013-427-363; 041-262-876-489-486; 056-715-378-869-201; 060-650-561-577-338; 061-549-181-856-861; 065-671-045-136-370; 073-194-524-558-213; 104-758-205-558-797; 105-102-860-204-164; 109-657-364-699-131; 117-239-595-156-183; 125-939-677-745-616; 135-807-482-654-421; 153-474-160-113-956; 154-517-106-328-503; 155-063-496-030-974; 167-740-265-127-825,33,true,,green 035-078-138-939-96X,Digital forensic investigation methodology for Storage Space: Based on the NIST digital forensic process.,2022-01-28,2022,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Junho Kim; Sangjin Lee; Doowon Jeong,"For forensic examiners, investigating the RAID systems of servers has been challenging, as the examiners must reconstruct multiple high-capacity disks to identify digital evidence. Software-based RAID systems' use has been released for personal use, so examiners should consider RAID systems even when they investigate personal computers. Although there is a high probability that the software-based RAID will become a target of crime, there has been little research into digital forensic methodology for software-based RAID, as exemplified by Storage Space. In this paper, we introduce details about the structure of Storage Space found through reverse engineering. Storage Space was analyzed by applying the digital forensic process of NIST. We explain how to reconstruct a virtual disk configured using Storage Space and develop an automated tool to do so. To evaluate our study and the tool developed, we created an experimental scenario and describe in detail the forensic procedure and technical methods for the analysis of Storage Space. Our research can be used as the basis of forensic investigations for Storage Space.",67,3,989,1001,RAID; Digital forensics; Computer science; Process (computing); NIST; Software; Space (punctuation); Digital evidence,RAID forensics; RAID reconstruction; Storage Space; digital forensics; software-based RAID; windows forensics,Crime; Forensic Medicine; Software,,Dongguk University (2020); This work was supported by the Dongkuk University Research Fund of 2020; This work was supported by the Dongguk University Research Fund of 2020,,http://dx.doi.org/10.1111/1556-4029.14992,35092033,10.1111/1556-4029.14992,,,0,009-435-455-091-122; 009-833-376-779-037; 031-275-479-939-025; 042-984-932-165-592; 062-810-316-068-33X; 063-101-076-395-60X; 113-223-895-127-382; 123-678-549-104-43X; 135-834-233-194-309; 143-736-035-550-123; 156-990-496-742-22X; 163-330-758-807-944,0,false,, 035-126-027-906-691,Who is the digital forensic expert and what is their expertise?,2022-01-26,2022,journal article,WIREs Forensic Science,25739468,Wiley,,Graeme Horsman; Brett Shavers,"Given the importance of digital evidence to many inquiries, the services of practitioners in the digital forensic field are often sought. In some cases, a “digital forensic expert witness” may be required to conduct specific investigatory work and provide opinion evidence. Here we explore the concept of a digital forensic expert witness while also considering whether this term may now be potentially misleading to those outside of this domain. A discussion of the challenges that exist when trying to establish and assess the validity of expertise in this field is offered. Suggestions for ways to both evidence and correctly identify relevant expertise are made, taking into account the viewpoints of both the potential expert and client. This article is categorized under: Digital and Multimedia Science > Multimedia Forensics",4,5,,,Digital forensics; Expert witness; Viewpoints; Computer forensics; Witness; Digital evidence; Forensic psychology; Computer science; Field (mathematics); Forensic science; Data science; Subject-matter expert; Domain (mathematical analysis); Expert opinion; Engineering ethics; Internet privacy; Psychology; Computer security; Expert system; Engineering; Political science; Artificial intelligence; Medicine; Law; Criminology; Art; Mathematics; Mathematical analysis; Intensive care medicine; Visual arts; Programming language; Veterinary medicine; Pure mathematics,,,,,,http://dx.doi.org/10.1002/wfs2.1453,,10.1002/wfs2.1453,,,0,006-933-430-647-14X; 034-729-447-864-463; 083-380-435-354-691; 102-243-142-344-71X; 134-927-490-231-285,0,true,,hybrid 035-274-013-659-639,Use of atomic force microscopy in the forensic application of chronological order of toners and stamping inks in questioned documents,2016-02-01,2016,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Tae-Yi Kang; Joong Lee; Byung-Wook Park,,261,261,26,32,Atomic force microscopy; Inkwell; Stamping; Engineering drawing; Order (business); Computer science,Chinese seal; Counterfeit; Genuine; Sequence discrimination; Toner printing,,,,https://www.infona.pl/resource/bwmeta1.element.elsevier-0ca132fe-7216-3612-ae68-d86378c6da01 https://pure.mpg.de/pubman/faces/ViewItemOverviewPage.jsp?itemId=item_2401538 https://www.ncbi.nlm.nih.gov/pubmed/26874052 https://core.ac.uk/display/84018700 https://pubmed.ncbi.nlm.nih.gov/26874052/ http://www.sciencedirect.com/science/article/pii/S037907381630007X http://europepmc.org/abstract/MED/26874052 https://www.sciencedirect.com/science/article/abs/pii/S037907381630007X,http://dx.doi.org/10.1016/j.forsciint.2016.01.033,26874052,10.1016/j.forsciint.2016.01.033,2263777247,,0,000-398-902-467-690; 010-755-783-739-336; 026-800-186-421-929; 033-337-325-493-618; 034-397-285-350-380; 035-938-065-572-286; 040-361-274-450-012; 040-672-205-323-843; 044-055-458-886-822; 051-516-153-496-922; 057-864-668-542-923; 059-561-197-114-651; 064-615-407-200-219; 070-323-856-910-091; 073-869-616-549-691; 096-430-903-143-217; 106-762-617-304-077; 136-814-944-348-042; 158-366-966-925-009; 158-834-138-871-572,6,false,, 035-299-026-735-777,Placing the suspect at a PC: A preliminary study involving fingerprints on keyboards and mice.,2020-07-11,2020,journal article,Science & justice : journal of the Forensic Science Society,18764452; 13550306,Forensic Science Society,United Kingdom,Traian Fulea-Magarit; Helen Page; Graeme Horsman,"Abstract Digital devices now play an important role in the lives of many in society. Whilst they are used predominantly for legitimate purposes, instances of digital crime are witnessed, where determining their usage is important to any criminal investigation. Typically, when determining who has used a digital device, digital forensic analysis is utilised, however, biological trace evidence or fingerprints residing on its surfaces may also be of value. This work provides a preliminary study which examines the potential for fingerprint recovery from computer peripherals, namely keyboards and mice. Our implementation methodology is outlined, and results discussed which indicate that print recovery is possible. Findings are intended to support those operating at-scene in an evidence collection capacity.",61,1,89,96,Human–computer interaction; Criminal investigation; Crime scene; Trace evidence; Fingerprint (computing); Suspect; Digital device; Evidence collection; Computer science; Digital forensics,Crime scene; Digital forensics; Evidence; Fingerprints,Computer Peripherals; Crime; Forensic Medicine/methods; Humans,,,https://www.ncbi.nlm.nih.gov/pubmed/33357831 https://www.sciencedirect.com/science/article/abs/pii/S1355030620300290,http://dx.doi.org/10.1016/j.scijus.2020.07.003,33357831,10.1016/j.scijus.2020.07.003,3041697087,,0,016-352-495-743-48X; 019-831-293-743-518; 026-810-683-474-561; 044-781-123-854-77X; 058-829-172-935-902; 075-136-991-324-974; 080-161-175-307-872; 134-243-771-692-742; 192-869-837-381-364,0,false,, 035-410-610-655-824,"Next Generation Digital Forensic Investigation Model (NGDFIM) - Enhanced, Time Reducing and Comprehensive Framework",2021-02-01,2021,journal article,Journal of Physics: Conference Series,17426588; 17426596,IOP Publishing,United Kingdom,Akash A Thakar; Kapil Kumar; Baldev Patel,"Abstract; Rapid technological advancement can have a substantial impact on the process of digital forensic investigation and presents numerous challenges to the investigator. With these challenges, it is imperative to have a standard framework for the digital forensic investigation to be implemented within most incidents. This induces a great stride to formulate a nonspecific framework that may be applied to most digital investigation procedures. The Next Generation Digital Forensic Investigation Model (NGDFIM) formalizes the framework to facilitates the practitioners in the investigation process. This framework could potentially generate more evidence during the incidence response through on-site triage as compared to conventional investigations process. Moreover, the framework diminishes the analysis time and provides the suspect with privacy protection by incorporating custom content imaging.",1767,1,012054,,Systems engineering; Digital forensic investigation; Computer science,,,,,https://robots.iopscience.iop.org/article/10.1088/1742-6596/1767/1/012054/pdf https://ui.adsabs.harvard.edu/abs/2021JPhCS1767a2054T/abstract https://robots.iopscience.iop.org/article/10.1088/1742-6596/1767/1/012054,http://dx.doi.org/10.1088/1742-6596/1767/1/012054,,10.1088/1742-6596/1767/1/012054,3129236820,,0,004-872-169-627-620; 009-885-874-541-907; 010-086-703-646-194; 011-333-076-933-89X; 019-698-064-288-240; 020-944-423-224-895; 026-774-296-742-022; 032-697-093-668-898; 034-008-964-356-002; 035-129-008-760-918; 038-668-970-194-854; 045-645-917-018-028; 045-790-323-038-567; 046-395-342-063-537; 047-630-600-014-492; 055-628-715-083-217; 065-452-675-566-99X; 067-726-260-424-525; 073-997-683-020-831; 078-014-878-589-245; 098-748-261-333-651; 111-090-978-711-139; 124-746-748-951-736; 132-355-634-397-986; 133-397-275-695-990; 183-155-928-447-559; 184-948-841-629-735; 190-065-821-748-92X; 199-745-676-923-766,3,true,cc-by,gold 035-672-281-328-899,Forensic science standards in fast-changing environments.,,2010,journal article,Science & justice : journal of the Forensic Science Society,13550306,Forensic Science Society,United Kingdom,Peter Sommer,"Regulatory trends in forensic science point strongly to the need for exhaustive testing of all findings and tools. At the same time a number of jurisdictions suggest a judicial test for the admissibility of novel scientific evidence. But in fields such as computers and cellphones, the rate of change is faster than the normal times required for peer-reviewed publication. One route to admitting less-than-perfect findings from forensic science is via a re-evaluation of the role of expert evidence and in particular pre-trial meetings between experts.",50,1,12,17,Scientific evidence; Engineering; Forensic science; Point (typography); Law; Data science; Test (assessment),,Computers/trends; Expert Testimony; Forensic Sciences/legislation & jurisprudence; Humans; Professional Competence; Research Design,,,https://www.ncbi.nlm.nih.gov/pubmed/20408377 https://www.sciencedirect.com/science/article/pii/S1355030609001786 https://www.scienceandjusticejournal.com/article/S1355-0306(09)00178-6/abstract http://oro.open.ac.uk/19455/ http://oro.open.ac.uk/19455/4/Forensic_Science_Standards_in_Fast_Changing_Environments.pdf http://www.sciencedirect.com/science/article/pii/S1355030609001786 https://core.ac.uk/download/82912020.pdf,http://dx.doi.org/10.1016/j.scijus.2009.11.006,20408377,10.1016/j.scijus.2009.11.006,2012414703,,0,,15,true,,green 035-706-160-923-256,Sixteenth Annual DFRWS Conference,,2016,journal article,Digital Investigation,17422876; 1873202x,Elsevier BV,Netherlands,,,18,,S1,S2,Computer science,,,,,https://core.ac.uk/download/pdf/82658261.pdf,http://dx.doi.org/10.1016/j.diin.2016.06.002,,10.1016/j.diin.2016.06.002,,,0,,0,true,cc-by-nc-nd,hybrid 036-504-399-650-860,Perancangan Nenggala Disk Duplicator (Ndd) untuk Mendukung Proses Investigasi Forensik Digital,2018-03-01,2018,journal article,Teknoin,08538697; 26556529,Universitas Islam Indonesia (Islamic University of Indonesia),,Fietyata Yudha,"The development of information technology simplify human life. Its evoke crime loopholes, cyber crime. When solving criminal cases that utilize information technology is required the digital forensic science. In carrying out a digital investigation known multiple frameworks around the worlds. Every devices, every organization has their own framework. The most common framework divided into 4 sections. Preservation, Acquisition, Analysis, and Reporting are the most common used around the worlds. Acquisition is a key part of the investigation process because in this process digital evidence is collected form the electronic evidence. The acquisition processes uses special equipment. Forensic acquisition equipment mostly made by forensic vendors in the world. The problems that arise in the academic realm is the price of the equipment is quite expensive. The existence of the above problem there is a gap to conduct research on the applied field of development of tools for forensic acquisition. This study provides an early overview of the design of a digital forensics acquisition tool called Nenggala Disk Duplicator.",24,1,29,40,Information technology; Key (cryptography); Data science; Digital evidence; Common framework; Human life; Field (computer science); Computer science; Process (engineering); Digital forensics,,,,,https://www.neliti.com/publications/276235/perancangan-nenggala-disk-duplicator-ndd-untuk-mendukung-proses-investigasi-fore https://jurnal.uii.ac.id/jurnal-teknoin/article/view/11214 http://jurnal.uii.ac.id/jurnal-teknoin/article/view/11214 https://journal.uii.ac.id/jurnal-teknoin/article/view/11214 https://journal.uii.ac.id/jurnal-teknoin/article/download/11214/8554,http://dx.doi.org/10.20885/teknoin.vol24.iss1.art4,,10.20885/teknoin.vol24.iss1.art4,2914404623,,0,,0,true,cc-by-sa,gold 036-522-909-357-939,Digital evidence,,2012,journal article,"Zbornik radova Pravnog fakulteta, Novi Sad",05502179,Centre for Evaluation in Education and Science (CEON/CEES),,Lukic Tatjana,"Although computer makes human activities faster and easier, innovating and creating new forms of work and other kinds of activities, it also influenced the criminal activity. The development of information technology directly affects the development of computer forensics without which, it can not even imagine the discovering and proving the computer offences and apprehending the perpetrator. Information technology and computer forensic allows us to detect and prove the crimes committed by computer and capture the perpetrators. Computer forensics is a type of forensics which can be defined as a process of collecting, preserving, analyzing and presenting digital evidence in court proceedings. Bearing in mind, that combat against crime, in which computers appear as an asset or object of the offense, requires knowledge of digital evidence as well as specific rules and procedures, the author in this article specifically addresses the issues of digital evidence, forensic (computer) investigation, specific rules and procedures for detecting, fixing and collecting digital evidence and use of this type of evidence in criminal proceedings. The author also delas with international standards regarding digital evidence and cyber-space investigation.",46,2,177,192,Digital evidence; Computer forensics; Digital forensics; Computer science; Asset (computer security); Object (grammar); Computer security; Process (computing); Internet privacy; Data science; Artificial intelligence; Operating system,,,,,,http://dx.doi.org/10.5937/zrpfns46-1971,,10.5937/zrpfns46-1971,,,0,,0,true,cc-by,gold 036-650-222-027-323,多媒体取证,2013-12-01,2013,journal article,SCIENTIA SINICA Informationis,16747267,"Science China Press., Co. Ltd.",,Rui YANG; JiWu HUANG; WeiQi LUO,"Multimedia forensics is an important research area of information security, as well as a key technology of digital evidence authentication. Nowadays multimedia materials can be doctored very easily by pervasive editing software. A series of issues will arise if those fake multimedia materials are published, such as copyright of digital media, protection of personal privacy, social security, and so on. Thus examining the authenticity and integrity of digital media is of great signi cance. In the paper the characteristics and principles of multimedia forensics technology are introduced. Four important research topics of multimedia forensics, media source identi cation, tampering detection, processing history analysis, anti-forensics, are reviewed and summarized with related fundamental science and technology research progress. Finally the potential future trends of multimedia forensics are discussed.",43,12,1654,1672,Computer science,,,,,,http://dx.doi.org/10.1360/n112013-00059,,10.1360/n112013-00059,,,0,,2,false,, 036-663-784-427-575,Realising a Push Button Modality for Video-Based Forensics,2021-04-02,2021,journal article,Infrastructures,24123811,MDPI AG,,Bako Zawali; Richard Adeyemi Ikuesan; Victor R. Kebande; Steven Furnell; Arafat A-Dhaqm,"Complexity and sophistication among multimedia-based tools have made it easy for perpetrators to conduct digital crimes such as counterfeiting, modification, and alteration without being detected. It may not be easy to verify the integrity of video content that, for example, has been manipulated digitally. To address this perennial investigative challenge, this paper proposes the integration of a forensically sound push button forensic modality (PBFM) model for the investigation of the MP4 video file format as a step towards automated video forensic investigation. An open-source multimedia forensic tool was developed based on the proposed PBFM model. A comprehensive evaluation of the efficiency of the tool against file alteration showed that the tool was capable of identifying falsified files, which satisfied the underlying assertion of the PBFM model. Furthermore, the outcome can be used as a complementary process for enhancing the evidence admissibility of MP4 video for forensic investigation.",6,4,54,,Sophistication; Push-button; Modality (human–computer interaction); Multimedia forensics; Video based; Assertion; Computer science; Process (engineering); Multimedia; File format,,,,,https://www.mdpi.com/2412-3811/6/4/54/pdf https://www.mdpi.com/2412-3811/6/4/54,http://dx.doi.org/10.3390/infrastructures6040054,,10.3390/infrastructures6040054,3143463065,,0,004-655-797-294-715; 010-210-521-219-242; 010-746-409-875-309; 014-859-901-321-603; 015-440-921-647-313; 018-203-874-457-567; 024-350-847-240-124; 025-178-552-649-015; 025-581-592-469-828; 025-633-899-433-637; 025-815-030-235-519; 026-163-602-249-656; 029-686-297-425-327; 051-219-407-378-547; 060-462-451-891-31X; 060-628-035-947-318; 062-781-051-017-106; 063-532-297-436-449; 079-608-144-438-784; 080-196-042-005-758; 085-816-961-933-906; 096-289-706-423-826; 098-748-261-333-651; 101-147-258-831-898; 106-711-529-301-87X; 124-585-522-113-954; 143-467-824-641-527; 143-528-321-111-395; 152-339-772-682-326,7,true,cc-by,gold 036-807-324-358-708,Current Capacities of Digital Forensics for Investigations of Different Types of Crimes,2020-10-23,2020,journal article,Theory and Practice of Forensic Science,25877275; 18192785,Russian Federal Centre of Forensic Science of the Ministry of Justice (RFCFS),,D. V. Zav’yalova,"The article focuses on the present state of digital forensics and its potential when investigating different types of crimes with a “digital” element. It also presents a brief historical overview of the development of digital forensics as an independent type of forensic examination, its theoretical framework. The paper presents a summary of the practice of the Laboratory of Digital Forensics of the Russian Federal Centre of Forensic Science of the Russian Ministry of Justice over 2017–2019. In the course of the summary, the author analyses typical questions to experts, the percentage of cases’ categories, the most common objects of the expertise, and experts’ opinions, their form, and completeness. Following the summary’s results, the most frequent investigators’ requests for this kind of examination have been highlighted. Also, typical errors at appointing the expertise have been revealed. The author presents a prognosis for the further development of digital forensics and proposes strategies and measures to minimize the errors at the appointment of the examinations and unsustainable expenditure of resources in appointment and conduct of this type of research.",15,3,89,97,Element (criminal law); Data science; Justice (ethics); Forensic examination; Computer science; State (computer science); Christian ministry; Malware; Digital forensics,,,,,https://doaj.org/article/0894a5f713f64c10b965a5de5fda4f26 https://www.tipse.ru/jour/article/view/606/531 https://www.tipse.ru/jour/article/download/606/531,http://dx.doi.org/10.30764/1819-2785-2020-3-89-97,,10.30764/1819-2785-2020-3-89-97,3093903985,,0,001-334-079-265-518; 009-110-842-345-158; 014-743-487-965-635; 046-960-602-008-454; 068-211-549-219-606; 133-027-258-289-298,0,true,cc-by,gold 036-847-781-618-700,Assessing Age-Related Morphology of the Pubic Symphysis from Digital Images Versus Direct Observation,,2005,journal article,Journal of Forensic Sciences,00221198,ASTM International,United States,Myra L. Sitchon; Robert D. Hoppa,,50,4,1,5,,,,,,,http://dx.doi.org/10.1520/jfs2004182,,10.1520/jfs2004182,,,0,,8,false,, 037-516-922-562-182,Color Channel Characteristics (CCC) for Efficient Digital Image Forensics,2018-02-20,2018,journal article,"Engineering, Technology & Applied Science Research",17928036; 22414487,"Engineering, Technology & Applied Science Research",,Surbhi Gupta; Neeraj Mohan,"Digital image forgery has become extremely easy as low-cost image processing programs are readily available. Digital image forensics is a science of classifying images as authentic or manipulated. This paper aims at implementing a novel digital image forensics technique by exploiting an image’s Color Channel Characteristics (CCC). The CCCs considered are the noise and edge characteristics of the image. Averaging, median, Gaussian and Wiener filters along with Sobel, Canny, Prewitt and Laplacian of Gaussian (LoG) edge detectors are applied to get the noise and texture features. A complete, no reference, blind classifier for image tamper detection has been proposed and implemented. The proposed CCC classifier can detect copy-move as well as image splicing accurately with lower dimensionality. Support Vector Machine is used for classification of images as authentic or tampered. Experimental results have shown that the proposed technique outperforms the existing ones and may serve as a complete tool for digital image forensics.",8,1,2555,2561,Support vector machine; Artificial intelligence; Prewitt operator; Gaussian; Blob detection; Sobel operator; Computer vision; Computer science; Digital image; Image processing; Classifier (UML),,,,,https://etasr.com/index.php/ETASR/article/view/1744,http://dx.doi.org/10.48084/etasr.1744,,10.48084/etasr.1744,2788221212,,0,000-423-144-911-52X; 006-715-003-756-565; 011-883-359-022-523; 015-571-444-508-782; 016-708-834-120-733; 023-928-444-110-407; 029-093-526-590-26X; 035-544-937-782-415; 036-341-049-220-437; 047-322-910-540-450; 054-939-531-777-996; 057-534-459-875-826; 067-192-574-918-890; 074-324-981-337-749; 079-374-229-497-864; 085-735-767-631-723; 096-289-706-423-826; 106-862-007-495-628; 134-100-301-427-583; 134-701-584-331-832; 146-790-564-025-806; 155-074-178-700-550; 171-483-137-477-150; 173-881-114-277-726,1,true,cc-by,gold 037-755-633-820-34X,Proactive Forensics,,2006,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Angela Orebaugh,,1,1,37,41,Computer science; Computer security,,,,,,http://dx.doi.org/10.1080/15567280600626411,,10.1080/15567280600626411,,,0,,2,false,, 037-821-713-720-130,Dynamic recreation of kernel data structures for live forensics,,2010,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Andrew Case; Lodovico Marziale; Golden G. Richard,"The role of live forensics in digital forensic investigations has become vital due to the importance of volatile data such as encryption keys, network activity, currently running processes, in memory only malware, and other key pieces of data that are lost when a device is powered down. While the technology to perform the first steps of a live investigation, physical memory collection and preservation, is available, the tools for completing the remaining steps remain incomplete. First-generation memory analyzers performed simple string and regular expression operations on the memory dump to locate data such as passwords, credit card numbers, fragments of chat conversations, and social security numbers. A more in-depth analysis can reveal information such as running processes, networking information, open file data, loaded kernel modules, and other critical information that can be used to gain insight into activity occurring on the machine when a memory acquisition occurred. To be useful, tools for performing this in-depth analysis must support a wide range of operating system versions with minimum configuration. Current live forensics tools are generally limited to a single kernel version, a very restricted set of closely related versions, or require substantial manual intervention. This paper describes techniques developed to allow automatic adaptation of memory analysis tools to a wide range of kernel versions. Dynamic reconstruction of kernel data structures is obtained by analyzing the memory dump for the instructions that reference needed kernel structure members. The ability to dynamically recreate C structures used within the kernel allows for a large amount of information to be obtained and processed. Currently, this capability is used within a tool called RAMPARSER that is able to simulate commands such as ps and netstat as if an investigator were sitting at the machine at the time of the memory acquisition. Other applications of the developed capabilities include kernel-level malware detection, recovery of processes memory and file mappings, and other areas of forensics interest.",7,,S32,S40,Operating system; Overlay; Data structure; Memory management; Computer science; Network forensics; Core dump; Memory map; Mobile device forensics; Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S1742287610000320 https://dblp.uni-trier.de/db/journals/di/di7.html#CaseMR10 https://dl.acm.org/doi/10.1016/j.diin.2010.05.005 https://www.sciencedirect.com/science/article/abs/pii/S1742287610000320,http://dx.doi.org/10.1016/j.diin.2010.05.005,,10.1016/j.diin.2010.05.005,2137725382,,0,024-314-616-027-58X; 026-810-683-474-561; 046-542-416-852-385; 051-165-387-606-715; 100-219-699-825-980; 106-102-265-775-524; 142-816-347-811-541; 149-010-267-691-537; 150-249-549-372-358,38,true,cc-by-nc-nd,hybrid 037-847-762-163-743,A Game Theoretic Approach for Digital Forensic Tool Selection,2020-05-12,2020,journal article,Mathematics,22277390,MDPI AG,,Umit Karabiyik; Tugba Karabiyik,"Digital forensic investigations are getting harder and more time consuming everyday because of various problems including rapid advances in technology, wide variety of available devices in investigations, and large amount of data to be analyzed. In order to tackle with these issues, digital forensic tools are developed by open-source communities and software companies. These software products are released as a complete toolkit or standalone tools targeting specific tasks. In either case, digital forensic investigators use these tools based on their familiarity because of previous training experiences, available funding from their agencies/businesses, tool’s ease of use, etc. Moreover, using additional tools to verify the findings is a common practice in digital forensic investigations. This is particularly common when the previously selected tools do not generate an expected output. In this paper, we propose a game theoretic approach to the tool selection problem in order to help investigators to make a decision on which digital forensic tool to use. We particularly focused on file carving tool usage when building and analyzing our model because of the available data on these tools. Our results show how important it is to investigate the dynamics of strategy changes between the tools during an investigation to increase the efficiency of the investigation using game theoretic modeling.",8,5,774,,Selection (linguistics); Decision-making; Variety (cybernetics); Usability; Game theory; Data science; File carving; Software; Computer science; Digital forensics,,,,,https://www.mdpi.com/2227-7390/8/5/774/pdf https://www.mdpi.com/2227-7390/8/5/774,http://dx.doi.org/10.3390/math8050774,,10.3390/math8050774,3024339044,,0,004-652-388-189-304; 005-750-770-307-709; 007-427-320-193-516; 017-361-333-950-313; 022-558-714-642-656; 027-197-549-505-279; 045-294-718-031-754; 048-173-502-051-519; 050-513-243-638-138; 062-681-003-961-233; 068-504-789-917-859; 074-011-629-972-789; 085-816-961-933-906; 087-850-942-616-19X; 088-886-561-757-360; 097-671-054-695-239; 097-756-989-729-994; 099-550-969-605-475; 154-257-316-907-505; 197-198-322-121-026,2,true,cc-by,gold 037-892-054-002-79X,Change and diversity,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Zeno Geradts; Bruce J. Nikkel,,37,,301206,,Ecology; Geography; Diversity (business),,,,,https://dblp.uni-trier.de/db/journals/di/di37.html#GeradtsN21,http://dx.doi.org/10.1016/j.fsidi.2021.301206,,10.1016/j.fsidi.2021.301206,3175779261,,0,055-424-869-259-41X,0,false,, 038-052-594-652-085,EMvidence: A Framework for Digital Evidence Acquisition from IoT Devices through Electromagnetic Side-Channel Analysis,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Asanka Sayakkara; Nhien-An Le-Khac; Mark Scanlon,,32,,300907,,Digital evidence; Computer science; Side channel attack; Internet of Things; Computer hardware,,,,,https://forensicsandsecurity.com/papers/EMvidence.php https://doi.org/10.1016/j.fsidi.2020.300907 https://markscanlon.co/papers/EMvidence.pdf https://markscanlon.co/papers/EMvidence.php https://www.sciencedirect.com/science/article/pii/S2666281720300020,http://dx.doi.org/10.1016/j.fsidi.2020.300907,,10.1016/j.fsidi.2020.300907,2993846147,,0,018-772-801-528-344; 079-726-245-728-809; 081-833-857-658-915,1,true,cc-by-nc-nd,hybrid 038-208-479-675-255,Case study: AOL instant messenger trace evidence,,2006,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Jessica Reust,,3,4,238,243,World Wide Web; Trace evidence; Instant messenger; Computer science; Digital forensics,,,,,http://www.sciencedirect.com/science/article/pii/S1742287606001307 https://dx.doi.org/10.1016/j.diin.2006.10.009 https://dblp.uni-trier.de/db/journals/di/di3.html#Reust06 https://www.sciencedirect.com/science/article/pii/S1742287606001307 https://doi.org/10.1016/j.diin.2006.10.009 http://dx.doi.org/10.1016/j.diin.2006.10.009,http://dx.doi.org/10.1016/j.diin.2006.10.009,,10.1016/j.diin.2006.10.009,1998756461,,0,,20,false,, 038-338-543-105-210,Comparison of body height estimation using bipeds or cylinders.,2009-04-23,2009,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Gerda Edelman; Ivo Alberink,,188,1,64,67,Systematic error; Photogrammetry; Basis (linear algebra); Mathematical analysis; Measure (mathematics); Observational error; Body height; Significant difference; 3d model; Mathematics; Simulation,,"Body Height; Computer Simulation; Forensic Medicine/methods; Humans; Imaging, Three-Dimensional; Models, Biological; Photogrammetry; Software",,,https://www.sciencedirect.com/science/article/pii/S0379073809001340 https://europepmc.org/abstract/MED/19395208 https://www.narcis.nl/publication/RecordID/oai%3Apure.amc.nl%3Apublications%2F22573ed8-0ea7-42a7-bf0c-a502a41b5fa1 https://core.ac.uk/display/141609356 https://www.ncbi.nlm.nih.gov/pubmed/19395208,http://dx.doi.org/10.1016/j.forsciint.2009.03.013,19395208,10.1016/j.forsciint.2009.03.013,2075566730,,0,000-927-129-586-430; 022-930-505-978-426; 037-868-724-337-389; 042-161-804-735-83X; 086-035-943-059-623,6,false,, 038-470-449-874-417,Technology Corner: Visualising forensic data: Evidence guidelines (Part 2),,2013,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Damian Schofield; Ken Fowle,"Visualisation is becoming increasingly important for understanding information, such as investigative data (for example: computing, medical and crime scene evidence) and analysis (for example, network capability assessment, data file reconstruction and planning scenarios). Investigative data visualisation is used to reconstruct a scene or item and is used to assist the viewer (who may well be a member of the general public with little or no understanding of the subject matter) to understand what is being presented. Analysis visualisations, on the other hand, are usually developed to review data, information and assess competing scenario hypotheses for those who usually have an understanding of the subject matter. Courtroom environments are morphing into cinematic display environments, the media consumed by an audience who are increasingly visually literate and media savvy (Heintz, 2002). There are a number of fundamental implications inherent in the shift from oral to visual mediation and a number of facets of this modern evidence presentation technology needs to be investigated and analysed. One of the primary issues of visualisation is that no matter how coherent the data, there will always be conjecture and debate as to how the information is/has-been visualised and, is it presented in an acceptable and meaningful way. This paper presents a range of examples of where forensic data has been visualised using various techniques and technology, the paper then examines aspects of the visual courtroom evidence presented and discusses some of the benefits and potential problems of implementing this technology. This paper is part two of a two-part series that aims to describe the use of, and provide guidelines for, the use of graphical displays in courtrooms.",8,2,93,114,Data file; Crime scene; Data visualization; Mediation; Data science; Presentation; Visualization; Computer science; Multimedia; Computer graphics; Digital forensics,,,,,https://commons.erau.edu/cgi/viewcontent.cgi?article=1145&context=jdfsl https://commons.erau.edu/jdfsl/vol8/iss2/4/ https://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1560&context=ecuworks2013 https://dblp.uni-trier.de/db/journals/jdfsl/jdfsl8.html#SchofieldF13 https://ro.ecu.edu.au/ecuworks2013/560/ https://core.ac.uk/display/92015438 https://core.ac.uk/download/41530606.pdf,http://dx.doi.org/10.15394/jdfsl.2013.1145,,10.15394/jdfsl.2013.1145,1559119514,,0,004-379-312-737-55X; 006-147-481-193-848; 006-235-266-433-570; 010-776-638-956-310; 011-266-643-505-000; 011-500-992-597-292; 020-202-179-993-592; 020-586-575-720-110; 026-876-385-709-061; 035-006-796-654-12X; 050-034-746-610-825; 053-122-526-126-117; 053-882-233-294-91X; 057-091-476-338-133; 058-523-110-758-515; 069-555-512-168-003; 087-307-809-242-788; 088-043-607-018-040; 093-319-343-499-893; 105-722-396-170-542; 114-467-161-751-159; 122-923-448-139-246; 125-462-406-091-58X; 135-877-639-591-128; 140-858-447-005-005; 148-031-607-280-643; 167-778-772-736-055; 177-965-894-694-179,0,true,cc-by-nc,gold 038-948-098-243-786,Survey on techniques of digital multimedia forensics: Survey on techniques of digital multimedia forensics,2010-04-02,2010,journal article,Journal of Computer Applications,10019081,China Science Publishing & Media Ltd.,,Yong-jian Hu; Bei-bei Liu; Qian-hua He,,30,3,657,662,World Wide Web; Digital multimedia; Computer science; Multimedia; Computer forensics,,,,,http://pub.chinasciencejournal.com/article/getArticleRedirect.action?doiCode=10.3724/SP.J.1087.2010.00657,http://dx.doi.org/10.3724/sp.j.1087.2010.00657,,10.3724/sp.j.1087.2010.00657,2027269552,,0,013-767-411-721-853; 017-853-220-883-872; 023-624-827-239-301; 039-604-410-537-357; 056-148-934-103-963; 056-466-128-964-13X; 060-409-308-040-210; 067-303-718-151-959; 076-346-829-732-533; 083-097-133-928-799; 101-518-171-087-269; 108-896-114-392-841; 122-486-087-773-74X; 125-162-036-005-386; 180-552-666-228-97X; 184-897-235-429-285; 196-224-794-979-899,1,false,, 038-979-601-556-918,The future of the forensic science providers - Time to re-think our structures?,2020-08-23,2020,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Jan De Kinder; Hugo Pirée,,316,,110471,,Forensic science; Business; Structure (mathematical logic); Quality management system; Management structure; International exchange; Engineering ethics,Forensic management; International collaboration; Management structure; Quality systems,Crime; Digital Technology; Forecasting; Forensic Sciences/organization & administration; Humans; International Cooperation,,,https://www.sciencedirect.com/science/article/abs/pii/S0379073820303339 https://www.ncbi.nlm.nih.gov/pubmed/32877851,http://dx.doi.org/10.1016/j.forsciint.2020.110471,32877851,10.1016/j.forsciint.2020.110471,3081485789,,0,009-035-567-423-635; 011-232-846-462-076; 011-573-176-674-162; 013-376-516-583-09X; 013-723-779-362-719; 014-466-907-950-761; 019-775-798-775-028; 022-358-426-320-517; 024-102-878-613-488; 026-010-352-872-519; 027-706-641-258-701; 029-608-895-725-617; 030-043-392-965-213; 039-145-979-009-196; 039-627-540-490-747; 040-364-366-381-839; 041-473-122-279-108; 044-162-321-222-543; 050-581-385-400-875; 057-480-604-531-771; 065-545-501-782-53X; 069-405-552-096-506; 073-673-592-880-835; 077-468-916-358-123; 077-589-464-357-875; 085-643-943-839-104; 087-323-702-228-150; 087-342-951-350-054; 101-436-770-235-826; 102-275-304-340-962; 121-025-083-515-307; 163-309-162-262-895,3,false,, 039-365-534-871-351,Privacy impact assessment in large-scale digital forensic investigations,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,M. Bas Seyyar; Zeno Geradts,"The large increase in the collection of location, communication, health data etc. from seized digital devices like mobile phones, tablets, IoT devices, laptops etc. often poses serious privacy risks. To measure privacy risks, privacy impact assessments (PIA) are substantially useful tools and the Directive EU 2016/80 (Police Directive) requires their use. While much has been said about PIA methods pursuant to the Regulation EU 2016/679 (GDPR), less has been said about PIA methods pursuant to the Police Directive. Yet, little research has been done to explore and measure privacy risks that are specific to law enforcement activities which necessitate the processing of large amounts of data. This study tries to fill this gap by conducting a PIA on a big data forensic platform as a case study. This study also answers the question how a PIA should be carried out for large-scale digital forensic operations and describes the privacy risks, threats we learned from conducting it. Finally, it articulates concrete privacy measures to demonstrate compliance with the Police Directive.",33,,200906,,Internet privacy; Impact assessment; Privacy Impact Assessment; Directive; Law enforcement; Health data; Computer science; Scale (social sciences); Big data; Digital forensics,,,,SciencE through Networked Technologies; Information policy And Law; European Union’s Horizon 2020,https://www.sciencedirect.com/science/article/pii/S2666281720300263 https://www.narcis.nl/publication/RecordID/oai%3Apure.rug.nl%3Apublications%2Fbe024331-9605-46fc-a10c-522ee11f3067 https://www.rug.nl/research/portal/files/130268174/1_s2.0_S2666281720300263_main.pdf https://dblp.uni-trier.de/db/journals/di/di33.html#SeyyarG20 https://pure.rug.nl/ws/files/130268174/1_s2.0_S2666281720300263_main.pdf https://research.rug.nl/en/publications/privacy-impact-assessment-in-large-scale-digital-forensic-investi,http://dx.doi.org/10.1016/j.fsidi.2020.200906,,10.1016/j.fsidi.2020.200906,3012052223,,0,000-360-120-513-679; 003-926-917-446-708; 008-943-419-353-61X; 009-614-227-692-181; 009-701-742-236-493; 022-373-285-369-522; 024-735-069-822-749; 027-573-285-446-936; 054-552-160-523-56X; 055-467-156-924-256; 056-715-378-869-201; 058-833-089-231-930; 062-145-164-741-072; 070-578-038-391-503; 074-201-764-341-020; 078-917-090-304-758; 086-818-889-472-61X; 101-438-268-449-991; 125-939-677-745-616; 164-209-017-189-167,3,true,cc-by,hybrid 039-516-560-543-752,A High Resolution Electronic Imaging System for Crime Scene Use,1994-07-01,1994,journal article,Journal of Forensic Sciences,00221198,ASTM International,United States,Graham Ross Jackson,A portable high resolution electronic imaging system has been designed and built for recording laser or ultraviolet excited fluorescent marks at serious crime scenes. A 2048 × 2048 pixel Peltier cooled CCD camera and PC-based image capture system contained in two flight cases forms the basis of the system. The captured images can be viewed at the scene to ensure recording quality and returned to the Laboratory stored on magneto optical disks for hardcopy production or digital image processing.,39,4,912,919,Digital image processing; Artificial intelligence; Pixel; Crime scene; Image capture; Electronic imaging; Magneto optical; Computer vision; Computer science; Laser; Resolution (electron density),,,,,https://www.astm.org/DIGITAL_LIBRARY/JOURNALS/FORENSIC/PAGES/JFS13673J.htm,http://dx.doi.org/10.1520/jfs13673j,,10.1520/jfs13673j,1826274444,,0,082-311-297-381-652; 146-519-746-491-48X,3,false,, 039-541-926-922-904,A Comprehensive Review on Adaptability of Network Forensics Frameworks for Mobile Cloud Computing,2014-07-06,2014,journal article,TheScientificWorldJournal,1537744x; 23566140,Hindawi Publishing Corporation,Egypt,Suleman Khan; Muhammad Shiraz; Ainuddin Wahid Abdul Wahab; Abdullah Gani; Qi Han; Zulkanain Abdul Rahman,"Network forensics enables investigation and identification of network attacks through the retrieved digital content. The proliferation of smartphones and the cost-effective universal data access through cloud has made Mobile Cloud Computing (MCC) a congenital target for network attacks. However, confines in carrying out forensics in MCC is interrelated with the autonomous cloud hosting companies and their policies for restricted access to the digital content in the back-end cloud platforms. It implies that existing Network Forensic Frameworks (NFFs) have limited impact in the MCC paradigm. To this end, we qualitatively analyze the adaptability of existing NFFs when applied to the MCC. Explicitly, the fundamental mechanisms of NFFs are highlighted and then analyzed using the most relevant parameters. A classification is proposed to help understand the anatomy of existing NFFs. Subsequently, a comparison is given that explores the functional similarities and deviations among NFFs. The paper concludes by discussing research challenges for progressive network forensics in MCC.",2014,,547062,547062,Adaptability; Mobile cloud computing; Digital content; Restricted access; Computer security; Computer science; Data access; Network forensics; Identification (information); Cloud computing,,Computer Systems; Forensic Sciences/methods; Information Storage and Retrieval/methods,,"Ministry of Higher Education, Malaysia",https://northumbria-test.eprints-hosting.org/id/document/270147 https://www.hindawi.com/journals/tswj/2014/547062/ https://doaj.org/article/a10fbf0f0fd04f56a575d9dbb3280794 https://www.science-open.com/document?vid=5efda82a-8446-4b14-9cef-f0f140a49fcc http://nrl.northumbria.ac.uk/42285/ http://downloads.hindawi.com/journals/tswj/2014/547062.pdf https://downloads.hindawi.com/journals/tswj/2014/547062.pdf https://www.science-open.com/document_file/09b87dad-d65e-4d61-98da-2929c6bba6ed/PubMedCentral/09b87dad-d65e-4d61-98da-2929c6bba6ed.pdf https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4109117 https://www.ncbi.nlm.nih.gov/pmc/articles/4109117/ https://europepmc.org/article/MED/25097880 https://researchportal.northumbria.ac.uk/en/publications/a-comprehensive-review-on-adaptability-of-network-forensics-frame https://core.ac.uk/display/89691541 https://www.researchgate.net/profile/Suleman_Khan5/publication/264333846_A_Comprehensive_Review_on_Adaptability_of_Network_Forensics_Frameworks_for_Mobile_Cloud_Computing/links/53d8fa6a0cf2e38c6331cd45.pdf https://core.ac.uk/download/287613578.pdf,http://dx.doi.org/10.1155/2014/547062,25097880,10.1155/2014/547062,2087433244,PMC4109117,0,000-958-250-213-056; 001-682-024-649-208; 001-818-371-411-333; 002-635-436-557-726; 003-486-118-011-680; 004-706-447-836-905; 005-502-626-625-101; 005-916-238-892-371; 007-450-287-293-771; 007-644-946-066-659; 010-677-745-552-502; 013-062-916-341-987; 013-721-663-289-346; 014-260-493-527-176; 015-264-924-343-905; 015-451-188-668-819; 017-663-844-412-422; 017-815-064-018-299; 019-379-690-130-653; 019-698-064-288-240; 020-535-906-095-058; 020-944-423-224-895; 023-757-868-193-986; 024-784-625-791-746; 025-122-051-447-99X; 025-317-658-668-203; 025-953-293-295-113; 026-270-150-175-193; 026-885-644-351-530; 027-712-128-073-387; 029-396-534-146-001; 029-556-786-638-555; 032-244-297-444-421; 032-351-787-050-170; 032-530-364-939-545; 035-468-754-045-170; 036-348-462-548-956; 036-720-465-389-565; 037-104-847-954-109; 038-668-970-194-854; 039-508-250-667-290; 040-709-242-922-550; 042-969-030-470-170; 044-053-170-480-461; 044-353-273-186-518; 044-434-910-947-944; 046-505-599-865-150; 049-977-511-720-26X; 052-541-060-794-50X; 055-181-106-840-974; 055-560-546-383-236; 056-122-492-187-163; 058-047-543-400-469; 060-044-818-372-785; 061-232-071-382-516; 061-802-479-137-946; 061-807-503-658-008; 062-607-514-052-693; 062-990-034-288-327; 065-851-415-898-70X; 066-047-461-047-761; 070-364-108-505-542; 075-142-001-998-55X; 075-268-412-870-642; 075-751-613-342-82X; 076-189-053-735-123; 077-462-412-813-690; 077-532-025-251-756; 077-865-439-657-997; 078-730-781-174-18X; 082-737-313-814-576; 082-911-785-714-902; 085-214-277-668-01X; 087-624-419-076-541; 088-675-928-115-189; 088-821-531-036-573; 089-920-088-673-649; 090-792-295-657-205; 091-619-263-117-914; 091-666-178-941-134; 091-859-053-989-24X; 093-708-674-439-456; 095-572-540-932-782; 096-407-732-985-317; 098-131-452-179-597; 100-025-452-820-357; 100-498-057-407-52X; 101-559-043-398-354; 103-306-548-069-684; 103-598-018-462-179; 103-943-665-858-641; 107-440-240-162-404; 107-745-788-397-548; 124-912-663-881-389; 125-003-027-774-740; 125-817-456-334-439; 127-077-680-087-390; 128-489-282-993-184; 130-856-648-789-406; 132-800-725-194-191; 136-720-233-603-708; 136-947-053-479-806; 140-286-015-480-83X; 144-124-797-675-052; 145-616-913-856-289; 151-013-937-964-051; 151-117-898-624-762; 151-674-089-063-661; 155-172-467-850-474; 167-014-385-911-298; 167-753-002-304-984; 169-368-228-900-406; 170-861-593-468-599; 180-357-121-024-367; 182-051-024-510-866; 183-920-887-542-44X; 184-948-841-629-735; 184-984-036-746-363; 189-099-386-917-679; 189-104-249-595-291; 199-745-676-923-766,29,true,cc-by,gold 039-886-656-324-835,Cyber-Crime and Digital Forensic: Challenges Resolution,2021-01-19,2021,journal article,Solid State Technology,0038111x,,,Arpita Singh; S. K. Singh; Sandeep Kumar Nayak; Nilu Singh,"Cybercrime is an emerging kind of crime, which has to be faced and fight for mankind. When you go through news or any crime case authentic data source, you will easily analyze that number of crime cases with the help of technology, are getting climb drastically. To overcome this problem a new way of science originated known as digital/computer forensic. Here author is trying to hold forth about cybercrime and crime rate of different states of India. Furthermore, author will discuss some prevention measure to avoid risk of cybercrime. There are some law enforcement agencies like cybercrime cells fabricated by the government, to fight with this canker of society. Digital forensic needs new forensic tools in the war of crime because of enhanced technology and increase database; Keywords- Cyber-crime, Digital forensic, Forensic tools, Computer  forensic.",64,2,166,176,Internet privacy; Resolution (logic); Government; Political science; Cybercrime; Law enforcement; Data source; Cyber crime; Crime rate; Digital forensics,,,,,http://solidstatetechnology.us/index.php/JSST/article/view/8653,http://solidstatetechnology.us/index.php/JSST/article/view/8653,,,3123157148,,0,,0,false,, 039-999-270-718-277,Digital forensic approaches for Amazon Alexa ecosystem,,2017,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Hyunji Chung; Jungheum Park; Sangjin Lee,"Internet of Things (IoT) devices such as the Amazon Echo a smart speaker developed by Amazon are undoubtedly great sources of potential digital evidence due to their ubiquitous use and their always-on mode of operation, constituting a human-life's black box. The Amazon Echo in particular plays a centric role for the cloud-based intelligent virtual assistant (IVA) Alexa developed by Amazon Lab126. The Alexa-enabled wireless smart speaker is the gateway for all voice commands submitted to Alexa. Moreover, the IVA interacts with a plethora of compatible IoT devices and third-party applications that leverage cloud resources. Understanding the complex cloud ecosystem that allows ubiquitous use of Alexa is paramount on supporting digital investigations when need raises. This paper discusses methods for digital forensics pertaining to the IVA Alexa's ecosystem. The primary contribution of this paper consists of a new efficient approach of combining cloud-native forensics with client-side forensics (forensics for companion devices), to support practical digital investigations. Based on a deep understanding of the targeted ecosystem, we propose a proof-of-concept tool, CIFT, that supports identification, acquisition and analysis of both native artifacts from the cloud and client-centric artifacts from local devices (mobile applications and web browsers).",22,,S15,S25,World Wide Web; Voice command device; Gateway (telecommunications); Echo (communications protocol); Black box (phreaking); Digital evidence; Computer science; Identification (information); Cloud computing; Digital forensics,,,,,https://www.sciencedirect.com/science/article/abs/pii/S1742287617301974 https://www.mendeley.com/catalogue/f24b68e0-402b-3038-b66d-9abf092ffa6c/ https://dl.acm.org/doi/10.1016/j.diin.2017.06.010 https://www.sciencedirect.com/science/article/pii/S1742287617301974 https://doi.org/10.1016/j.diin.2017.06.010 https://koreauniv.pure.elsevier.com/en/publications/digital-forensic-approaches-for-amazon-alexa-ecosystem http://ui.adsabs.harvard.edu/abs/2017arXiv170708696C/abstract https://dblp.uni-trier.de/db/journals/corr/corr1707.html#ChungPL17 https://arxiv.org/abs/1707.08696 http://arxiv.org/abs/1707.08696,http://dx.doi.org/10.1016/j.diin.2017.06.010,,10.1016/j.diin.2017.06.010,2963606273,,0,002-768-711-065-857; 010-196-658-878-056; 018-552-581-098-658; 023-338-081-058-709; 024-894-908-869-686; 025-723-055-730-999; 045-701-748-075-614; 058-631-300-195-90X; 060-294-953-084-788; 112-181-239-331-730; 124-817-675-749-689; 170-546-031-309-748,110,true,cc-by-nc-nd,hybrid 040-012-113-608-784,Survey of Forensic and Analysis Tools based on Grouping of Digital Evidence using Metadata Functionality,2016-05-17,2016,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,Anubhav Kumar Vaid; Yogendra P. S. Maravi; Jitendra Singh Verma,"Computer forensics can be defined as obtaining computer storage media so that data can be used as evidence in court. Traditionally the analysis of sources of digital evidences is done by examining the artefacts and metadata of artefacts for authenticating the gathered information and sequencing them in the manner they occurred. Analyzing the information acquired by forensic investigator in traditional way is a cumbersome task but it can be overcome if all the related artefacts are grouped together on the basis of metadata information they prevails. This paper is mainly focused on metadata based association of digital evidences which can simplify the task of forensic investigator and can also help in reducing human intervention making the process automatic. The main objective of this paper is to study working principal and compare different existing forensic tools on the basis of various parameters such as capability for accessing digital evidence, sources they can examine, metadata parsing capability, and analyzing them that whether they can provide grouping of different artefacts present in same or different investigating sources on the basis of metadata they contain.",142,3,28,34,Principal (computer security); Information retrieval; Task (project management); Digital evidence; Computer science; Process (engineering); Computer forensics; Association (object-oriented programming); Metadata,,,,,https://www.ijcaonline.org/archives/volume142/number3/24878-2016909718 https://www.ijcaonline.org/archives/volume142/number3/vaid-2016-ijca-909718.pdf,http://dx.doi.org/10.5120/ijca2016909718,,10.5120/ijca2016909718,2487110025,,0,004-441-167-148-170; 009-692-861-529-254; 017-840-378-634-021; 020-944-423-224-895; 024-735-069-822-749; 032-192-641-675-455; 035-223-520-491-228; 038-668-970-194-854; 040-092-459-357-823; 042-450-851-467-680; 048-267-025-540-842; 058-409-370-512-563; 085-214-277-668-01X; 089-879-578-482-069; 133-752-203-150-119; 142-729-737-144-734; 142-884-607-464-932; 150-249-549-372-358; 156-571-272-274-491; 157-954-859-648-506; 162-864-397-044-696; 178-883-713-153-793; 184-948-841-629-735; 199-172-967-270-034,0,true,,bronze 040-130-649-501-691,Digital forensic investigation of two-way radio communication equipment and services,,2018,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Arie Kouwen; Mark Scanlon; Kim-Kwang Raymond Choo; Nhien-An Le-Khac,"Abstract Historically, radio-equipment has solely been used as a two-way analogue communication device. Today, the use of radio communication equipment is increasing by numerous organisations and businesses. The functionality of these traditionally short-range devices have expanded to include private call, address book, call-logs, text messages, lone worker, telemetry, data communication, and GPS. Many of these devices also integrate with smartphones, which delivers Push-To-Talk services that make it possible to setup connections between users using a two-way radio and a smartphone. In fact, these devices can be used to connect users only using smartphones. To date, there is little research on the digital traces in modern radio communication equipment. In fact, increasing the knowledge base about these radio communication devices and services can be valuable to law enforcement in a police investigation. In this paper, we investigate what kind of radio communication equipment and services law enforcement digital investigators can encounter at a crime scene or in an investigation. Subsequent to seizure of this radio communication equipment we explore the traces, which may have a forensic interest and how these traces can be acquired. Finally, we test our approach on sample radio communication equipment and services.",26,1,S77,S86,Crime scene; Two-way radio; Law enforcement; Push-to-talk; Computer science; Knowledge base; Digital radio; Global Positioning System; Telecommunications; Digital forensics; Test (assessment); Communication device; Digital forensic investigation; Sample (statistics),,,,,https://dblp.uni-trier.de/db/journals/corr/corr1807.html#abs-1807-08264 https://www.sciencedirect.com/science/article/pii/S174228761830183X https://markscanlon.co/papers/TwoWayRadioForensics.php https://forensicsandsecurity.com/papers/RadioTraces.pdf https://arxiv.org/abs/1807.08264 https://www.mendeley.com/catalogue/digital-forensic-investigation-twoway-radio-communication-equipment-services/ https://markscanlon.co/papers/TwoWayRadioForensics.pdf https://www.sciencedirect.com/science/article/abs/pii/S174228761830183X https://forensicsandsecurity.com/papers/TwoWayRadioForensics.pdf https://doi.org/10.1016/j.diin.2018.04.007 http://arxiv.org/abs/1807.08264,http://dx.doi.org/10.1016/j.diin.2018.04.007,,10.1016/j.diin.2018.04.007,2794063294; 3099974917,,0,004-572-267-519-012; 023-576-397-399-52X; 030-664-611-605-384; 046-390-751-530-199; 053-391-844-157-635; 062-549-928-238-225; 066-235-037-082-291; 118-214-115-485-064; 121-602-288-519-835; 125-109-822-457-694; 137-755-137-054-864; 139-472-153-252-310; 165-078-942-971-622,9,true,cc-by-nc-nd,hybrid 040-182-087-694-018,К ВОПРОСУ ОБ УСТАНОВЛЕНИИ ПОДЛОЖНОСТИ ФИКТИВНЫХ ДОКУМЕНТОВ: СОВРЕМЕННЫЕ РЕАЛИИ,2017-09-30,2017,journal article,Theory and Practice of Forensic Science,25877275; 18192785,Russian Federal Centre of Forensic Science of the Ministry of Justice (RFCFS),,Т. Ф. Моисеева,The paper examines the problems of forensic forgery detection in digitally manipulated documents. The feasibility of questioned signature identification from document photocopies is also considered.,12,3,45,48,Signature (logic); Artificial intelligence; Pattern recognition; Forgery detection; Computer science; Identification (information),,,,,https://www.tipse.ru/jour/article/view/329/329 https://www.tipse.ru/jour/article/download/329/329 https://core.ac.uk/download/pdf/235675452.pdf,http://dx.doi.org/10.30764/64/1819-2785-2017-12-3-45-48,,10.30764/64/1819-2785-2017-12-3-45-48,2775891131,,0,,1,true,cc-by,gold 040-245-551-920-273,Internet of things devices: digital forensic process and data reduction,,2020,journal article,International Journal of Electronic Security and Digital Forensics,1751911x; 17519128,Inderscience Publishers,United Kingdom,Reza Montasari; Richard Hill; Farshad Montaseri; Hamid Jahankhani; Amin Hosseinian-Far,"The rapid increase in the pervasiveness of digital devices, combined with their heterogeneous nature, has culminated in increasing volumes of diverse data, a.k.a. big data that can become subject to criminal or civil investigations. This growth in big digital forensic data (DFD) has forced digital forensic practitioners (DFPs) to consider seizing a wider range of devices and acquiring larger volumes of data that can be pertinent to the case being investigated. This, in turn, has created an immense backlog of cases for law enforcement agencies worldwide. The method of data reduction by targeted imaging, combined with a robust process model, however, can assist with speeding up the processes of data acquisition and data analysis in IoT device forensic investigations. To this end, we propose an IoT forensic investigation process model, IoT-FIPM, that can facilitate not only the reduction of the evidentiary IoT data, but also a timely acquisition and analysis of this data.",12,1,424,436,Data reduction; Data acquisition; Data science; Digital forensic process; Law enforcement; Computer science; Process (engineering); Computer forensics; Big data; Digital forensics,,,,,https://doi.org/10.1504/IJESDF.2020.110676 https://dblp.uni-trier.de/db/journals/ijesdf/ijesdf12.html#MontasariHMJF20 https://pure.northampton.ac.uk/en/publications/internet-of-things-devices-digital-forensic-process-and-data-redu https://pure.hud.ac.uk/en/publications/internet-of-things-devices-digital-forensic-process-and-data-redu https://www.inderscienceonline.com/doi/abs/10.1504/IJESDF.2020.110676 https://cronfa.swan.ac.uk/Record/cronfa54936,http://dx.doi.org/10.1504/ijesdf.2020.10030308,,10.1504/ijesdf.2020.10030308,2996857392,,0,007-314-571-885-858; 010-196-658-878-056; 023-858-572-607-02X; 031-189-815-553-631; 034-008-964-356-002; 034-190-709-015-829; 040-567-901-099-238; 041-869-362-153-337; 042-767-661-429-064; 054-502-354-794-645; 054-888-023-799-702; 067-840-274-503-047; 077-963-490-848-763; 083-091-368-558-414; 100-871-329-399-547; 112-181-239-331-730; 124-912-663-881-389; 125-682-509-275-554; 133-456-103-290-986; 163-330-758-807-944,1,true,,green 040-415-059-069-674,A comparison of hair colour measurement by digital image analysis with reflective spectrophotometry,2008-12-16,2008,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Michelle R. Vaughn; Roland A.H. van Oorschot; Swati Baindur-Hudson,,183,1,97,101,Analytical chemistry; Artificial intelligence; Pattern recognition; Spectrophotometry; Digital image analysis; Digital image data; Mathematics; Digital image; Pearson product-moment correlation coefficient; Linear discriminant analysis,,"Adolescent; Adult; Discriminant Analysis; Forensic Medicine/methods; Hair Color/physiology; Humans; Image Processing, Computer-Assisted; Photography; Software; Spectrophotometry; Young Adult",,,https://vuir.vu.edu.au/4651/ http://www.fsijournal.org/article/S0379-0738(08)00430-1/abstract https://core.ac.uk/display/151486432 https://www.ncbi.nlm.nih.gov/pubmed/19091498 https://www.sciencedirect.com/science/article/pii/S0379073808004301,http://dx.doi.org/10.1016/j.forsciint.2008.11.002,19091498,10.1016/j.forsciint.2008.11.002,1995856050,,0,000-523-969-859-701; 002-092-787-768-471; 009-568-278-834-675; 021-787-251-325-71X; 023-515-352-320-92X; 029-919-645-197-098; 031-823-465-573-004; 044-035-129-766-274; 051-525-690-894-701; 066-936-091-169-410; 132-946-149-203-230,15,false,, 040-483-012-703-353,The challenges of cloud computing in forensic science,2019-07-25,2019,journal article,International Journal of Computer Trends & Technology,22312803,Seventh Sense Research Group Journals,,Raja Muhammad Ubaid Ullah; Kevan Buckley; Mary Garvey; Jun Li,"Cloud computing (CC) is rapidly growing new information technology (IT) in private, public and especially in Government sectors internationally. CC technology facilitates rather than deploy and manage an in-house physical IT infrastructure by having local servers or personal devices to manage their softwares application. This new technology helps to transfer their traditional IT services model into remote, virtualised environments, which are often hosted and managed by the third parties. Therefore, CC environment of any organisation turn prospective opportunity for cyber attackers, which is become a primary challenges of CC in the protection of valuable data from different types of attacks. CC posed a serious risk and major challenge to digital investigators, also offers sufficient opportunities to investigators for better refining the forensic science. This study summarises the key areas of CC forensics science challenges and analyses by the researched performed by other researchers. The challenges also presented along with associated literature that particularly reference them. Finally the discussion and analysis, which is based on the study finding to consider the challenges provoke by the CC forensics science on our findings.",67,07,40,48,Information technology; Information technology management; Government; Key (cryptography); Data science; Cloud forensics; Computer science; Cloud computing; Digital forensics; Server,,,,,http://repository.londonmet.ac.uk/id/eprint/5699 https://wlv.aws.openrepository.com/handle/2436/624439 https://wlv.openrepository.com/handle/2436/624439 https://core.ac.uk/download/288509828.pdf,http://dx.doi.org/10.14445/22312803/ijctt-v67i7p106,,10.14445/22312803/ijctt-v67i7p106,2976240752,,0,049-977-511-720-26X,1,true,cc-by-nc-nd,green 040-491-981-012-72X,Exploring digital evidence recognition among front-line law enforcement officers at fatal crash scenes,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Thomas J. Holt; Diana S. Dolliver,,37,,301167,,Criminal investigation; Business; Crash; State police; Enforcement; Law enforcement; Digital evidence; Population; Public relations; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/di/di37.html#HoltD21 https://www.sciencedirect.com/science/article/pii/S2666281721000755 https://doi.org/10.1016/j.fsidi.2021.301167,http://dx.doi.org/10.1016/j.fsidi.2021.301167,,10.1016/j.fsidi.2021.301167,3163284159,,0,001-250-896-150-392; 010-124-089-161-975; 011-183-142-391-881; 014-186-174-138-461; 015-205-982-250-344; 015-875-327-892-861; 017-477-988-870-001; 019-831-293-743-518; 020-037-922-756-483; 026-679-949-678-836; 036-136-968-123-520; 037-126-515-516-281; 041-350-452-684-86X; 045-923-383-951-135; 046-937-293-303-605; 048-164-796-676-48X; 057-776-414-208-327; 064-150-889-060-337; 065-732-653-055-992; 067-678-381-969-659; 068-825-451-126-264; 071-084-031-693-230; 078-448-713-257-099; 080-936-316-737-78X; 090-971-496-143-765; 092-255-412-437-850; 094-357-330-038-995; 096-867-891-629-069; 102-517-856-190-893; 107-339-218-542-025; 111-967-642-990-937; 146-617-069-518-196; 153-249-587-789-487; 157-014-406-805-580; 165-924-903-779-849; 178-607-809-064-030; 191-950-220-225-750; 192-411-982-578-361,1,false,, 040-586-986-714-001,Computer Forensics: Dark Net Forensic Framework and Tools Used for Digital Evidence Detection,2022-04-17,2022,journal article,International Journal of Communication Networks and Information Security (IJCNIS),2073607x; 20760930,"Auricle Technologies, Pvt., Ltd.",Pakistan,May A. Alotaibi; Mohammed A. AlZain; Ben Soh; Mehedi Masud; Jehad Al-Amri,"As the development of technology increases and its use becomes increasingly more widespread, computer crimes grow. Hence, computer forensics research is becoming more crucial in developing good forensic frameworks and digital evidence detection tools to deter more cyber-attacks. In this paper, we explore the science of computer forensics, a dark web forensic framework, and digital evidence detection tools. ",11,3,,,Digital forensics; Computer forensics; Digital evidence; Network forensics; Forensic science; Computer science; Data science; Cybercrime; Computer security; World Wide Web; The Internet; Archaeology; History,,,,,,http://dx.doi.org/10.17762/ijcnis.v11i3.4407,,10.17762/ijcnis.v11i3.4407,,,0,,0,true,,bronze 040-943-778-302-750,Issues and Techniques for Redacting PDF Files,2008-12-09,2008,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Gavin W. Manes; James C. Johnson; Alex Barclay; Michael Harvey; Elizabeth Downing; John Hale,"The PDF (portable data format) file format is the de facto standard for platform-independent document creation, distribution, and archiving. However, due to the complexity of the PDF data format and the currently incomplete redaction methodologies, the confidentiality and integrity of current forensic PDF redaction is questionable. In-depth analysis of the failures of current redaction tools combined with unrecognized issues of redacting data from PDF files mandate additional design goals and considerations for a correct redaction methodology. A proof-of-concept bitwise redaction tool demonstrates solutions to such problems and was specifically developed to support low-level file redaction.",2,3,113,116,De facto standard; Bitwise operation; World Wide Web; Redaction; Privilege (computing); Computer science; Confidentiality; Digital forensics; Metadata; File format,,,,,https://dblp.uni-trier.de/db/journals/jdfp/jdfp2.html#ManesJBHDH08 http://dblp.uni-trier.de/db/journals/jdfp/jdfp2.html#ManesJBHDH08 https://www.tandfonline.com/doi/full/10.1080/15567280802385485,http://dx.doi.org/10.1080/15567280802385485,,10.1080/15567280802385485,1991204018,,0,020-743-375-570-054; 025-879-940-994-410; 108-086-708-688-274,0,false,, 041-018-610-330-094,Advances in Digital Forensics Frameworks and Tools: A Comparative Insight and Ranking,,2018,journal article,International Journal of Digital Crime and Forensics,19416210; 19416229,IGI Global,United States,Muhammad Abulaish; Nur Al Hasan Haldar,"Digital forensics science is a well-known initiative to unearth computer-assisted crimes. The thriving criminal activities using digital media have changed the typical definition of a traditional crime. Meanwhile, the means and targets of criminal activities have been transformed in a broader context due to the diverse nature of offenses associated with the multiple crime categories, affecting the way of investigations as well. In order to withstand the difficulties caused due to the crime complexity, forensics investigation frameworks are being tuned to adjust with the nature and earnestness of the felonies being committed. This article presents an in-depth comparative survey of fourteen popular and most cited digital forensics process models and various forensics tools associated with different phases of these models. The relationships among these forensics process models and their evolutions are analyzed and a graph-theoretic approach is presented to rank the existing process models to facilitate investigators in selecting an appropriate model for their investigation tasks.",10,2,95,119,Rank (computer programming); Digital media; Ranking; Data science; Thriving; Context (language use); Computer science; Process modeling; Digital forensics,,,,,https://dl.acm.org/citation.cfm?id=3212825 https://doi.org/10.4018/IJDCF.2018040106 https://dl.acm.org/doi/10.4018/IJDCF.2018040106 https://www.igi-global.com/article/advances-in-digital-forensics-frameworks-and-tools/201538 https://dblp.uni-trier.de/db/journals/ijdcf/ijdcf10.html#AbulaishH18,http://dx.doi.org/10.4018/ijdcf.2018040106,,10.4018/ijdcf.2018040106,2791902389,,0,003-148-232-365-149; 003-575-010-209-278; 007-790-059-029-953; 009-701-742-236-493; 009-885-874-541-907; 010-086-703-646-194; 018-545-671-129-918; 020-944-423-224-895; 021-850-998-857-676; 024-381-049-056-789; 024-539-327-776-880; 026-774-296-742-022; 027-616-748-861-595; 032-697-093-668-898; 034-916-306-834-918; 035-129-008-760-918; 035-877-258-121-493; 038-668-970-194-854; 041-227-773-004-745; 043-807-511-720-729; 045-581-544-307-619; 046-507-380-373-943; 048-152-764-040-438; 051-165-387-606-715; 055-590-023-850-939; 062-325-585-829-185; 073-582-404-994-103; 083-748-184-402-072; 089-048-294-489-077; 089-695-854-791-989; 093-168-661-369-693; 098-748-261-333-651; 102-117-623-922-990; 111-090-978-711-139; 111-741-773-111-021; 127-948-386-055-225; 134-927-490-231-285; 142-388-561-082-054; 147-869-996-091-987; 154-120-262-048-284; 155-855-942-114-621; 170-299-458-679-224; 182-962-922-039-081; 184-948-841-629-735; 190-065-821-748-92X; 199-745-676-923-766,4,false,, 041-061-538-346-924,Factors influencing digital forensic investigations: Empirical evaluation of 12 years of Dubai police cases,,2015,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Ibtesam Al Awadhi; Janet C. Read; Andrew Marrington; Virginia N. L. Franqueira,"In Digital Forensics, the number of person-hours spent on investigation is a key factor which needs to be kept to a minimum whilst also paying close attention to the authenticity of the evidence. The literature describes challenges behind increasing person-hours and identifies several factors which contribute to this phenomenon. This paper reviews these factors and demonstrates that they do not wholly account for increases in investigation time. Using real case records from the Dubai Police, an extensive study explains the contribution of other factors to the increase in person-hours. We conclude this work by emphasizing on several factors affecting the person-hours in contrast to what most of the literature in this area proposes.",10,4,7,16,Work (electrical); Political science; Empirical data; Case records; Computer security; Public relations; Computer forensics; Digital forensics,,,,,https://zuscholars.zu.ac.ae/works/1642/ https://commons.erau.edu/jdfsl/vol10/iss4/1/ https://derby.openrepository.com/handle/10545/600540 https://commons.erau.edu/cgi/viewcontent.cgi?article=1207&context=jdfsl http://derby.openrepository.com/derby/bitstream/10545/600540/1/361-1320-1-PB.pdf https://zuscholars.zu.ac.ae/cgi/viewcontent.cgi?article=2641&context=works https://core.ac.uk/display/46171175 https://derby.aws.openrepository.com/handle/10545/600540 https://doi.org/10.15394/jdfsl.2015.1207 http://clok.uclan.ac.uk/18386/ https://core.ac.uk/download/46171175.pdf,http://dx.doi.org/10.15394/jdfsl.2015.1207,,10.15394/jdfsl.2015.1207,2288156152,,0,005-465-138-684-882; 024-539-327-776-880; 072-399-102-731-218; 073-847-291-567-156; 077-590-082-657-678; 079-070-981-899-105; 090-752-043-508-733; 192-955-966-543-738,1,true,cc-by-nc,gold 041-109-469-858-984,Twenty first Annual DFRWS Conference,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Aaron Sparling,,37,,301262,,,,,,,https://api.elsevier.com/content/article/PII:S2666281721001785?httpAccept=text/xml http://dblp.uni-trier.de/db/journals/di/di37S.html#Sparling21 https://doi.org/10.1016/j.fsidi.2021.301262,http://dx.doi.org/10.1016/j.fsidi.2021.301262,,10.1016/j.fsidi.2021.301262,3195110009,,0,,0,false,, 041-147-445-040-229,A comparative study of audio latency feature of Motorola and Samsung mobile phones in forensic identification,2021-01-30,2021,journal article,Indian Journal of Science and Technology,09746846; 09745645,Indian Society for Education and Environment,India,Ashu Goyal; Sudhir Shukla; R.K. Sarin,"Background: In forensic science the process of proving authenticity of audio recording plays an important role. In recent times, Forensic experts mostly receives digital recording for authentication as compared to analog recording. A digitally altered audio signal, leaves no visual indications of being tampered, and it will be indistinguishable from an original audio signal. Objective: To highlight the significance of latency feature of mobile phone handsets in forensic science via comparing input audio latency feature of Samsung and Motorola mobile phone in two audio formats. Methods: In this work two wellestablished and most used brands of mobile phones were considered for comparison: SAMSUNG and MOTOROLA. In the present paper, the digital audio samples have been recorded using 20 mobile phones of various models from two different makes i.e. SAMSUNG and MOTOROLA, in two audio formats i.e. WAV and 3GP. Audio samples were then analysed using Adobe Audition 3.0 software for the input audio latency feature of mobile phones and compared. Findings: Input audio latency value of digital audio recordings can be helpful in forensic identification of make and model of source mobile phone. Novelty: A new technique in digital forensics, to classify the given audio samples on the basis of input audio latency feature and identifying the make of source mobile handsets.; Keywords: Authentication; digital audio; forensic science; adobe audition; mobile phone",14,4,319,324,Sound recording and reproduction; Mobile phone; Analog recording; Digital recording; Computer science; Multimedia; Audio signal; Latency (audio); Digital audio,,,,,https://indjst.org/articles/a-comparative-study-of-audio-latency-feature-of-motorola-and-samsung-mobile-phones-in-forensic-identification,http://dx.doi.org/10.17485/ijst/v14i4.2108,,10.17485/ijst/v14i4.2108,3129458549,,0,,1,true,cc-by,gold 041-324-428-460-736,Advances in the application of Ontologies in the area of Digital Forensic Electronic Mail,,2019,journal article,IEEE Latin America Transactions,15480992,Institute of Electrical and Electronics Engineers (IEEE),United States,Beatriz Parra; Marcela Vegetti; Horacio Pascual Leone,"This article presents a descriptive review of the research published in the last five years to identify areas of unavailability in the study of Digital Forensics problems. Particularly, it is important to define the state of the art related to the application of ontologies, especially in the forensics of emails. The following objectives of the review are proposed: identify and study the most up-to-date research contributions on Ontologies and Digital Forensics; establish the gaps in current research reltated with the application of Ontologies to Digital Forensics; and correlate these works from attributes of proximity (or distance) with the application of ontologies to the forensic analysis of emails. In addition, a systematic method is defined to select the research works that are considered of interest for this review. It is expected that it will lead to the identification of gaps in the investigation of characteristic problems in digital forensic analysis, and the definition of an updated theoretical framework linked to the forensic analysis of emails with the application of ontologies.",17,10,1694,1705,Traceability; Ontology (information science); Data science; Unavailability; Electronic mail; Computer science; State (computer science); Identification (information); Digital forensics,,,,,https://ieeexplore.ieee.org/abstract/document/8986448/ https://ri.conicet.gov.ar/handle/11336/108980,http://dx.doi.org/10.1109/tla.2019.8986448,,10.1109/tla.2019.8986448,3004578751,,0,001-470-661-245-05X; 003-904-680-040-998; 005-239-259-377-920; 005-281-459-480-921; 007-236-370-501-343; 007-898-145-584-667; 010-303-601-652-217; 012-279-890-569-414; 014-767-056-602-687; 016-322-663-058-127; 017-158-332-111-098; 017-173-984-068-393; 018-447-058-666-847; 018-481-487-803-319; 020-472-837-746-738; 023-477-418-125-672; 024-141-009-131-171; 029-638-263-419-336; 029-934-518-651-564; 031-928-219-465-244; 032-229-233-316-986; 035-111-321-718-69X; 036-491-721-454-797; 038-188-755-700-758; 039-261-571-226-742; 043-404-180-796-57X; 043-686-094-043-705; 045-432-228-745-423; 050-161-083-716-443; 052-368-682-285-199; 059-496-563-584-103; 062-058-510-536-034; 063-428-065-806-586; 064-498-229-482-128; 065-346-027-945-984; 065-873-523-989-876; 067-277-539-124-027; 073-209-422-678-483; 073-568-787-578-72X; 074-689-820-165-212; 074-814-000-483-733; 077-681-647-723-331; 078-095-922-471-787; 080-815-401-164-76X; 080-950-780-801-678; 081-547-256-855-879; 082-071-198-593-57X; 084-860-380-249-411; 090-773-852-075-475; 091-214-650-015-55X; 092-050-479-982-221; 092-972-476-571-620; 102-441-399-953-42X; 104-153-499-789-950; 106-066-275-544-628; 106-715-261-421-560; 107-282-856-639-564; 119-584-691-271-448; 121-275-050-804-307; 124-114-091-024-00X; 124-551-718-579-355; 124-983-078-767-356; 127-734-468-288-045; 129-151-019-944-543; 134-369-102-934-63X; 134-927-490-231-285; 138-100-387-358-181; 141-164-327-638-772; 142-821-739-103-225; 143-399-167-174-364; 146-815-866-418-806; 147-640-789-885-64X; 151-428-592-500-634; 155-318-974-737-635; 155-406-204-525-089; 159-883-904-840-562; 159-947-028-845-370; 161-503-717-618-67X; 161-543-725-354-762; 163-558-468-520-17X; 163-694-599-267-959; 163-877-074-795-849; 183-905-605-540-505; 184-069-302-229-82X,2,false,, 041-584-529-699-093,Forensic odontology with digital technologies: A systematic review,2020-07-01,2020,journal article,Journal of forensic and legal medicine,18787487; 1752928x,Churchill Livingstone,Netherlands,Shinpei Matsuda; Hisato Yoshida; Kiyokadzu Ebata; Ichiroh Shimada; Hitoshi Yoshimura,"Postmortem dental examinations play an important role in individual identification. In forensic odontology, individual identification is based on a traditional visual comparison of the antemortem dental record and dental radiographs with those obtained by postmortem examinations. Digitization in forensic odontology has recently started. The aim of this systematic review was to reveal the progress in forensic odontology by using ante/postmortem information obtained by digital technologies. Thirty-six eligible studies were included. No methods with digital technology have been accepted worldwide because of various factors such as expensive special equipment and the cost of other components. Further research should be conducted and progress should be made in the field of forensic odontology along with the progression of general digital technology.",74,,102004,,Medical physics; Digitization; Dental examinations; Dental record; Forensic odontology; Medicine; Identification (information),Dental imaging examination; Digital technologies; Forensic odontology; Orofacial soft tissues; Tooth,"Age Determination by Teeth; Digital Technology; Forensic Dentistry/methods; Humans; Image Processing, Computer-Assisted; Lip/anatomy & histology; Palate, Hard/anatomy & histology; Radiography, Dental, Digital; Tongue/anatomy & histology",,"The Fukui Bank, Ltd",https://www.ncbi.nlm.nih.gov/pubmed/32658766 https://pubmed.ncbi.nlm.nih.gov/32658766/ https://www.sciencedirect.com/science/article/abs/pii/S1752928X20301116,http://dx.doi.org/10.1016/j.jflm.2020.102004,32658766,10.1016/j.jflm.2020.102004,3038257093,,0,000-528-548-051-109; 001-287-474-767-471; 001-415-340-215-210; 005-471-876-175-458; 006-245-563-587-073; 006-467-665-141-850; 008-132-745-849-013; 009-388-146-311-655; 012-515-256-028-110; 013-032-379-293-344; 013-370-437-817-823; 017-300-737-144-757; 017-564-585-587-899; 019-268-703-108-809; 023-790-746-046-288; 024-140-201-975-396; 024-320-416-540-275; 024-784-179-276-92X; 030-306-368-362-318; 031-791-954-058-413; 032-052-414-081-660; 033-254-550-233-720; 034-420-798-635-763; 037-973-000-785-578; 038-154-163-248-125; 040-119-897-570-648; 044-526-538-557-621; 044-682-979-330-996; 045-196-163-725-218; 054-089-472-275-233; 054-795-951-232-933; 055-564-241-407-768; 055-729-934-561-648; 056-053-703-193-648; 057-068-582-749-58X; 057-893-935-658-705; 063-240-818-324-537; 066-451-738-775-222; 075-942-783-231-470; 083-275-795-865-394; 087-391-588-830-272; 089-940-880-601-620; 095-973-013-007-891; 112-959-234-161-175; 115-349-142-118-234; 116-017-921-838-412; 123-780-980-626-893; 136-074-315-058-244; 147-136-511-956-56X; 161-010-069-062-144; 161-043-159-762-292; 162-336-092-931-463,9,false,, 041-585-451-530-646,Standard methods for creating digital skeletal models using structure-from-motion photogrammetry.,2019-02-19,2019,journal article,American journal of physical anthropology,10968644; 00029483,Wiley-Liss Inc.,United States,Brianne Morgan; Andrew Ford; Martin J. Smith,"Objectives This article assesses best practices for producing 3D digital cranial models through structure-from-motion (SfM) photogrammetry, and whether the metric accuracy and overall presentation of photogrammetric models are comparable to physical crania. It is intended to present a user-friendly standard method of creating accurate digital skeletal models using Agisoft PhotoScan. Materials and methods Approximately 200 photographs were taken of three different crania, and were separated into series consisting of 50, 75, 100, 150, and approximately 200 photos. Forty-five cranial models were created using different photo series and a variety of PhotoScan settings. These models were assessed based on defined qualitative criteria, and model measurement estimates were compared with physical skeletal measurements using Bland-Altman plots. Results The majority of all models (37/45) produced measurement estimates with mean differences of 2 mm or less regardless of PhotoScan settings, and therefore demonstrated high levels of agreement with the physical measurements. Models created with 150 photographs and on ""high"" PhotoScan settings scored the highest in terms of qualitative appearance in the shortest amount of time. Discussion In PhotoScan, it is recommended to create cranial models using 150 photographs and ""high"" settings; this produces digital cranial models that are comparable to physical crania in both appearance and proportion. SfM photogrammetry is a convenient, noninvasive, and rapid 3D modeling tool that can be used in almost any setting to produce digital models, and following the guidelines established here will ensure that these models are metrically accurate.",169,1,152,160,Photogrammetry; Structure from motion; Artificial intelligence; Metric (unit); Observational error; Crania; 3D modeling; Standard methods; 3d model; Computer vision; Computer science,3D models; accuracy; anthropometry; measurement error; photogrammetry,"Adult; Cephalometry; Humans; Imaging, Three-Dimensional; Models, Anatomic; Photogrammetry/methods; Skull/anatomy & histology",,,https://onlinelibrary.wiley.com/doi/full/10.1002/ajpa.23803 https://pubmed.ncbi.nlm.nih.gov/30784038/ https://europepmc.org/article/MED/30784038 https://www.ncbi.nlm.nih.gov/pubmed/30784038 https://onlinelibrary.wiley.com/doi/abs/10.1002/ajpa.23803 http://eprints.bournemouth.ac.uk/32161/ https://core.ac.uk/download/195353782.pdf,http://dx.doi.org/10.1002/ajpa.23803,30784038,10.1002/ajpa.23803,2918034531,,0,000-198-602-261-272; 002-931-674-142-75X; 006-053-337-346-101; 011-855-823-533-127; 016-580-313-404-132; 020-736-670-910-650; 030-399-930-545-660; 031-933-665-463-421; 037-843-889-589-399; 042-100-182-415-268; 047-981-818-086-012; 059-942-525-213-35X; 061-507-121-495-27X; 073-823-317-995-663; 092-063-658-837-508; 092-297-970-484-235; 124-684-494-161-222,12,true,,green 041-681-884-186-668,A Forensic Approach on Data Retrieval from IC/eMMC of Damaged Windows Mobile Phone using Easy JTagPlus Box tool and Magnet Forensic Axiom,2021-10-16,2021,journal article,International Journal of Scientific Research in Science and Technology,2395602x; 23956011,Technoscience Academy,,Bhushan Ghode; Akhlesh Kumar; Khevna Maniar; S. K. Jain,"The digital world is dominated and ruled by the IOS and Android operating systems on mobile as well as tablet platforms. Together they share a whopping 99% (till 2021) of the share market. The Windows Phones (WP) are occupants of that less than 1% platform that they share with other subsidiary operating systems. Due to the lack of commercial popularity and production of such Windows devices, the process of data extraction and analysis of such devices is unique and challenging for forensic experts. The standard forensic data retrieving software and hardware do not support advanced requisition techniques except the direct extraction. Thus, in cases with locked WP devices, the software/ hardware is unable to support the device’s physical extraction or lock bypass facility. As observed in several digital cases, these portable devices contain details of an individual’s most private life including communications, contacts, browsing history, and location specifics at any given time. Although the operating systems of Microsoft and Windows mobile devices are similar in certain ways, specialized skill sets and tools are required while dealing with location, examination, and interpretation of the digital evidence on these systems. In this research paper, the authors are discussing the reliability and success of data extraction of a Windows mobile device from IC/eMMC using specialized hardware/software with the Windows device.",,,499,508,Magnet; Axiom; Mobile phone; Computer science; Data retrieval; Database,,,,,https://ijsrst.com/IJSRST218568,http://dx.doi.org/10.32628/ijsrst218568,,10.32628/ijsrst218568,3214852069,,0,015-540-631-774-646; 040-662-259-940-91X; 084-492-860-597-873,0,true,,gold 041-749-004-943-703,A blockchain-based decentralized efficient investigation framework for IoT digital forensics,2019-02-15,2019,journal article,The Journal of Supercomputing,09208542; 15730484,Springer Science and Business Media LLC,Netherlands,Jung Hyun Ryu; Pradip Kumar Sharma; Jeong Hoon Jo; Jong Hyuk Park,"Until now, there has been little research on digital forensics in the IoT (Internet of Things)-based infrastructure. Current digital forensic tools, investigation frameworks, and processes cannot meet the heterogeneity and distribution characteristics of the IoT environment. These characteristics are a challenge for digital forensic investigators and law enforcement agencies. To solve these problems, this paper proposes a digital forensics framework for the IoT environment based on the blockchain technology. In the proposed framework, all communications of IoT devices are stored in the blockchain as transactions, thus making the existing chain of custody process easier and more powerful. By using the blockchain technology, the integrity of the data to be analyzed is ensured and security is strengthened, and the preservation of integrity is made more reliable by a decentralized method of integrity preservation. In addition, since the public distributed ledger is provided, participants in the forensic investigation—such as device users, manufacturers, investigators, and service providers—can confirm the investigation process transparently. We simulated the proposed model to support the proof of concept.",75,8,4372,4387,Chain of custody; Decentralization; Forensic science; Distributed ledger; Blockchain; Law enforcement; Service (systems architecture); Computer security; Computer science; Process (engineering); Digital forensics,,,,Institute for Information and communications Technology Promotion,https://link.springer.com/article/10.1007/s11227-019-02779-9 https://www.infona.pl/resource/bwmeta1.element.springer-doi-10_1007-S11227-019-02779-9 https://doi.org/10.1007/s11227-019-02779-9 https://rd.springer.com/article/10.1007/s11227-019-02779-9?tdsourcetag=s_pctim_aiomsg https://dblp.uni-trier.de/db/journals/tjs/tjs75.html#RyuSJP19 https://abdn.pure.elsevier.com/en/publications/a-blockchain-based-decentralized-efficient-investigation-framewor,http://dx.doi.org/10.1007/s11227-019-02779-9,,10.1007/s11227-019-02779-9,2912301472,,3,005-630-640-664-939; 005-835-030-074-033; 009-748-590-922-352; 010-284-227-477-250; 016-052-331-799-087; 018-552-581-098-658; 039-063-316-090-73X; 040-130-649-501-691; 047-125-525-662-686; 065-654-832-541-493; 073-226-645-031-753; 100-050-874-593-187; 103-681-534-784-390; 112-181-239-331-730; 141-227-167-540-818,54,false,, 041-937-849-345-674,Journal roles and responsibilities: Simplification and optimization,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Bruce J. Nikkel; Zeno Geradts,,38,,301282,,,,,,,http://dblp.uni-trier.de/db/journals/di/di38.html#NikkelG21 https://doi.org/10.1016/j.fsidi.2021.301282 https://api.elsevier.com/content/article/PII:S2666281721002006?httpAccept=text/xml,http://dx.doi.org/10.1016/j.fsidi.2021.301282,,10.1016/j.fsidi.2021.301282,3200928483,,0,,0,true,,bronze 041-971-478-041-581,Structural equation modelling of subjective measures with an application to forensic handwriting examination,,2010,journal article,Science & Justice,13550306,Elsevier BV,United Kingdom,Reinoud D. Stoel; E. Van den Heuvel; Linda Alewijnse,,50,1,31,32,Machine learning; Artificial intelligence; Natural language processing; Handwriting; Computer science; Structural equation modeling,,,,,https://www.sciencedirect.com/science/article/pii/S1355030609001993,http://dx.doi.org/10.1016/j.scijus.2009.11.027,,10.1016/j.scijus.2009.11.027,2068783018,,0,,1,false,, 042-161-804-735-83X,Obtaining confidence intervals and Likelihood Ratios for body height estimations in images.,2008-03-03,2008,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Ivo Alberink; Annabel Bolck,,177,2,228,237,Statistics; Photogrammetry; Suspect; Closeness; Height loss; Natural variation; Body height; Strength of evidence; Mathematics; Confidence interval,,"Body Height; Confidence Intervals; Crime; Forensic Medicine; Humans; Imaging, Three-Dimensional; Likelihood Functions; Models, Statistical; Photogrammetry; Videotape Recording",,,https://www.sciencedirect.com/science/article/pii/S0379073808000108 https://www.ncbi.nlm.nih.gov/pubmed/18313872 https://pubmed.ncbi.nlm.nih.gov/18313872/,http://dx.doi.org/10.1016/j.forsciint.2008.01.005,18313872,10.1016/j.forsciint.2008.01.005,2092519599,,0,000-927-129-586-430; 010-514-878-269-739; 024-553-820-630-659; 028-450-624-676-442; 032-829-264-659-729; 050-473-201-526-265; 081-712-506-241-498; 085-370-444-410-812; 102-249-344-874-417; 140-727-614-597-395; 194-226-907-607-853,25,false,, 042-388-684-756-121,"Wounded to the bone: Digital microscopic analysis of traumas in a medieval mass grave assemblage (Sandbjerget, Denmark, AD 1300-1350).",2017-11-02,2017,journal article,International journal of paleopathology,18799825; 18799817,Elsevier BV,Netherlands,Alexandra Boucherie; Marie Louise Jørkov; Martin J. Smith,"Abstract Battle-related mass burials are considered the most unequivocal evidence of past violence. However, most published studies involve only macroscopic analysis of skeletal remains, commonly arriving only at broad conclusions regarding trauma interpretation. The current study considers a possible avenue for achieving both greater detail and accuracy through digital microscopy. Patterns of injury were investigated among 45 individuals from a Medieval Danish mass grave (Sandbjerget, AD 1300–1350). Injuries were recorded on every anatomical element, except hand and foot bones. Each was photographed and cast, facilitating remote evaluations. Macroscopic analysis was compared with digital microscopy in order to test the relative utility of the latter in characterizing skeletal injuries (mechanism, weapon class, direction, timing of injury). The location of 201 observed injuries, mainly sharp force defects, suggested that many lesions were probably not inflicted by face-to-face opponents. Some microscopic features were indicative of a specific lesion type and weapon class. Digital microscopy was therefore demonstrated to be a complementary tool to macroscopic assessment, enhancing feature observation and quantification and serving to compensate for many of the limitations of macroscopic assessment.",19,,66,79,Anatomy; Pathology; Paleopathology; Assemblage (archaeology); Digital microscopy; Foot Bones; Relative utility; Sharp force; Lesion type; History,Digital microscopy; Lesion morphology; Mass grave; Medieval archaeology; Paleopathology; Traumatology,"Adolescent; Adult; Age Determination by Skeleton; Armed Conflicts/history; Bone and Bones/injuries; Burial/history; Child; Denmark/epidemiology; History, Medieval; Humans; Microscopy; Paleopathology/methods; Prevalence; Violence/history; Weapons/history; Wounds and Injuries/epidemiology; Young Adult",,,https://www.sciencedirect.com/science/article/pii/S1879981716300730 https://core.ac.uk/display/132195733 https://www.ncbi.nlm.nih.gov/pubmed/29198401 http://eprints.bournemouth.ac.uk/30028/ https://difusion.ulb.ac.be/vufind/Record/ULB-DIPOT:oai:dipot.ulb.ac.be:2013/261791/Details https://core.ac.uk/download/132195733.pdf,http://dx.doi.org/10.1016/j.ijpp.2017.10.005,29198401,10.1016/j.ijpp.2017.10.005,2766517719,,0,001-717-189-403-270; 003-713-944-354-850; 005-389-211-946-956; 005-739-768-385-524; 007-059-931-241-63X; 007-978-706-272-285; 008-018-811-400-830; 008-272-023-737-778; 008-926-843-467-099; 009-481-875-308-233; 009-554-467-261-282; 009-847-311-194-828; 010-283-515-536-142; 010-431-980-930-155; 011-054-465-710-364; 011-177-178-483-824; 013-179-989-114-485; 013-785-006-611-350; 015-818-819-988-332; 017-229-374-543-003; 018-645-968-236-085; 021-193-535-230-589; 021-745-861-312-865; 025-076-704-666-088; 030-616-089-195-645; 030-804-886-613-06X; 031-056-855-501-837; 031-757-169-698-811; 032-554-830-138-515; 037-842-010-642-36X; 042-229-754-619-854; 042-705-658-682-014; 043-073-958-036-763; 044-770-051-605-649; 044-870-283-439-262; 044-880-927-937-603; 045-766-463-919-964; 048-198-364-623-662; 050-329-252-705-929; 050-986-075-902-824; 051-523-568-627-694; 053-489-588-864-140; 053-650-463-239-366; 055-210-504-415-973; 056-773-382-417-49X; 057-031-042-677-424; 057-831-917-583-048; 058-934-134-593-723; 062-134-927-775-016; 062-627-232-206-904; 063-524-038-345-462; 063-867-680-167-004; 063-988-169-869-835; 065-308-078-290-52X; 067-749-584-427-994; 069-064-798-493-832; 071-104-157-956-839; 075-477-417-950-095; 077-246-580-849-514; 079-088-698-517-859; 084-719-044-126-604; 086-729-023-293-202; 089-848-297-586-409; 091-963-966-078-993; 092-420-910-125-696; 093-595-468-484-020; 097-304-512-447-888; 098-537-562-534-115; 102-769-814-597-346; 106-729-138-122-079; 106-974-083-875-952; 108-740-965-814-802; 114-091-187-112-096; 120-530-590-359-24X; 121-025-811-768-012; 122-909-599-387-641; 125-141-726-042-405; 125-860-211-735-502; 134-744-534-676-197; 143-476-426-615-205; 144-886-025-343-876; 151-431-018-856-537; 161-796-518-307-758; 173-709-546-640-803; 199-972-185-690-080,11,true,,green 042-493-919-892-887,DB3F & DF-Toolkit: The Database Forensic File Format and the Database Forensic Toolkit,,2019,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,James Wagner; Alexander Rasin; Karen Heart; Rebecca Jacob; Jonathan Grier,"Abstract The majority of sensitive and personal user data is stored in different Database Management Systems (DBMS). For Example, Oracle is frequently used to store corporate data, MySQL serves as the back-end storage for most webstores, and SQLite stores personal data such as SMS messages on a phone or browser bookmarks. Each DBMS manages its own storage (within the operating system), thus databases require their own set of forensic tools. While database carving solutions have been built by multiple research groups, forensic investigators today still lack the tools necessary to analyze DBMS forensic artifacts. The unique nature of database storage and the resulting forensic artifacts require established standards for artifact storage and viewing mechanisms in order for such advanced analysis tools to be developed. In this paper, we present 1) a standard storage format, Database Forensic File Format (DB3F), for database forensic tools output that follows the guidelines established by other (file system) forensic tools, and 2) a view and search toolkit, Database Forensic Toolkit (DF-Toolkit), that enables the analysis of data stored in our database forensic format. Using our prototype implementation, we demonstrate that our toolkit follows the state-of-the-art design used by current forensic tools and offers easy-to-interpret database artifact search capabilities.",29,,S42,S50,Set (abstract data type); Database storage structures; Phone; Artifact (software development); File system; Computer science; Oracle; Short Message Service; Database; File format,,,,US National Science Foundation,https://dfrws.org/presentation/db3f-df-toolkit-the-database-forensic-file-format-and-the-database-forensic-toolkit/ https://par.nsf.gov/servlets/purl/10215915 https://par.nsf.gov/biblio/10215915-db3f-df-toolkit-database-forensic-file-format-database-forensic-toolkit https://dfrws.org/wp-content/uploads/2019/06/2019_USA_paper-db3f_df_toolkit_the_database_forensic_file_format_and_the_database_forensic_toolkit.pdf https://www.sciencedirect.com/science/article/pii/S1742287619301598 https://www.sciencedirect.com/science/article/abs/pii/S1742287619301598,http://dx.doi.org/10.1016/j.diin.2019.04.010,,10.1016/j.diin.2019.04.010,2958740544,,0,004-652-388-189-304; 006-895-301-765-276; 011-051-740-313-213; 018-797-102-505-267; 041-879-975-858-398; 044-704-659-321-526; 061-549-181-856-861; 079-323-376-272-518; 094-143-534-138-927; 109-054-371-763-784; 119-484-500-569-383; 134-927-490-231-285,6,true,cc-by-nc-nd,hybrid 042-681-440-303-807,'Virtual anthropology' and radiographic imaging in the Forensic Medical Sciences,,2016,journal article,Egyptian Journal of Forensic Sciences,2090536x; 20905939,Springer Science and Business Media LLC,Egypt,Daniel Franklin; Lauren Swift; Ambika Flavel,"Abstract Technological advancements in forensic imaging have had tremendous flow-on benefits to the professional practice of forensic anthropology, not only in respect of case-work analyses, but in facilitating empirical research that has validated and/or improved existing, and introduced novel, methods into the discipline. Some of the pioneering practical examples of radiographic imaging being applied in the forensic analysis of human skeletal remains date to the initial introduction of radiography in the late 19th and early 20th centuries. Subsequent modern applications have developed concurrent to the use of computed tomography in the forensic morgue for autopsy procedures by pathologists; virtopsy (as it is now termed) represents a powerful non-invasive supplement/alternative to traditional autopsy practices where dissection may not be allowable due to religious objection (amongst other reasons). The present review considers a brief history of skeletal radiographic imaging and the specific modalities typically employed. Forensic applications of ‘virtual anthropology’ are then discussed, as are applications of the latter in DVI and other case-work scenarios. Throughout the review we emphasise the research importance of virtual modelling and conclude with some thoughts for future directions.",6,2,31,43,Empirical research; Engineering; Forensic science; Archaeology; Forensic anthropology; Virtopsy; Modalities; Professional practice; Radiographic imaging; Virtual anthropology; Engineering ethics,,,,,https://research-repository.uwa.edu.au/en/publications/virtual-anthropology-and-radiographic-imaging-in-the-forensic-medical-sciences(2f10773f-8b30-45db-a8ff-d49f8b886a38).html https://www.sciencedirect.com/science/article/pii/S2090536X16300211 https://research-repository.uwa.edu.au/en/publications/virtual-anthropology-and-radiographic-imaging-in-the-forensic-med https://www.sciencedirect.com/science/article/abs/pii/S2090536X16300211 https://doaj.org/article/e48c9cfa41774d8fb72d2d4cc710fbce https://core.ac.uk/display/82153682 https://core.ac.uk/download/pdf/82153682.pdf,http://dx.doi.org/10.1016/j.ejfs.2016.05.011,,10.1016/j.ejfs.2016.05.011,2410888510,,0,000-616-854-540-71X; 001-439-795-576-81X; 001-509-187-954-355; 002-186-798-658-734; 002-656-189-605-243; 002-757-040-487-632; 004-221-816-921-254; 004-303-840-031-832; 004-338-342-297-726; 004-511-043-063-555; 004-740-811-229-773; 005-177-091-362-483; 005-385-722-585-875; 005-503-826-592-097; 005-716-879-497-391; 005-834-836-817-137; 006-092-955-766-770; 006-193-398-397-679; 006-335-980-775-656; 007-107-760-954-419; 007-135-955-034-661; 007-255-119-392-523; 007-286-851-789-515; 007-595-250-297-741; 007-707-422-645-436; 008-692-389-578-047; 009-847-993-999-227; 011-271-812-041-777; 011-592-595-162-94X; 011-685-696-640-640; 013-141-653-457-843; 013-488-767-873-055; 014-153-182-622-447; 014-476-053-975-04X; 015-670-129-901-262; 016-976-025-346-119; 017-275-859-330-978; 018-368-219-317-985; 019-773-224-262-064; 020-118-168-727-123; 020-460-492-720-402; 021-993-166-350-90X; 022-614-665-373-528; 022-665-898-339-902; 022-693-870-095-967; 023-047-789-326-916; 023-088-891-709-113; 024-065-202-822-642; 025-805-398-785-616; 026-099-814-244-466; 028-816-541-692-213; 029-058-553-215-728; 029-251-445-186-776; 029-500-821-072-030; 029-515-343-016-289; 029-732-880-962-175; 030-482-988-082-870; 031-638-081-709-238; 032-214-703-275-188; 032-753-509-478-03X; 033-642-774-124-704; 034-563-302-848-262; 035-561-317-070-024; 036-179-018-213-506; 037-005-300-231-827; 037-043-118-582-169; 038-385-461-087-698; 038-935-936-815-796; 040-422-778-280-383; 043-469-249-001-796; 044-181-122-446-214; 045-036-447-944-436; 045-637-839-941-748; 046-364-820-140-444; 046-806-939-411-024; 048-117-288-665-424; 048-305-589-068-568; 050-110-353-452-960; 050-545-826-493-205; 050-655-082-106-432; 053-698-102-089-748; 053-865-451-497-059; 057-068-582-749-58X; 057-394-231-191-83X; 057-499-363-638-905; 057-808-516-518-928; 057-980-265-984-880; 058-685-497-656-362; 059-508-172-390-622; 059-604-188-296-446; 060-587-341-838-349; 061-477-172-868-617; 062-331-927-190-555; 063-676-727-868-640; 066-233-025-752-287; 067-740-167-836-999; 067-771-615-626-736; 069-735-826-824-630; 071-605-587-664-33X; 071-687-422-664-51X; 073-486-221-040-374; 073-554-285-542-906; 074-875-597-991-130; 075-437-030-827-918; 075-893-140-740-249; 077-489-698-910-110; 078-240-463-463-283; 078-343-830-844-558; 079-631-085-707-07X; 080-280-254-711-365; 080-434-693-912-053; 081-144-163-281-62X; 081-323-521-852-917; 081-386-913-514-317; 081-726-231-214-630; 083-363-957-682-233; 083-683-555-044-629; 086-631-387-693-447; 087-226-710-225-342; 087-309-291-494-399; 087-451-816-741-063; 088-537-905-517-796; 089-198-131-313-695; 089-989-801-412-31X; 090-976-986-369-612; 091-452-544-047-439; 102-043-286-505-74X; 102-530-305-953-440; 105-225-358-765-409; 107-311-830-340-732; 111-792-711-139-803; 112-691-020-992-323; 113-701-178-175-406; 115-793-699-105-669; 118-046-335-100-971; 121-497-911-226-662; 126-677-182-734-199; 130-367-625-631-174; 136-098-527-867-023; 136-332-829-169-135; 136-718-393-565-699; 137-950-688-361-995; 139-600-070-612-564; 143-476-426-615-205; 147-924-841-513-400; 150-328-046-230-433; 150-515-435-801-352; 151-015-365-230-704; 154-940-310-415-565; 155-523-793-749-824; 156-500-442-474-413; 157-194-287-979-203; 161-514-790-502-466; 162-499-967-949-401; 163-902-757-242-209; 164-972-466-028-94X; 165-345-150-285-302; 178-206-821-707-820; 183-259-875-566-525; 186-753-484-302-55X; 199-972-185-690-080,39,true,cc-by,gold 042-684-294-673-319,Analysis of amino acid enantiomers from aged fingerprints,2020-04-16,2020,journal article,Analytical Methods,17599660; 17599679,Royal Society of Chemistry (RSC),United Kingdom,Ward van Helmond; Maarten Weening; Vonne Vleer; Marcel de Puit,"Fingerprints found at a crime scene can be key in criminal investigations. A method to accurately determine the age of the fingerprint, potentially crucial to linking the fingerprint to the crime, is not available at the moment. In this paper, we show that the use of the enantiomeric ratio of D/L-serine in fingerprints could pose as interesting target for age estimation techniques. We developed a UPLC-MS/MS method to determine the enantiomer ratios of histidine, serine, threonine, alanine, proline, methionine and valine from fingerprint residue. We found a significant change only in the relative ratio of D-serine with increasing fingerprint age after analysis of fingerprints up to 6 months old.",12,15,2052,2057,Crime scene; Chemistry; Valine; Fingerprint (computing); Histidine; Alanine; Methionine; Chromatography; Enantiomer; Amino acid,,,,Nederlandse Organisatie voor Wetenschappelijk Onderzoek,https://pure.hva.nl/ws/files/7023325/d0ay00096e.pdf https://research.hva.nl/en/publications/analysis-of-amino-acid-enantiomers-from-aged-fingerprints https://pubag.nal.usda.gov/catalog/6888560 https://pubs.rsc.org/en/content/articlehtml/2020/ay/d0ay00096e https://pubs.rsc.org/en/content/articlepdf/2020/AY/D0AY00096E https://www.narcis.nl/publication/RecordID/oai%3Atudelft.nl%3Auuid%3A71757441-b155-4029-bf33-80864c1274d5 http://xlink.rsc.org/?DOI=D0AY00096E,http://dx.doi.org/10.1039/d0ay00096e,,10.1039/d0ay00096e,3013281228,,0,002-589-008-193-992; 015-913-138-194-663; 017-395-809-300-339; 024-888-943-121-082; 027-173-519-900-466; 028-586-016-338-370; 033-835-248-545-913; 036-611-029-866-772; 043-139-659-925-367; 045-830-532-366-077; 053-751-129-564-836; 064-477-733-582-66X; 065-646-254-155-522; 068-699-800-692-922; 069-342-855-858-285; 069-718-199-159-250; 076-751-462-223-28X; 077-464-284-705-642; 078-230-591-344-175; 096-765-202-126-144; 119-975-490-374-043; 150-820-458-426-760,1,true,cc-by-nc,hybrid 042-746-308-855-318,Using digital humanities and linguistics to help with terrorism investigations.,2020-11-06,2020,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Julien Longhi,"This article seeks to offer a response to the digital transformation of forensic science by employing a tool-based linguistic analysis, integrated into the paradigm of digital humanities. It is a way to scientifically model the analysis of digital texts using digital methods. Computer science comes in support of linguistic skills in order to deal with investigative situations and help analyze criminal acts. It presents a case report thanks to the analysis of a corpus made up of 23 texts relating to criminal acts related to suspected terrorist groups with links to the far left. The goal is to help investigators by providing results which can help find stylistic similarities or exclusions between texts and thus potentially between the authors of those texts, offering authors profiling hypothsesis that may be included in the investigation process. While linguistics alone cannot solve such cases, a better understanding of language data, including topics, style and grammar, bring additional clues that can be very useful information in the investigation of crimes (linguists can ""translate"" information to investigators, so that it can be integrated to the investigation). Digital tools provide a form of objectification since they are based on statistical calculations which reveal regularities that are otherwise invisible to the naked eye. These tools, when used properly in investigations, can prove invaluable in extracting ""clues"" from the linguistic ""traces"" that make up texts.",318,,110564,110564,Stylometry; Digital transformation; Profiling (information science); Grammar; Objectification; Style (sociolinguistics); Forensic linguistics; Computer science; Linguistics; Process (engineering),Corpus; Forensic linguistics; Linguistics; Stylometry; Textometry,"Algorithms; Forensic Sciences/methods; Humanities; Humans; Linguistics; Models, Theoretical; Terrorism",,Institut Universitaire de France,https://europepmc.org/article/MED/33218794 https://pubmed.ncbi.nlm.nih.gov/33218794/ https://hal.archives-ouvertes.fr/hal-03083645 https://www.ncbi.nlm.nih.gov/pubmed/33218794 https://www.sciencedirect.com/science/article/pii/S0379073820304266,http://dx.doi.org/10.1016/j.forsciint.2020.110564,33218794,10.1016/j.forsciint.2020.110564,3096152115,,0,007-024-765-536-335; 010-951-806-548-929; 022-107-254-239-002; 025-800-315-851-620; 038-622-207-031-37X; 052-303-372-427-385; 055-090-331-018-166; 055-443-982-472-937; 066-937-282-076-772; 070-283-562-203-769; 074-920-935-733-645; 077-607-479-314-655; 090-815-393-485-581; 131-806-648-718-123; 137-963-576-723-413; 138-212-583-543-778; 174-649-277-909-708; 178-746-001-922-59X; 182-724-395-147-916,5,true,,bronze 042-767-661-429-064,Big forensic data reduction: digital forensic images and electronic evidence,2016-03-21,2016,journal article,Cluster Computing,13867857; 15737543,Springer Science and Business Media LLC,Netherlands,Darren Quick; Kim-Kwang Raymond Choo,"An issue that continues to impact digital forensics is the increasing volume of data and the growing number of devices. One proposed method to deal with the problem of ""big digital forensic data"": the volume, variety, and velocity of digital forensic data, is to reduce the volume of data at either the collection stage or the processing stage. We have developed a novel approach which significantly improves on current practice, and in this paper we outline our data volume reduction process which focuses on imaging a selection of key files and data such as: registry, documents, spreadsheets, email, internet history, communications, logs, pictures, videos, and other relevant file types. When applied to test cases, a hundredfold reduction of original media volume was observed. When applied to real world cases of an Australian Law Enforcement Agency, the data volume further reduced to a small percentage of the original media volume, whilst retaining key evidential files and data. The reduction process was applied to a range of real world cases reviewed by experienced investigators and detectives and highlighted that evidential data was present in the data reduced forensic subset files. A data reduction approach is applicable in a range of areas, including: digital forensic triage, analysis, review, intelligence analysis, presentation, and archiving. In addition, the data reduction process outlined can be applied using common digital forensic hardware and software solutions available in appropriately equipped digital forensic labs without requiring additional purchase of software or hardware. The process can be applied to a wide variety of cases, such as terrorism and organised crime investigations, and the proposed data reduction process is intended to provide a capability to rapidly process data and gain an understanding of the information and/or locate key evidence or intelligence in a timely manner.",19,2,723,740,The Internet; Data mining; Test case; Forensic science; Data science; Organised crime; Software; Law enforcement; Computer science; Volume (compression); Intelligence analysis; Computer forensics; Big data; Digital forensics,,,,,https://dl.acm.org/doi/10.1007/s10586-016-0553-1 https://link.springer.com/article/10.1007/s10586-016-0553-1/fulltext.html https://dblp.uni-trier.de/db/journals/cluster/cluster19.html#QuickC16 https://link.springer.com/article/10.1007/s10586-016-0553-1,http://dx.doi.org/10.1007/s10586-016-0553-1,,10.1007/s10586-016-0553-1,2303287830,,0,000-360-120-513-679; 003-391-896-636-538; 003-982-227-180-136; 004-508-802-364-299; 004-652-388-189-304; 004-795-963-795-748; 004-984-401-090-239; 009-885-874-541-907; 010-388-991-543-520; 010-951-806-548-929; 011-640-228-143-441; 017-790-269-405-50X; 018-396-779-403-273; 020-599-787-613-117; 021-563-550-669-43X; 021-971-576-965-168; 024-735-069-822-749; 025-290-159-757-335; 027-366-761-223-724; 027-658-395-615-692; 028-343-398-840-609; 031-570-876-692-486; 034-815-736-764-355; 035-381-853-639-810; 035-504-355-395-566; 036-412-863-725-881; 044-518-560-475-833; 046-527-367-793-765; 049-533-570-086-513; 050-513-243-638-138; 052-665-370-203-554; 056-715-378-869-201; 058-052-081-943-595; 059-841-509-046-069; 073-256-200-904-686; 078-144-022-647-386; 079-070-981-899-105; 085-343-554-667-033; 089-267-063-170-413; 090-752-043-508-733; 094-295-279-676-447; 098-068-833-666-576; 098-748-261-333-651; 101-145-299-712-378; 106-267-355-831-636; 115-471-022-347-349; 115-633-018-722-782; 121-716-218-592-354; 123-057-683-615-458; 124-198-527-546-193; 125-402-335-950-812; 125-939-677-745-616; 133-096-532-539-560; 133-378-009-445-67X; 134-927-490-231-285; 160-331-694-886-887; 166-184-952-634-027; 168-211-791-741-422,101,false,, 042-776-427-483-657,Recent Advancements in Digital Forensics,,2017,journal article,IEEE Security & Privacy,15407993; 15584046,Institute of Electrical and Electronics Engineers (IEEE),United States,Wojciech Mazurczyk; Luca Caviglione; Steffen Wendzel,"Modern digital forensics is a multidisciplinary effort that embraces several fields, including law, computer science, finance, networking, data mining, and criminal justice. Professionals will increasingly face a mixed set of challenges and issues regarding the efficiency of digital evidence processing and related forensic procedures. This special issue of IEEE Security & Privacy is an attempt to collect the most interesting ideas from the community of researchers and professionals working on digital forensics.",15,6,10,11,Criminal justice; Forensic science; Data science; Face (sociological concept); Cybercrime; Digital evidence; Computer science; Digital forensics,,,,,https://ieeexplore.ieee.org/document/8123495 https://dblp.uni-trier.de/db/journals/ieeesp/ieeesp15.html#MazurczykCW17 https://www.computer.org/csdl/api/v1/periodical/mags/sp/2017/06/msp2017060010/13rRUx0xPSh/download-article/pdf https://www.computer.org/csdl/magazine/sp/2017/06/msp2017060010/13rRUx0xPSh,http://dx.doi.org/10.1109/msp.2017.4251106,,10.1109/msp.2017.4251106,2769249151,,0,,2,true,,bronze 043-112-794-493-421,Forensic Analysis of the Windows 7 Registry,,2010,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Khawla Alghafli; Andrew Jones; Thomas Martin,"The recovery of digital evidence of crimes from storage media is an increasingly time consuming process as the capacity of the storage media is in a state of constant growth. It is also a difficult and complex task for the forensic investigator to analyse all of the locations in the storage media. These two factors, when combined, may result in a delay in bringing a case to court. The concept of this paper is to start the initial forensic analysis of the storage media in locations that are most likely to contain digital evidence, the Windows Registry. Consequently, the forensic analysis process and the recovery of digital evidence may take less time than would otherwise be required. In this paper, the Registry structure of Windows 7 is discussed together with several elements of information within the Registry of Windows 7 that may be valuable to a forensic investigator. These elements were categorized into five groups which are system, application, networks, attached devices and the history lists. We have discussed the values of identified elements to a forensic investigator. Also, a tool was implemented to perform the function of extracting these elements and presents them in usable form to a forensics investigator.",5,4,5,30,World Wide Web; Data science; Windows Registry; Task (computing); USable; Digital evidence; Computer science; Process (engineering); State (computer science); Computer forensics; Function (engineering),,,,,https://commons.erau.edu/cgi/viewcontent.cgi?article=1081&context=jdfsl https://dblp.uni-trier.de/db/journals/jdfsl/jdfsl5.html#AlghafliJM10 https://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1071&context=adf https://ro.ecu.edu.au/adf/72/ https://commons.erau.edu/jdfsl/vol5/iss4/1/ https://core.ac.uk/display/41529205 https://core.ac.uk/download/41529205.pdf,http://dx.doi.org/10.15394/jdfsl.2010.1081,,10.15394/jdfsl.2010.1081,1512782868,,0,064-388-382-052-645; 141-125-834-658-119,15,true,cc-by-nc,gold 043-127-893-811-79X,Digital Forensic Analysis on Android Smartphones for Handling Cybercrime Cases,2019-01-07,2019,journal article,IJID (International Journal on Informatics for Development),25497448; 22527834,Al-Jamiah Research Centre,,Firmansyah Gustav Hikmatyar; Bambang Sugiantoro,"As the times progressed, forensic science has developed rapidly. The science of forensics extends to new areas of technology ranging from digital forensics, computer forensics and mobile forensics. Mobile forensics in analyzing and collecting data is obtained from various resources, such as operating systems, communication lines and also various storage media. The most popular mobile operating system of the day is a smartphone based on android operating system. With android technology, criminals can use that technology as a crime medium ranging from overriding crime ideas, crime targets and crime scenarios. In this Final Project use forensic mobile application to get data residing in cell phone actors, in the form of text, sound, picture and video that have or not yet deleted in smartphone. In this study, a model for investigating the crime scene is the author using the Generic Computer Forensic Investigation Model (GCFIM). On the GCFIM model the investigator may be able to return to the previous stage because of the possibility of a changeable situation (both physical and digital), the investigation tools used, the crime tools used, and the level of investigative expertise. In this research also added weighting method of word TF-IDF, where this method can help to find keyword in digital evidence in the form of word / text.",7,2,64,67,Crime scene; Phone; Cybercrime; Digital evidence; Computer science; Multimedia; Computer forensics; Android (operating system); Mobile device forensics; Digital forensics,,,,,http://ejournal.uin-suka.ac.id/saintek/ijid/article/download/1335/1620 http://ejournal.uin-suka.ac.id/saintek/ijid/article/view/1335 https://core.ac.uk/download/267117037.pdf,http://dx.doi.org/10.14421/ijid.2018.07204,,10.14421/ijid.2018.07204,2913916508,,0,009-862-177-957-585; 048-141-687-795-752; 087-309-749-401-300; 095-972-507-485-24X; 111-494-798-747-370; 188-636-279-613-199,5,true,cc-by-nc-nd,gold 043-184-565-697-319,USE OF CRIMINALLY SIGNIFICANT INFORMATION POSTED ON SOCIAL NETWORKS IN CRIME DETECTION AND INVESTIGATION,2022-04-14,2022,journal article,Расследование преступлений: проблемы и пути их решения,24111627,Moscow Academy of the Investigative Committee of the Russian Federation,,Александр Александрович СМИРНОВ,"В статье исследуется развитие криминалистической науки в эпоху цифровизации, рассматривается понятие «цифровая криминалистика». Раскрывается понятие цифровых следов, а также рассмотрены особенности их фиксации и изъятия. Проанализированы перспективы развития криминалистики с учетом поставленных в настоящее время перед ней задач.; The article examines the development of forensic science in the era of digitalization, considers the concept of “digital forensics”. The concept of “digital traces” is revealed, and the features of their fixation and seizure are considered. The author analyzes the prospects for the development of forensic science, taking into account the tasks it faces.",,4(34),114,118,Digital forensics; Forensic science; Internet privacy; Criminology; Digital evidence; Computer security; Criminal investigation; Crime scene; Fixation (population genetics); Computer science; Political science; Data science; Sociology,,,,,,http://dx.doi.org/10.54217/2411-1627.2021.34.4.019,,10.54217/2411-1627.2021.34.4.019,,,0,,0,false,, 043-253-906-424-260,A Primary of Study on the General Method of Forensic Digital Image Enhancement And Restoration,,2012,journal article,Chinese Journal of Forensic Sciences,16712072,,,Zhang Da-zhi,"Basictechniques of forensic digital image enhancement and restoration,are discussed with the demonstration of real cases,including problem analysis and evaluation,noise reducing,detail enhancement,interference background reducing,blurred image restoration and surveillant video frame rebuilding.General approaches and tactics of forensic digital image enhancement and restoration are summaried.",,,,,Image restoration; Frame (networking); Artificial intelligence; Image enhancement; General method; Computer vision; Interference (communication); Computer science; Digital image; Noise (video),,,,,https://en.cnki.com.cn/Article_en/CJFDTOTAL-SFJD201204009.htm,https://en.cnki.com.cn/Article_en/CJFDTOTAL-SFJD201204009.htm,,,2356088612,,0,,0,false,, 043-261-465-467-889,A method of forensic authentication of audio recordings generated using the Voice Memos application in the iPhone.,2021-01-23,2021,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Park Nam In; JiWoo Lee; Kyu-Sun Shim; Byun Jun Seok; Oc-Yeub Jeon,,320,,110702,110702,Timestamp; Sound recording and reproduction; Advanced Audio Coding; File size; Audio codec; Apple Lossless; Speech recognition; Computer science; Latency (audio); File format,Audio forensic; Audio latency time; Digital forensic investigation; Forensic authentication; Log history; iPhone,Forensic Sciences/methods; Humans; Mobile Applications; Smartphone; Sound Spectrography; Voice,,,https://pubag.nal.usda.gov/catalog/7259989 https://www.sciencedirect.com/science/article/abs/pii/S0379073821000220 https://europepmc.org/article/MED/33561789 https://www.ncbi.nlm.nih.gov/pubmed/33561789,http://dx.doi.org/10.1016/j.forsciint.2021.110702,33561789,10.1016/j.forsciint.2021.110702,3121149555,,0,001-458-381-243-357; 039-614-975-031-707; 046-034-142-979-678; 048-715-989-260-702; 056-466-128-964-13X; 057-114-681-558-820; 091-970-428-713-932; 175-390-273-605-893,3,false,, 043-302-225-690-887,Examining the state of preparedness of Information Technology management in New Zealand for events that may require forensic analysis,,2005,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Spike Quinn,Computer security is of concern to those in IT (Information Technology) and forensic readiness (being prepared to deal effectively with events that may require forensic investigation) is a growing issue. Data held only on magnetic or other transient media require expert knowledge and special procedures to preserve and present it as valid in a criminal or employment court. Staff required to handle possible forensic evidence should be forensically knowledgeable. Having policies and procedures in place is one inexpensive way to protect the forensic data and can mean the difference between a valid case and no case. This paper presents the results of a survey of IT managers in New Zealand (NZ) examining the state of awareness of IT management in NZ regarding the field of digital forensics in general and their state of preparation for protection of forensic data in the case of an event requiring forensic analysis.,2,4,276,280,Forensic profiling; Internet privacy; Information technology; Information technology management; Security policy; Preparedness; Computer security; Computer science; Event (computing); Computer forensics; Digital forensics,,,,,https://ourarchive.otago.ac.nz/bitstream/10523/1237/3/Examining_the_state_of_preparedness_of_Information_Technology_management_in_New_Zealand_for_events_that_may_require_forensic_analysis.pdf https://dblp.uni-trier.de/db/journals/di/di2.html#Quinn05 https://www.sciencedirect.com/science/article/abs/pii/S1742287605000873 https://ourarchive.otago.ac.nz/handle/10523/1237,http://dx.doi.org/10.1016/j.diin.2005.10.005,,10.1016/j.diin.2005.10.005,2020245546,,0,017-840-378-634-021; 021-486-901-460-202; 038-704-079-905-560; 123-695-113-513-413; 125-927-904-592-587,4,true,,green 043-321-976-548-957,Procedures for Digital Forensics and Incident Response on Including Data Integrity Constraints on Solid-State Drives (SSD) - A Literature Review,2022-05-04,2022,journal article,"International Journal of Case Studies in Business, IT, and Education",25816942,Srinivas University,,Abdul Shareef Pallivalappil; Jagadeesha S. N.,"Background/Purpose: To get evidence from suspect computers running on Windows Operating System, law enforcement agencies and corporations follow many standard procedures relevant to Digital Forensics and Incident Response processes. The primary contrast between forensics and incident response is that forensics is evidence-driven and is often more closely connected with criminal activity, while incident response is more focused on discovering, containing, and recovering from breach of security incidents. A guideline is often intended to simplify certain procedures in accordance with a predefined routine or good practice. As data storage technology progresses from hard disc drives (HDDs) to solid-state drives (SSDs), it has become more difficult for Digital Forensics Analysts to perform evidence acquisition tasks from suspicious systems due to file integrity issues. Existing forensic principles and methods were created mostly on the basis of hard disc drive technology. This literature survey analyses several guidelines to identify gaps in SSD Forensic challenges and makes recommendations for improvement. ; Objective: To survey leading Digital Forensics and Incident Response guidelines on how SSD forensic acquisition procedures are outlined and to find the gaps and suggest enhancements that might be made.; Design/Methodology/Approach: Data from academic papers, web articles, and other sources is analysed and presented using ABCD analysis.; Findings/Results: Cyber Security Framework is a vital aspect of an organisations strategy to safeguard its IT assets from cyber assaults and other form of damages. Most organisation use NIST framework since it is being generally acknowledged. However, owing to quick improvement in new technologies CSF’s need to be kept up to date in order to confront emerging cyber security threats. After verifying the policy framework of NIST 800-61, it was determined that the SSD forensic gathering approach which raises problems about data integrity has not been addressed.; Originality/Value: A study comparing and contrasting different CSFs in the field of Digital Forensics and Incident Response with the most recent emerging technologies will draw more attention to this area from a wider range of stakeholders, allowing the policy framework to keep pace with the most recent emerging technologies in the same time frame.; Paper Type: Literature Review Paper.",,,328,350,Digital evidence; Digital forensics; Suspect; Computer science; Incident response; Computer security; Law enforcement; Computer forensics; Network forensics; Best practice; Data breach; NIST; Data science,,,,,,http://dx.doi.org/10.47992/ijcsbe.2581.6942.0167,,10.47992/ijcsbe.2581.6942.0167,,,0,003-296-688-471-446; 004-573-142-308-97X; 004-706-447-836-905; 007-790-059-029-953; 012-608-868-939-962; 013-370-475-929-519; 013-425-630-124-418; 013-961-000-665-091; 015-915-911-666-963; 020-944-423-224-895; 021-495-249-615-203; 025-421-213-608-128; 030-351-009-711-953; 034-338-080-167-232; 035-954-309-280-715; 038-771-366-552-251; 038-917-395-242-358; 041-037-428-455-61X; 041-227-773-004-745; 041-555-963-265-631; 043-364-434-348-82X; 045-556-279-056-569; 046-507-380-373-943; 046-742-560-241-18X; 047-630-600-014-492; 049-570-763-365-976; 051-893-312-291-590; 052-347-831-052-645; 052-494-593-995-209; 057-258-403-296-499; 061-403-384-315-828; 062-325-585-829-185; 064-447-746-489-969; 066-127-547-041-459; 067-950-012-629-210; 070-956-902-379-693; 071-377-364-003-460; 077-514-039-587-286; 077-923-684-553-780; 081-032-497-600-401; 082-293-107-828-681; 082-735-133-992-528; 083-748-342-549-230; 089-638-379-171-949; 091-164-408-529-576; 093-083-796-007-89X; 096-053-003-228-468; 105-379-195-922-28X; 105-664-358-088-246; 106-682-007-061-207; 115-531-623-920-069; 118-244-930-021-861; 123-468-307-202-98X; 140-178-424-990-664; 140-646-266-259-546; 153-575-475-878-825; 163-348-293-728-036; 166-178-398-716-39X; 166-482-105-664-01X; 167-592-705-831-583; 179-860-621-537-671; 190-975-197-162-548,1,true,,gold 043-664-411-083-202,A Proposed Model for Investigating on Web Whatsapp Application,2017-05-01,2017,journal article,Advanced Science Letters,19366612; 19367317,American Scientific Publishers,United States,Fietyata Yudha; Ahmad Luthfi; Yudi Prayudi,,23,5,4050,4054,Computer science,,,,,https://www.ingentaconnect.com/content/asp/asl/2017/00000023/00000005/art00051,http://dx.doi.org/10.1166/asl.2017.8308,,10.1166/asl.2017.8308,2792213121,,0,,2,false,, 043-684-451-827-921,Handbook of Big Data and IoT Security - Forensic investigation of cross platform massively multiplayer online games: Minecraft as a case study,2019-01-29,2019,journal article,Science & justice : journal of the Forensic Science Society,18764452; 13550306,Forensic Science Society,United Kingdom,D.C. Paul J. Taylor; Henry Mwiki; Ali Dehghantanha; Alex Akibini; Kim-Kwang Raymond Choo; Mohammad Hammoudeh; Reza M. Parizi,"Minecraft, a Massively Multiplayer Online Game (MMOG), has reportedly millions of players from different age groups worldwide. With Minecraft being so popular, particularly with younger audiences, it is no surprise that the interactive nature of Minecraft has facilitated the commission of criminal activities such as denial of service attacks against gamers, cyberbullying, swatting, sexual communication, and online child grooming. In this research, there is a simulated scenario of a typical Minecraft setting, using a Linux Ubuntu 16.04.3 machine (acting as the MMOG server) and Windows client devices running Minecraft. Server and client devices are then examined to reveal the type and extent of evidential artefacts that can be extracted.",59,3,337,348,Internet privacy; Surprise; Massively multiplayer online game; Age groups; Sexual communication; Denial-of-service attack; Computer science; Cross-platform,Game forensics; MMOG forensics; Massively multiplayer online games (MMOG); Minecraft forensics,,,,https://digitalcommons.kennesaw.edu/facpubs/4309/ https://dblp.uni-trier.de/db/books/collections/DC2019.html#TaylorMDACHP19 https://www.sciencedirect.com/science/article/pii/S1355030618301485 https://pubmed.ncbi.nlm.nih.gov/31054823/ https://link.springer.com/chapter/10.1007/978-3-030-10543-3_7 https://www.ncbi.nlm.nih.gov/pubmed/31054823 https://rd.springer.com/chapter/10.1007/978-3-030-10543-3_7 https://researchonline.ljmu.ac.uk/id/eprint/10259/ https://core.ac.uk/download/pdf/190365007.pdf,http://dx.doi.org/10.1016/j.scijus.2019.01.005,31054823,10.1016/j.scijus.2019.01.005,2911839033,,0,001-470-661-245-05X; 007-072-290-936-103; 007-641-405-234-433; 008-230-595-917-816; 010-866-981-389-463; 016-246-732-781-668; 019-698-064-288-240; 021-493-587-917-715; 023-095-447-998-364; 024-683-339-670-617; 025-723-055-730-999; 028-372-174-551-181; 029-934-518-651-564; 035-529-855-488-647; 037-196-416-009-405; 037-242-025-004-767; 041-250-978-252-123; 045-701-748-075-614; 050-880-182-312-701; 052-165-322-738-430; 056-561-707-661-518; 057-360-375-607-114; 057-761-016-974-50X; 058-470-860-881-487; 064-354-978-089-689; 070-157-105-084-568; 081-361-229-895-482; 083-187-698-242-662; 084-356-199-704-237; 086-114-455-397-610; 095-691-114-276-825; 098-301-559-474-309; 103-681-534-784-390; 105-054-122-831-381; 105-066-757-678-147; 105-656-858-306-780; 106-143-364-687-387; 106-484-888-364-330; 113-823-762-208-276; 120-697-354-224-33X; 122-703-081-401-986; 125-372-885-745-173; 137-153-736-677-264; 149-090-679-176-42X; 172-784-533-558-441,8,true,,green 043-827-643-358-90X,The effect of image quality and forensic expertise in facial image comparisons.,2014-12-23,2014,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Kristin Norell; Klas Brorsson Läthén; Peter Bergström; Allyson Rice; Vaidehi Natu; Alice J. O'Toole,"Images of perpetrators in surveillance video footage are often used as evidence in court. In this study, identification accuracy was compared for forensic experts and untrained persons in facial image comparisons as well as the impact of image quality. Participants viewed thirty image pairs and were asked to rate the level of support garnered from their observations for concluding whether or not the two images showed the same person. Forensic experts reached their conclusions with significantly fewer errors than did untrained participants. They were also better than novices at determining when two high-quality images depicted the same person. Notably, lower image quality led to more careful conclusions by experts, but not for untrained participants. In summary, the untrained participants had more false negatives and false positives than experts, which in the latter case could lead to a higher risk of an innocent person being convicted for an untrained witness.",60,2,331,340,Forensic science; Psychology; Biometrics; Witness; Image quality; False positive paradox; Applied psychology; Social psychology; Identification (information),CCTV; biometric identification; facial image comparison; forensic science; image quality; information science,Biometric Identification; Face/anatomy & histology; Forensic Sciences; Humans; Professional Competence; Videotape Recording,,,http://onlinelibrary.wiley.com/doi/10.1111/1556-4029.12660/full https://www.researchgate.net/profile/Vaidehi_Natu/publication/260249007_The_Effect_of_Image_Quality_and_Forensic_Expertise_in_Facial_Image_Comparisons/links/54ac39ad0cf2479c2ee78da8.pdf https://pubmed.ncbi.nlm.nih.gov/25537273/ http://doi.wiley.com/10.1111/1556-4029.12660 https://www.ncbi.nlm.nih.gov/pubmed/25537273 https://www.infona.pl/resource/bwmeta1.element.wiley-jfo-v-60-i-2-jfo12660 https://dialnet.unirioja.es/servlet/articulo?codigo=5233095,http://dx.doi.org/10.1111/1556-4029.12660,25537273,10.1111/1556-4029.12660,2049664898,,0,012-829-385-796-687; 015-111-980-466-419; 016-747-170-993-313; 019-466-667-607-252; 020-170-447-797-333; 025-883-071-858-995; 036-555-052-193-015; 037-026-528-693-473; 039-921-464-148-815; 045-837-664-148-225; 049-805-853-319-539; 056-970-067-581-33X; 062-618-194-192-331; 077-453-655-805-05X; 143-987-744-245-531,20,false,, 043-858-213-986-473,Column: Putting the Science in Digital Forensics,,2011,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Fred Cohen,"In a recent study, digital forensics was found to lack a consensus around even the most basis notions and terminology of the field. To quote: “These two preliminary studies individually suggest that scientific consensus in the area of digital forensic evidence examination is lacking in the broad sense, but that different groups within that overall community may have limited consensus around areas in which they have special expertise, and that the current peerreviewed publication process is not acting to bring about the sorts of elements typically found in the advancement of a science toward such a consensus. ... perhaps the most significant challenge may be in the development of a common language to describe the field...” (see PDF for full column)",6,1,7,14,Column (database); Data science; Scientific consensus; Publication process; Field (computer science); Computer security; Computer science; Terminology; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/jdfsl/jdfsl6.html#Cohen11 https://commons.erau.edu/cgi/viewcontent.cgi?article=1085&context=jdfsl https://doaj.org/article/a7cda8b4916f49289a53b0bab98aec12 https://commons.erau.edu/jdfsl/vol6/iss1/1/ https://core.ac.uk/display/91786503,http://dx.doi.org/10.15394/jdfsl.2011.1085,,10.15394/jdfsl.2011.1085,1534069672,,0,,6,true,cc-by-nc,gold 044-016-316-658-216,PNG Data Detector for DECA,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Kingson Chinedu Odogwu; Pavel Gladyshev; Babak Habibnia,"Abstract DECA, a novel file carving application, is an example of digital forensic tools that rely heavily on accurately detecting the type of data fragments stored in the disk blocks. This work is an attempt to create a method of detection and classification of PNG data types for DECA which originally only identifies and extracts JPEG data. The PNG file format was examined in order to implement the PNG data detector that was integrated into DECA. We then examined the results of decision-theoretic file carving, implemented in DECA, combined with the implemented PNG data detector.",32,,300910,,Portable Network Graphics; Data type; JPEG; File carving; Deca-; Computer science; Database; Digital forensics; Detector,,,,,https://www.sciencedirect.com/science/article/pii/S2666281720300056,http://dx.doi.org/10.1016/j.fsidi.2020.300910,,10.1016/j.fsidi.2020.300910,3030862625,,0,,1,true,cc-by-nc-nd,hybrid 044-295-409-596-282,Decision support for first responders and digital device prioritisation,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Graeme Horsman,,38,,301219,,Decision support system; Data science; Relation (database); First responder; Quality (business); Task (project management); Computer science; Process (engineering); Identification (information); Relevance (information retrieval),,,,,https://www.sciencedirect.com/science/article/abs/pii/S266628172100127X,http://dx.doi.org/10.1016/j.fsidi.2021.301219,,10.1016/j.fsidi.2021.301219,3175131308,,0,002-495-833-326-831; 013-568-618-083-770; 052-994-192-178-620; 067-844-385-207-96X; 077-339-303-043-478; 094-142-794-127-63X; 120-697-354-224-33X; 167-751-222-897-487; 187-762-907-549-695,1,false,, 044-617-125-816-983,Ethics in forensic science: Renewed commitments and a call for papers across the Forensic Science International family,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,37,,301207,301207,Forensic science; Engineering ethics; Forensic genetics,,,,,,http://dx.doi.org/10.1016/j.fsidi.2021.301207,,10.1016/j.fsidi.2021.301207,,,0,,0,true,,bronze 044-664-700-815-752,Source Camera Identification for Heavily JPEG Compressed Low Resolution Still Images,,2009,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Erwin J. Alles; Zeno Geradts; Cor J. Veenman,"In this research, we examined whether fixed pattern noise or more specifically Photo Response Non-Uniformity (PRNU) can be used to identify the source camera of heavily JPEG compressed digital photographs of resolution 640 x 480 pixels. We extracted PRNU patterns from both reference and questioned images using a two-dimensional Gaussian filter and compared these patterns by calculating the correlation coefficient between them. Both the closed and open-set problems were addressed, leading the problems in the closed set to high accuracies for 83% for single images and 100% for around 20 simultaneously identified questioned images. The correct source camera was chosen from a set of 38 cameras of four different types. For the open-set problem, decision levels were obtained for several numbers of simultaneously identified questioned images. The corresponding false rejection rates were unsatisfactory for single images but improved for simultaneous identification of multiple images.",54,3,628,638,Artificial intelligence; Pixel; Closed set; JPEG; Image resolution; Fixed-pattern noise; Correlation coefficient; Computer vision; Computer science; Gaussian filter; Identification (information),,,,,https://www.narcis.nl/publication/RecordID/oai%3Adare.uva.nl%3Apublications%2F43079394-4b5b-429f-ae51-01c6fc9a17d1 https://www.ncbi.nlm.nih.gov/pubmed/19432739 https://dare.uva.nl/record/1/314739 https://ivi.fnwi.uva.nl/isis/publications/bibtexbrowser.php?key=AllesJFS2009&bib=all.bib https://onlinelibrary.wiley.com/doi/abs/10.1111/j.1556-4029.2009.01029.x http://core.ac.uk/display/29411016 https://core.ac.uk/display/29411016 https://pubmed.ncbi.nlm.nih.gov/19432739/,http://dx.doi.org/10.1111/j.1556-4029.2009.01029.x,19432739,10.1111/j.1556-4029.2009.01029.x,2057886953,,0,021-877-521-426-043; 049-137-688-978-66X; 064-853-388-134-482; 074-324-981-337-749; 125-197-208-297-03X; 128-427-047-031-811; 161-171-671-691-645,45,false,, 044-794-449-394-649,A hierarchical model for body height estimation in images.,2010-01-18,2010,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Ardo van den Hout; Ivo Alberink,,197,1,48,53,Statistics; Bayesian probability; Statistical model; Credible interval; Hierarchical database model; Artificial intelligence; Bayesian inference; Frequentist inference; Random effects model; Pattern recognition; Bayes' theorem; Computer science,,"Bayes Theorem; Body Height; Confidence Intervals; Forensic Sciences; Humans; Models, Statistical; Videotape Recording",,Medical Research Council (MC_U105292687) United Kingdom,https://www.sciencedirect.com/science/article/pii/S037907380900499X https://www.ncbi.nlm.nih.gov/pubmed/20080368 http://discovery.ucl.ac.uk/1339986/,http://dx.doi.org/10.1016/j.forsciint.2009.12.020,20080368,10.1016/j.forsciint.2009.12.020,2058432103,,0,000-927-129-586-430; 022-930-505-978-426; 028-450-624-676-442; 038-023-258-786-196; 042-161-804-735-83X; 050-473-201-526-265; 065-857-934-313-432; 096-133-084-370-473; 124-037-189-803-216; 156-490-597-315-066; 174-174-401-959-707,8,false,, 045-085-525-295-189,Evaluating OpenFace: an open-source automatic facial comparison algorithm for forensics,2018-07-03,2018,journal article,Forensic sciences research,24711411; 20961790,Informa UK Limited,England,Angeliki Fydanaki; Zeno Geradts,"This article studies the application of models of OpenFace (an open-source deep learning algorithm) to forensics by using multiple datasets. The discussion focuses on the ability of the software to identify similarities and differences between faces based on images from forensics. Experiments using OpenFace on the Labeled Faces in the Wild (LFW)-raw dataset, the LFW-deep funnelled dataset, the Surveillance Cameras Face Database (SCface) and ForenFace datasets showed that as the resolution of the input images worsened, the effectiveness of the models degraded. In general, the effect of the quality of the query images on the efficiency of OpenFace was apparent. Therefore, OpenFace in its current form is inadequate for application to forensics, but can be improved to offer promising uses in the field.",3,3,202,209,Deep learning; Algorithm; Artificial intelligence; Face (geometry); Software; Open source; Field (computer science); Computer science; Digital forensics,Forensic sciences; OpenFace; deep learning; digital forensic; face comparison,,,Netherlands Forensic Institute,https://pubmed.ncbi.nlm.nih.gov/30483670/ https://www.tandfonline.com/doi/full/10.1080/20961790.2018.1523703 https://pure.uva.nl/ws/files/31598672/Evaluating_OpenFace.pdf https://dare.uva.nl/search?identifier=d11632e3-b0d2-4c49-be2f-f2c94db06968 https://www.narcis.nl/publication/RecordID/oai%3Adare.uva.nl%3Apublications%2Fd11632e3-b0d2-4c49-be2f-f2c94db06968 https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6201796,http://dx.doi.org/10.1080/20961790.2018.1523703,30483670,10.1080/20961790.2018.1523703,2897675700,PMC6201796,0,006-573-460-993-805; 010-393-912-133-299; 017-281-323-122-91X; 021-771-046-587-546; 025-218-336-182-063; 029-170-809-181-657; 029-596-977-717-535; 039-501-300-252-674; 058-230-769-128-125; 062-580-866-494-666; 065-885-904-575-800; 087-474-068-732-058; 096-370-287-733-210; 099-620-384-472-313; 100-871-063-837-086; 105-772-673-283-576; 115-558-126-736-05X; 151-374-013-752-001; 163-675-868-808-28X,16,true,"CC BY, CC BY-NC",gold 045-098-715-794-977,A Strategic Model for Forensic Readiness,2018-06-01,2018,journal article,Athens Journal of Sciences,22418466,Athens Institute for Education and Research ATINER,,Jan Collie,"Forensic readiness has been defined as: ‘…the capability of an organisation to use digital evidence in a forensic investigation’. For businesses, especially medium or small enterprises, gaining this capability can seem time consuming and expensive: it may involve a number of processes, it may require new hardware and software and people with specialised skill sets may need to be hired in order to implement any plan. Yet developing and maintaining a forensic readiness capability is vital in the digital age. Fraud and cybercrime cost almost £11bn in the UK alone last year. Across the European Union, the national annual cost of cybercrime now accounts for 0.41% of GDP. Recent figures have also shown that up to 62% of digital incidents are caused by insiders, either accidentally or knowingly. An astonishing 91% of cybersecurity attacks begin with a single email. This research proposes a structured, strategic approach to forensic readiness for businesses that is economic to implement and run. It is based on people and processes rather than complex electronic systems. Key to this approach is a firm’s best asset - its own staff. It is theorised that the foundation stone of forensic readiness is a strong internal security culture. In order to achieve this aim, a unique, scalable model for efficient and inclusive planning is put forward with a reporting construct which aims to assure company-wide involvement.",5,2,167,182,Business; Construct (philosophy); Order (exchange); Cybercrime; Internal security; Digital evidence; European union; Knowledge management; Plan (drawing); Asset (computer security),,,,,http://oro.open.ac.uk/70042/ https://core.ac.uk/download/305114201.pdf,http://dx.doi.org/10.30958/ajs.5-2-4,,10.30958/ajs.5-2-4,2896577214,,0,007-394-596-774-68X; 009-182-817-779-31X; 010-806-135-547-042; 011-328-932-194-908; 021-486-901-460-202; 024-711-735-736-003; 058-723-704-218-926; 066-889-097-119-765; 074-014-335-505-388; 077-514-039-587-286; 080-484-311-806-796; 117-184-355-073-746; 128-954-454-555-916; 147-779-412-802-417; 149-690-584-371-491; 154-191-465-535-558; 189-593-155-056-756; 193-919-622-382-772; 198-826-055-129-939,8,true,cc-by-nc-nd,green 045-143-755-466-855,Image re-sampling detection through a novel interpolation kernel.,2018-03-27,2018,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Alaa Hilal,,287,,25,35,Signal processing; Algorithm; Gradient method; Minification; Error function; Standard deviation; Image scaling; Kernel (image processing); Computer science; Digital image,Digital forensics; Image interpolation; Re-sampling detection; Signal processing,,,Lebanese University,https://pubag.nal.usda.gov/catalog/5936657 https://www.sciencedirect.com/science/article/pii/S037907381830121X https://www.ncbi.nlm.nih.gov/pubmed/29626839 https://europepmc.org/article/MED/29626839,http://dx.doi.org/10.1016/j.forsciint.2018.03.024,29626839,10.1016/j.forsciint.2018.03.024,2795001844,,0,002-978-775-225-739; 028-869-872-532-643; 032-632-490-677-969; 042-565-172-176-961; 045-149-771-206-508; 049-866-222-428-412; 052-531-769-388-067; 067-303-718-151-959; 076-346-829-732-533; 076-704-896-134-67X; 083-346-916-622-694; 084-593-935-283-469; 102-206-493-611-709; 106-475-065-511-77X; 108-896-114-392-841; 135-262-782-091-897; 143-626-896-585-910; 148-639-592-452-240; 180-552-666-228-97X; 187-834-308-708-201,3,false,, 045-199-576-491-919,Microsoft's Your Phone environment from a digital forensic perspective,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Patricio Domingues; Luis Miguel Andrade; Miguel Frade,,38,,301177,,Perspective (graphical); Mobile device; Task (computing); Software; Phone; Android device; Computer science; Multimedia; Android (operating system); Digital forensics,,,,Foundation for Science and Technology,https://www.sciencedirect.com/science/article/pii/S2666281721000858,http://dx.doi.org/10.1016/j.fsidi.2021.301177,,10.1016/j.fsidi.2021.301177,3169098502,,0,006-915-702-173-584; 017-335-677-993-203; 019-831-293-743-518; 023-484-098-291-123; 025-723-055-730-999; 028-041-981-721-013; 028-290-062-141-840; 032-664-290-593-804; 047-558-056-985-493; 055-390-544-993-752; 074-503-636-433-987; 076-889-170-335-628; 090-496-255-429-009; 099-185-063-500-623; 111-903-319-645-399; 117-065-920-586-287; 119-531-842-544-900; 124-912-663-881-389; 128-985-340-093-196; 131-696-619-498-120; 163-330-758-807-944,1,false,, 045-625-431-295-190,A Spatial Domain Approach of Fingerprinting for Colored Digital Images,2013-10-25,2013,journal article,INTERNATIONAL JOURNAL OF COMPUTERS & TECHNOLOGY,22773061,CIRWOLRD,,Vineet Mehan; Renu Dhir; Yadwinder Singh Brar,"In this paper, a spatial domain approach of fingerprinting is presented for colored digital images. A semi-blind fingerprinting conveys a secure arrangement for trading of digital images. The operational significance of the digital fingerprinting system is verified and estimated. Digital fingerprint implanted doesn’t disturb the perceptible feature of the host digital image. Multi-user collusion attacks are prevented using the proposed apparoach. Variable fingerprint size and dissimilar location insertion play significant role for inhibiting attack.",11,1,2156,2160,Artificial intelligence; Colored; Spatial domain; Computer vision; Computer science; Digital image,,,,,https://www.rajpub.com/index.php/ijct/article/download/1185/pdf_231 https://core.ac.uk/download/322473297.pdf,http://dx.doi.org/10.24297/ijct.v11i1.1185,,10.24297/ijct.v11i1.1185,2801255412,,0,,0,true,cc-by,hybrid 046-034-142-979-678,Identification of source mobile hand sets using audio latency feature.,2019-02-25,2019,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Ashu Goyal; S.K. Shukla; R.K. Sarin,,298,,332,335,Sound recording and reproduction; Software; Speech recognition; Computer science; Latency (audio); Digital audio,Digital audio editing software; Digital audio recording; Source correspondence,,,,https://www.ncbi.nlm.nih.gov/pubmed/30927719 https://www.sciencedirect.com/science/article/pii/S0379073819300635 https://pubag.nal.usda.gov/catalog/6339544,http://dx.doi.org/10.1016/j.forsciint.2019.02.031,30927719,10.1016/j.forsciint.2019.02.031,2917329393,,0,059-705-292-558-832; 106-345-153-172-370; 136-614-990-140-254,6,false,, 046-134-220-485-939,A method of smart phone original video identification by using unique compression ratio pattern,2019-07-29,2019,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Min Gu Hwang; Hyung Ju Park; Dong Hwan Har,,304,,109889,,Artificial intelligence; Compression ratio; Software; Video editing; Computer vision; Frame rate; Computer science; Data compression; Identification (information); Digital forensics; Color depth,Digital forensics; Edit video identification; Encoding video; Video compression; Video forensic,,,National Research Foundation of Korea; Ministry of Education,https://www.ncbi.nlm.nih.gov/pubmed/31395409 https://www.sciencedirect.com/science/article/abs/pii/S0379073819303020 https://www.sciencedirect.com/science/article/abs/pii/S0379073819303020#!,http://dx.doi.org/10.1016/j.forsciint.2019.109889,31395409,10.1016/j.forsciint.2019.109889,2965602257,,0,004-023-060-478-098; 016-826-464-232-929; 018-917-381-302-668; 027-916-510-911-905; 037-412-312-132-875; 048-729-149-755-099; 056-817-850-080-480; 062-512-589-809-337; 108-976-538-227-073; 111-781-305-156-954; 125-552-671-215-255; 145-279-569-516-191; 161-171-671-691-645; 169-566-186-878-358; 177-630-478-198-497; 180-088-494-514-913; 184-897-235-429-285; 190-372-539-186-409; 195-393-139-218-445,1,false,, 046-226-707-681-753,The Application of Peer Teaching in Digital Forensics Education,2014-07-28,2014,journal article,Innovation in Teaching and Learning in Information and Computer Sciences,14737507,Informa UK Limited,United Kingdom,Michelle Govan,"AbstractThe field of digital forensics requires a multidisciplinary understanding of a range of diverse subjects, but is interdisciplinary (in using principles, techniques and theories from other disciplines) encompassing both computer and forensic science. This requires that practitioners have a deep technical knowledge and understanding, but that they are also able to explain the underlying theory that supports their analytical conclusions. It is therefore essential that students develop effective communication skills, and the ability to articulate their knowledge and understanding of complex technical concepts using words and terms that an individual without prior professional training would understand. Appreciating the importance of active collaborative learning, this paper examines the pedagogy and andragogy of the application of peer learning and teaching within the delivery of digital forensics, in order to improve technical knowledge and understanding and actively develop soft enabling attributes,...",,,1,7,Collaborative learning; Multidisciplinary approach; Andragogy; Peer learning; Peer teaching; Field (computer science); Computer science; Professional development; Knowledge management; Digital forensics,,,,,https://www.tandfonline.com/doi/full/10.11120/ital.2014.00012,http://dx.doi.org/10.11120/ital.2014.00012,,10.11120/ital.2014.00012,2313398368,,0,001-172-528-874-556; 005-733-361-126-371; 014-261-775-435-338; 016-143-161-498-460; 054-694-286-624-802; 067-041-629-161-541; 072-447-980-119-747; 072-952-240-277-229; 082-659-024-493-103; 090-883-543-164-834; 094-374-774-160-224; 122-870-565-960-58X; 123-196-482-308-718; 143-498-413-071-250; 165-421-940-128-565; 167-592-705-831-583,0,false,, 046-357-391-782-442,Evidence and Forensics in the Cloud: Challenges and Future Research Directions,,2017,journal article,IEEE Cloud Computing,23256095,Institute of Electrical and Electronics Engineers (IEEE),United States,Kim-Kwang Raymond Choo; Christian Esposito; Aniello Castiglione,"Digital investigation in the cloud is challenging, but there's also opportunities for innovations in digital forensic solutions (such as remote forensic collection of evidential data from cloud servers client devices and the underlying supporting infrastructure such as distributed file systems). This column describes the challenges and opportunities in cloud forensics.",4,3,14,19,Cloud testing; Column (database); Cryptography; Cloud computing security; Computer security; Computer science; Network forensics; Cloud computing; Digital forensics; Server,,,,,https://ieeexplore.ieee.org/abstract/document/7962121 https://doi.org/10.1109/MCC.2017.39 https://www.computer.org/csdl/magazine/cd/2017/03/mcd2017030014/13rRUyekIZn http://ieeexplore.ieee.org/document/7962121 https://dblp.uni-trier.de/db/journals/cloudcomp/cloudcomp4.html#ChooEC17,http://dx.doi.org/10.1109/mcc.2017.39,,10.1109/mcc.2017.39,2726142957,,0,006-570-693-842-502; 010-986-818-338-726; 015-654-094-120-991; 024-894-908-869-686; 028-290-062-141-840; 033-856-227-156-292; 038-349-842-640-663; 041-879-975-858-398; 047-221-550-114-462; 057-421-097-368-120; 061-960-915-134-527; 074-503-636-433-987; 085-276-013-350-220; 091-540-399-535-662; 095-691-114-276-825; 101-091-831-428-576; 125-939-677-745-616; 130-093-060-692-651; 132-342-259-584-364; 141-018-737-327-365; 144-124-797-675-052; 155-078-493-307-765; 162-226-718-103-313,21,false,, 046-392-586-979-126,Source video camera identification for multiply compressed videos originating from YouTube,,2009,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Wiger van Houten; Zeno Geradts,,6,1,48,60,VGZ Video; Video capture; Artificial intelligence; Video production; Professional video camera; Video camera; Digital camera; Internet video; Child abuse; Computer vision; Computer science,,,,,https://dl.acm.org/doi/10.1016/j.diin.2009.05.003 https://www.sciencedirect.com/science/article/pii/S1742287609000310 https://dblp.uni-trier.de/db/journals/di/di6.html#HoutenG09 https://doi.org/10.1016/j.diin.2009.05.003 http://www.sciencedirect.com/science/article/pii/S1742287609000310,http://dx.doi.org/10.1016/j.diin.2009.05.003,,10.1016/j.diin.2009.05.003,2044305855,,0,004-023-060-478-098; 011-535-054-381-110; 013-418-454-336-466; 013-766-124-774-712; 014-209-941-360-32X; 015-717-506-603-742; 017-823-654-117-246; 022-292-603-964-614; 036-595-976-013-105; 041-036-823-153-65X; 041-863-270-179-858; 047-197-420-161-829; 048-025-856-163-089; 051-125-883-916-310; 056-817-850-080-480; 060-510-472-523-253; 068-742-419-018-497; 083-097-133-928-799; 093-634-708-502-689; 110-826-717-975-956; 114-470-048-212-206; 116-708-411-322-769; 125-552-671-215-255; 135-323-514-589-740; 166-999-959-693-14X; 180-088-494-514-913; 184-897-235-429-285; 186-784-820-995-001,54,false,, 046-729-995-059-874,Considering 'technically possible' alternative meanings for data traces found during a digital forensic examination,2022-05-09,2022,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Graeme Horsman,,,,1,10,Digital forensics; Forensic science; Forensic examination; Computer science; Data science; Psychology; Computer security,,,,,,http://dx.doi.org/10.1080/00450618.2022.2071988,,10.1080/00450618.2022.2071988,,,0,005-715-450-998-72X; 010-963-610-208-920; 023-858-572-607-02X; 054-145-255-092-055; 058-717-000-287-105; 059-397-656-514-952; 073-790-480-897-758; 101-549-415-202-81X; 134-927-490-231-285; 142-790-196-752-819,0,false,, 046-857-308-211-173,Nugget: A digital forensics language,,2018,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Christopher Stelly; Vassil Roussev,"Abstract One of the long-standing conceptual problems in digital forensics is the dichotomy between the imperative for verifiable and reproducible forensic computations, and the lack of adequate mechanisms to accomplish these goals. With over thirty years of professional practice, investigator notes are still the main source of reproducibility information, and much of it is tied to the functions of specific, often proprietary, tools. In this work, we discuss the design and implementation of a domain specific language (DSL) called nugget, which aims to enable the practical formal specification of digital forensic computations in a tool-agnostic fashion. The core idea of DSLs, such as SQL, is to create an intuitive means for domain experts to describe what computation needs to be performed while abstracting away the technical means of its implementation. In the context of digital forensics, nugget aims to address the following requirements: 1) provide investigators with the means to easily and completely specify the data flow of a forensic inquiry from data source to final results; 2) allow the fully automatic (and optimized) execution of the forensic computation; 3) provide a complete, formal, and auditable log of the inquiry.",24,,S38,S47,Software engineering; Formal specification; Domain (software engineering); Digital subscriber line; Context (language use); Computer science; Data flow diagram; SQL; Digital forensics; Verifiable secret sharing,,,,,https://www.sciencedirect.com/science/article/pii/S1742287618300380 https://doi.org/10.1016/j.diin.2018.01.006 https://dblp.uni-trier.de/db/journals/di/di24.html#StellyR18,http://dx.doi.org/10.1016/j.diin.2018.01.006,,10.1016/j.diin.2018.01.006,2793724466,,0,004-190-067-200-599; 004-611-973-316-051; 010-882-950-408-035; 015-654-094-120-991; 025-329-967-266-177; 033-241-817-699-448; 053-363-195-142-469; 085-138-340-371-322; 097-943-611-521-722; 111-471-986-310-852; 114-903-270-116-216; 115-787-295-968-707; 122-410-119-508-633; 134-927-490-231-285; 137-285-170-428-190; 142-884-607-464-932; 146-548-188-554-839; 153-705-882-254-449; 157-954-859-648-506; 192-651-528-538-864,5,true,cc-by-nc-nd,hybrid 046-941-310-744-835,Crossing Borders: Forensic Science and the Fourth Industrial Revolution.,2019-11-19,2019,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Zeno Geradts,,65,1,6,7,Forensic science; Political science; Law; Industrial Revolution,,,,,https://onlinelibrary.wiley.com/doi/pdf/10.1111/1556-4029.14236 https://onlinelibrary.wiley.com/doi/abs/10.1111/1556-4029.14236 https://www.narcis.nl/publication/RecordID/oai%3Adare.uva.nl%3Apublications%2F4a409571-a5c0-4033-a8ea-cfe9fc341b48 https://www.ncbi.nlm.nih.gov/pubmed/31743448,http://dx.doi.org/10.1111/1556-4029.14236,31743448,10.1111/1556-4029.14236,2991203514,,0,009-168-289-731-644; 087-342-951-350-054,0,false,, 046-973-884-620-547,Treasure and tragedy in kmem_cache mining for live forensics investigation,,2010,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Andrew Case; Lodovico Marziale; Cris Neckar; Golden G. Richard,"This paper presents the first deep investigation of the kmem_cache facility in Linux from a forensics perspective. The kmem_cache is used by the Linux kernel to quickly allocate and deallocate kernel structures associated with processes, files, and the network stack. Our focus is on deallocated information that remains in the cache and the major contribution of this paper is to illustrate what forensically relevant information can be retrieved from the kmem_cache and what information is definitively not retrievable. We show that the kmem_cache contains a wealth of digital evidence, much of which was either previously unavailable or difficult to obtain, requiring ad hoc methods for extraction. Previously executed processes, memory mappings, sent and received network packets, NAT translations, accessed file system inodes, and more can all be recovered through examination of the kmem_cache contents. We also discuss portable methods for erasing this information, to ensure that private data is no longer recoverable.",7,,S41,S47,Operating system; Cache pollution; Cache; Cache coloring; Cache invalidation; Page cache; Cache algorithms; Computer science; Bus sniffing; Linux kernel; Database,,,,,http://www.sciencedirect.com/science/article/pii/S1742287610000332 https://dblp.uni-trier.de/db/journals/di/di7.html#CaseMNR10 https://www.sciencedirect.com/science/article/pii/S1742287610000332 https://dl.acm.org/doi/10.1016/j.diin.2010.05.006,http://dx.doi.org/10.1016/j.diin.2010.05.006,,10.1016/j.diin.2010.05.006,2103956577,,0,001-304-351-638-313; 011-569-292-128-546; 017-152-528-840-957; 019-661-085-144-255; 036-662-510-200-483; 058-448-820-778-759; 080-351-281-760-491; 141-445-106-549-822; 149-010-267-691-537; 150-249-549-372-358; 159-459-723-637-730,15,true,cc-by-nc-nd,hybrid 047-386-524-667-691,Tool testing and reliability issues in the field of digital forensics,,2019,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Graeme Horsman,"Abstract The digital forensic discipline is wholly reliant upon software applications and tools designed and marketed for the acquisition, display and interpretation of digital data. The results of any subsequent investigation using such tools must be reliable and repeatable whilst supporting the establishment of fact, allowing criminal justice proceedings the ability to digest any findings during the process of determining guilt or innocence. Errors present at any stage of an examination can undermine an entire investigation, compromising any potentially evidential results. Despite a clear dependence on digital forensic tools, arguably, the field currently lacks sufficient testing standards and procedures to effectively validate their usage during an investigation. Digital forensics is a discipline which provides decision-makers with a reliable understanding of digital traces on any device under investigation, however, it cannot say with 100% certainty that the tools used to undertake this process produce factually accurate results in all cases. This is an increasing concern given the push for digital forensic organisations to now acquire ISO 17025 accreditation. This article examines the current state of digital forensic tool-testing in 2018 along with the difficulties of sufficiently testing applications for use in this discipline. The results of a practitioner survey are offered, providing an insight into industry consensus surrounding tool-testing and reliability.",28,,163,175,Data science; Innocence; Digital data; Computer science; Process (engineering); Reliability (statistics); State (computer science); Accreditation; Certainty; Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S1742287618303062 https://dblp.uni-trier.de/db/journals/di/di28.html#Horsman19a https://doi.org/10.1016/j.diin.2019.01.009 https://research.tees.ac.uk/en/publications/tool-testing-and-reliability-issues-in-the-field-of-digital-foren,http://dx.doi.org/10.1016/j.diin.2019.01.009,,10.1016/j.diin.2019.01.009,2912047161,,0,004-652-388-189-304; 016-983-559-523-04X; 018-182-926-340-45X; 019-831-293-743-518; 021-039-461-635-181; 029-537-963-034-821; 030-918-415-827-067; 036-112-898-081-145; 054-004-313-233-495; 057-720-182-045-334; 064-376-774-486-022; 075-950-021-558-098; 083-582-672-677-836; 095-080-443-019-181; 099-676-137-335-314; 106-885-306-836-498; 113-462-435-754-981; 124-776-641-347-974; 127-053-349-240-432; 131-807-250-432-699; 134-927-490-231-285; 143-427-291-811-40X; 156-571-272-274-491; 173-622-542-280-95X; 178-883-713-153-793; 187-762-907-549-695; 199-745-676-923-766,32,true,,green 047-592-632-721-234,Prelim i - Editorial Board,,2020,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,32,,300938,300938,Editorial board; Computer science; Library science,,,,,,http://dx.doi.org/10.1016/s2666-2817(20)30100-1,,10.1016/s2666-2817(20)30100-1,,,0,,0,true,,bronze 047-939-884-728-387,Law and Judicial Application of Digital Forensic Evidence in Nigeria,,2020,journal article,"Journal of Law, Policy and Globalization",,"International Institute for Science, Technology and Education",,,"The development of information & communication technology has left the Nigerian polity to the application of technology infrastructure to daily activities. In essence, disputes arising from these activities may ordinarily not be effectively settled without applying electronic evidence in proceedings before the courts. The skills and knowledge of electronic evidence require the ingenuity of forensic experts or examiners for the purpose of bridging the gap that may arise in the mind of the courts. Does the Nigerian Law accept forensic expert evidence? Is every evidence expert evidence? Are there set down conditions before the courts for forensic expert evidence to be accepted or applied to proceedings before the courts? What nature of cases requires forensic evidence? This paper  will  demonstrate how  information and communication technology has resulted in the application of digital devices by Nigerians and the nature of the impact it  has . Keywords: Digital Forensics Evidence, Forensics Examiners, Digital Forensics Experts, Law, Judicial application DOI: 10.7176/JLPG/96-08 Publication date: April 30th 202",,,,,,,,,,https://core.ac.uk/download/pdf/327151750.pdf,http://dx.doi.org/10.7176/jlpg/96-08,,10.7176/jlpg/96-08,,,0,,0,true,cc-by,hybrid 048-001-521-822-787,18: Plethora of Cyber Forensics,,2011,journal article,International Journal of Advanced Computer Science and Applications,2158107x; 21565570,The Science and Information Organization,,N. Sridhar; D. Lalitha Bhaskari; P. S. Avadhani,"As threats against digital assets have risen and there is necessitate exposing and eliminating hidden risks and threats. The ability of exposing is called ""cyber forensics."" Cyber Penetrators have adopted more sophistical tools and tactics that endanger the operations of the global phenomena. These attackers are also using anti-forensic techniques to hide evidence of a cyber crime. Cyber forensics tools must increase its toughness and counteract these advanced persistent threats. This paper focuses on briefing of Cyber forensics, various phases of cyber forensics, handy tools and new research trends and issues in this fascinated area.",2,11,,,Internet privacy; Forensic science; Digital evidence; Computer security; Computer science,,,,,https://thesai.org/Downloads/Volume2No11/Paper%2018-%20Plethora%20of%20Cyber%20Forensics.pdf https://thesai.org/Publications/ViewPaper?Volume=2&Issue=11&Code=IJACSA&SerialNo=18,http://dx.doi.org/10.14569/ijacsa.2011.021118,,10.14569/ijacsa.2011.021118,1983107763,,0,022-246-133-676-61X; 047-937-309-229-62X; 062-788-502-964-113; 085-049-092-321-849; 092-827-221-228-520; 103-711-755-826-384; 137-819-338-931-173; 140-821-103-436-654; 159-094-605-033-945; 167-049-018-527-294,5,true,cc-by,hybrid 048-228-308-826-291,The Need for a New Data Processing Interface for Digital Forensic Examination,,2012,journal article,International Journal of Advanced Research in Artificial Intelligence,21654069; 21654050,The Science and Information Organization,,Inikpi O Ademu; Chris Imafidon,"Digital forensic science provides tools, techniques and scientifically proven methods that can be used to acquire and analyze digital evidence. There is a need for law enforcement agencies, government and private organisations to invest in the advancement and development of digital forensic technologies. Such an investment could potentially allow new forensic techniques to be developed more frequently. This research identifies techniques that can facilitates the process of digital forensic investigation, therefore allowing digital investigators to utilize less time and fewer resources. In this paper, we identify the Visual Basic Integrated Development Environment as an environment that provides set of rich features which are likely to be required for developing tools that can assist digital investigators during digital forensic investigation. Establishing a user friendly interface and identifying structures and consistent processes for digital forensic investigation has been a major component of this research.",1,4,,,World Wide Web; Interface (Java); Visual Basic; Law enforcement; Digital evidence; Computer science; Process (engineering); Component (UML); User Friendly; Digital forensics,,,,,https://thesai.org/Publications/ViewPaper?Volume=1&Issue=4&Code=IJARAI&SerialNo=2 https://thesai.org/Downloads/IJARAI/Volume1No4/Paper_2-The_Need_for_a_New_Data_Processing_Interface_for_Digital_Forensic_Examination.pdf,http://dx.doi.org/10.14569/ijarai.2012.010402,,10.14569/ijarai.2012.010402,2135235429,,0,004-872-169-627-620; 015-455-002-340-996; 019-831-293-743-518; 046-867-351-033-973; 048-576-750-040-030; 119-234-785-721-155; 153-153-144-072-106; 157-954-859-648-506; 158-262-072-312-063; 158-630-449-182-358; 168-712-754-489-980; 170-299-458-679-224,0,true,cc-by,hybrid 048-250-488-210-056,Digital Stratigraphy: Contextual Analysis of File System Traces in Forensic Science,2017-12-28,2017,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Eoghan Casey,"This work introduces novel methods for conducting forensic analysis of file allocation traces, collectively called digital stratigraphy. These in-depth forensic analysis methods can provide insight into the origin, composition, distribution, and time frame of strata within storage media. Using case examples and empirical studies, this paper illuminates the successes, challenges, and limitations of digital stratigraphy. This study also shows how understanding file allocation methods can provide insight into concealment activities and how real-world computer usage can complicate digital stratigraphy. Furthermore, this work explains how forensic analysts have misinterpreted traces of normal file system behavior as indications of concealment activities. This work raises awareness of the value of taking the overall context into account when analyzing file system traces. This work calls for further research in this area and for forensic tools to provide necessary information for such contextual analysis, such as highlighting mass deletion, mass copying, and potential backdating.",63,5,1383,1391,Empirical research; Data science; Copying; Context (language use); Stratigraphy (archaeology); File system; Digital evidence; Computer science; Context analysis; Digital forensics,best-fit file allocation; contextual forensic analysis; digital evidence; digital forensics; digital stratigraphy; file allocation strategies; file initialization; file system analysis; file tunneling; forensic science; next-available file allocation; valid data length slack,,,,https://www.ncbi.nlm.nih.gov/pubmed/29284066 https://dialnet.unirioja.es/servlet/articulo?codigo=6583741 https://onlinelibrary.wiley.com/doi/abs/10.1111/1556-4029.13722 http://europepmc.org/abstract/MED/29284066 https://core.ac.uk/download/226984361.pdf,http://dx.doi.org/10.1111/1556-4029.13722,29284066,10.1111/1556-4029.13722,2781008863,,0,001-507-239-208-313; 010-127-508-296-844; 022-712-934-601-162; 073-194-524-558-213; 150-354-696-101-675; 165-189-591-866-290,7,true,,green 048-256-115-288-552,Survey on Different Phases of DigitalForensics Investigation Models,2015-03-30,2015,journal article,International Journal of Innovative Research in Computer and Communication Engineering,23209798; 23209801,Ess & Ess Research Publications,,Priya S. Patil; A. S. Kapse,"Most forensics models focus on the investigative process and its different phases and are characterized by a rather informal and intuitive approach. When a formalized process been introduced, in 1984, a new and improved computer forensics investigation processes have been developed. A digital forensics investigation is a process that used science and technology to examine digital objects and tests theories, which can be entered into a court of law, to answer questions about events that occurred. There is various digital forensics investigation models which consist different phases. The interchanging one or any steps may lead the incomplete results hence wrong interpretation and conclusion. In this paper we reviewed a few investigation processes or models; discuss the phases and identifying common phases.",3,3,1529,1534,Data mining; Forensic science; Data science; Digital forensic process; Focus (computing); Computer science; Process (engineering); Interpretation (philosophy); Computer forensics; Digital forensics,,,,,https://www.omicsonline.org/peer-reviewed/survey-on-different-phases-of-digitalforensics-investigation-models-53809.html https://www.rroij.com/open-access/survey-on-different-phases-of-digitalforensics-investigation-models.pdf https://www.rroij.com/open-access/survey-on-different-phases-of-digitalforensics-investigation-models.php?aid=53809,http://dx.doi.org/10.15680/ijircce.2015.0303018,,10.15680/ijircce.2015.0303018,2329603696,,0,005-465-138-684-882; 032-697-093-668-898; 038-668-970-194-854; 055-628-715-083-217; 062-539-825-048-788; 067-950-012-629-210; 163-581-541-690-876; 199-745-676-923-766,3,false,, 048-391-273-328-232,Editorial - Crisis or opportunity?,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Eoghan Casey,,32,,300961,,,,,,,https://doi.org/10.1016/j.fsidi.2020.300961 https://www.sciencedirect.com/science/article/pii/S2666281720301396,http://dx.doi.org/10.1016/j.fsidi.2020.300961,,10.1016/j.fsidi.2020.300961,3014128139,,0,,0,false,, 048-778-071-128-829,Forensic imaging of embedded systems using JTAG (boundary-scan),,2006,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Ing. M. F. Breeuwsma,,3,1,32,42,Serial Vector Format; Printed circuit board; Embedded system; Embedded software; Debugging; Spy-Bi-Wire; Computer science; Boundary scan description language; Core dump; Computer hardware; Boundary scan,,,,,https://www.sciencedirect.com/science/article/pii/S174228760600003X https://dblp.uni-trier.de/db/journals/di/di3.html#Breeuwsma06 https://dl.acm.org/doi/10.1016/j.diin.2006.01.003,http://dx.doi.org/10.1016/j.diin.2006.01.003,,10.1016/j.diin.2006.01.003,2008105825,,1,021-631-316-268-680; 109-592-439-840-239; 184-117-912-745-411,85,false,, 048-915-789-168-246,Expert didactics in the conditions of the third digital revolution,,2020,journal article,Issues of Forensic Science,05522153,Centralne Laboratorium Kryminalistyczne Policji,,Olga Nedashkivska,"The author raises the issue of the effective application of modern approaches in didactics in the process of training forensic experts, which is related to the specifics of activities in the field of forensic examination and to the requirements and needs of modern digital society. The purpose of the study is to analyze the existing approaches to the training of forensic experts and their skills development, as well as systematic coverage of practical problems of application of the latest didactic approaches in the field. The research was conducted by analyzing the existing classical educational approaches for the training of forensic experts in relevant fields. Taking into account the requirements of modernity associated with the total digitalization of all social and state processes the research determines the need to modernize the basic didactic techniques. The article proposes a systematic solution to the problem – the development and implementation of the latest digital platforms for the training of forensic experts in order to effectively apply their upgraded skills in practice.",308,,65,68,Engineering; Visual arts; Digital Revolution,,,,,http://dx.doi.org/10.34836/pk.2020.308.4,http://dx.doi.org/10.34836/pk.2020.308.4,,10.34836/pk.2020.308.4,3151838372,,0,,0,false,, 049-034-573-414-379,Prelim iii - Contents List,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,40,,301384,301384,Information retrieval,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00065-8,,10.1016/s2666-2817(22)00065-8,,,0,,0,true,,bronze 049-177-568-496-70X,Fingerprint Identification: Potential Sources of Error and the Cause of Wrongful Convictions,2017-08-19,2017,journal article,Journal of Student Science and Technology,19131925,Journal of Student Science and Technology,,Irene C Grose,"Fingerprint identification has long been used by law enforcement to either identify or eliminate potential suspects in a case. It relies on friction ridges – the upraised skin that forms grooves on fingers – and friction ridge impressions, which form from natural secretions of sweat and other trace components. Latent prints, a common term for friction ridge impressions, have many benefits and advantages as a type of forensic evidence. However, they are not a perfect tool: wrongful convictions identified by post-conviction DNA testing and the re-evaluation of forensic evidence have spawned criticism and investigation into the scientific basis of this branch of forensics. This literature review examines literature in both the scientific and legal fields, and investigates three main themes: the principle of uniqueness assumed in individualization, the presence of cognitive bias and human error in analysis, and the changing role of expert testimony in court. There are arguments both for and against uniqueness, but it is still difficult to prove using statistical models and data analysis. Bias in examiners, on the other hand, undeniably exists in different ways, and should be actively guarded against in fingerprint analysis and expert testimony. Expert witness testimony that misleads, exaggerates, or is scientifically unsupportable has been linked to wrongful convictions in the past, highlighting the importance of careful regulation of how an expert witness is advised to testify. In addition to these topics, the techniques of collecting latent print evidence and the standard procedures of analysis have also been examined and evaluated for potential sources of error. Le maintien de l’ordre public utilise depuis longtemps les empreintes digitales pour identifier et eliminer des suspects d’une affaire criminelle. Les empreintes digitales se ent aux cretes papillaires — les cretes et les creux qui formes des rainures sur les doigts — et des empreintes des cretes papillaires, ce qui se forme par les secretions naturelles de transpiration et autres composantes de traces. Les empreintes latentes, un terme courant pour les empreintes digitales, possedent plusieurs avantages en tant qu’element medico-legal de preuve. Toutefois, ce n’est pas une ressource able; des condamnations injustifiees identifiees par un test d’ADN post-condamnatoire et la reevaluation de l’evidence medico-legale ont fraye des critiques et des enquetes de la base des sciences des empreintes digitales. Cette revue examine les textes dans les domaines scientifiques et medico-legaux, et examine trois themes : le principe d’unicite assume par l’individualisation, la presence d’un biais cognitif et l’erreur humaine dans l’analyse, et le role changeant de temoignages experts devant la Cour. Il existe des arguments pour et contre l’unicite, mais l’unicite est tout de meme difficile a prouver en utilisant les modeles statistiques et l’analyse de donnees. Un prejuge chez les examinateurs, d’autres parts, existe incontestablement, et devrait etre activement evite lors de l’analyse d’empreinte digitale et de temoignages experts. Le temoignage d’expert qui induit en erreur, qui est exagere ou qui est scientifiquement faux a mene a des condamnations injusti ees dans le passe, ce qui met en evidence l’importance d’une legislation prudente sur comment l’expert est conseille de temoigner. En plus de ces themes, les techniques de collecte des empreintes digitales latentes et les procedures normales d’analyse ont aussi ete examines et evalues pour des sources d’erreurs potentielles.",10,1,,,Art; Humanities; Expert witness; Dna testing; Sources of error; Art history,,,,,https://journal.fsst.ca/index.php/jsst/article/download/171/pdf_1 https://journal.fsst.ca/index.php/jsst/article/view/171 https://journals.sfu.ca/jsst/index.php/jsst/article/view/171/pdf_1 https://core.ac.uk/download/pdf/267828001.pdf,http://dx.doi.org/10.13034/jsst.v10i1.171,,10.13034/jsst.v10i1.171,2747471482,,0,,0,true,,gold 049-182-076-079-260,Experience constructing the Artifact Genome Project (AGP): Managing the domain's knowledge one artifact at a time,,2018,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Cinthya Grajeda; Laura Sanchez; Ibrahim Baggili; Devon R. Clark; Frank Breitinger,"Abstract While various tools have been created to assist the digital forensics community with acquiring, processing, and organizing evidence and indicating the existence of artifacts, very few attempts have been made to establish a centralized system for archiving artifacts. The Artifact Genome Project (AGP) has aimed to create the largest vetted and freely available digital forensics repository for Curated Forensic Artifacts (CuFAs). This paper details the experience of building, implementing, and maintaining such a system by sharing design decisions, lessons learned, and future work. We also discuss the impact of AGP in both the professional and academic realms of digital forensics. Our work shows promise in the digital forensics academic community to champion the effort in curating digital forensic artifacts by integrating AGP into courses, research endeavors, and collaborative projects.",26,,S47,S58,Domain (software engineering); Data science; Champion; Artifact (software development); Academic community; Computer science; Digital forensics; Genome project,,,,National Science Foundation; National Science Foundation; U.S. Department of Homeland Security; U.S. Department of Homeland Security,https://digitalcommons.newhaven.edu/cgi/viewcontent.cgi?article=1077&context=electricalcomputerengineering-facpubs https://www.sciencedirect.com/science/article/pii/S1742287618302007 https://digitalcommons.newhaven.edu/electricalcomputerengineering-facpubs/76/ https://dblp.uni-trier.de/db/journals/di/di26.html#GrajedaSBCB18 https://www.sciencedirect.com/science/article/abs/pii/S1742287618302007,http://dx.doi.org/10.1016/j.diin.2018.04.021,,10.1016/j.diin.2018.04.021,2884399119,,0,001-520-732-812-81X; 002-044-330-972-492; 002-768-711-065-857; 003-504-554-245-316; 004-190-067-200-599; 008-667-688-301-190; 010-985-077-415-59X; 016-322-663-058-127; 018-954-504-137-336; 020-405-975-217-252; 023-338-081-058-709; 036-112-898-081-145; 038-826-942-273-281; 039-999-270-718-277; 040-711-141-878-573; 045-478-032-041-196; 045-701-748-075-614; 048-345-694-501-681; 049-492-455-536-947; 051-558-525-539-694; 056-715-378-869-201; 065-671-045-136-370; 068-633-888-560-585; 070-930-940-364-374; 075-268-039-596-63X; 102-441-399-953-42X; 109-199-944-332-859; 121-559-348-653-550; 125-622-261-107-674; 125-939-677-745-616; 159-180-382-976-102; 170-489-073-241-86X,12,true,cc-by-nc-nd,hybrid 049-201-096-834-084,Probability intervals of speed estimations from video images: The Markov Chain Monte Carlo approach.,2018-04-13,2018,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Arjan Mieremet; Ivo Alberink; Bart Hoogeboom; Derk Vrijdag,,288,,29,35,Bayesian statistics; Statistics; Markov chain Monte Carlo; Photogrammetry; Observational error; Closed circuit; Video image; Mathematics; Confidence interval; Robustness (computer science),Bayesian statistics; Digital images; Forensic science; Photogrammetry; Speed estimation,,,,https://www.sciencedirect.com/science/article/abs/pii/S0379073818301580 https://europepmc.org/abstract/MED/29705587 https://www.ncbi.nlm.nih.gov/pubmed/29705587,http://dx.doi.org/10.1016/j.forsciint.2018.04.003,29705587,10.1016/j.forsciint.2018.04.003,2797369717,,0,001-633-677-992-774; 038-023-258-786-196; 063-828-102-408-126; 165-730-731-702-814,2,false,, 049-324-711-593-551,Prelim iii - Contents List,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,36,,301160,301160,Computer science; Information retrieval,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00065-2,,10.1016/s2666-2817(21)00065-2,,,0,,0,true,,bronze 049-447-446-930-712,Digital Forensic Investigation and Analysis of Android Mobile,2015-12-05,2015,journal article,International Journal of Science and Research (IJSR),23197064,International Journal of Science and Research,,,,4,12,704,707,Android (operating system); Digital forensics; Forensic science; Computer science; Computer security; Internet privacy; Operating system; History; Archaeology,,,,,,http://dx.doi.org/10.21275/v4i12.nov152071,,10.21275/v4i12.nov152071,,,0,,1,true,,gold 049-758-465-945-336,Discrimination Analysis of Adhesive Cloth Tapes by Using Scanned Digital Images,,2012,journal article,Japanese Journal of Forensic Science and Technology,18801323; 18814689,Japanese Association of Forensic Science and Technology,,Minemasa Hida; Hiroyasu Satoh; Syuji Okuyama,,17,2,83,89,Artificial intelligence; Materials science; Computer vision; Digital image; Adhesive; Forensic engineering,,,,,http://japanlinkcenter.org/DN/JST.JSTAGE/jafst/17.83?lang=en&from=CrossRef&type=abstract,http://dx.doi.org/10.3408/jafst.17.83,,10.3408/jafst.17.83,2320325615,,0,000-821-174-469-326; 007-489-780-432-411; 009-448-970-827-280; 010-735-126-812-902; 061-803-755-068-997; 064-538-307-700-180; 088-881-906-781-831; 089-070-053-111-218,0,true,,bronze 049-979-701-385-094,Forensic access to Windows Mobile pim.vol and other Embedded Database (EDB) volumes,,2013,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Marnix Kaart; C. Klaver; R.B. van Baar,,9,3,170,192,Operating system; Windows Rally; Software versioning; SYSTEM.INI; Computer science; Installable File System; Microsoft Windows; Windows CE; Windows Vista; Database; Group Policy,,,,,https://dblp.uni-trier.de/db/journals/di/di9.html#KaartKB13 https://www.sciencedirect.com/science/article/pii/S1742287612000874,http://dx.doi.org/10.1016/j.diin.2012.12.002,,10.1016/j.diin.2012.12.002,1975642608,,0,014-510-444-730-433; 024-735-069-822-749; 031-982-129-275-33X; 050-308-742-156-878; 073-910-371-295-970; 074-933-143-629-826; 095-158-777-313-687; 142-657-351-097-509,8,false,, 050-015-650-841-609,Digital forensics: Understanding the development of criminal law in England and Wales on images depicting child sexual abuse,,2016,journal article,Computer Law & Security Review,02673649,Elsevier BV,United Kingdom,Graeme Horsman,"Abstract In 2015, offences surrounding the possession, distributing, creation and publication of images depicting child sexual abuse (IDCSA) are prevalent. As a result, it is well publicised that law enforcement and associated digital forensic organisations are incurring substantial case backlogs in this area. As more investigations of this type are faced, it is becoming increasingly essential for practitioners to maintain an understanding of current legislative developments, as a digital forensic investigation of suspected offences surrounding IDCSA does not just involve the blanket recovery of all digital imagery on a device. Governed by this complex area of law, practitioners must appreciate the intricacies of these offences, ensuring any examination policies are correctly defined whilst recovering information that will support criminal justice processes. In addition, as triage strategies are increasingly employed in an effort to speed up investigations, it is crucial to recognise the types of evidence that are of use to a prosecuting authority in order to ensure these examination techniques are both efficient and effective. This paper offers a comprehensive analysis of legislative developments for offences surrounding IDCSA in the United Kingdom, bringing together the disciplines of law and digital forensics. Evidence of value to a prosecution for these offences is also considered taking into account existing case law precedents in line with contentious areas including the Internet cache and unallocated clusters.",32,3,419,432,Criminal justice; Common law; Political science; Law; Criminal law; Legislation; Law enforcement; Child sexual abuse; Computer forensics; Criminology; Digital forensics,,,,,https://core.ac.uk/display/153535686 https://dblp.uni-trier.de/db/journals/clsr/clsr32.html#Horsman16 http://www.sciencedirect.com/science/article/pii/S0267364916300309 https://sure.sunderland.ac.uk/id/eprint/6232 https://www.sciencedirect.com/science/article/pii/S0267364916300309 https://doi.org/10.1016/j.clsr.2016.02.002 https://research.tees.ac.uk/en/publications/digital-forensics-understanding-the-development-of-criminal-law-i https://core.ac.uk/download/74368782.pdf,http://dx.doi.org/10.1016/j.clsr.2016.02.002,,10.1016/j.clsr.2016.02.002,2293335385,,0,004-430-064-731-538; 007-163-998-251-744; 008-485-716-547-052; 013-085-072-203-411; 023-513-295-393-567; 051-669-497-524-322; 054-117-973-018-257; 061-908-629-117-242; 062-496-046-100-949; 065-783-345-234-112; 065-875-008-812-602; 068-760-490-813-839; 073-078-443-164-61X; 078-327-902-374-330; 080-233-270-573-351; 087-299-996-161-037; 094-531-548-047-14X; 109-362-587-188-314; 121-371-955-077-095; 147-659-670-579-979; 147-850-806-726-380; 149-849-349-165-016; 150-482-683-921-128; 169-957-362-102-267; 189-910-079-327-61X,4,true,,green 050-109-368-175-830,Application of data fusion methodology for computer forensics dataset analysis to resolve data quality issues in predictive digital evidence,2012-05-21,2012,journal article,The International Journal of Forensic Computer Science,18099807; 19807333,ABEAT - Associacao Brasileira de Especialistas em Alta Tecnologia,,Suneeta Satpathy; Sateesh Kumar Pradhan; B. N. B. Ray,"The digital information systems have become increasingly complex and inex- tricably intertwined with the infrastructure of national, public, and private organizations. The forensic digital analysis as a whole, in its relative infancy, is the unwilling victim of the rapid advancement of computer technology, so it is at the mercy of ever more new and complex computing approaches. Forensic digital analysis is unique among the forensic sciences in that it is inherently mathematical and generally comprises more data from an investigation than is present in other types of forensics. The digital investigation process can be driven using numerous forensic investigation models. Among these is the need to analyze forensic materials over complex chains of evidence in a wide variety of hetero- geneous computing platforms. The current computer forensic investigation paradigm is laborious and requires significant expertise on the part of the investigators. This paper presents the application of JDL data fusion model in computer forensics for analyzing the information from seized hard drives along with an analysis of the inter- preted information to prove that the respective user has misused internet. This paper is an attempt to use the data fusion and decision mining processes, to help in enhancing the quality of the investigation process which is in turn is validated by statistical evalua- tion. The mining rules generation process is based on the decision tree as a classification method to study the main attributes that may help in detecting the suspicious behavior. A system that facilitates the use of the generated rules is built which allows investigating agencies to predict the suspicious behavior under study.",,,16,23,The Internet; Data mining; Engineering; Information system; Data quality; Data science; Digital evidence; Computer technology; Sensor fusion; Computer forensics; Decision tree,,,,,https://www.ijofcs.org/abstract-v07n1-pp02.html http://www.ijofcs.org/V07N1-PP02-APPLICATION-DATA-FUSION.pdf,http://dx.doi.org/10.5769/j201201002,,10.5769/j201201002,2333839593,,0,000-115-630-626-826; 018-111-574-600-175; 037-504-226-162-718; 042-230-817-975-353; 044-937-786-034-906; 052-665-370-203-554; 099-169-442-324-498; 109-496-533-312-141; 140-535-726-112-27X; 171-950-456-851-517,1,false,, 050-213-824-812-128,Digitalna forenzika iOS uređaja,2020-12-25,2020,journal article,Zbornik radova Fakulteta tehničkih nauka u Novom Sadu,25605925; 0350428x,Faculty of Technical Sciences,,Jelena Maravić,"This paper addresses the theme of digital forensics with an emphasis on digital forensics of iOS devices. As digital forensics implies the application of the scientific method to provide digital evidence, the paper deals with all phases that include a single digital forensic investigation and describes in detail the techniques of data extraction from iOS devices and tools that implement these techniques.",36,01,87,90,Data science; Data extraction; Digital evidence; Digital forensic investigation; Theme (computing); Computer science; Digital forensics,,,,,http://www.ftn.uns.ac.rs/ojs/index.php/zbornik/article/download/1222/1242 http://www.ftn.uns.ac.rs/ojs/index.php/zbornik/article/view/1222,http://dx.doi.org/10.24867/11be14maravic,,10.24867/11be14maravic,3120557873,,0,,0,true,,bronze 050-296-813-523-597,"Digital evidence, 'absence' of data and ambiguous patterns of reasoning",,2016,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Alex Biedermann; Joëlle Vuille,"In this paper we discuss the use of digital data by the Swiss Federal Criminal Court in a recent case of attempted homicide. We use this case to examine drawbacks for the defense when the presentation of scientific evidence is partial, especially when the only perspective mentioned is that of the prosecution. We tackle this discussion at two distinct levels. First, we pursue an essentially non-technical presentation of the topic by drawing parallels between the court's summing up of the case and flawed patterns of reasoning commonly seen in other forensic disciplines, such as DNA and particle traces (e.g., gunshot residues). Then, we propose a formal analysis of the case, using elements of probability and graphical probability models, to justify our main claim that the partial presentation of digital evidence poses a risk to the administration of justice in that it keeps vital information from the defense. We will argue that such practice constitutes a violation of general principles of forensic interpretation as established by forensic science literature and current recommendations by forensic science interest groups (e.g., the European Network of Forensic Science Institutes). Finally, we posit that argument construction and analysis using formal methods can help replace digital evidence appropriately into context and thus support a sound evaluation of the evidence.",16,,S86,S95,Epistemology; Scientific evidence; Parallels; Presentation; Administration of justice; Context (language use); Digital evidence; Computer security; Argument; Computer science; Formal methods,,,,Swiss National Science Foundation; SNSF; ERC; Ambizione; Universities of Lausanne; Neuchâtel,https://www.sciencedirect.com/science/article/abs/pii/S1742287616300056 https://serval.unil.ch/notice/serval:BIB_71F2C58C8DB2 https://www.unil.ch/esc/files/live/sites/esc/files/Fichiers%202016/Biedermann_Vuille_2016.pdf https://www.sciencedirect.com/science/article/pii/S1742287616300056 https://serval.unil.ch/resource/serval:BIB_71F2C58C8DB2.P001/REF.pdf https://core.ac.uk/display/77170769 https://core.ac.uk/download/77170769.pdf,http://dx.doi.org/10.1016/j.diin.2016.01.011,,10.1016/j.diin.2016.01.011,2332805147,,0,004-883-297-684-711; 005-222-685-769-643; 005-715-450-998-72X; 005-877-808-547-694; 011-900-233-916-611; 013-261-137-570-74X; 014-961-689-075-177; 016-976-912-187-206; 022-896-866-582-746; 042-398-266-516-108; 061-276-154-289-08X; 062-121-021-285-333; 079-046-994-186-390; 079-152-497-703-763; 085-370-444-410-812; 087-634-902-634-071; 088-306-589-450-500; 097-942-806-126-453; 101-323-230-956-293; 116-716-614-614-171; 119-299-092-875-116; 128-597-792-698-79X; 193-424-163-457-741; 197-058-703-260-084,9,true,cc-by-nc-nd,hybrid 050-694-164-774-292,Deleting collected digital evidence by exploiting a widely adopted hardware write blocker,,2016,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Christopher S. Meffert; Ibrahim Baggili; Frank Breitinger,"In this primary work we call for the importance of integrating security testing into the process of testing digital forensic tools. We postulate that digital forensic tools are increasing in features (such as network imaging), becoming networkable, and are being proposed as forensic cloud services. This raises the need for testing the security of these tools, especially since digital evidence integrity is of paramount importance. At the time of conducting this work, little to no published anti-forensic research had focused on attacks against the forensic tools/process. We used the TD3, a popular, validated, touch screen disk duplicator and hardware write blocker with networking capabilities and designed an attack that corrupted the integrity of the destination drive (drive with the duplicated evidence) without the user's knowledge. By also modifying and repackaging the firmware update, we illustrated that a potential adversary is capable of leveraging a phishing attack scenario in order to fake digital forensic practitioners into updating the device with a malicious operating system. The same attack scenario may also be practiced by a disgruntled insider. The results also raise the question of whether security standards should be drafted and adopted by digital forensic tool makers.",18,,S87,S96,Security testing; Digital evidence; Computer security; Computer science; Forensic disk controller; Computer forensics; Firmware; Cloud computing; Digital forensics; Computer hardware; Vulnerability (computing),,,,,https://www.sciencedirect.com/science/article/pii/S1742287616300354 https://digitalcommons.newhaven.edu/electricalcomputerengineering-facpubs/56/ https://dl.acm.org/doi/10.1016/j.diin.2016.04.004 https://core.ac.uk/display/82539065 https://www.sciencedirect.com/science/article/abs/pii/S1742287616300354 https://core.ac.uk/download/pdf/82539065.pdf,http://dx.doi.org/10.1016/j.diin.2016.04.004,,10.1016/j.diin.2016.04.004,2510465603,,0,007-206-939-862-809; 009-642-902-074-79X; 018-483-378-650-703; 021-039-461-635-181; 021-850-998-857-676; 035-853-217-426-112; 042-880-741-738-793; 047-630-600-014-492; 055-416-156-661-003; 056-590-277-527-716; 059-176-928-707-661; 078-072-950-053-679; 090-792-295-657-205; 110-494-552-257-201; 120-916-795-553-371; 123-830-244-984-847; 146-548-188-554-839; 152-474-715-580-077; 158-931-700-122-435; 159-094-605-033-945; 187-849-196-324-650; 192-810-463-153-431,6,true,cc-by-nc-nd,hybrid 050-759-663-355-409,Digital Forensic Investigation For The Internet Of Medical Things (IoMT),2019-08-31,2019,journal article,"Journal of Forensic, Legal & Investigative Sciences",2473733x,Herald Scholarly Open Access,,Hamid Jahankhani,,5,2,1,6,Internet privacy; The Internet; Digital forensic investigation; Computer science,,,,,http://dx.doi.org/10.24966/flis-733x/100029,http://dx.doi.org/10.24966/flis-733x/100029,,10.24966/flis-733x/100029,3003856626,,0,,6,true,cc-by,gold 050-770-394-368-814,Cybersecurity and Forensics in Connected Autonomous Vehicles: A Review of the State-of-the-Art,,2022,journal article,IEEE Access,21693536,Institute of Electrical and Electronics Engineers (IEEE),,Prinkle Sharma; James Gillanders,,,,1,1,,,,,,,http://dx.doi.org/10.1109/access.2022.3213843,,10.1109/access.2022.3213843,,,0,,0,true,"CC BY, CC BY-NC-ND",gold 050-785-669-676-405,Mapping digital forensic application requirement specification to an international standard,,2020,journal article,Forensic Science International: Reports,26659107,Elsevier BV,,Victor R. Kebande; Stacey O. Baror; Reza M. Parizi; Kim-Kwang Raymond Choo; Hein S. Venter,"Abstract A potential security incident may go unsolved if standardized forensic approaches are not applied during lawful investigations. This paper highlights the importance of mapping the digital forensic application requirement specification to an international standard, precisely ISO/IEC 27043. The outcome of this work is projected to contribute to the problem of secure DF tool creation, and in the process address Software Requirements Specification (SRS) as a process of digital evidence admissibility.",2,,100137,,Software requirements specification; Software engineering; Outcome (game theory); Work (electrical); International standard; Digital evidence; Computer science; Process (engineering); Digital forensics,,,,,https://digitalcommons.kennesaw.edu/facpubs/4720/ https://repository.up.ac.za/handle/2263/78879 https://www.sciencedirect.com/science/article/pii/S2665910720300864 http://www.sciencedirect.com/science/article/pii/S2665910720300864,http://dx.doi.org/10.1016/j.fsir.2020.100137,,10.1016/j.fsir.2020.100137,3086668206,,0,001-888-175-704-116; 003-905-226-015-068; 004-652-388-189-304; 012-022-424-831-661; 018-948-094-812-86X; 021-563-550-669-43X; 022-108-618-988-640; 022-564-463-934-451; 024-350-847-240-124; 029-826-735-978-186; 035-223-520-491-228; 043-684-451-827-921; 043-826-131-546-638; 054-004-313-233-495; 054-813-245-385-63X; 059-259-197-397-244; 068-573-357-666-979; 074-503-636-433-987; 078-730-781-174-18X; 091-540-399-535-662; 094-217-978-770-068; 101-147-258-831-898; 103-113-677-538-597; 113-529-751-754-389; 129-623-020-572-540; 132-203-833-801-854; 143-959-640-326-451; 159-873-078-786-98X; 181-803-418-455-727,5,true,"CC BY, CC BY-NC-ND",gold 051-017-609-417-019,Graphical evidence: forensic animations and virtual reconstructions,,2009,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Damian Schofield,"Courtroom environments, which have been one of the last bastions of the oral tradition, are slowly morphing into cinematic display environments1. The persuasive oral rhetoric of lawyers is increasingly being replaced by compelling visual media displays presenting a range of digital evidence in a convincing and credible manner2. The digital age has brought a plethora of novel evidence forms, evidence detection methods, and new means of evidence presentation. In particular, three-dimensional reconstructions of evidence offer great potential in the field of forensic science, they can potentially help in the presentation of complex scientific, spatial and temporal data to a non-technical audience3. This paper outlines the forensic process in terms of the tasks and phases involved, specifically relating to the presentation of evidence represented in a digital media form. A range of examples of where evidence has been presented in courtrooms using digital media (particularly forensic animation and virtual recon...",41,2,131,145,Human–computer interaction; Rhetoric; Digital media; Presentation; Digital evidence; Computer science; Process (engineering); Multimedia; Animation; Morphing; Oral tradition,,,,,https://www.tandfonline.com/doi/full/10.1080/00450610903007020,http://dx.doi.org/10.1080/00450610903007020,,10.1080/00450610903007020,2056728753,,0,006-147-481-193-848; 011-266-643-505-000; 011-500-992-597-292; 026-876-385-709-061; 027-681-577-683-835; 031-203-363-695-193; 034-214-667-694-280; 034-916-306-834-918; 035-006-796-654-12X; 035-504-544-309-700; 038-668-970-194-854; 046-505-599-865-150; 053-122-526-126-117; 056-511-091-557-150; 057-091-476-338-133; 059-642-431-151-966; 066-608-594-705-50X; 078-532-673-859-432; 081-457-804-979-153; 085-379-403-609-164; 091-328-635-654-041; 093-319-343-499-893; 105-722-396-170-542; 112-956-806-130-734; 114-791-371-428-899; 116-716-725-948-123; 125-462-406-091-58X; 166-111-907-375-073; 180-352-675-042-601; 189-302-060-184-031; 199-745-676-923-766,1,false,, 051-165-387-606-715,PyFlag - An advanced network forensic framework,,2008,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,M. I. Cohen,"Network forensics is an investigation technique looking at the network traffic generated by a system. PyFlag is a general purpose, open source, forensic package which merges disk forensics, memory forensics and network forensics. This paper describes the PyFlag architecture and in particular how that is used in the network forensics context. The novel processing of HTML pages is described and the PyFlag page rendering is demonstrated. PyFlag's novel processing of complex web applications such as Gmail and other web applications is described. Finally PyFlag's report generation capabilities are demonstrated.",5,,S112,S120,Web application; Architecture; Protocol analysis; World Wide Web; Rendering (computer graphics); Memory forensics; Report generation; Computer science; Network forensics; Digital forensics,,,,,https://dl.acm.org/doi/10.1016/j.diin.2008.05.016 https://www.sciencedirect.com/science/article/abs/pii/S1742287608000418 https://www.sciencedirect.com/science/article/pii/S1742287608000418 http://dfrws.org/2008/proceedings/p112-cohen.pdf https://www.mendeley.com/catalogue/c80e3b07-2ce5-34ac-bde8-377debf4ee46/ https://dblp.uni-trier.de/db/journals/di/di5.html#Cohen08,http://dx.doi.org/10.1016/j.diin.2008.05.016,,10.1016/j.diin.2008.05.016,2000674713,,244,148-196-960-393-310; 155-125-521-143-091; 184-277-200-841-977,88,true,cc-by-nc-nd,hybrid 051-446-128-330-33X,Research on the Computer Forensics Model,,2010,journal article,Computers & Security,01674048,,,Gong Jian,"If the data was collected after the computer crime had occurred,it was difficult to ensure the authenticity and the timeliness of the evidence.A computer forensics model based on the concept of dynamic-collection was built in this paper.The work process of the model was introduced,the fuzzy C-means(FCM) clustering method was used to analyze the digital data,and the extensible Markup Language(XML)was also used to describe the forensics results.A computer forensics prototype system based on this model was implemented.Experimental results show that the accurate and efficiency digital evidence could be collected by the prototype system.",,,,,Data mining; World Wide Web; Forensic science; Digital evidence; Computer science; Network forensics; Computer forensics; Fuzzy logic; Cluster analysis; Digital forensics; XML,,,,,https://en.cnki.com.cn/Article_en/CJFDTOTAL-DZJC201001020.htm,https://en.cnki.com.cn/Article_en/CJFDTOTAL-DZJC201001020.htm,,,2355886953,,0,,0,false,, 051-832-649-225-696,An Ontology-Based Transformation Model for the Digital Forensics Domain,2017-06-15,2017,journal article,Elektronika ir Elektrotechnika,20295731; 13921215,Kaunas University of Technology (KTU),Lithuania,Sarunas Grigaliunas; Jevgenijus Toldinas; Algimantas Venčkauskas,"The creation of an ontology makes it possible to form common information structures, to reuse knowledge, to make assumptions within a domain and to analyse every piece of knowledge. In this paper, we aim to create an ontology-based transformation model and a framework to develop an ontology-based transformation system in the digital forensics domain. We describe the architecture of the ontology-based transformation system and its components for assisting computer forensics experts in the appropriate selection of tools for digital evidence investigation. We consider the use of the attributes of Extensible Markup Language document transformation to map the computer forensics ontology and we use the representations in the National Institute of Standards and Technology’s “Computer Forensics Tool Catalog” for aligning one form with the other.DOI: http://dx.doi.org/10.5755/j01.eie.23.3.18337",23,3,78,82,Transformation (function); Ontology (information science); Domain (software engineering); Information retrieval; Digital evidence; Computer science; Computer-aided software engineering; Computer forensics; Digital forensics; XML,,,,,https://eejournal.ktu.lt/index.php/elt/article/view/18337/8800 https://eejournal.ktu.lt/index.php/elt/article/view/18337 https://core.ac.uk/display/144875785 https://core.ac.uk/download/pdf/144875785.pdf,http://dx.doi.org/10.5755/j01.eie.23.3.18337,,10.5755/j01.eie.23.3.18337,2624936764,,0,,3,true,cc-by,gold 051-846-755-774-83X,An embedded bayesian network hidden markov model for digital forensics,,2006,journal article,Lecture Notes in Computer Science,03029743,,,Olivier de Vel; Nianjun Liu; Terry Caelli; Tibério S. Caetano,In the paper we combine a Bayesian Network model for encoding forensic evidence during a given time interval with a Hidden Markov Model (EBN-HMM) for tracking and predicting the degree of criminal activity as it evolves over time. The model is evaluated with 500 randomly produced digital forensic scenarios and two specific forensic cases. The experimental results indicate that the model fits well with expert classification of forensic data. Such initial results point out the potential of such Dynamical Bayesian Network methods for the analysis of digital forensic data.,,,459,465,Data mining; Forensic science; Artificial intelligence; Markov model; Hidden Markov model; Bayesian network; Computer science; Variable-order Bayesian network; Dynamic Bayesian network; Digital forensics,,,,,,,,,2612635067,,0,,11,false,, 051-886-923-050-694,Law enforcement educational challenges for mobile forensics,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Georgina Humphries; Rune Nordvik; Harry Manifavas; Phil Cobley; Matthew Sorell,"Abstract Training, tools, and standards are important foundations of mobile forensics. This work focuses on existing curricula and courses in the domain of mobile forensics. In order to identify courses in areas of computing where mobile forensics may be offered, this research utilises open source information gathering, in addition to questionnaire and interviews, to capture additional information and the views and experiences of educators and/or trainers. This research finds that current education and training offerings mainly include topics regarding acquisition of mobile devices and analysis of the acquired data. Current education and training do not cover the areas of a complete mobile forensic investigation, from crime scene to court. In addition, trainer opinions on skills shortages include the lack of basic knowledge, generic skills in forensics and investigation, lack of skilled practitioners, and necessary mindsets to critically think, investigate and avoid dependency on Digital Forensic software.",38,,301129,,Crime scene; Mobile device; Data science; Dependency (project management); Law enforcement; Trainer; Computer science; Curriculum; Mobile device forensics; Digital forensics,,,,Horizon 2020 Framework Programme; Horizon 2020 Framework Programme,https://www.sciencedirect.com/science/article/pii/S2666281721000275 https://dfrws.org/wp-content/uploads/2021/01/2021_APAC_paper-law_enforcement_educational_challenges_for_mobile_forensics.pdf https://dfrws.org/presentation/law-enforcement-educational-challenges-for-mobile-forensics/,http://dx.doi.org/10.1016/j.fsidi.2021.301129,,10.1016/j.fsidi.2021.301129,3125001077,,0,000-084-741-857-185; 000-490-412-762-138; 004-652-388-189-304; 006-569-049-717-630; 009-636-109-360-60X; 010-965-341-795-117; 014-510-444-730-433; 023-418-828-545-549; 031-800-007-340-922; 037-142-488-024-23X; 050-618-920-212-97X; 075-316-312-757-865; 077-314-954-898-241; 087-950-081-760-226; 088-402-154-220-239; 090-175-296-666-441; 096-838-446-149-582; 105-194-296-544-889; 110-751-128-408-714; 114-955-439-966-393; 134-927-490-231-285; 141-165-988-845-765; 163-853-761-819-084; 164-392-011-156-848; 165-956-283-954-04X; 184-783-169-631-470,2,true,cc-by-nc-nd,hybrid 052-054-657-975-487,Analisa Perkembangan Digital Forensik dalam Penyelidikan Cybercrime di Indonesia (Systematic Review),2020-01-04,2020,journal article,Jurnal Telekomunikasi dan Komputer,20854811,Universitas Mercu Buana,,Nur Iman; Aris Susanto; Rahmat Inggi,"Digital forensik dikembangkan untuk menyelidiki perangkat digital dalam mendeteksi kejahatan ( cybercrime ). Tujuan penulisan makalah ini untuk mengidentifikasi sub digital forensik dan menganalisa perkembangan digital forensik dalam penyelidikan kasus kejahatan di Indonesia. Metode yang digunakan adalah kajian sistematis ( systematic review ) dengan melalui proses pemilihan sumber data yaitu Garba Rujukan Digital, Science and Technology Index, RAMA Repository. Hasil dari penelusuran menunjukkan bahwa kejahatan paling banyak ditangani yaitu live forensic , network forensic , dan mobile forensic dengan grafik trend topic diatas 10 dibandingkan dengan computer forensic dan database forensic hanya terdapat 2 topik.",9,3,186,192,Library science; Political science; Digital forensics,,,,,https://www.mendeley.com/catalogue/db3b364e-2779-3df0-ac22-f70dc1853772/ http://publikasi.mercubuana.ac.id/index.php/Incomtech/article/view/7210 https://publikasi.mercubuana.ac.id/index.php/Incomtech/article/view/7210 https://publikasi.mercubuana.ac.id/index.php/Incomtech/article/download/7210/3098 https://incomtech.mercubuana.ac.id/id/publications/293930/analisa-perkembangan-digital-forensik-dalam-penyelidikan-cybercrime-di-indonesia,http://dx.doi.org/10.22441/incomtech.v9i3.7210,,10.22441/incomtech.v9i3.7210,2998235363,,0,,3,true,cc-by-nc,gold 052-114-633-106-705,Fifteenth Annual DFRWS Conference,,2015,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Elizabeth Schweinsberg,,14,,S1,S2,Fifteenth; Computer science; Art history,,,,,https://dblp.uni-trier.de/db/journals/di/di14.html#Schweinsberg15 https://doi.org/10.1016/j.diin.2015.07.001 https://www.sciencedirect.com/science/article/pii/S1742287615000729 https://core.ac.uk/display/82783794 https://core.ac.uk/download/pdf/82783794.pdf,http://dx.doi.org/10.1016/j.diin.2015.07.001,,10.1016/j.diin.2015.07.001,2201798142,,0,,0,true,cc-by-nc-nd,hybrid 052-165-322-738-430,CloudMe forensics: A case of big data forensic investigation,2017-07-31,2017,journal article,Concurrency and Computation: Practice and Experience,15320626; 15320634,Wiley,United States,Yee-Yang Teing; Ali Dehghantanha; Kim-Kwang Raymond Choo,"Summary; The significant increase in the volume, variety, and velocity of data complicates cloud forensic efforts, and such (big) evidential data will, at some point, become too (computationally) expensive to be fully identified, collected, and analysed in a timely manner. Thus, it is important for digital forensic practitioners to have an up-to-date knowledge of relevant data artefacts that could be forensically recovered from the cloud product under investigation. In this paper, CloudMe, a popular cloud storage service, is studied. The types and locations of the artefacts relating to the installation and uninstallation of CloudMe client application, logging in and out, and file synchronization events from the computer desktop and mobile clients are described. Findings from this research will also help inform future development of tools and techniques (e.g., data mining techniques) for cloud-enabled big data endpoint forensics investigation.",30,5,e4277,,Login; World Wide Web; Forensic science; File synchronization; Cloud storage; Cloud forensics; Computer science; Network forensics; Computer forensics; Mobile device forensics; Big data; Cloud computing; Digital forensics; Volume (computing); Data science; Service (systems architecture),,,,,https://dblp.uni-trier.de/db/journals/concurrency/concurrency30.html#TeingDC18 https://www.onlinelibrary.wiley.com/doi/abs/10.1002/cpe.4277 http://arxiv.org/abs/1807.10218,http://dx.doi.org/10.1002/cpe.4277,,10.1002/cpe.4277,2740870883; 3105083028,,0,000-132-422-881-51X; 001-470-661-245-05X; 002-768-711-065-857; 003-135-959-594-644; 003-575-010-209-278; 007-326-471-789-197; 007-546-399-759-026; 007-803-508-283-309; 008-049-424-630-638; 009-544-868-935-533; 009-885-874-541-907; 010-286-028-596-352; 011-972-444-921-827; 018-696-253-395-568; 019-119-495-482-994; 019-698-064-288-240; 024-462-843-796-80X; 024-894-908-869-686; 025-319-861-345-580; 025-723-055-730-999; 027-158-847-348-062; 028-290-062-141-840; 029-934-518-651-564; 030-355-169-268-637; 033-736-412-797-861; 034-777-902-744-524; 035-448-415-847-226; 040-652-005-186-639; 041-879-975-858-398; 042-767-661-429-064; 045-553-653-288-228; 045-701-748-075-614; 047-833-989-327-699; 049-510-490-983-722; 049-977-511-720-26X; 051-368-118-380-383; 052-152-063-024-042; 058-631-300-195-90X; 061-960-915-134-527; 063-572-994-319-332; 068-459-443-764-162; 069-436-005-091-548; 069-754-697-292-909; 074-503-636-433-987; 080-226-855-967-158; 081-833-857-658-915; 082-508-778-448-650; 083-322-626-930-350; 095-691-114-276-825; 096-289-210-165-616; 100-459-328-094-990; 101-091-831-428-576; 102-182-774-566-752; 102-734-676-905-303; 104-116-794-238-462; 105-656-858-306-780; 106-997-247-556-643; 116-075-998-238-410; 117-614-574-133-806; 121-704-965-852-836; 124-837-341-752-034; 124-912-663-881-389; 130-759-468-628-491; 131-679-830-757-808; 140-202-935-076-863; 141-164-327-638-772; 144-124-797-675-052; 163-330-758-807-944; 166-183-210-534-575; 170-108-067-251-840; 189-205-808-191-262,33,true,,green 052-771-931-889-410,Software Forensics. By Robert Slade,2008-12-09,2008,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Samuel Liles,"The digital forensic practitioner, whether he has no previous knowledge of software forensics or is an expert, will find value in this interesting book. In a sparse field, a book on software forens...",2,3,159,160,Data science; Value (mathematics); Software; Software forensics; Field (computer science); Computer science; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/jdfp/jdfp2.html#Liles08 http://dblp.uni-trier.de/db/journals/jdfp/jdfp2.html#Liles08 https://dl.acm.org/citation.cfm?id=1480866,http://dx.doi.org/10.1080/15567280802385493,,10.1080/15567280802385493,191415793,,0,,0,false,, 053-359-699-662-079,A Comparative Study based Digital Forensic Tool: Complete Automated Tool,2014-12-10,2014,journal article,The International Journal of Forensic Computer Science,18099807; 19807333,ABEAT - Associacao Brasileira de Especialistas em Alta Tecnologia,,Nilakshi Jain; Dhananjay R Kalbande,,9,1,22,29,Digital forensics; Computer science; Forensic science; Digital evidence; Data science; Computer security; Geography; Archaeology,,,,,,http://dx.doi.org/10.5769/j201401003,,10.5769/j201401003,,,0,,5,false,, 053-497-499-142-760,Dental diagnostic radiology in the forensic sciences: two case presentations.,,2007,journal article,The Journal of forensic odonto-stomatology,0258414x,International Organisation for Forensic Odonto-Stomatology,Sweden,K Nicopoulou-Karayianni; Anastasia Mitsea; Keith Horner,"Dentomaxillofacial radiology is a useful tool in forensic science to reveal characteristics of the structures of the dentomaxillofacial region. Postmortem radiographs are valuable to the forensic odontologist for comparison with antemortem radiographs, which are the most consistent part of the antemortem records that can be transmitted during forensic examination procedures. By using dentomaxillofacial radiology we can, therefore, give answers to problems dealing with identification cases, mass disasters and dental age estimation. We present the contribution of dentomaxillofacial radiology to the forensic sciences through two cases of deceased persons, where identification was based on information provided by radiographs. The right performance, interpretation and reportage of dentomaxillofacial radiological examination and procedures can be extremely valuable in solving forensic problems.",25,1,12,16,Radiology; Forensic science; Forensic dentistry; Forensic examination; Dental age; Radiological examination; Medicine,,"Dental Records; Facial Bones/anatomy & histology; Female; Forensic Dentistry/methods; Humans; Radiography, Dental, Digital; Radiography, Panoramic; Tooth/anatomy & histology",,,https://pubmed.ncbi.nlm.nih.gov/17577973/ https://www.ncbi.nlm.nih.gov/pubmed/17577973 http://europepmc.org/abstract/MED/17577973,https://www.ncbi.nlm.nih.gov/pubmed/17577973,17577973,,2413906786,,0,001-636-266-607-855; 005-367-404-789-996; 009-001-256-990-75X; 016-280-565-793-109; 018-416-669-363-552; 020-216-553-631-776; 022-922-971-618-903; 024-936-419-453-316; 034-078-504-700-961; 039-230-033-345-275; 064-700-443-343-475; 069-995-341-585-134; 070-016-442-289-143; 075-553-051-003-588; 079-286-134-668-19X,6,false,, 053-514-971-073-351,PRECEPT: a framework for ethical digital forensics investigations,2020-03-09,2020,journal article,Journal of Intellectual Capital,14691930,Emerald,United Kingdom,R.I. Ferguson; Karen Renaud; Sara Wilford; Alastair Irons,"This paper argues the need for a practical, ethically grounded approach to digital forensic investigations, one that acknowledges and respects the privacy rights of individuals and the intellectual capital disclosure rights of organizations, as well as acknowledging the needs of law enforcement. The paper derives a set of ethical guidelines, and then maps these onto a forensics investigation framework. The framework to expert review in two stages is subjected, refining the framework after each stage. The paper concludes by proposing the refined ethically grounded digital forensics investigation framework. The treatise is primarily UK based, but the concepts presented here have international relevance and applicability.,In this paper, the lens of justice theory is used to explore the tension that exists between the needs of digital forensic investigations into cybercrimes on the one hand, and, on the other, individuals' rights to privacy and organizations' rights to control intellectual capital disclosure.,The investigation revealed a potential inequality between the practices of digital forensics investigators and the rights of other stakeholders. That being so, the need for a more ethically informed approach to digital forensics investigations, as a remedy, is highlighted and a framework proposed to provide this.,The proposed ethically informed framework for guiding digital forensics investigations suggests a way of re-establishing the equality of the stakeholders in this arena, and ensuring that the potential for a sense of injustice is reduced.,Justice theory is used to highlight the difficulties in squaring the circle between the rights and expectations of all stakeholders in the digital forensics arena. The outcome is the forensics investigation guideline, PRECEpt: Privacy-Respecting EthiCal framEwork, which provides the basis for a re-aligning of the balance between the requirements and expectations of digital forensic investigators on the one hand, and individual and organizational expectations and rights, on the other.",21,2,257,290,Sociology; Relevance (law); Set (psychology); Right to privacy; Injustice; Precept; Law enforcement; Intellectual capital; Engineering ethics; Digital forensics,,,,,https://dora.dmu.ac.uk/handle/2086/18943 https://pureportal.strath.ac.uk/en/publications/precept-a-framework-for-ethical-digital-forensics-investigations https://rke.abertay.ac.uk/ws/files/23352644/Renaud_PRECEPT_Accepted_2019.pdf https://www.emerald.com/insight/content/doi/10.1108/JIC-05-2019-0097/full/pdf?title=precept-a-framework-for-ethical-digital-forensics-investigations https://dora.dmu.ac.uk/bitstream/2086/18943/1/PRECEPT%20A%20Framework%20for%20Ethical%20Digital%20Forensics%20Investigations.pdf https://rke.abertay.ac.uk/en/publications/precept-a-framework-for-ethical-digital-forensics-investigations https://strathprints.strath.ac.uk/75129/ https://www.emerald.com/insight/content/doi/10.1108/JIC-05-2019-0097/full/html https://sure.sunderland.ac.uk/id/eprint/12067/ https://core.ac.uk/download/287585744.pdf,http://dx.doi.org/10.1108/jic-05-2019-0097,,10.1108/jic-05-2019-0097,2997108533,,0,000-732-818-777-187; 001-135-038-170-705; 002-733-280-021-771; 003-923-093-358-17X; 004-031-611-327-668; 006-138-917-123-177; 006-322-634-212-786; 009-963-198-569-373; 010-760-969-054-219; 013-435-147-083-483; 014-261-775-435-338; 014-492-795-258-365; 014-531-291-102-198; 016-945-345-350-158; 017-805-463-199-729; 019-339-751-892-162; 019-505-819-376-748; 019-968-523-287-376; 021-850-998-857-676; 023-858-572-607-02X; 025-467-886-829-340; 026-774-296-742-022; 027-685-179-504-406; 029-168-311-729-15X; 029-447-091-073-102; 029-518-593-947-995; 030-045-112-792-346; 032-702-492-808-193; 035-742-523-393-097; 036-208-938-233-278; 036-414-888-400-142; 039-103-756-700-945; 041-331-434-774-438; 045-288-167-711-647; 046-328-032-388-440; 046-507-380-373-943; 047-630-600-014-492; 052-196-937-150-029; 062-164-597-894-73X; 062-325-585-829-185; 063-884-128-799-395; 064-387-058-206-177; 064-790-018-018-614; 067-060-814-542-833; 070-378-356-319-383; 072-922-481-935-635; 074-614-672-576-143; 074-875-398-814-107; 089-125-778-648-739; 089-621-912-811-772; 091-306-281-397-166; 092-415-226-886-724; 093-246-849-198-25X; 093-469-342-679-888; 098-686-518-644-578; 112-394-120-551-065; 114-090-829-194-843; 114-098-918-624-354; 116-749-161-883-299; 118-838-969-146-870; 127-651-023-065-320; 127-948-386-055-225; 131-695-373-839-786; 144-884-155-522-62X; 147-196-682-655-889; 148-218-390-171-795; 156-480-578-742-768; 159-450-168-937-396; 161-764-997-528-585; 162-110-149-751-921; 165-962-127-351-782; 179-608-372-698-452; 181-095-475-426-346,5,true,cc-by-nc,green 053-516-207-442-042,Forensic artefacts left by Windows Live Messenger 8.0,,2007,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Wouter S. Van Dongen,,4,2,73,87,World Wide Web; LifeCam; Conversation content; Instant messaging; Contact list; Left behind; Computer science; Microsoft Windows; Identification (information),,,,,https://dl.acm.org/doi/10.1016/j.diin.2007.06.019 https://dblp.uni-trier.de/db/journals/di/di4.html#Dongen07 https://dx.doi.org/10.1016/j.diin.2007.06.019 https://www.sciencedirect.com/science/article/pii/S1742287607000527 http://www.sciencedirect.com/science/article/pii/S1742287607000527,http://dx.doi.org/10.1016/j.diin.2007.06.019,,10.1016/j.diin.2007.06.019,2074963777,,0,064-315-291-643-901; 141-731-219-026-654,34,false,, 054-004-313-233-495,Requirements in digital forensics method definition : Observations from a UK study,,2018,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Angus M. Marshall; Richard F. Paige,"Abstract During a project to examine the potential usefulness of evidence of tool verification as part of method validation for ISO 17025 accreditation, the authors have examined requirements statements in several digital forensic method descriptions and tools. They have identified that there is an absence of clear requirements statements in the methods and a reluctance or inability to disclose requirements on the part of tool producers. This leads to a break in evidence of correctness for both tools and methods, resulting in incomplete validation. They compare the digital forensics situation with other ISO 17025 accredited organisations, both forensic and non-forensic, and propose a means to close the gap and improve validation. They also review existing projects which may assist with their proposed solution.",27,,23,29,Data science; Computer science; Correctness; Accreditation; Digital forensics,,,,University of York Research Priming Fund,https://dblp.uni-trier.de/db/journals/di/di27.html#MarshallP18 https://www.sciencedirect.com/science/article/pii/S1742287618302718 https://eprints.whiterose.ac.uk/137032/ https://core.ac.uk/download/199218336.pdf,http://dx.doi.org/10.1016/j.diin.2018.09.004,,10.1016/j.diin.2018.09.004,2890279224,,0,019-953-559-571-756; 029-459-233-206-184; 067-938-325-014-282; 142-790-196-752-819,23,true,cc-by-nc-nd,green 054-464-741-662-365,Forensic Footwear Imprint Examination using Adobe Photoshop Digital Imaging Software - A case study,,2017,journal article,International Journal of Criminal and Forensic Science,25763563,Biocore Group,,Ramakrishnan. P.N,,1,2,28,31,Digital imaging; Computer graphics (images); Engineering; Software; Adobe photoshop,,,,,http://dx.doi.org/10.25141/2576-3563-2017-2.0028,http://dx.doi.org/10.25141/2576-3563-2017-2.0028,,10.25141/2576-3563-2017-2.0028,2794362520,,0,,0,true,cc-by,gold 054-677-638-335-39X,Effective approaches to three-dimensional digital reconstruction of fragmented human skeletal remains using laser surface scanning,2020-07-31,2020,journal article,Forensic science international. Synergy,2589871x,Elsevier BV,Netherlands,Gargi Jani; Abraham Johnson; Utsav Parekh; Tim Thompson; Astha Pandey,"Abstract The preservation and reconstruction of anthropological and archaeological remains has been given considerable attention in recent years, particularly within the fields of forensic science and palaeoanthropology. However, few studies have tapped the potential of using 3D technology to reconstruct, remodel and recontour remains and artefacts for the purpose of human identification. The aim of this study was to use 3D technology for the reconstruction and remodelling of fragmented and missing elements of skeletal remains. This project presents the application of three dimensional (3D) modalities to two different simulated forensic case scenarios where an attempt was made to remodel the missing element of the human cranium and reconstruction of fragmented replicated human mandible was performed. The accuracy of the reconstructed model was affirmed based on the anatomical features and digital analysis and methods for use in forensic practice are recommended.",2,,215,223,Artificial intelligence; Forensic anthropology; Digitization; Digital reconstruction; Digital analysis; Surface scanning; 3d scanning; Computer vision; Computer science,3D printing; 3D scanning; Digital reconstruction; Digitization; Forensic anthropology,,,Gujarat Forensic Sciences University Student Startup Innovation Policy; Gujarat Forensic Sciences University; Institute of Forensic Science; GFSU-Student Startup Policy,https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7417899 https://europepmc.org/article/MED/32803150 https://www.sciencedirect.com/science/article/pii/S2589871X20300486,http://dx.doi.org/10.1016/j.fsisyn.2020.07.002,32803150,10.1016/j.fsisyn.2020.07.002,3046491710,PMC7417899,0,000-578-174-768-820; 002-372-825-803-01X; 002-757-600-778-594; 003-278-228-480-094; 006-036-539-291-490; 007-650-508-880-766; 011-675-439-503-507; 013-138-622-173-445; 015-123-182-480-038; 016-580-313-404-132; 018-826-363-640-555; 019-885-756-382-127; 023-014-879-325-49X; 024-123-842-118-517; 024-784-179-276-92X; 027-873-458-906-107; 029-518-894-016-342; 032-625-551-023-227; 032-707-982-696-465; 036-403-879-718-18X; 038-602-847-722-162; 042-141-941-221-562; 045-932-907-295-787; 045-977-597-761-939; 049-019-689-376-719; 053-139-478-467-996; 059-572-267-613-848; 063-606-720-330-852; 066-326-667-476-053; 073-189-364-637-601; 073-933-049-544-280; 077-136-183-426-035; 092-224-257-059-076; 092-305-346-660-757; 098-798-263-351-920; 110-494-921-167-835; 121-117-131-742-511; 136-115-119-862-890; 139-729-629-797-721; 151-494-162-718-970; 173-072-899-572-433; 178-456-110-092-227,6,true,"CC BY, CC BY-NC-ND",gold 054-695-153-476-302,Effects of heat on cut mark characteristics.,2016-12-21,2016,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Lukas Waltenberger; Holger Schutkowski,"Cut marks on bones provide crucial information about tools used and their mode of application, both in archaeological and forensic contexts. Despite a substantial amount of research on cut mark analysis and the influence of fire on bones (shrinkage, fracture pattern, recrystallisation), there is still a lack of knowledge in cut mark analysis on burnt remains. This study provides information about heat alteration of cut marks and whether consistent features can be observed that allow direct interpretation of the implemented tools used. In a controlled experiment, cut marks (n=25) were inflicted on pig ribs (n=7) with a kitchen knife and examined using micro-CT and digital microscopy. The methods were compared in terms of their efficacy in recording cut marks on native and heat-treated bones. Statistical analysis demonstrates that floor angles and the maximum slope height of cuts undergo significant alteration, whereas width, depth, floor radius, slope, and opening angle remain stable. Micro-CT and digital microscopy are both suitable methods for cut mark analysis. However, significant differences in measurements were detected between both methods, as micro-CT is less accurate due to the lower resolution. Moreover, stabbing led to micro-fissures surrounding the cuts, which might also influence the alteration of cut marks.",271,,49,58,Geology; Surgery; Geometry; Digital microscopy; Rib trauma; Controlled experiment; Statistical analysis; Pig model; Lack of knowledge; Maximum slope; Fracture (geology),Burnt bones; Digital microscopy; Micro-CT; Pig model; Rib trauma; Stab wounds,,,Bournemouth University,http://www.sciencedirect.com/science/article/pii/S0379073816305503 https://www.sciencedirect.com/science/article/pii/S0379073816305503 https://pubmed.ncbi.nlm.nih.gov/28064062/ https://core.ac.uk/display/74204621 http://eprints.bournemouth.ac.uk/26182/ https://europepmc.org/article/MED/28064062 https://www.ncbi.nlm.nih.gov/pubmed/28064062 https://core.ac.uk/download/74204621.pdf,http://dx.doi.org/10.1016/j.forsciint.2016.12.018,28064062,10.1016/j.forsciint.2016.12.018,2565872326,,0,000-108-996-392-520; 000-998-063-297-449; 001-675-900-303-384; 001-687-786-820-318; 001-990-603-964-573; 004-142-451-345-817; 004-484-517-329-562; 005-057-465-773-847; 006-511-373-626-480; 007-059-931-241-63X; 009-554-467-261-282; 010-773-595-260-378; 011-882-289-849-087; 012-186-792-314-466; 014-142-719-593-954; 014-837-713-239-39X; 015-519-376-730-825; 016-580-313-404-132; 018-645-968-236-085; 018-933-641-212-221; 019-481-139-868-788; 021-146-064-686-392; 023-777-344-613-386; 026-552-234-472-780; 027-944-018-048-917; 028-396-621-844-004; 030-495-856-533-96X; 032-321-109-913-814; 035-127-053-238-847; 035-935-550-698-057; 039-281-224-005-214; 039-413-309-580-607; 042-338-732-329-680; 044-396-434-433-453; 047-837-191-759-378; 048-313-297-214-359; 050-221-079-558-35X; 052-508-178-196-965; 053-650-463-239-366; 054-546-262-079-550; 054-578-830-230-471; 055-210-504-415-973; 057-910-790-912-62X; 059-009-122-890-26X; 060-011-627-926-078; 060-618-800-681-547; 061-418-714-208-315; 061-691-602-324-001; 071-424-286-096-727; 071-537-440-452-939; 075-765-502-342-883; 076-734-079-906-454; 078-158-280-114-766; 080-385-427-778-383; 081-321-608-397-030; 081-675-964-098-588; 083-454-854-320-735; 087-827-705-010-228; 090-060-530-956-042; 098-537-562-534-115; 099-470-286-031-097; 107-074-421-143-299; 107-248-348-567-26X; 107-856-856-476-523; 108-325-685-279-536; 109-759-140-568-826; 110-619-794-879-421; 111-270-688-409-896; 111-753-874-986-618; 112-247-873-214-944; 114-225-270-990-368; 116-536-637-622-766; 120-110-349-943-641; 121-045-866-551-871; 127-838-054-590-080; 128-627-267-922-815; 129-506-735-674-628; 129-795-443-126-703; 130-893-373-251-617; 134-323-232-860-989; 134-744-534-676-197; 135-496-405-143-18X; 142-137-336-737-054; 147-955-192-206-68X; 149-499-210-514-560; 150-497-776-830-390; 159-205-072-070-821; 182-278-758-425-798,17,true,cc-by-nc-nd,hybrid 055-086-544-213-027,Analisis Kelayakan Integrated Digital Forensics Investigation Framework Untuk Investigasi Smartphone,2016-10-25,2016,journal article,Jurnal Buana Informatika,20897642; 20872534,Universitas Atma Jaya Yogyakarta,,Ruuhwan Ruuhwan; Riadi; Yudi Prayudi,"Abstract. The handling of digital evidence each and every digital data that can proof a determination that a crime has been committed; it may also give the links between a crime and its victims or crime and the culprit. How to verify a valid evidence is to investigate using the approach known as the Digital Forensic Examination Procedures. Integrated Digital Forensic Investigation Framework (IDFIF) is the latest developed method, so that it is interesting to further scrutinize IDFIF, particularly in the process of investigation of a smartphone. The current smartphone devices have similar functions with computers. Although its functions are almost the same as the computer, but there are some differences in the process of digital forensics handling between computer devices and smartphones. The digital evidence handling process stages need to overcome the circumstances that may be encountered by an investigator involving digital evidence particularly on electronic media and smartphone devices in the field. IDFIF needs to develop in such a way so it has the flexibility in handling different types of digital evidence. Keywords: digital evidence, IDFIF, investigation, smartphone Abstraks. Penanganan bukti digital mencakup setiap dan semua data digital yang dapat menjadi bukti penetapan bahwa kejahatan telah dilakukan atau dapat memberikan link antara kejahatan dan korbannya atau kejahatan dan pelakunya. Cara pembuktian untuk mendapatkan bukti valid adalah dengan melakukan investigasi dengan pendekatan Prosedur Pemeriksaan Digital Forensic. Integrated Digital Forensics Investigation Framework (IDFIF) merupakan metode terbaru sehingga IDFIF ini menarik untuk diteliti lebih lanjut terutama dalam proses investigasi smartphone. Saat ini perangkat smartphone memiliki fungsi yang sama dengan komputer. Meskipun demikian, ada beberapa perbedaan dalam proses penanganan digital forensics diantara perangkat komputer dan smartphone. Tahapan proses penanganan barang bukti digital seharusnya dibuat untuk mengatasi keadaan umum yang mungkin dihadapi oleh investigator yang melibatkan barang bukti digital terutama pada perangkat smartphone dan media elektronik terkait di lapangan. IDFIF perlu dikembangkan sehingga memiliki fleksibilitas dalam menangani berbagai jenis barang bukti digital. Kata Kunci: bukti digital, IDFIF, investigasi, smartphone",7,4,77775,,,,,,,https://www.neliti.com/publications/77775/analisis-kelayakan-integrated-digital-forensics-investigation-framework-untuk-in https://core.ac.uk/download/pdf/268157138.pdf,http://dx.doi.org/10.24002/jbi.v7i4.767,,10.24002/jbi.v7i4.767,2558693854,,0,,2,true,, 055-628-715-083-217,COMPARATIVE DIGITAL FORENSIC MODEL,,2013,journal article,"International Journal of Innovative Research in Science, Engineering and Technology",23476710,,,Nilakshi Jain,"The computer forensic is the about evidence finding from computer or services using its reliability and justification which can be proved in court or in management. To accomplish this task various digital forensic model has been introduced till now. The proposed model ,Comparative Digital Forensic Model (CDFM) provides the authenticate evidence using less efforts because it based on required output only. Initially all models has been reviewed and listed advantages and disadvantages of all finally the CDFM has been developed, using that model very initial user can also understand the basic concept of digital forensic model.",2,8,3414,3419,Data mining; Data science; Task (project management); Computer science; Reliability (statistics); Digital forensics,,,,,https://www.rroij.com/open-access/comparative-digital-forensic-model.pdf https://www.omicsonline.org/peer-reviewed/comparative-digital-forensic-model-46459.html https://www.rroij.com/open-access/comparative-digital-forensic-model-.php?aid=46459 http://ijirset.com/upload/august/6_COMPARATIVE.pdf https://ijirset.com/upload/august/6_COMPARATIVE.pdf,https://www.omicsonline.org/peer-reviewed/comparative-digital-forensic-model-46459.html,,,2188909317,,0,004-706-447-836-905; 032-697-093-668-898; 035-223-520-491-228; 065-452-675-566-99X; 067-950-012-629-210; 133-397-275-695-990; 170-299-458-679-224; 183-000-233-873-221; 199-745-676-923-766,3,false,, 055-778-828-584-716,A Local Perturbation Generation Method for GAN-generated Face Anti-forensics,,2022,journal article,IEEE Transactions on Circuits and Systems for Video Technology,10518215; 15582205,Institute of Electrical and Electronics Engineers (IEEE),United States,Haitao Zhang; Beijing Chen; Jinwei Wang; Guoying Zhao,"Although the current generative adversarial networks (GAN)-generated face forensic detectors based on deep neural networks (DNNs) have achieved considerable performance, they are vulnerable to adversarial attacks. In this paper, an effective local perturbation generation method is proposed to expose the vulnerability of state-of-the-art forensic detectors. The main idea is to mine the fake faces’ areas of common concern in multiple-detectors’ decision-making, then generate local anti-forensic perturbations by GANs in these areas to enhance the visual quality and transferability of anti-forensic faces. Meanwhile, in order to improve the anti-forensic effect, a double-mask (soft mask and hard mask) strategy and a three-part loss (the GAN training loss, the adversarial loss consisting of ensemble classification loss and ensemble feature loss, and the regularization loss) are designed for the training of the generator. Experiments conducted on fake faces generated by StyleGAN demonstrate the proposed method’s advantage over the state-of-the-art methods in terms of anti-forensic success rate, imperceptibility, and transferability. The source code is available at https://github.com/imagecbj/A-Local-Perturbation-Generation-Method-for-GAN-generated-Face-Anti-forensics.",,,1,1,,,,,National Natural Science Foundation of China; Priority Academic Program Development of Jiangsu Higher Education Institutions,,http://dx.doi.org/10.1109/tcsvt.2022.3207310,,10.1109/tcsvt.2022.3207310,,,0,,0,false,, 055-850-708-817-574,Classification of condom lubricants in cyanoacrylate treated fingerprints by desorption electrospray ionization mass spectrometry.,2019-10-23,2019,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Ward van Helmond; Mark P.V. Begieneman; Roos Kniest; Marcel de Puit,"Traces of condom lubricants in fingerprints can be valuable information in cases of sexual assault. Ideally, not only confirmation of the presence of the condom but also determination of the type of condom brand used can be retrieved. Previous studies have shown to be able to retrieve information about the condom brand and type from fingerprints containing lubricants using various analytical techniques. However, in practice fingerprints often appear latent and need to be detected first, which is often achieved by cyanoacrylate fuming. In this study, we developed a desorption electrospray ionization mass spectrometry (DESI-MS) method which, combined with principal component analysis and linear discriminant analysis (PCA-LDA), allows for high accuracy classification of condom brands and types from fingerprints containing condom lubricant traces. The developed method is compatible with cyanoacrylate (CA) fuming. We collected and analyzed a representative dataset for the Netherlands comprising 32 different condoms. Distinctive lubricant components such as polyethylene glycol (PEG), polydimethylsiloxane (PDMS), octoxynol-9 and nonoxynol-9 were readily detected using the DESI-MS method. Based on the analysis of lubricant spots, a 99.0% classification accuracy was achieved. When analyzing lubricant containing fingerprints, an overall accuracy of 90.9% was obtained. Full chemical images could be generated from fingerprints, showing the distribution of lubricant components such as PEG and PDMS throughout the fingerprint, while still allowing for classification. The developed method shows potential for the development of DESI-MS based analyses of CA treated exogenous compounds from fingerprints for use in forensic science.",305,,110005,110005,Materials science; Fingerprint; Mass spectrometry imaging; Cyanoacrylate; Condom; Polydimethylsiloxane; Lubricant; Desorption electrospray ionization mass spectrometry; Sexual assault; Chromatography,DESI-MSI; Linear discriminant analysis; Mass Spectrometry Imaging; Polydimethylsiloxane; Polyethylene glycol; Principal component analysis,"Condoms; Cyanoacrylates; Dermatoglyphics; Discriminant Analysis; Female; Forensic Sciences/methods; Humans; Lubricants; Male; Principal Component Analysis; Spectrometry, Mass, Electrospray Ionization",Cyanoacrylates; Lubricants,RAAK-PRO,https://pubmed.ncbi.nlm.nih.gov/31698202/ https://europepmc.org/article/MED/31698202 https://www.narcis.nl/publication/RecordID/oai%3Ahbokennisbank.nl%3Aamsterdam_pure%3Aoai%3Apure.hva.nl%3Apublications%2Fcfff722d-2808-448e-b6ed-623290a7919a https://pure.hva.nl/ws/files/6300003/1_s2.0_S0379073819304177_main.pdf https://www.ncbi.nlm.nih.gov/pubmed/31698202 https://www.sciencedirect.com/science/article/abs/pii/S0379073819304177 https://www.sciencedirect.com/science/article/pii/S0379073819304177,http://dx.doi.org/10.1016/j.forsciint.2019.110005,31698202,10.1016/j.forsciint.2019.110005,2981989508,,0,000-285-099-393-491; 002-793-326-918-774; 002-980-276-226-545; 003-266-761-510-484; 004-580-102-668-685; 008-240-408-546-917; 009-374-183-784-702; 016-357-056-768-290; 020-490-326-818-380; 023-505-969-658-462; 026-040-135-902-360; 027-939-880-114-497; 028-602-499-780-370; 029-843-011-931-926; 034-951-959-662-643; 037-495-227-222-506; 049-698-939-529-843; 056-480-694-751-105; 063-298-044-036-84X; 064-817-506-471-028; 066-932-894-333-116; 068-940-422-326-228; 075-136-991-324-974; 077-029-191-854-378; 081-353-848-857-282; 081-606-224-851-977; 089-551-247-070-087; 090-686-911-968-180; 095-030-092-078-511; 099-691-059-383-497; 104-652-957-936-089; 107-786-142-687-352; 130-465-290-887-942; 139-193-764-999-753; 142-363-110-824-417; 177-728-696-175-993,5,true,cc-by-nc-nd,hybrid 055-910-009-096-124,Historical Development of Forensic Pathology in the United States.,,2012,journal article,Korean Journal of Legal Medicine,12250589; 22872078,The Korean Society for Legal Medicine (KAMJE),,Tae Choo; Young Shik Choi,"Forensic pathology has become an essential part of today’s crime investigation. With advanced technology and science, forensic pathology provides vital information and evidence. Considering the critical role of forensic pathology in solving crimes and prosecuting offenders, it is time to draw more attention to this relatively unfamiliar topic. As the first step to understanding the ever evolving field of forensic pathology, I examine the historical development of forensic pathology focusing on its role in crime investigation and its technological advancement. Forensic pathology is sometimes misinterpreted as synonymous with forensic science. The word “forensic”is derived from the Latin forum which means “public,” and pathology comes from the Greek word for “suffering.”In addition, pathology is “a system of knowledge used to draw conclusions about illness.” Forensic pathology is a part of a broader field called forensic science. Forensic science is comprised of a group of scientific disciplines that play a significant role in criminal, legal, and civil matters by answering specific questions in these arenas through the application of medical facts and scientific and technical knowledge. According to the American Academy of Forensic Sciences, there are eleven primary disciplines in the field of forensics: criminalistics, digital & multimedia sciences, engineering sciences, general, jurisprudence, odontology (science of teeth), pathology/biology, physical anthropology, psychiatry & behavioral",36,1,15,21,Forensic science; Medical examiner; Coroner; Forensic pathology; Crime investigation; Scientific disciplines; Technological advance; Engineering ethics; Jurisprudence; Medicine,,,,,https://synapse.koreamed.org/upload/SynapseData/PDFData/0018kjlm/kjlm-36-15.pdf https://synapse.koreamed.org/articles/1004680 https://www.kjlm.or.kr/journal/view.php?number=354,http://dx.doi.org/10.7580/koreanjlegmed.2012.36.1.15,,10.7580/koreanjlegmed.2012.36.1.15,2092763602,,0,021-169-875-163-36X; 021-607-121-913-993; 024-481-844-793-073; 039-985-526-786-015; 054-994-474-108-703; 056-825-310-242-100; 061-581-726-435-902; 066-933-343-234-255; 075-038-140-773-537; 093-571-071-799-933; 100-226-961-489-480; 114-791-371-428-899; 145-215-394-374-829; 149-904-227-653-82X; 174-416-251-882-431,10,false,, 055-967-961-527-254,Forensic acquisition and analysis of the Random Access Memory of TomTom GPS navigation systems,,2010,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Onno Van Eijk; Mark Roeloffs,,6,3,179,188,Link time; Position (vector); Point (typography); Navigation system; Memory analysis; Gps navigation; Random access memory; Computer science; Global Positioning System; Computer hardware,,,,,https://dblp.uni-trier.de/db/journals/di/di6.html#EijkR10 https://dl.acm.org/doi/10.1016/j.diin.2010.02.005 https://doi.org/10.1016/j.diin.2010.02.005 https://www.sciencedirect.com/science/article/abs/pii/S1742287610000137 http://www.sciencedirect.com/science/article/pii/S1742287610000137,http://dx.doi.org/10.1016/j.diin.2010.02.005,,10.1016/j.diin.2010.02.005,2026585727,,0,016-046-803-187-724; 017-815-064-018-299; 048-778-071-128-829; 063-377-383-491-594; 138-536-347-561-908,15,false,, 056-406-725-646-266,Analisis Bukti Digital pada Storage Secure Digital Card Menggunakan Metode Static Forensic,2019-11-20,2019,journal article,Mobile and Forensics,27146685; 26566257,Universitas Ahmad Dahlan,,Muh Fadli Hasa; Anton Yudhana; Abdul Fadlil,"Secure Digital Card (SD Card)  merupakan salah satu media untuk mendapatkan bukti digital dalam proses penyelidikan suatu kasus  cybercrime . Oleh kerena itu, perlu adanya penelitian tentang analisa bukti digital pada media penyimpanan  SD Card . Penelitian ini membahas tentang proses eksaminasi dan analisis bukti digital yang terdapat pada media penyimpanan  SD Card  yang bertujuan untuk membantu proses penyelidikan kasus  cybercrime . Proses penelitian menggunakan  tools forensic FTK Imager  dan  Autopsy  serta menggunakan  metode  forensic static  dimana barang bukti eletronik diproses secara  bit-by-bit image  dalam melakukan proses forensik.  Hasil dari penelitian ini adalah barang bukti yang berupa  SD Card  dilakukan proses  examinasi  dan  recovery  data yang hilang, data yang berhasil di  recovery  dibedakan berdasarkan cara pelaku menghapus datanya.  Data yang didapatkan pada  SD Card  dapat dijadikan sebagai barang bukti pada proses persidangan kasus  cybercrime .",1,2,76,84,,,,,,http://journal2.uad.ac.id/index.php/mf/article/view/1217 http://journal2.uad.ac.id/index.php/mf/article/download/1217/pdf https://core.ac.uk/download/pdf/267886817.pdf,http://dx.doi.org/10.12928/mf.v1i2.1217,,10.12928/mf.v1i2.1217,2992134555,,0,,1,true,cc-by-sa,gold 056-480-557-714-922,Modeling Network Forensics Behavior,,2006,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Wei Ren,"ABSTRACT Network forensics is a new approach to network security. However, this field is not very clear to new researchers and practitioners. In this paper, we discuss network forensics behavior systematically from both the technical view and legal view. The goal of this discussion is to outline the formalization and standardization of network forensics behavior. To our knowledge, this is the first comprehensive discussion of the network forensics model and its fundamental concepts, such as taxonomy, conceptual model, legal principles, key techniques, canonical processes and its accessory facilities and systems: network forensics architecture and deployment. These discussions will offer guidance to the standardization of network forensics processes and the implementation of prototype systems that can be used in digital forensic practice.",1,1,57,65,Systems modeling; Conceptual model; World Wide Web; Network security; Standardization; Data science; Intrusion detection system; Computer science; Network forensics; Computer forensics; Digital forensics,,,,,https://www.tandfonline.com/doi/abs/10.1080/15567280600631932 https://dblp.uni-trier.de/db/journals/jdfp/jdfp1.html#Ren06,http://dx.doi.org/10.1080/15567280600631932,,10.1080/15567280600631932,2015652442,,0,,6,false,, 056-522-627-812-660,Visual Computing and Machine Learning Techniques for Digital Forensics,2015-05-18,2015,journal article,Revista de Informática Teórica e Aplicada,21752745; 01034308,Universidade Federal do Rio Grande do Sul,,Tiago Carvalho; Helio Pedrini; Anderson Rocha,"It is impressive how fast science has improved day by day in so many different fields. In special, technology advances are shocking so many people bringing to their reality facts that previously were beyond their imagination. Inspired by methods earlier presented in scientific fiction shows, the computer science community has created a new research area named Digital Forensics, which aims at developing and deploying methods for fighting against digital crimes such as digital image forgery.This work presents some of the main concepts associated with Digital Forensics and, complementarily, presents some recent and powerful techniques relying on Computer Graphics, Image Processing, Computer Vision and Machine Learning concepts for detecting forgeries in photographs. Some topics addressed in this work include: source attribution, spoofing detection, pornography detection, multimedia phylogeny, and forgery detection. Finally, this work highlights the challenges and open problems in Digital Image Forensics to provide the readers with the myriad opportunities available for research.",22,1,128,153,Machine learning; Artificial intelligence; Spoofing attack; Visual computing; Pornography; Computer science; Digital image; Multimedia; Computer forensics; Computer graphics; Digital forensics; Image processing,,,,,https://seer.ufrgs.br/rita/article/view/RITA-VOL22-NR1-128 https://seer.ufrgs.br/rita/article/download/RITA-VOL22-NR1-128/33866 https://core.ac.uk/download/303970495.pdf,http://dx.doi.org/10.22456/2175-2745.49492,,10.22456/2175-2745.49492,1859651454,,0,,2,true,cc-by-nc-nd,gold 056-715-378-869-201,Engineering an online computer forensic service,,2012,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,R.A.F. Bhoedjang; A. R. Van Ballegooij; H.M.A. van Beek; J.C. van Schie; Feike W. Dillema; R.B. van Baar; F.A. Ouwendijk; M. Streppel,,9,2,96,108,World Wide Web; Forensic science; Software as a service; Law enforcement; Digital evidence; Service (systems architecture); Computer science; Computer forensics; Digital forensics; User interface,,,,,http://dx.doi.org/10.1016/j.diin.2012.10.001 https://www.sciencedirect.com/science/article/pii/S1742287612000655 https://dblp.uni-trier.de/db/journals/di/di9.html#BhoedjangBBSDBOS12,http://dx.doi.org/10.1016/j.diin.2012.10.001,,10.1016/j.diin.2012.10.001,2036428903,,0,005-116-312-278-527; 024-735-069-822-749; 029-569-577-474-673; 033-241-817-699-448; 033-877-222-136-260; 092-614-171-723-187; 104-758-205-558-797; 118-513-636-363-038; 174-800-010-429-560,28,false,, 056-760-246-560-467,Digital Forensics Techniques Overview,2020-06-15,2020,journal article,Bulletin of Science and Practice,24142948,Publishing Center Science and Practice,,A. Vatsenko,"This article discusses the important issue of the use of forensic technology in computer forensics. The basic techniques of computer forensics existing today, such as real-time tracking, sandboxing, data and password recovery, and so on, are examined. The advantages and disadvantages of existing methods are given and recommendations are made on the development of computer forensics techniques in the future. Conclusions are drawn up on the problem of using forensic technology in computer forensics.",6,6,167,174,Computer science; Multimedia; Digital forensics,,,,,http://dx.doi.org/10.33619/2414-2948/55/21,http://dx.doi.org/10.33619/2414-2948/55/21,,10.33619/2414-2948/55/21,3034267720,,0,080-646-163-420-97X,0,true,,gold 056-772-951-594-695,A survey on digital camera identification methods,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Jarosław Bernacki,,34,,300983,,System identification; Artificial intelligence; Digital camera; Scanner; Identification methods; Computer vision; Computer science; Image sensor; Identification (information); Convolutional neural network; Digital forensics,,,,,https://www.sciencedirect.com/science/article/abs/pii/S2666281720300536,http://dx.doi.org/10.1016/j.fsidi.2020.300983,,10.1016/j.fsidi.2020.300983,3043385148,,0,000-306-680-140-21X; 000-616-206-600-091; 002-396-286-701-554; 003-386-036-604-847; 004-244-613-184-161; 005-583-670-835-138; 007-040-888-672-003; 007-692-957-904-44X; 010-325-503-542-986; 010-456-752-342-66X; 010-747-424-176-877; 011-291-694-500-933; 012-412-270-035-761; 012-831-587-733-644; 013-209-141-298-955; 015-081-428-851-896; 015-350-463-259-41X; 015-717-506-603-742; 022-360-797-551-835; 022-525-316-440-329; 024-361-797-531-399; 026-290-088-195-051; 027-325-543-720-123; 028-364-359-341-316; 030-393-291-334-527; 030-771-390-917-109; 031-691-974-382-167; 031-858-957-893-83X; 038-345-815-717-313; 039-343-260-416-687; 040-802-087-826-847; 044-914-554-944-765; 045-226-923-439-105; 046-818-423-729-611; 047-041-514-008-293; 049-846-693-001-150; 050-312-325-568-750; 050-417-241-606-669; 051-204-718-024-656; 054-417-000-110-430; 055-101-648-072-719; 059-149-073-001-124; 063-116-795-629-582; 063-504-721-532-205; 065-544-349-079-991; 067-913-828-134-760; 069-847-568-544-420; 070-845-448-634-612; 072-715-374-019-55X; 073-233-361-714-785; 074-378-248-247-330; 075-009-191-029-203; 077-218-726-181-521; 084-651-759-924-070; 087-814-787-159-954; 088-181-508-364-285; 088-467-907-853-194; 089-547-267-411-182; 090-717-555-125-134; 091-492-177-865-216; 093-581-897-523-764; 102-096-005-133-302; 102-514-431-944-641; 102-561-386-891-641; 104-397-600-240-163; 104-629-870-444-377; 104-740-736-079-677; 110-214-841-105-125; 116-388-085-562-969; 119-070-738-216-289; 122-039-039-409-279; 122-912-050-557-786; 130-547-183-065-459; 134-035-857-506-713; 136-294-397-714-798; 138-845-490-726-989; 143-793-077-455-213; 143-797-155-020-230; 145-074-262-530-66X; 148-763-794-558-420; 151-372-268-187-893; 155-074-178-700-550; 173-031-985-087-572; 179-834-398-565-338; 180-088-494-514-913; 184-897-235-429-285,9,false,, 056-834-872-473-423,Possibilities of use of digital imaging in forensic medicine,,2005,journal article,Soudni lekarstvi,03711854,Statni Zdravotnicke Naklad,Czech Republic,Gaval'a P; Ivicsics I; Mlynár J; Novomeský F,"Based on the daily practice with digital photography and documentation, the authors point out the achievements of the computer technologies implementation to the practice of forensic medicine. The modern methods of imaging, especially the digital photography, offer a wide spectrum of use in forensic medicine--the digital documentation and archivation of autopsy findings, the possibility of immediate consultation of findings with another experts via Internet, and many others. Another possibility is a creation of digital photographic atlas of forensic medicine as a useful aid in pre- and postgradual study. Thus the application of the state-of-the-art computer technologies to the forensic medicine discloses the unknown before possibilities for further development of such a discipline of human medical sciences.",50,3,45,49,The Internet; Digital imaging; Digital photography; Point (typography); Data science; Digital documentation; Daily practice; Documentation,,Autopsy; Forensic Medicine; Humans; Medical Informatics; Photography,,,https://www.ncbi.nlm.nih.gov/pubmed/16161524,https://www.ncbi.nlm.nih.gov/pubmed/16161524,16161524,,63063485,,0,,0,false,, 057-364-465-490-560,Cloud Forensics Issues and Opportunities,2013-06-30,2013,journal article,International Journal of Information Processing and Management,20934009; 2233940x,AICIT,South Korea,Asou Aminnezhad; Ali Dehghantanha; Mohd Taufik Abdullah; Mohsen Damshenas,"Cloud computing technology is a rapidly growing field of study, which relies on sharing computing resources rather than having local servers or personal devices to handle applications. Most of the growth in this field is due to transfer of the traditional model of IT services to a novel model of cloud and the ubiquity of access to electronic and digital devices. Cloud computing posed a critical risk and challenges to digital investigators, but provides plenty of opportunities to investigators for improving the digital forensics. Moreover, cloud service providers and customers have yet to establish adequate forensic capabilities that could support investigations of criminal activities in the cloud. Notwithstanding the cloud presents some promising technical and economic benefits, users still resist to use cloud mainly due to security issues because it poses a challenge in doing cloud forensic investigations. Regarding this some research has been done, which propose solutions in doing forensic investigation. In this review paper, we take the first step towards reviewing the cloud forensics works that have been done by other researchers, and then do some discussion and analysis based on our findings to consider the opportunities and challenges confront the cloud forensics based on our findings.",4,4,76,85,Cloud computing security; Cloud service provider; Economic benefits; Cloud forensics; Field (computer science); Computer security; Computer science; Cloud computing; Digital forensics; Server,,,,,http://ui.adsabs.harvard.edu/abs/2013JIPM....4d..76A/abstract http://psasir.upm.edu.my/id/eprint/30593/,http://dx.doi.org/10.4156/ijipm.vol4.issue4.9,,10.4156/ijipm.vol4.issue4.9,2070117955,,0,000-087-695-314-553; 002-919-172-026-239; 003-021-184-147-818; 003-148-232-365-149; 005-204-756-049-67X; 011-972-444-921-827; 012-290-824-140-617; 012-854-263-903-477; 014-299-240-901-551; 014-843-854-619-370; 015-264-924-343-905; 019-503-212-220-967; 021-081-859-033-024; 026-641-935-890-517; 029-556-786-638-555; 033-418-529-263-94X; 042-165-465-546-038; 043-424-400-377-990; 049-510-490-983-722; 052-627-684-302-558; 055-298-070-090-639; 057-421-097-368-120; 061-477-759-295-707; 063-600-821-499-481; 066-945-659-705-381; 075-976-616-114-109; 082-965-731-295-793; 085-438-282-926-16X; 094-182-197-652-715; 095-691-114-276-825; 095-748-218-155-627; 100-025-452-820-357; 117-614-574-133-806; 128-881-441-058-633; 139-329-225-400-799; 144-786-887-819-307; 151-880-166-357-012; 155-855-942-114-621; 162-255-141-911-414; 170-108-067-251-840; 170-861-593-468-599; 171-963-418-428-032; 174-154-493-004-474; 178-826-143-807-810; 181-095-475-426-346; 195-136-336-597-694,17,false,, 057-366-982-589-875,Reliability assessment of digital forensic investigations in the Norwegian police,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Radina Stoykova; Stig Andersen; Katrin Franke; Stefan Axelsson,"This case study presents a qualitative assessment of the reliability of digital forensic investigation in criminal cases in Norway. A reliability validation methodology based on international digital forensic standards was designed to assess to what extent those standards are implemented and followed by law enforcement in their casework. 124 reports related to the acquisition, examination, and analysis of three types of digital data sources - computers, mobile phones, and storage devices were examined. The reports were extracted from the criminal case management system used by the police and prosecution services. The reports were examined on technology, method, and application level in order to assess the reliability of digital evidence for criminal proceedings. The study found that digital forensic investigation in 21 randomly sampled criminal cases in Norway were insufficiently documented to assess the reliability of the digital evidence. It was not possible to trace the digital forensic actions performed on each item or link the digital evidence to its source. None of the cases were shown to comply with digital forensic methodology, justify the methods and tools used, or validate tool results and error rates. • Digital forensic investigation in 21 randomly sampled criminal cases in Norway were insufficiently documented to assess the reliability of the digital evidence. • It was not possible to trace the digital forensic actions performed on each item or link the digital evidence to its source. • None of the cases were shown to comply with digital forensic methodology, justify the methods and tools used, or validate tool results.",40,,301351,301351,Digital evidence; Digital forensics; Reliability (semiconductor); Forensic science; Criminal investigation; Law enforcement; Computer science; Computer forensics; Computer security; Data science,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301351,,10.1016/j.fsidi.2022.301351,,,0,004-441-167-148-170; 009-512-003-529-193; 017-779-541-978-693; 017-840-378-634-021; 026-774-296-742-022; 041-061-538-346-924; 054-004-313-233-495; 056-307-204-167-258; 061-269-967-405-492; 075-950-021-558-098; 083-748-342-549-230; 088-502-605-341-215; 111-488-239-742-003,1,true,,hybrid 057-367-615-113-263,Morphometric variations of nasal parameters in gujarati population: An anatomical study,,2020,journal article,Journal of the Anatomical Society of India,00032778,Medknow,India,Abraham Johnson; M. M. Rohith; Jyotirmoy Roy,"Introduction: Nasal morphology is an important factor in forensic investigations and facial reconstructive procedures. Found to be strongly related to ethnicity and environmental factors, and known to be sexually dimorphic, the study of nasal parameters is useful in forensic facial reconstruction. The aim of the study is to evaluate the nasal morphological characteristics of the Gujarati population as an indicator for personal identification and to assess the prevalent nasal morphology of the study population determined. Material and Methods: The study involved randomly selected 180 healthy subjects (90 males and 90 females) between three age groups. Nasal width and nasal height were measured using a digital vernier caliper, and nasal index was calculated along with other parameters. The data were statistically analyzed. Results: The mean nasal width for male and female was 38.23 mm and 34.94 mm while the mean nasal height was 47.59 mm and 44.35 mm, respectively. The mean nasal index for male subjects (81.08) was also higher than for female subjects (77.30). The morphological classification showed the mesorrhine nose type as the most prevalent among both the males (58.88%) and females (66.66%). Discussion and Conclusion: The population under the study exhibits mesorrhine type of the nose and shows sexual dimorphism in the values of nasal measurements. Thus, the current study is valuable not only in forensic facial reconstruction but also as an added method for determining the gender and ethnicity of an unidentified individual.",69,3,127,,Sexual dimorphism; Calipers; Nose; Forensic facial reconstruction; Forensic identification; Population; Orthodontics; Anthropometry; Population study; Medicine,,,,,https://www.jasi.org.in/article.asp?issn=0003-2778;year=2020;volume=69;issue=3;spage=127;epage=132;aulast=Rohith http://www.jasi.org.in/article.asp?issn=0003-2778;year=2020;volume=69;issue=3;spage=127;epage=132;aulast=Rohith;type=0,http://dx.doi.org/10.4103/jasi.jasi_139_19,,10.4103/jasi.jasi_139_19,3093257651,,0,028-967-434-385-558; 054-611-811-964-586,0,false,, 057-464-433-580-893,Special Edition on Policing (at) the ESC - Perspectives from the Lausanne School of Criminal JusticeCombining Forensic Science and Criminology to Foster Innovation in Policing,2018-01-30,2018,journal article,Policing: A Journal of Policy and Practice,17524512; 17524520,Oxford University Press (OUP),United Kingdom,Céline Weyermann; Manon Jendly; Quentin Rossy,"Dear Policing readers, we present to you a very special issue of the journal exclusively written by scientists and practitioners from the School of Criminal Justice of Lausanne, known as the Ecole des sciences criminelles (ESC) in French. You will discover a diversity of contributions combining disciplines dedicated to the study of crimes: forensic science, focusing on physical and digital traces to reconstruct events, and criminology, interested in behaviours, actors and social reactions; both contributing to policing. ; ; Several keywords and concepts define the rapid evolution of our society, of the different harms that come upon it and the (re)actions to prevent them from happening. As guest co-editors of this special issue, we wanted to address them through an interdisciplinary problem-based approach, addressing an increasingly digitalised world, with which academic and police institutions have difficulty to keep pace. The need to improve empirical methods around both physical and massively generated digital traces is particularly highlighted. Confronted to a huge amount of existing data, the question of how to handle big data and privacy arises in policing. On the one hand, we strive to collect or use as much data as possible to detect, identify, analyse and solve crime problems. On the other hand, the relevant information is often hidden in the mass. Thus, the general idea should not be to collect more data, but to find the reliable and relevant data to extract useful information. Case studies are discussed to illustrate how police investigation and management can combine physical and digital traces to improve the detection, resolution and prevention of (cyber)crime phenomena. ; ; Data and traces are not the sole core object of study that can bind forensic science and criminology to foster policing. Identities and generalised human traceability also play a critical role to reconstruct criminal behaviours. In forensic science, identity-related information are used to link suspects and objects to criminal activities and guide the investigative and judiciary process to find and sentence authors. In criminology, criminal behaviours are also scrutinised to infer offender profiles, modus operandi and trajectories. Such information, increasingly digital as well, serves many different purposes such as identification, localisation, reconstruction, case-linking, or even crime prevention. ; ; Several contributions also discuss the importance of cross-fertilization between research, education and practice both from an academic and policing point of view. While routine responses of police services to problems have to be very quick, academic research can slow the pace to gain an overview of the situations and propose global solutions based on intelligence and crime analysis. This special issue illustrates that it is impossible to address and solve real-life problems such as crime without collaboration. Indeed, crime-related problems are interdisciplinary in nature and the current global digitalisation transformation has profound impacts on crime, criminals and social reactions. The scale of change involves rethinking approaches to jointly manage mass data. This is a key venture to reframe and join disciplines within a critical-thinking approach. Current societal evolution undeniably requires to fasten policing, forensic science and criminology for more than their own sake.",13,1,1,4,Criminal justice; Empirical research; Sociology; Cognitive reframing; Crime prevention; Crime analysis; Pace; Criminology; Big data; Identification (information),,,,,https://serval.unil.ch/notice/serval:BIB_9081944B71DB https://serval.unil.ch/resource/serval:BIB_9081944B71DB.P002/REF.pdf https://academic.oup.com/policing/article/13/1/1/4831055 https://core.ac.uk/download/196186130.pdf,http://dx.doi.org/10.1093/police/pay002,,10.1093/police/pay002,2927333428,,0,006-129-047-122-458; 022-092-792-811-900; 024-383-722-872-372; 028-802-373-898-820; 042-252-539-589-256; 047-976-235-338-816; 074-296-389-556-04X; 105-024-117-660-277; 113-803-054-596-425; 120-656-428-748-152,1,true,,green 057-630-673-457-131,A Scaling Robust Copy-Paste Tampering Detection for Digital Image Forensics,,2016,journal article,Procedia Computer Science,18770509,Elsevier BV,,Anil Dada Warbhe; Rajiv V. Dharaskar; Vilas M. Thakare,"Abstract It is crucial in image forensics to prove the authenticity of the digital images. Due to the availability of the using sophisticated image editing software programs, anyone can manipulate the images easily. There are various types of digital image manipulation or tampering possible; like image compositing, splicing, copy-paste, etc. In this paper, we propose a passive scaling robust algorithm for the detection of Copy-Paste tampering. Sometimes the copied region of an image is scaled before pasting to some other location in the image. In such cases, the normal Copy-Paste detection algorithm fails to detect the forgeries. We have implemented and used an improved customized Normalized Cross Correlation for detecting highly correlated areas from the image and the image blocks, thereby detecting the tampered regions from an image. The experimental results demonstrate that the proposed approach can be effectively used to detect copy-paste forgeries accurately and is scaling robust.",79,,458,465,Digital image processing; Image restoration; Feature detection (computer vision); Compositing; Artificial intelligence; Image warping; Binary image; Computer vision; Computer science; Digital image; Image processing,,,,,http://www.sciencedirect.com/science/article/pii/S1877050916001903 https://core.ac.uk/display/82364984 https://www.sciencedirect.com/science/article/pii/S1877050916001903 https://www.mendeley.com/catalogue/796d1fc0-2d74-3738-ae03-c995f66eafe9/ https://core.ac.uk/download/pdf/82364984.pdf,http://dx.doi.org/10.1016/j.procs.2016.03.059,,10.1016/j.procs.2016.03.059,2314313970,,0,007-593-872-409-964; 018-037-484-424-937; 018-714-912-826-875; 019-461-243-164-715; 024-225-405-455-512; 028-462-269-708-347; 029-322-330-771-081; 033-295-070-837-251; 034-121-155-020-714; 037-103-332-118-06X; 037-464-485-150-339; 038-937-237-659-201; 039-055-556-012-538; 040-499-338-725-508; 045-327-928-509-160; 045-496-560-764-477; 062-007-949-183-546; 063-891-549-168-52X; 065-037-301-489-012; 065-369-773-065-673; 065-873-523-989-876; 075-228-376-439-786; 076-346-829-732-533; 076-704-896-134-67X; 080-794-266-877-942; 086-832-985-542-578; 089-363-854-574-422; 090-691-753-970-360; 092-092-246-517-236; 097-461-557-468-286; 102-816-097-773-341; 124-874-123-332-712; 131-740-474-802-798; 132-355-978-858-838; 161-589-884-103-104; 172-264-312-197-129; 173-881-114-277-726,11,true,,gold 057-814-822-953-013,Document Clustering in Forensic Investigation by Hybrid Approach,2014-04-18,2014,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,G. Thilagavathi; J. Anitha,"Digital Forensic Investigation is the branch of scientific forensic process for investigation of material found in digital devices related to computer crimes. Digital evidence analogous to particular incident is any digital data that provides hypothesis about incident. The essential part of Digital forensic Process is to analyze the documents present on suspect‟s computer. Due to increasing count of documents and larger size of storage devices makes very difficult to analyze the documents on computer. To overcome these problems, a subject based semantic document clustering algorithm along with bisecting-kmeans has been proposed that allows the examiner to analyze and cluster the documents based on particular subject and also the terms that does not belong to any subject. The accuracy of clustering of documents has been improved by means of this hybrid approach.",91,3,14,19,Data mining; Forensic science; Document clustering; Digital forensic process; Subject (documents); Suspect; Digital evidence; Digital forensic investigation; Computer science; Process (engineering); Cluster analysis,,,,,https://research.ijcaonline.org/volume91/number3/pxc3894784.pdf https://www.ijcaonline.org/archives/volume91/number3/15860-4784 http://ui.adsabs.harvard.edu/abs/2014IJCA...91c..14T/abstract,http://dx.doi.org/10.5120/15860-4784,,10.5120/15860-4784,2099207896,,0,006-169-257-799-439; 021-572-735-190-382; 025-484-182-808-044; 052-814-620-196-112; 063-976-673-171-817; 065-901-777-764-939; 074-249-424-367-729; 080-826-345-483-814; 095-274-059-975-043; 106-849-681-739-149; 120-695-214-222-114; 166-429-669-625-531; 168-493-303-499-04X; 176-271-242-066-828; 184-948-841-629-735,5,true,,green 058-322-314-623-048,Introduction to the special issue on deep learning for real-time information hiding and forensics,2020-01-28,2020,journal article,Journal of Real-Time Image Processing,18618200; 18618219,Springer Science and Business Media LLC,Germany,Zhili Zhou; Ching-Nung Yang; Cheonshik Kim; Stelvio Cimato,,17,1,1,5,Deep learning; Real-time data; Pattern recognition (psychology); Artificial intelligence; Multimedia information systems; Computer science; Multimedia; Computer graphics,,,,,https://link.springer.com/content/pdf/10.1007%2Fs11554-020-00947-2.pdf https://paperity.org/p/231535637/introduction-to-the-special-issue-on-deep-learning-for-real-time-information-hiding-and https://air.unimi.it/handle/2434/736925 https://link.springer.com/article/10.1007/s11554-020-00947-2 https://dblp.uni-trier.de/db/journals/jrtip/jrtip17.html#ZhouYKC20 https://core.ac.uk/download/333582336.pdf,http://dx.doi.org/10.1007/s11554-020-00947-2,,10.1007/s11554-020-00947-2,3003973488,,0,000-242-937-365-001; 008-685-309-896-913; 019-729-163-477-150; 023-111-287-993-202; 023-735-943-391-898; 024-899-029-819-554; 029-849-268-273-292; 032-720-129-409-277; 042-491-912-694-213; 046-592-762-622-043; 060-759-202-913-837; 072-969-252-251-983; 075-031-101-610-418; 078-083-281-555-922; 080-311-360-065-255; 085-734-518-808-909; 103-487-807-787-943; 130-792-368-715-218; 162-611-689-001-780,6,true,,green 058-329-964-903-756,Forensic authentication method for audio recordings generated by Voice Recorder application on Samsung Galaxy Watch4 series.,2022-10-22,2022,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Nam In Park; Seong Ho Lim; Jun Seok Byun; Jin-Hwan Kim; Ji Woo Lee; Chanjun Chun; Yonggang Kim; Oc-Yeub Jeon,"The number of smartwatch users has been rapidly increasing in recent years. A smartwatch is a wearable device that collects various types of data using sensors and provides basic functions, such as healthcare-related measurements and audio recording. In this study, we proposed the forensic authentication method for audio recordings from the Voice Recording application in the Samsung Galaxy Watch4 series. First, a total of 240 audio recordings from each of the four different models, paired with four different smartphones for synchronization via Bluetooth, were collected and verified. To analyze the characteristics of smartwatch audio recordings, we examined the transition of the audio latency, writable audio bandwidth, timestamps, and file structure between those generated in the smartwatches and those edited using the Voice Recording application of the paired smartphones. In addition, the devices with the audio recordings were examined via the Android Debug Bridge (ADB) tool and compared with the timestamps stored in the file system. The experimental results showed that the audio latency, writable audio bandwidth, and file structure of audio recordings generated by smartwatches differed from those generated by smartphones. Additionally, by analyzing the file structure, audio recordings can be classified as unmanipulated, manipulation has been attempted, or manipulated. Finally, we can forensically authenticate the audio recordings generated by the Voice Recorder application in the Samsung Galaxy Watch4 series by accessing the smartwatches and analyzing the timestamps related to the audio recordings in the file system.",,,,,,Galaxy Watch4; M4A; Voice Recorder application; audio forensics; audio forgery detection; audio latency; forensic authentication method; metadata,,,"Ministry of Interior and Safety, Republic of Korea (NFS2022DTB03); Ministry of Interior and Safety, Republic of Korea (NFS2022DTB04)",,http://dx.doi.org/10.1111/1556-4029.15158,36273272,10.1111/1556-4029.15158,,,0,001-458-381-243-357; 006-794-410-339-126; 022-068-312-435-53X; 043-261-465-467-889; 046-034-142-979-678; 051-558-525-539-694; 138-870-891-535-969,0,false,, 058-658-217-563-45X,Twentieth Annual DFRWS Conference,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Alex Nelson,,33,,301028,,,,,,,https://doi.org/10.1016/j.fsidi.2020.301028 https://api.elsevier.com/content/article/PII:S2666281720303115?httpAccept=text/xml http://dblp.uni-trier.de/db/journals/di/di33S.html#Nelson20a,http://dx.doi.org/10.1016/j.fsidi.2020.301028,,10.1016/j.fsidi.2020.301028,3091173488,,0,,0,true,,bronze 058-673-328-503-201,Research summary: The effects of switching the camera module from BlackBerry Curve 9360 devices,,2013,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Floris Gisolf; Zeno Geradts; Dennie Verhoeven; Coert Klaver,,10,1,56,61,Camera resectioning; Computer graphics (images); Camera phone; Artificial intelligence; Smart camera; Camera interface; Stereo camera; Digital camera; Computer vision; Computer science; Camera module; Camera auto-calibration,,,,,https://doi.org/10.1016/j.diin.2013.01.007 https://dblp.uni-trier.de/db/journals/di/di10.html#GisolfGVK13 https://www.narcis.nl/publication/RecordID/oai%3Adare.uva.nl%3Apublications%2F07cd177c-b0b3-4a3d-8fdf-7dcc5d7bdbf4 https://dare.uva.nl/personal/search?identifier=07cd177c-b0b3-4a3d-8fdf-7dcc5d7bdbf4 http://dblp.uni-trier.de/db/journals/di/di10.html#GisolfGVK13 https://core.ac.uk/display/132739753 https://www.sciencedirect.com/science/article/pii/S174228761300008X,http://dx.doi.org/10.1016/j.diin.2013.01.007,,10.1016/j.diin.2013.01.007,2023044347,,0,000-480-947-961-716; 003-009-062-014-855; 013-766-124-774-712; 045-226-923-439-105; 069-184-474-173-724; 077-828-134-917-257; 083-097-133-928-799; 160-685-922-453-820; 164-717-721-813-673; 179-834-398-565-338; 180-088-494-514-913; 184-897-235-429-285,2,false,, 058-734-389-352-474,Live forensics of tools on android devices for email forensics,2019-08-01,2019,journal article,TELKOMNIKA (Telecommunication Computing Electronics and Control),23029293; 16936930; 2087278x,Universitas Ahmad Dahlan,Indonesia,Rusydi Umar; Riadi; Bashor Fauzan Muthohirin,"Email is one communication technology that can be used to exchange information, data, and etc. The development of email technology not only can be opened using a computer but can be opened using an smartphone. The most widely used smartphone in Indonesian society is Android. Within a row, the development technology of higher cybercrime such as email fraud catching cybercrime offenders need evidence to be submitted to a court, for obtain evidence can use tools like Wireshark and Networkminer to analyzing network traffic on live networks. Opportunity, we will do a comparison of the forensic tools it to acquire digital evidence. The subject of this research focused on Android-based email service to get as much digital evidence as possible on both tools. This process uses National Institute of Standards and Technology method. The results of this research that networkminer managed to get the receiving port, while in Wireshark not found.",17,4,1803,1809,World Wide Web; Cybercrime; Digital evidence; Live forensics; Computer science; Android (operating system); Information and Communications Technology,,,,,http://www.journal.uad.ac.id/index.php/TELKOMNIKA/article/view/11748/6613 https://core.ac.uk/download/pdf/295344916.pdf,http://dx.doi.org/10.12928/telkomnika.v17i4.11748,,10.12928/telkomnika.v17i4.11748,2940374387,,0,,8,true,cc-by-sa,hybrid 058-829-172-935-902,A preliminary assessment of latent fingerprint evidence damage on mobile device screens caused by digital forensic extractions,,2018,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Graeme Horsman; Helen Page; Peter Beveridge,"Abstract Mobile devices continue to feature heavily in criminal investigations and often bear multiple forms of potentially relevant evidence. In the context of identifying the owner of a device, both latent fingerprints and resident digital data may be crucial to investigations, yet each individual process may have a detrimental impact on the other. Fingerprint development techniques are known to impact device hardware, whilst digital extraction processes can destroy latent prints. This article examines the impact of mobile device extraction procedures on resident screen fingerprints. The impact of bare fingered, cotton gloved, latex gloved and stylus screen press and swipes on latent print destruction are examined. Results indicate that all forms of interaction cause print damage, but to a variable extent. Provisional device handling recommendations are offered.",27,,47,56,Human–computer interaction; Criminal investigation; Stylus; Mobile device; Fingerprint (computing); Context (language use); Latent fingerprint; Multiple forms; Computer science; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/di/di27.html#HorsmanPB18 https://research.tees.ac.uk/ws/files/6504500/FP_Article_V_0.1_HP_comments_and_additions_2_.pdf https://www.sciencedirect.com/science/article/pii/S174228761830166X https://research.tees.ac.uk/en/publications/a-preliminary-assessment-of-latent-fingerprint-evidence-damage-on https://core.ac.uk/download/pdf/196169309.pdf,http://dx.doi.org/10.1016/j.diin.2018.10.002,,10.1016/j.diin.2018.10.002,2896336471,,0,002-589-008-193-992; 003-519-880-943-664; 019-831-293-743-518; 032-451-540-235-796; 047-997-437-748-154; 061-733-902-008-548; 079-273-634-331-435; 086-127-900-681-736; 108-365-031-739-392; 115-605-205-562-974; 120-697-354-224-33X; 163-330-758-807-944; 173-779-991-377-816,1,true,cc-by-nc-nd,green 059-098-460-373-81X,APAC2022-Print-Ad-Hybrid-Web (3),,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,42,,301424,301424,Computer science; World Wide Web,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00105-6,,10.1016/s2666-2817(22)00105-6,,,0,,0,false,, 059-164-963-562-527,"Book Review: Graves, Michael W. Digital Archaeology: The Art and Science of Digital Forensics",2014-01-02,2014,journal article,Information Security Journal: A Global Perspective,19393555; 19393547,Informa UK Limited,United Kingdom,Panagiota Polymeropoulou,"From the expert’s point of view, Michael Graves is providing an integrated book over the computer forensics, through an intelligent parallelism of the archaeologist’s work. The critical role of the...",23,1,45,45,Engineering; World Wide Web; Point (typography); Digital Archaeology (exhibition); Parallelism (rhetoric); Computer forensics; Digital forensics,,,,,https://www.tandfonline.com/doi/abs/10.1080/19393555.2013.877542 https://dblp.uni-trier.de/db/journals/isjgp/isjgp23.html#Polymeropoulou14,http://dx.doi.org/10.1080/19393555.2013.877542,,10.1080/19393555.2013.877542,1932720267,,0,,0,false,, 059-259-578-782-71X,Digital Forensics through Application Behavior Analysis,2016-06-08,2016,journal article,International Journal of Modern Education and Computer Science,20750161; 2075017x,MECS Publisher,,Shuaibur Rahman; M. A. Khan,"The field of digital forensic analysis has emerged in the past two decades to counter the digital crimes and investigate the modus operandi of the culprits to secure the computer systems. With the advances in technologies and pervasive nature of the computing devices, the digital forensic analysis is becoming a challenging task. Due to ease of digital equipment and popularity of Internet, criminals have been enticed to carry out digital crimes. Digital forensic is aimed to investigate the criminal activity and bring the culprits to justice. Traditionally the static analysis is used to investigate about an incident but due to a lot of issues related the accuracy and authenticity of the static analysis, the live digital forensic analysis shows an investigator a more complete picture of memory dump. In this paper, we introduce a module for profiling behavior of application programs. Profiling of application is helpful in forensic analysis as one can easily analyze the compromised system. Profiling is also helpful to the investigator in conducting malware analysis as well as debugging a system. The concept of our model is to trace the unique process name, loaded services and called modules of the target system and store it in a database for future forensic and malware analysis. We used VMware workstation version 9.0 on Windows 7 platform so that we can get the detailed and clean image of the current state of the system. The profile of the target application includes the process name, modules and services which are specific to an application program.",8,6,50,56,The Internet; Profiling (information science); Debugging; Malware analysis; Computer security; Computer science; State (computer science); Core dump; Digital forensics; Static analysis,,,,,http://www.mecs-press.org/ijmecs/ijmecs-v8-n6/IJMECS-V8-N6-7.pdf http://www.mecs-press.org/ijmecs/ijmecs-v8-n6/v8n6-7.html,http://dx.doi.org/10.5815/ijmecs.2016.06.07,,10.5815/ijmecs.2016.06.07,2475018646,,0,004-901-338-563-34X; 009-662-897-370-073; 009-750-732-270-162; 009-921-402-381-197; 014-068-011-589-367; 015-716-156-761-980; 017-071-408-718-290; 021-154-782-910-440; 021-917-398-361-902; 026-766-854-469-439; 035-269-627-388-435; 037-483-791-552-006; 040-483-292-320-671; 042-251-875-510-426; 042-977-612-584-987; 050-972-167-651-471; 051-503-387-938-284; 053-514-707-122-724; 054-507-171-824-189; 055-276-197-513-371; 058-308-781-214-808; 059-382-595-317-362; 064-915-221-771-392; 067-675-478-830-924; 070-417-028-826-684; 072-331-380-933-265; 073-717-900-354-928; 074-280-954-610-349; 086-491-087-364-017; 087-690-831-820-163; 093-448-702-012-591; 096-993-850-376-090; 100-498-406-037-927; 100-910-933-877-743; 106-832-935-724-238; 120-462-880-448-150; 120-753-186-411-42X; 121-234-261-402-315; 124-236-800-957-968; 147-707-428-925-566; 167-218-963-646-727; 198-979-419-447-995,3,true,,gold 059-294-756-490-060,BitScout: Remote Digital Forensics Toolkit,2020-05-01,2020,journal article,Digital Forensics (4n6) Journal,25821172,Digital Forensics (4N6),,Himani Rawat,"Forensic Science has been full of challenges for most of the Law Enforcement Agency (LEA) as we need to physically visit the crime scene, acquire evidence, then preserve it for forensic analysis. The path of collecting evidences from crime site and then bringing it to the Forensic Labs. becomes much cumbersome as the evidence may be corrupted or altered during transit. So why not to adopt a system for readily analysis of a compromised system without going to the crime site and sitting on one’s chair or forensic workstation?; The answer may be yes, we can but will it be easy and ethical to acquire evidence from a system remotely without visiting the crime scene physically. Vitaly Kamluk from Kaspersky Labs made this possible now by launching a new forensic tool called BitScout . To solve this problem, security researchers and Forensic Investigator can now use BitScout to collect remotely, key forensic evidences, to acquire full disk images via the network or locally attached storage devices, or simply to assist in malware incident handling. Evidence data can be viewed and analysed remotely or locally while the source data storage remains intact through reliable container-based isolation. BitScout is an open-source and free tool developed by security researchers for all people interested in digital forensics and cyber crimes investigations.",,,22,23,Computer science; Multimedia; Digital forensics,,,,,http://dx.doi.org/10.46293/4n6/2020.02.02.03,http://dx.doi.org/10.46293/4n6/2020.02.02.03,,10.46293/4n6/2020.02.02.03,3022406620,,0,,0,false,, 059-316-462-802-051,Smart Digital Forensic Framework for Crime Analysis and Prediction using AutoML,,2021,journal article,International Journal of Advanced Computer Science and Applications,21565570; 2158107x,The Science and Information Organization,,Sajith A Johnson; S Ananthakumaran,"Over the most recent couple of years, the greater part of the information, for example books, recordings, pictures, clinical, forensic, criminal and even the hereditary data of people are being pushed toward digitals and cyber-dataspaces. This problem requires sophisticated techniques to deal with the vast amounts of data. We propose a novel solution to the problem of gaining actionable intelligence from the voluminous existing and potential digital forensic data. We have formulated an Automated Learning Framework ontology for Digital Forensic Applications relating to collaborative crime analysis and prediction. The minimum viable ontology we formulated by studying the existing literature and applications of Machine learning has been used to devise an Automated Machine Learning implementation to be quantitatively and qualitatively studied in its capabilities to aid intelligence practices of Digital Forensic Investigation agencies in representing, reasoning and forming actionable insights from the vast and varied collected real world data. A testing implementation of the framework is made to assess performance of our proposed generalized Smart Forensic Framework for Digital Forensics applications by comparison with existing solutions on quantitative and qualitative metrics and assessments. We will use the insights and performance metrics derived from our research to motivate forensic intelligence agencies to exploit the features and capabilities provided by AutoML Smart Forensic Framework applications.",12,3,,,Exploit; Ontology (information science); Data science; Crime analysis; Automated learning; Forensic intelligence; Digital forensic investigation; Real world data; Computer science; Digital forensics,,,,,https://thesai.org/Publications/ViewPaper?Volume=12&Issue=3&Code=IJACSA&SerialNo=49 https://thesai.org/Downloads/Volume12No3/Paper_49-Smart_Digital_Forensic_Framework.pdf,http://dx.doi.org/10.14569/ijacsa.2021.0120349,,10.14569/ijacsa.2021.0120349,3143085218,,0,,1,true,cc-by,gold 059-388-443-600-22X,Book Review: Digital Crime and Forensic Science in Cyberspace,,2006,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Gary C. Kessler,"Kanellis, P., Kiountouzis, E., Kolokotronis, N., & Martakos, D. (2006). Digital Crime and Forensic Science in Cyberspace. Hershey, PA: Idea Group Publishing, 357 pages, ISBN: 1-59140-873-3 (paper), US$79.95. Reviewed by Gary C. Kessler This book, according to the preface, ""is intended for those who are interested in a critical overview of what forensic science is, care about privacy issues, and wish to know what constitutes evidence for computer crime."" It goes on to say that the specific audiences for which it was written are students in academia and professionals in the industry. If used carefully, this book does a good job at providing a snapshot of some of the current issues in digital forensics, although perhaps best aimed at information security professionals. It is a collection of 15 chapters written by authors from Greece, Italy, The Netherlands, South Africa, the U.K., and the U.S. The international flavor of the writing is also welcome in the field. (see PDF for full review)",1,4,67,70,Forensic science; Sociology; Publishing; Cybercrime; Cyberspace; Wish; Media studies; Computer security; Information security; Computer forensics; Digital forensics,,,,,https://commons.erau.edu/jdfsl/vol1/iss4/4/ https://doi.org/10.15394/jdfsl.2006.1014 https://works.bepress.com/gary_kessler/53/download/ https://dblp.uni-trier.de/db/journals/jdfsl/jdfsl1.html#Kessler06 https://doaj.org/article/0a06f29ad0be49bea7c272b41576797a https://works.bepress.com/gary_kessler/53/ https://commons.erau.edu/cgi/viewcontent.cgi?article=1014&context=jdfsl https://core.ac.uk/display/92169851,http://dx.doi.org/10.15394/jdfsl.2006.1014,,10.15394/jdfsl.2006.1014,1960865988,,0,,0,true,cc-by-nc,gold 059-397-656-514-952,Quantitative evaluation of the results of digital forensic investigations: a review of progress.,2021-02-08,2021,journal article,Forensic sciences research,24711411; 20961790,Informa UK Limited,England,Richard E. Overill; Jan Collie,"Unlike conventional forensics, digital forensics does not at present generally quantify the results of its investigations. It is suggested that digital forensics should aim to catch up with other f...",6,1,13,18,Data science; Bayesian network; Computer science; Information theory; Digital forensics,Bayesian networks; Forensic sciences; complexity theory; digital forensic metrics; information theory; measures of plausibility; probability theory; statistical theory,,,,http://oro.open.ac.uk/75314/ https://www.ncbi.nlm.nih.gov/pmc/articles/PMC8112825/ https://europepmc.org/article/PMC/PMC8112825 https://doaj.org/article/036a718d1882483896312c0a40ef8b39 https://www.tandfonline.com/doi/full/10.1080/20961790.2020.1837429,http://dx.doi.org/10.1080/20961790.2020.1837429,34007512,10.1080/20961790.2020.1837429,3126160358,PMC8112825,0,000-578-002-989-782; 001-755-455-053-419; 002-657-433-027-989; 005-859-821-142-158; 007-210-880-162-593; 007-832-595-971-443; 008-362-883-971-90X; 009-725-146-094-077; 010-408-812-989-291; 023-051-490-797-571; 030-763-851-934-420; 035-787-138-433-311; 045-439-795-806-132; 048-029-723-086-698; 055-167-931-095-336; 061-269-967-405-492; 063-088-664-524-670; 064-988-327-019-067; 068-045-694-782-701; 072-475-343-868-508; 074-325-698-839-633; 089-477-367-447-018; 101-550-862-215-24X; 106-964-315-836-68X; 110-744-808-081-983; 111-263-791-310-020; 111-471-986-310-852; 129-255-411-519-417; 142-855-067-627-071; 148-306-588-835-497; 151-157-528-819-921; 166-329-182-326-355; 176-279-989-411-85X; 191-131-191-175-686,2,true,"CC BY, CC BY-NC",gold 059-541-479-175-841,An Automatic Digital Audio Authentication/Forensics System,,2017,journal article,IEEE Access,21693536,Institute of Electrical and Electronics Engineers (IEEE),United States,Zulfiqar Ali; Muhammad Imran; Mansour Alsulaiman,"With the continuous rise in ingenious forgery, a wide range of digital audio authentication applications are emerging as a preventive and detective control in real-world circumstances, such as forged evidence, breach of copyright protection, and unauthorized data access. To investigate and verify, this paper presents a novel automatic authentication system that differentiates between the forged and original audio. The design philosophy of the proposed system is primarily based on three psychoacoustic principles of hearing, which are implemented to simulate the human sound perception system. Moreover, the proposed system is able to classify between the audio of different environments recorded with the same microphone. To authenticate the audio and environment classification, the computed features based on the psychoacoustic principles of hearing are dangled to the Gaussian mixture model to make automatic decisions. It is worth mentioning that the proposed system authenticates an unknown speaker irrespective of the audio content i.e., independent of narrator and text. To evaluate the performance of the proposed system, audios in multi-environments are forged in such a way that a human cannot recognize them. Subjective evaluation by three human evaluators is performed to verify the quality of the generated forged audio. The proposed system provides a classification accuracy of 99.2% ± 2.6. Furthermore, the obtained accuracy for the other scenarios, such as text-dependent and text-independent audio authentication, is 100% by using the proposed system.",5,,2994,3007,Authentication; Auditory system; Microphone; Audio forensics; Speech recognition; Sound perception; Computer science; Digital audio; Psychoacoustics,,,,"Deanship of Scientific Research, King Saud University, Riyadh, Saudi Arabia, under the Research Group",https://dblp.uni-trier.de/db/journals/access/access5.html#AliIA17 https://pure.ulster.ac.uk/en/publications/an-automatic-digital-audio-authenticationforensics-system https://doi.org/10.1109/ACCESS.2017.2672681 https://ieeexplore.ieee.org/abstract/document/7864411 http://repository.essex.ac.uk/27231/ https://ulster-staging.pure.elsevier.com/en/publications/an-automatic-digital-audio-authenticationforensics-system https://pure.ulster.ac.uk/ws/files/71153352/audio_authen_IEEE_Access.pdf http://ieeexplore.ieee.org/document/7864411/ https://core.ac.uk/download/287023576.pdf,http://dx.doi.org/10.1109/access.2017.2672681,,10.1109/access.2017.2672681,2591157802,,0,000-780-924-227-038; 002-890-793-739-219; 008-757-979-445-679; 011-451-536-949-292; 011-907-186-505-503; 015-613-308-645-582; 021-712-692-138-702; 023-420-292-710-552; 025-299-900-166-361; 033-225-389-686-623; 035-492-160-906-551; 036-335-162-732-070; 049-209-305-832-496; 057-673-642-771-371; 058-633-974-913-727; 060-643-003-548-166; 061-591-578-204-385; 073-911-854-128-151; 074-017-562-218-104; 074-506-965-829-791; 077-652-355-257-145; 080-872-836-176-779; 087-700-976-402-858; 092-488-100-046-102; 092-522-060-753-940; 114-599-315-973-390; 119-587-371-187-398; 138-031-180-838-106; 151-075-769-432-235; 163-973-756-079-575; 187-902-973-366-522,15,true,"CC BY, CC BY-NC-ND",gold 059-609-113-377-949,Forensic investigation of cyberstalking cases using Behavioural Evidence Analysis,,2016,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Noora Al Mutawa; Joanne Bryce; Virginia N. L. Franqueira; Andrew Marrington,"Behavioural Evidence Analysis (BEA) is, in theory, useful in developing an understanding of the offender, the victim, the crime scene, and the dynamics of the crime. It can add meaning to the evidence obtained through digital forensic techniques and assist investigators with reconstruction of a crime. There is, however, little empirical research examining the application of BEA to actual criminal cases, particularly cyberstalking cases. This study addresses this gap by examining the utility of BEA for such cases in terms of understanding the behavioural and motivational dimensions of offending, and the way in which digital evidence can be interpreted. It reports on the forensic analysis of 20 cyberstalking cases investigated by Dubai Police in the last five years. Results showed that BEA helps to focus an investigation, enables better understanding and interpretation of victim and offender behaviour, and assists in inferring traits of the offender from available digital evidence. These benefits can help investigators to build a stronger case, reduce time wasted to mistakes, and to exclude suspects wrongly accused in cyberstalking cases.",16,16,S96,S103,Empirical research; Forensic science; Crime scene; Cyberstalking; Digital evidence; Computer security; Computer science; Interpretation (philosophy); Meaning (linguistics); Criminology; Digital forensics,,,,,https://www.infona.pl/resource/bwmeta1.element.elsevier-796b80b4-b548-3256-90c3-0614e1e6b193 https://www.sciencedirect.com/science/article/pii/S1742287616300068 https://cyberleninka.org/article/n/587101.pdf https://cyberleninka.org/article/n/587101 https://dl.acm.org/doi/10.1016/j.diin.2016.01.012 https://derby.openrepository.com/handle/10545/608462 http://www.sciencedirect.com/science/article/pii/S1742287616300068 https://dl.acm.org/citation.cfm?id=2910145 https://core.ac.uk/display/42138486 http://clok.uclan.ac.uk/14089/ https://core.ac.uk/download/42138486.pdf,http://dx.doi.org/10.1016/j.diin.2016.01.012,,10.1016/j.diin.2016.01.012,2329693662,,0,005-578-292-466-235; 009-625-838-012-548; 011-207-484-659-618; 019-645-930-990-548; 024-890-178-947-591; 036-269-075-303-806; 037-550-015-414-716; 039-097-172-195-326; 049-488-209-182-213; 060-822-607-399-070; 072-811-052-394-365; 073-624-718-302-07X; 090-152-464-314-890; 097-039-638-472-515; 104-401-234-970-738; 106-997-065-291-365; 120-664-015-054-54X; 121-601-580-498-491; 140-730-540-277-926; 145-062-913-009-934; 159-823-071-020-847; 160-976-357-855-420; 164-534-073-076-975; 167-652-916-391-487,15,true,cc-by-nc-nd,hybrid 059-898-396-008-601,THE PROCESSES OF DIGITIZATION AND FORENSICS: A RETROSPECTIVE ANALYSIS,2020-05-18,2020,journal article,Criminalistics and Forensics,01302655,Kyiv Scientific Research Institute of Forensic Expertise,,M. Dumchykov,"The article deals with some aspects of digitalization of forensic activity, such as improving the efficiency of search and cognitive activity of an investigator using digital technologies, and effective organization of such activity. Use of computer hardware, software, various computer and digital technologies and scripting to investigate crimes. The definitions of “digital trace” and “virtual trace” demonstrate the complexity of these issues. Certain dynamic movement of criminal activity in the information environment is analyzed. Defines the concept of virtual trace as a specific trace of certain actions in the information space of computer devices and their network systems. In considering the definition of the concept of virtual trace, the views of scientists such as V.A. Meshcheriakov, V.V. Poliakov and Smushkin A.V.; ; The aspects of consideration of forensic digitization are identified, among which the main ones are:; ; – use of digital technologies to increase the effectiveness of search and cognitive activity of the investigator, effective organization of this activity at the present level, optimization of interaction of different bodies, institutions in the investigation of crimes.; ; – the use of information and communication technologies to investigate crimes.; ; – solving didactic tasks in the field of training, retraining, advanced training of investigators, criminal investigators, forensic experts, improvement of their qualification, exchange of experience.; ; The further question of the development of forensic science in the field of information society is investigated. It is determined in what form the information forensics will exist, namely:; ; A new section of classic forensics that focuses on working with digital and virtual footprints.; The new science of “digital or virtual forensics”.; 3. Independent forensic science within the framework of the general theory of forensic science, which integrates the development of virtual traces, the use of new technical means of finding, fixing, research, use in proving forensically relevant information, technologies that ensure the effectiveness of the investigator.",,65,100,108,Engineering; Data science; Digitization; Retrospective analysis,,,,,http://dx.doi.org/10.33994/kndise.2020.65.10,http://dx.doi.org/10.33994/kndise.2020.65.10,,10.33994/kndise.2020.65.10,3037841873,,0,,0,true,,gold 059-979-216-184-881,Can forensic science learn from the COVID-19 crisis?,2020-09-07,2020,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Claude Roux; Céline Weyermann,"This paper draws parallels between the current COVID-19 crisis and the apparent forensic science crisis. It investigates if shared approaches of the problem and solutions could emerge. Some relevant aspects of the medical system as it reacted to the pandemic crisis and the situation in forensic science are presented. Further, three main stages of the COVID-19 crisis and its impact on individuals and society are proposed, highlighting similarities to the effects of forensic science. Finally, some lessons from COVID-19 for forensic science are identified and discussed. It is concluded that forensic science’s best assurance to address current and future challenges, particularly in an increasingly digital environment, remains a sound scientific approach, including critical thinking and inter-disciplinary collaborations.",316,,110503,110503,Forensic science; Political science; Parallels; Coronavirus disease 2019 (COVID-19); Critical thinking; Engineering ethics,Backlog; Error rate; Inter-disciplinary collaborations; Risk; Scientific approach; Trace,COVID-19/epidemiology; Forensic Sciences/education; Humans; Pandemics,,,https://www.sciencedirect.com/science/article/abs/pii/S0379073820303650 https://opus.lib.uts.edu.au/handle/10453/143778 https://serval.unil.ch/notice/serval:BIB_6B6D4EF2159C https://europepmc.org/article/PMC/PMC7475732 https://pubag.nal.usda.gov/catalog/7108152 https://www.sciencedirect.com/science/article/pii/S0379073820303650 https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7475732 https://pubmed.ncbi.nlm.nih.gov/32927412/,http://dx.doi.org/10.1016/j.forsciint.2020.110503,32927412,10.1016/j.forsciint.2020.110503,3084257477,PMC7475732,0,030-714-770-580-172; 031-831-612-786-158; 056-237-195-342-243; 077-468-916-358-123; 087-342-951-350-054; 092-666-504-839-351; 101-436-770-235-826; 189-248-751-370-250,4,true,cc-by-nc-nd,hybrid 060-043-515-260-052,Using Anisotropic Diffusion for Efficient Extraction of Sensor Noise in Camera Identification,2012-02-13,2012,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Wiger van Houten; Zeno Geradts,":  Each digital camera has an intrinsic fingerprint that is unique to each camera. This device fingerprint can be extracted from an image and can be compared with a reference device fingerprint to determine the device origin. The complexity of the filters proposed to accomplish this is increasing. In this note, we use a relatively simple algorithm to extract the sensor noise from images. It has the advantages of being easy to implement and parallelize, and working faster than the wavelet filter that is common for this application. In addition, we compare the performance with a simple median filter and assess whether a previously proposed fingerprint enhancement technique improves results. Experiments are performed on approximately 7500 images originating from 69 cameras, and the results are compared with this often used wavelet filter. Despite the simplicity of the proposed method, the performance exceeds the common wavelet filter and reduces the time needed for the extraction.",57,2,521,527,Engineering; Noise; Artificial intelligence; Anisotropic diffusion; Fingerprint (computing); Digital camera; Device fingerprint; Computer vision; Median filter; Digital forensics; SIMPLE algorithm,,,,,https://onlinelibrary.wiley.com/doi/abs/10.1111/j.1556-4029.2012.02057.x https://www.ncbi.nlm.nih.gov/pubmed/22329355 https://forensic.to/JOFS-10-234%20-%20AnisoDiff.pdf http://www.forensic.to/JOFS-10-234%20-%20AnisoDiff.pdf https://europepmc.org/article/MED/22329355,http://dx.doi.org/10.1111/j.1556-4029.2012.02057.x,22329355,10.1111/j.1556-4029.2012.02057.x,1928872245,,0,013-766-124-774-712; 014-079-494-188-077; 017-823-654-117-246; 030-109-545-148-361; 045-168-992-395-537; 046-392-586-979-126; 053-781-637-768-867; 075-086-734-221-525; 080-729-034-453-138; 122-486-087-773-74X; 160-685-922-453-820; 180-088-494-514-913; 184-897-235-429-285,25,true,,green 060-141-830-760-910,Hierarchical Context Network for Airborne Image Segmentation,,2022,journal article,IEEE Transactions on Geoscience and Remote Sensing,01962892; 15580644,Institute of Electrical and Electronics Engineers (IEEE),United States,Feng Zhou; Renlong Hang; Hui Shuai; Qingshan Liu,,60,,1,12,Image segmentation; Context (archaeology); Computer science; Computer vision; Artificial intelligence; Remote sensing; Segmentation; Image processing; Image (mathematics),,,,Natural Science Foundation of China; Natural Science Foundation of China; Natural Science Foundation of China; Postgraduate Research and Practice Innovation Program of Jiangsu Province,,http://dx.doi.org/10.1109/tgrs.2021.3133258,,10.1109/tgrs.2021.3133258,,,0,001-195-517-930-075; 002-649-617-859-886; 004-269-574-716-057; 005-238-000-402-424; 011-121-469-702-828; 011-308-268-259-559; 020-233-013-143-936; 020-467-290-581-389; 021-067-610-643-192; 029-455-747-035-038; 030-540-246-658-722; 032-061-389-376-815; 039-770-461-722-193; 041-314-165-476-904; 044-778-317-766-762; 045-598-685-349-282; 046-997-457-408-273; 048-039-376-300-619; 051-713-174-784-117; 053-094-537-530-97X; 061-150-022-812-525; 065-374-293-809-860; 071-239-631-876-341; 080-131-325-563-306; 086-350-567-454-813; 086-847-621-467-943; 087-020-003-931-56X; 092-180-026-045-134; 102-885-771-338-093; 109-482-146-821-248; 114-804-451-117-599; 130-574-314-495-488; 158-175-491-942-187,2,false,, 060-219-805-825-396,Robust off-line text independent writer identification using bagged discrete cosine transform features,,2017,journal article,Expert Systems with Applications,09574174,Elsevier BV,United Kingdom,Faraz Ahmad Khan; Muhammad Atif Tahir; Fouad Khelifi; Ahmed Bouridane; Resheed Almotaeryi,"A robust system for offline text independent writer identification is proposed.Bagged discrete cosine transform(BDCT) descriptors used in place of conventional DCT.Proposed system tested on four challenging data sets (two English and two Arabic).BDCT has shown robustness to noise and blurring. Efficient writer identification systems identify the authorship of an unknown sample of text with high confidence. This has made automatic writer identification a very important topic of research for forensic document analysis. In this paper, we propose a robust system for offline text independent writer identification using bagged discrete cosine transform (BDCT) descriptors. Universal codebooks are first used to generate multiple predictor models. A final decision is then obtained by using the majority voting rule from these predictor models. The BDCT approach allows for DCT features to be effectively exploited for robust hand writer identification. The proposed system has first been assessed on the original version of hand written documents of various datasets and results have shown comparable performance with state-of-the-art systems. Next, blurry and noisy documents of two different datasets have been considered through intensive experiments where the system has been shown to perform significantly better than its competitors. To the best of our knowledge this is the first work that addresses the robustness aspect in automatic hand writer identification. This is particularly suitable in digital forensics as the documents acquired by the analyst may not be in ideal conditions.",71,,404,415,Data mining; Artificial intelligence; Pattern recognition; Discrete cosine transform; Ideal (set theory); Computer science; Sample (statistics); Identification (information); Digital forensics; Robustness (computer science); Noise (video),,,,,https://www.sciencedirect.com/science/article/pii/S0957417416306340 http://www.sciencedirect.com/science/article/pii/S0957417416306340 https://dblp.uni-trier.de/db/journals/eswa/eswa71.html#KhanTKBA17 https://researchportal.northumbria.ac.uk/en/publications/robust-off-line-text-independent-writer-identification-using-bagg https://dl.acm.org/doi/10.1016/j.eswa.2016.11.012 https://northumbria-test.eprints-hosting.org/id/document/262738 http://nrl.northumbria.ac.uk/28908/ https://core.ac.uk/display/74228747 https://core.ac.uk/download/74228747.pdf,http://dx.doi.org/10.1016/j.eswa.2016.11.012,,10.1016/j.eswa.2016.11.012,2550742354,,0,000-911-982-710-316; 004-068-122-206-08X; 004-914-785-143-454; 005-318-246-553-636; 007-849-907-663-118; 010-649-635-170-601; 013-190-503-258-858; 017-779-861-104-514; 019-132-619-033-08X; 019-341-204-341-946; 022-760-595-310-374; 025-090-112-398-906; 025-768-963-782-806; 030-158-834-894-222; 037-809-958-788-553; 039-902-317-885-117; 043-847-437-102-987; 044-477-985-619-160; 044-696-858-385-074; 046-193-406-636-58X; 049-741-494-106-186; 051-732-351-874-978; 061-678-120-137-24X; 061-833-977-498-818; 065-079-380-905-074; 071-256-600-307-933; 075-859-751-573-743; 082-717-260-041-70X; 083-079-794-622-720; 087-813-951-014-630; 092-788-078-793-359; 097-087-981-722-629; 107-762-822-653-635; 121-231-659-447-886; 122-631-998-355-379; 122-672-333-584-223; 125-413-135-331-703; 126-550-652-294-389; 131-930-029-133-044; 134-613-836-215-361; 139-242-211-718-809; 144-556-763-460-087; 153-916-864-682-271; 176-207-736-343-032,49,true,,green 060-659-035-509-926,Research of Requirement Based Computer Forensics Process,,2005,journal article,Computer Science,15082806,,,Sun B,"Research regarding digital forensic technologies has become more active with the recent increases in illegal accesses to computer system. Many researchers only focus on the techniques or tools for evidence detecting and evi- dence analyzing,overlooking key fundamentals. And the important part in digital forensic key fundamentals includes the development of standards,definitions and methodologies.This paper explores the development of the digital foren- sics,compares and contrasts several forensics periods,and specially explores the development of the digital forensics process. Based on them,trying to develop sound digital forensics system which fits for our contry.",,,,,Forensic science; Key (cryptography); Data science; Computer security; Focus (computing); Computer science; Process (engineering); Network forensics; Computer forensics; Digital forensics,,,,,http://en.cnki.com.cn/Article_en/CJFDTOTAL-JSJA200502003.htm,http://en.cnki.com.cn/Article_en/CJFDTOTAL-JSJA200502003.htm,,,2358632756,,0,,0,true,publisher-specific,gold 060-905-412-608-729,Cloud Computing Architecture and Forensic Investigation Challenges,2015-08-18,2015,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,Ghania Al Sadi,"to traditional digital forensic investigations, investigating cloud crimes is considered as more difficult and complex process. The architecture of cloud computing is behind the complexity of conducting forensic investigation on cloud where data are synchronized and accessed using multiple and different devices in different places that reduce the chance to find a real device to seize for forensics investigation. There are a number of challenges in forensic investigation field faced by investigators which may complicate the way of conducting cloud forensic investigations to extract evidences. This research is studying the complexity of cloud architecture and how it affects digital investigations by addressing a number of challenges on conducting cloud forensic investigation.",124,7,20,25,Forensic science; Cloud computing architecture; Field (computer science); Computer security; Computer science; Process (engineering); Cloud computing; Digital forensics,,,,,https://www.ijcaonline.org/archives/volume124/number7/22116-22116-2015905521 http://ui.adsabs.harvard.edu/abs/2015IJCA..124g..20A/abstract https://www.ijcaonline.org/research/volume124/number7/sadi-2015-ijca-905521.pdf,http://dx.doi.org/10.5120/ijca2015905521,,10.5120/ijca2015905521,1782730031,,0,019-503-212-220-967; 024-894-908-869-686; 040-155-905-622-611; 042-603-990-097-418; 054-347-685-047-575; 091-694-208-796-635; 095-691-114-276-825; 167-681-711-973-339; 170-108-067-251-840,2,true,,green 060-971-363-644-947,A Survey of Various Frameworks and Solutions in all Branches of Digital Forensics with a Focus on Cloud Forensics,,2019,journal article,International Journal of Advanced Computer Science and Applications,21565570; 2158107x,The Science and Information Organization,,Mohammed Khanafseh; Mohammad Qatawneh; Wesam Almobaideen,"Digital forensics is a class of forensic science interested with the use of digital information produced, stored and transmitted by various digital devices as source of evidence in investigations and legal proceedings. Digital forensics can be split up to several classes such as computer forensics, network forensics, mobile forensics, cloud computing forensics, and IoT forensics. In recent years, cloud computing has emerged as a popular computing model in various areas of human life. However, cloud computing systems lack support for computer forensic investigations. The main goal of digital forensics is to prove the presence of a particular document in a given digital device. This paper presents a comprehensive survey of various frameworks and solutions in all classes of digital forensics with a focus on cloud forensics. We start by discussing different forensics classes, their frameworks, limitations and solutions. Then we focus on the methodological aspect and existing challenges of cloud forensics. Moreover, the detailed comparison discusses drawbacks, differences and similarities of several suggested cloud computing frameworks providing future research directions.",10,8,,,Class (computer programming); Data science; Cloud forensics; Focus (computing); Computer science; Network forensics; Computer forensics; Mobile device forensics; Cloud computing; Digital forensics,,,,,https://thesai.org/Downloads/Volume10No8/Paper_80-A_Survey_of_Various_Frameworks_and_Solutions.pdf https://thesai.org/Publications/ViewPaper?Volume=10&Issue=8&Code=IJACSA&SerialNo=80,http://dx.doi.org/10.14569/ijacsa.2019.0100880,,10.14569/ijacsa.2019.0100880,2972427363,,0,000-451-779-646-297; 003-803-242-209-367; 004-706-447-836-905; 008-308-597-135-954; 009-885-874-541-907; 010-688-518-606-674; 018-552-581-098-658; 019-698-064-288-240; 020-311-734-615-623; 026-774-296-742-022; 032-286-659-568-014; 032-697-093-668-898; 034-916-306-834-918; 039-926-373-052-060; 044-353-273-186-518; 047-125-525-662-686; 047-630-600-014-492; 055-602-900-718-397; 056-205-328-777-528; 057-897-698-974-277; 060-808-935-547-406; 065-322-784-190-818; 066-235-037-082-291; 070-466-273-729-651; 074-014-335-505-388; 083-887-368-633-254; 088-719-274-824-438; 088-909-224-066-322; 091-619-263-117-914; 091-912-350-006-721; 093-778-033-321-400; 095-691-114-276-825; 096-188-680-470-989; 097-595-459-357-957; 097-939-114-561-254; 098-748-261-333-651; 111-090-978-711-139; 112-181-239-331-730; 120-937-322-045-732; 121-737-705-216-690; 124-912-663-881-389; 128-736-420-984-960; 137-563-945-652-129; 143-469-269-658-387; 148-338-977-232-362; 151-117-898-624-762; 153-276-821-446-997; 154-517-106-328-503; 162-110-149-751-921; 167-592-705-831-583; 185-741-441-912-96X; 187-762-907-549-695; 190-065-821-748-92X; 199-745-676-923-766,8,true,cc-by,gold 061-166-174-211-389,Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment.,2017-04-10,2017,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Abdulghani Ali Ahmed; Chua Xue Li,"Cloud storage service allows users to store their data online, so that they can remotely access, maintain, manage, and back up data from anywhere via the Internet. Although helpful, this storage creates a challenge to digital forensic investigators and practitioners in collecting, identifying, acquiring, and preserving evidential data. This study proposes an investigation scheme for analyzing data remnants and determining probative artifacts in a cloud environment. Using pCloud as a case study, this research collected the data remnants available on end-user device storage following the storing, uploading, and accessing of data in the cloud storage. Data remnants are collected from several sources, including client software files, directory listing, prefetch, registry, network PCAP, browser, and memory and link files. Results demonstrate that the collected remnants data are beneficial in determining a sufficient number of artifacts about the investigated cybercrime.",63,1,112,121,The Internet; Instruction prefetch; Client; Cloud storage; Directory; Computer science; Upload; Database; Cloud computing; Digital forensics,artifacts; cloud storage; cybercrime investigation; data remnants; digital forensic; evidence collection; forensic science; pCloud,,,"Ministry of Higher Education, Malaysia; COMSTECH-TWAS; OIC",http://umpir.ump.edu.my/id/eprint/20097/ https://dialnet.unirioja.es/servlet/articulo?codigo=6294608 https://www.onlinelibrary.wiley.com/doi/abs/10.1111/1556-4029.13506 https://onlinelibrary.wiley.com/doi/full/10.1111/1556-4029.13506 https://www.ncbi.nlm.nih.gov/pubmed/28397244 https://core.ac.uk/download/159194487.pdf,http://dx.doi.org/10.1111/1556-4029.13506,28397244,10.1111/1556-4029.13506,2607381141,,0,007-608-543-491-441; 020-095-682-416-265; 025-723-055-730-999; 034-773-286-616-44X; 058-631-300-195-90X; 077-532-025-251-756; 104-931-795-451-709; 130-093-060-692-651; 144-124-797-675-052; 162-320-494-571-003,5,true,, 061-289-036-312-640,Identification of forensic artifacts from the registry of windows 10 device in relation to idrive cloud storage usage,2022-02-01,2022,journal article,Bulletin of Electrical Engineering and Informatics,23029285; 20893191,Institute of Advanced Engineering and Science,,Adesoji A. Adesina; Ayodele Ariyo Adebiyi; Charles K. Ayo,"The accessibility of cloud storage over the internet as a result of cloud computing technology provides the opportunity to store, share and upload data online with the use of digital devices which can be accessed anytime and anywhere. These benefits can also be exploited by the cybercriminals to perform various criminal activities including storing and exchanging of illegal materials on cloud storage platforms. The logs of malicious usages can be obtained from the cloud service providers for forensic investigations but the privacy issue among other factors make it difficult for such logs to be shared. Therefore, there is a need to perform client-side forensics to be able to carry out forensic investigation on digital devices as related to the activities on cloud storage. This study identifies relevant artifacts that can be forensically extracted from the registry of a window 10 device that accessed iDrive cloud storage. The study explores different experimental setups for the forensic analysis and adopted an integrated conceptual digital forensic framework in the investigation process to detect relevant forensic artifacts from the registry of a windows 10 device. This study increases the knowledge of cloud storage forensics and the significance of registry analysis during digital investigations.",11,1,521,529,Cloud computing; Digital forensics; Upload; Computer science; Cloud storage; Identification (biology); Computer security; The Internet; Process (computing); Digital evidence; World Wide Web; Data science,,,,,,http://dx.doi.org/10.11591/eei.v11i1.3489,,10.11591/eei.v11i1.3489,,,0,,0,true,cc-by-sa,gold 061-353-104-200-573,Identifying Digital Forensic Frameworks Based on Processes Models,2021-01-14,2021,journal article,Iraqi Journal of Science,23121637; 00672904,University of Baghdad College of Science,,Talib M. Jawad Abbas; Ahmed Salem Abdulmajeed,Digital forensic is part of forensic science that implicitly covers crime related to computer and other digital devices. It‟s being for a while that academic studies are interested in digital forensics. The researchers aim to find out a discipline based on scientific structures that defines a model reflecting their observations. This paper suggests a model to improve the whole investigation process and obtaining an accurate and complete evidence and adopts securing the digital evidence by cryptography algorithms presenting a reliable evidence in a court of law. This paper presents the main and basic concepts of the frameworks and models used in digital forensics investigation.,,,249,258,Cryptography; Data science; Digital evidence; Computer science; Process (engineering); Digital forensics; Hash function,,,,,https://ijs.uobaghdad.edu.iq/index.php/eijs/article/view/3919 http://scbaghdad.edu.iq/eijs/index.php/eijs/article/view/3919,http://dx.doi.org/10.24996/ijs.2021.si.1.35,,10.24996/ijs.2021.si.1.35,3124116883,,0,002-183-091-505-394; 004-706-447-836-905; 004-872-169-627-620; 009-940-339-227-472; 014-713-031-827-317; 019-698-064-288-240; 020-944-423-224-895; 038-668-970-194-854; 065-850-676-779-341; 097-723-876-253-714; 109-482-615-363-500; 111-090-978-711-139; 199-745-676-923-766,0,true,,gold 061-395-179-431-451,A forensic examination of four popular cross‐platform file‐sharing apps with Wi‐Fi P2P,2020-09-28,2020,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Szu-Yuan Teng; Che-Yen Wen,"File-sharing apps with Wi-Fi hotspot or Wi-Fi Direct functions become more popular. They can work on multiple platforms and allow users to transfer files in a concealed manner. However, when criminals use these apps in illegal activities, it becomes an important issue for investigators to find digital evidence on multiple platforms. At present, there are few studies on this topic, and most of them are limited to the single platform problem. In this paper, we propose a forensic examination method for four popular cross-platform file-sharing apps with Wi-Fi hotspot and Wi-Fi Direct functions: Zapya, SHAREit, Xender, and Feem. We use 22 static and live forensic tools for 11 platforms to acquire, analyze, and classify the forensic artifacts. In our experiments, we find many useful forensic artifacts and classify them into six categories. The experimental results can support law enforcement investigations of digital evidence and provide information for future studies on other cross-platform file-sharing apps.",66,1,315,322,Data science; Hotspot (Wi-Fi); Law enforcement; Digital evidence; Forensic examination; Future studies; Computer science; File sharing; Cross-platform,Wi-Fi P2P; artifact analysis; cross-platform; digital evidence; file-sharing apps; mobile hotspot,,,,https://www.ncbi.nlm.nih.gov/pubmed/32986853 https://europepmc.org/article/MED/32986853 https://pubmed.ncbi.nlm.nih.gov/32986853/ https://onlinelibrary.wiley.com/doi/epdf/10.1111/1556-4029.14574,http://dx.doi.org/10.1111/1556-4029.14574,32986853,10.1111/1556-4029.14574,3089357476,,0,012-821-491-637-560; 033-052-944-470-280; 036-647-129-742-923; 069-542-265-862-15X; 092-748-508-652-278; 095-577-771-481-790; 128-899-379-292-298,1,false,, 061-508-901-307-537,Mass image classification,,2006,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Paul Sanderson,,3,4,190,195,Data mining; MD5; Thumbnail; Graphics; Information retrieval; Computer science; Process (engineering); Contextual image classification; Hash function,,,,,https://www.sciencedirect.com/science/article/pii/S1742287606001319 http://www.sciencedirect.com/science/article/pii/S1742287606001319 https://dblp.uni-trier.de/db/journals/di/di3.html#Sanderson06a,http://dx.doi.org/10.1016/j.diin.2006.10.010,,10.1016/j.diin.2006.10.010,1969528139,,0,,5,false,, 061-750-157-880-444,A Novel Framework design for Semantic based Image retrieval as a Cyber Forensic Tool,2019-08-30,2019,journal article,International Journal of Innovative Technology and Exploring Engineering,22783075,Blue Eyes Intelligence Engineering and Sciences Engineering and Sciences Publication - BEIESP,,Ramesh Babu P; Prof. E. Sreenivasa Reddy,"Cyber forensics includes the areas of computer forensics, network forensics and internet forensics. Digital images were commonly used in cyber forensics to collect criminal images, fingerprints, images of crime events and so on. Since the current cyber forensic tools are not very much furnished with the course of action of huge image data, it becomes a big issue to obtain image evidence to prosecute the criminal, most of the evidence is available in the form of raw semantics. Cyber forensic investigators often face the challenge of manually examining an enormous quantity of digital image information to identify direct evidence with the assistance of this semantics. Semantic based image retrieval system (SBIR) is therefore the recent and best option to solve this drawback. The main purpose of this research is to design for cyber forensic tools a novel framework of semantic-based image retrieval system. We therefore present a deep learning framework based on the Convolution neural network(GoogLeNet) for recognizing distinct facial expressions from the Yale facial image database for cyber associated forensic tools, the presented framework is very effective for classification and detection based on semantics or verbal descriptions. The network has accomplished a decent accuracy of 86.25 % after training.",8,10,2801,2808,Computer science; Semantics (computer science); Digital forensics; Convolutional neural network; Information retrieval; Image retrieval; Computer forensics; Image (mathematics); Network forensics; Deep learning; Data science; Artificial intelligence; Computer security; Programming language,,,,,,http://dx.doi.org/10.35940/ijitee.j9593.0881019,,10.35940/ijitee.j9593.0881019,,,0,,1,true,,gold 062-137-637-964-947,Can we continue to effectively police digital crime,2017-06-08,2017,journal article,Science & justice : journal of the Forensic Science Society,13550306,Forensic Science Society,United Kingdom,Graeme Horsman,"Abstract Now approximately 30 years old, the field of digital forensics is arguably facing some of its greatest challenges to date. Whilst currently supporting law enforcement in numerous criminal cases annually, questions are beginning to emerge regarding whether it can sustain this contribution, with digital crime remaining prevalent. In his first live interview in September 2015, Head of MI5, Andrew Parker indicated that individuals are now engaging in computing acts which are beyond the control of authorities, confirming earlier remarks made by British Prime Minister David Cameron in the wake of the Charlie Hebdo attacks. Such comments cast doubt on the future effectiveness of the digital forensic discipline and its ability to effectively investigate those who implement the latest forms of technology to carry out illicit acts. This article debates the controversial question, could we be facing an era where digital crime can no longer be effectively policed?",57,6,448,454,Sociology; Law; Law enforcement; Cyber crime; Prime minister; Computer forensics; Digital forensics,Crime; Cyber-crime; Digital forensics; Research; Security,,,,https://europepmc.org/article/MED/29173458 https://research.tees.ac.uk/ws/files/6385420/621796.pdf https://sure.sunderland.ac.uk/7400/ https://core.ac.uk/display/83955750 https://www.sciencedirect.com/science/article/abs/pii/S1355030617300801 https://www.ncbi.nlm.nih.gov/pubmed/29173458 http://www.sciencedirect.com/science/article/pii/S1355030617300801 https://research.tees.ac.uk/en/publications/can-we-continue-to-effectively-police-digital-crime https://core.ac.uk/download/83955750.pdf,http://dx.doi.org/10.1016/j.scijus.2017.06.001,29173458,10.1016/j.scijus.2017.06.001,2622507813,,0,004-305-936-893-970; 004-553-537-193-953; 007-460-815-938-318; 007-738-295-913-523; 016-983-559-523-04X; 019-831-293-743-518; 020-102-901-076-831; 021-635-319-328-35X; 027-023-893-191-352; 029-638-263-419-336; 029-743-976-871-124; 035-381-853-639-810; 046-240-766-487-724; 049-072-992-078-856; 051-554-120-123-211; 055-542-241-433-061; 057-182-959-994-032; 060-883-619-119-004; 064-214-213-364-517; 077-532-025-251-756; 078-327-902-374-330; 078-385-199-956-202; 086-419-575-179-359; 087-932-943-720-094; 090-752-043-508-733; 107-225-992-852-975; 107-864-540-671-760; 111-349-579-792-04X; 111-709-004-594-25X; 114-884-641-066-625; 134-369-102-934-63X; 134-709-778-635-793; 134-927-490-231-285; 137-298-307-797-644; 142-535-519-963-074; 165-354-182-797-278; 196-748-384-573-21X,22,true,cc-by-nc-nd,green 062-168-384-023-533,A novel principle to validate digital forensic models,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Dinesh Mothi; Helge Janicke; Isabel Wagner,"Abstract Digital forensic models (DFMs) form the base for any digital investigation because they guide the investigators with necessary steps and procedures to be taken during the investigation. State-of-the-art DFMs assume that it is safe to proceed from one stage of the investigation to the next without taking into account the anti-forensic techniques that could be used to defeat the investigation process. However, the findings in the literature shows that common phases in the digital forensic process such as acquisition, examination, analysis, and reporting are affected by various anti-forensic (AF) methods. To fill this gap, we propose an abstract digital forensic framework and validate DFMs by factoring in AF techniques affecting various phases in a digital forensic process. This validation principle can be used to enhance state-of-the-art DFMs to enable principled detection and countering of AF techniques before being applied to a real-time investigation case.",33,,200904,,Data mining; Factoring; Digital forensic process; One stage; Computer science; Base (topology); Process (engineering); Digital forensics,,,,,https://dora.dmu.ac.uk/handle/2086/19374 https://dblp.uni-trier.de/db/journals/di/di33.html#MothiJW20 https://www.sciencedirect.com/science/article/abs/pii/S1742287619303469 https://dora.dmu.ac.uk/bitstream/2086/19374/2/mothi2020using-acceptedversion.pdf,http://dx.doi.org/10.1016/j.fsidi.2020.200904,,10.1016/j.fsidi.2020.200904,3012281215,,0,000-018-093-052-18X; 002-295-796-487-823; 004-668-612-287-432; 005-102-962-333-180; 005-392-088-749-603; 005-997-056-658-776; 006-296-899-452-535; 017-444-026-554-998; 019-360-393-097-72X; 026-774-296-742-022; 032-487-265-797-544; 036-093-518-856-770; 036-178-978-714-311; 038-668-970-194-854; 047-630-600-014-492; 064-531-736-566-934; 065-322-784-190-818; 065-654-832-541-493; 066-235-037-082-291; 067-950-012-629-210; 078-730-781-174-18X; 078-817-460-650-140; 081-032-497-600-401; 086-153-084-433-759; 086-425-435-869-316; 103-103-595-689-579; 103-749-645-980-640; 106-041-428-637-948; 106-229-562-693-558; 112-181-239-331-730; 116-344-252-215-864; 132-355-634-397-986; 143-959-640-326-451; 144-614-319-071-141; 190-065-821-748-92X,5,true,,green 062-168-725-017-087,Reversible Data Hiding with Multiple Data for Multiple Users in an Encrypted Image,,2019,journal article,International Journal of Digital Crime and Forensics,19416210; 19416229,IGI Global,United States,Asad Malik; Hongxia Wang; Hanzhou Wu; Sani M. Abdullahi,"This article presents a new method which embeds multiple data from multiple users in an encrypted image. Here, the data from several users is embedded into an encrypted image. Initially, the image is encrypted by the owner followed by embedding phase, where the encrypted image is divided into four sets. Two of them are used to embed the secret data, while others are remain unaltered. The secret data from multiple users are embedded into Most Significant Bit (MSB) of the encrypted image using their location maps. In the extraction phase, an individual owner can extract the data from the encrypted image using the assigned private key. Subsequently, in the image decryption and recovery phase, images can be recovered using the unaltered neighbor pixels. However, the secret image can be recovered losslessly using the encryption key only. The proposed scheme allows the extraction of the embedded information only for the authorized user out of several users without knowing the cover information. Various simulations have been made related to this, which show the high embedding rate and accuracy.",11,1,46,61,Image (mathematics); Encryption; Artificial intelligence; Multiple data; Information hiding; Computer vision; Computer science,,,,,https://dro.deakin.edu.au/eserv/DU:30118760/wang-reversibledatahiding-2019.pdf http://dro.deakin.edu.au/view/DU:30118760 https://www.igi-global.com/article/reversible-data-hiding-with-multiple-data-for-multiple-users-in-an-encrypted-image/215321 https://dblp.uni-trier.de/db/journals/ijdcf/ijdcf11.html#MalikWWA19 https://doi.org/10.4018/IJDCF.2019010104 http://dro.deakin.edu.au/eserv/DU:30118760/wang-reversibledatahiding-2019.pdf,http://dx.doi.org/10.4018/ijdcf.2019010104,,10.4018/ijdcf.2019010104,2894264879,,0,000-674-909-702-866; 004-174-118-254-096; 006-228-856-224-693; 010-396-078-604-848; 011-843-862-179-329; 019-024-069-366-198; 027-713-600-996-99X; 031-916-173-923-44X; 032-973-625-093-342; 034-044-829-647-948; 041-330-225-152-304; 057-960-946-023-243; 062-828-542-298-702; 064-500-765-753-374; 072-109-029-332-705; 076-799-281-888-605; 077-051-046-289-158; 090-342-685-825-894; 140-115-203-194-228; 141-717-043-425-81X; 144-483-813-792-705; 148-243-203-391-966; 150-644-083-369-498; 165-216-838-671-788; 183-373-469-194-34X,11,true,,green 062-231-352-982-560,A Low Cost Approach to Disturbed Soil Detection Using Low Altitude Digital Imagery from an Unmanned Aerial Vehicle,2019-06-21,2019,journal article,Drones,2504446x,MDPI AG,,Elizabeth Parrott; Heather Panter; Joanne Morrissey; Frederic Bezombes,"Until recently, clandestine burial investigations relied upon witness statements to determine target search areas of soil and vegetation disturbance. Due to this, remote sensing technologies are increasingly used to detect fresh clandestine graves. However, despite the increased capabilities of remote sensing, clandestine burial searches remain resourcefully intensive as the police have little access to the technology when it is required. In contrast to this, Unmanned Aerial Vehicle (UAV) technology is increasingly popular amongst law enforcement worldwide. As such, this paper explores the use of digital imagery collected from a low cost UAV for the aided detection of disturbed soil sites indicative of fresh clandestine graves. This is done by assessing the unaltered UAV video output using image processing tools to detect sites of disturbance, therefore highlighting previously unrecognised capabilities of police UAVs. This preliminary investigation provides a low cost rapid approach to detecting fresh clandestine graves, further supporting the use of UAV technology by UK police.",3,2,50,,Environmental resource management; Cost approach; Remote sensing (archaeology); Law enforcement; Digital imagery; Low altitude; Video output; Computer science,,,,,https://www.mdpi.com/2504-446X/3/2/50/pdf https://www.mdpi.com/2504-446X/3/2/50 https://arro.anglia.ac.uk/704858/ https://researchonline.ljmu.ac.uk/id/eprint/10937/ https://core.ac.uk/download/pdf/211245675.pdf,http://dx.doi.org/10.3390/drones3020050,,10.3390/drones3020050,2950359147,,0,000-936-621-181-317; 004-086-552-514-938; 007-036-175-939-263; 010-726-577-336-365; 013-053-181-442-925; 014-622-835-623-244; 016-225-015-230-107; 019-763-357-518-984; 024-945-080-377-100; 025-094-429-798-148; 042-972-220-112-005; 045-433-260-867-695; 049-946-537-817-666; 060-915-204-261-555; 067-153-570-093-252; 067-882-624-748-50X; 068-837-552-709-758; 071-076-375-071-195; 072-154-679-222-332; 076-508-545-340-019; 079-602-164-850-584; 088-475-666-056-708; 093-901-176-420-140; 096-927-679-630-996; 115-036-762-754-162; 119-397-812-850-881; 122-000-509-151-666; 125-204-848-164-756; 150-214-683-035-037; 153-646-369-488-191; 162-720-643-751-597; 176-588-683-419-209,3,true,cc-by,gold 062-267-824-349-961,Mobile Forensic Images and Videos Signature Pattern Matching using M-Aho-Corasick,,2016,journal article,International Journal of Advanced Computer Science and Applications,21565570; 2158107x,The Science and Information Organization,,Yusoof Mohammed Hasheem; Kamaruddin Malik Mohamad; Ahmed Nur Elmi Abdi; Rashid Naseem,"Mobile forensics is an exciting new field of research. An increasing number of Open source and commercial digital forensics tools are focusing on less time during digital forensic examination. There is a major issue affecting some mobile forensic tools that allow the tools to spend much time during the forensic examination. It is caused by implementation of poor file searching algorithms by some forensic tool developers. This research is focusing on reducing the time taken to search for a file by proposing a novel, multi-pattern signature matching algorithm called M-Aho-Corasick which is adapted from the original Aho-Corasick algorithm. Experiments are conducted on five different datasets which one of the data sets is obtained from Digital Forensic Research Workshop (DFRWS 2010). Comparisons are made between M-Aho-Corasick using M_Triage with Dec0de, Lifter, XRY, and Xaver. The result shows that M-Aho-Corasick using M_Triage has reduced the searching time by 75% as compared to Dec0de, 36% as compared to Lifter, 28% as compared to XRY, and 71% as compared to Xaver. Thus, M-Aho-Corasick using M_Triage tool is more efficient than Dec0de, Lifter, XRY, and Xaver in avoiding the extraction of high number of false positive results.",7,7,,,World Wide Web; Forensic science; Signature (logic); Information retrieval; Triage; Forensic examination; Field (computer science); Computer science; Pattern matching; Mobile device forensics; Digital forensics,,,,,https://thesai.org/Publications/ViewPaper?Volume=7&Issue=7&Code=IJACSA&SerialNo=36 https://thesai.org/Downloads/Volume7No7/Paper_36-Mobile_Forensic_Images_and_Videos_Signature_Pattern.pdf,http://dx.doi.org/10.14569/ijacsa.2016.070736,,10.14569/ijacsa.2016.070736,2486975430,,0,043-686-094-043-705; 061-733-902-008-548; 069-371-522-171-939; 155-226-042-989-551,0,true,cc-by,hybrid 062-457-938-576-510,The unwanted effects of imprecise language in forensic science standards,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Angus M. Marshall,"The author has previously contributed to work on requirements definitions in digital forensic methods, and identified a potential gap which could not be fully explained at the time (Marshall and Paige, 2018). The former Forensic Science Regulator (FSR), with others, commented on this and challenged the finding (Tully et al., 2020). This paper re-addresses this issue and explores the issue of language used in the various standards from ISO/IEC 17 025 (2017) through to the FSR's own guidance on digital forensic method (Forensic Science Regulator, 2020), comparing it with language used in other related standards and in software engineering standards. From this, the author proposes that the language used by the FSR may cause an over-emphasis on establishing requirements for the ultimate end-user, to the detriment of requirements for purely internal use of processes. This can also result in overly complex methods, which are inherently difficult to fully validate, being produced. Furthermore, the use of overloaded terminology may also lead to confusion about some key concepts in the various stages of method validation and re-validation. • Examination of changing language and definitions in hierarchy of quality standards. • Impact of conflicting definitions and imprecise language on understanding of requirements. • Potential for accreditation of incorrect processes. • Potential for creation of conditions for cognitive and confirmation biased examinations.",40,,301349,301349,Terminology; Computer science; Digital forensics; Accreditation; Quality (philosophy); Confusion; Requirements engineering; Hierarchy; Software; Data science; Software engineering; Management science; Risk analysis (engineering); Computer security; Engineering; Linguistics; Psychology; Programming language; Law; Medicine; Philosophy; Epistemology; Political science; Psychoanalysis,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301349,,10.1016/j.fsidi.2022.301349,,,0,054-004-313-233-495,0,true,,bronze 063-123-140-684-041,Web scraping of ecstasy user reports as a novel tool for detecting drug market trends,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,James Maybir; Brendan Chapman,,37,,301172,,Geography; Data science; Ecstasy; Web scraping; Law enforcement; Population; Drug market; Logo; Distribution (economics); Pill,,,,,https://doi.org/10.1016/j.fsidi.2021.301172 https://dblp.uni-trier.de/db/journals/di/di37.html#MaybirC21 https://www.sciencedirect.com/science/article/pii/S2666281721000809 https://researchrepository.murdoch.edu.au/id/eprint/61043/,http://dx.doi.org/10.1016/j.fsidi.2021.301172,,10.1016/j.fsidi.2021.301172,3163824806,,0,001-289-322-273-076; 006-264-513-888-20X; 010-951-806-548-929; 015-587-919-488-217; 016-842-787-683-484; 017-176-620-267-416; 018-043-748-458-518; 024-071-039-195-669; 034-442-597-662-228; 039-416-847-379-170; 049-764-437-075-282; 049-998-894-809-503; 061-635-155-896-369; 068-102-781-279-977; 086-718-624-109-139; 090-058-306-680-00X; 091-221-471-483-708; 098-228-732-279-796; 098-258-905-665-52X; 102-544-883-151-092; 150-405-210-523-104; 150-415-595-506-303; 174-507-579-680-255; 183-358-323-531-90X,0,false,, 063-274-848-736-685,A Comprehensive and Harmonized Digital Forensic Investigation Process Model.,2015-08-10,2015,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Aleksandar Valjarevic; Hein S. Venter,"Performing a digital forensic investigation (DFI) requires a standardized and formalized process. There is currently neither an international standard nor does a global, harmonized DFI process (DFIP) exist. The authors studied existing state-of-the-art DFIP models and concluded that there are significant disparities pertaining to the number of processes, the scope, the hierarchical levels, and concepts applied. This paper proposes a comprehensive model that harmonizes existing models. An effort was made to incorporate all types of processes proposed by the existing models, including those aimed at achieving digital forensic readiness. The authors introduce a novel class of processes called concurrent processes. This is a novel contribution that should, together with the rest of the model, enable more efficient and effective DFI, while ensuring admissibility of digital evidence. Ultimately, the proposed model is intended to be used for different types of DFI and should lead to standardization.",60,6,1467,1483,Standardization; Class (computer programming); Data science; International standard; Harmonization; Scope (project management); Digital evidence; Computer science; Process (engineering); Digital forensics,digital evidence; digital forensics; forensic science; harmonization; investigation; model; process; standardization,,,,https://onlinelibrary.wiley.com/doi/full/10.1111/1556-4029.12823 https://repository.up.ac.za/handle/2263/51445 https://dialnet.unirioja.es/servlet/articulo?codigo=5292849 http://onlinelibrary.wiley.com/doi/10.1111/1556-4029.12823/abstract https://europepmc.org/article/MED/26258644 https://pubmed.ncbi.nlm.nih.gov/26258644/ https://repository.up.ac.za/bitstream/2263/51445/1/Valjarevic_Comprehensive_2015.pdf,http://dx.doi.org/10.1111/1556-4029.12823,26258644,10.1111/1556-4029.12823,2160898275,,0,007-321-225-339-593; 020-944-423-224-895; 041-059-041-666-09X; 104-249-629-797-999,29,true,,green 063-519-359-431-461,An efficient digital forensic model for cybercrimes investigation in cloud computing,2021-01-22,2021,journal article,Multimedia Tools and Applications,13807501; 15737721,Springer Science and Business Media LLC,Netherlands,Ezz El-Din Hemdan; D. H. Manjaiah,"In recent times, cloud computing adopted numerous organizations and enterprises for offering services with securely certifying that cloud providers against illegitimate activities. However, cost-effective forensics design and implementation for support the cloud-based cybercrimes investigation. To build cloud architecture support forensics is a significant and complex issue such as voluminous intricate legal, organizational, and technical defies due to the virtualization, distributing, and dynamic nature of cloud systems. Therefore, this paper presents an efficient Cloud Forensics Investigation Model (CFIM) to investigate cloud crimes in a forensically sound and timely fashion. Besides, the proposed system supports the concept of Forensic as a Service (FaaS) that provide innumerable benefits of conducting digital forensics through using Forensic Server on the cloud side. The investigational results proved that the proposed system can assist the digital investigators in their mission of investigation of cybercrimes in the cloud in a proficient manner.",80,9,14255,14282,Forensic science; Cloud forensics; Service (systems architecture); Computer security; Computer science; Virtualization; Cloud computing; Digital forensics,,,,,https://link.springer.com/article/10.1007/s11042-020-10358-x https://dblp.uni-trier.de/db/journals/mta/mta80.html#HemdanM21 https://doi.org/10.1007/s11042-020-10358-x,http://dx.doi.org/10.1007/s11042-020-10358-x,,10.1007/s11042-020-10358-x,3125692403,,0,004-656-167-784-562; 005-647-704-356-945; 020-935-855-484-274; 021-170-286-847-139; 039-189-453-189-406; 040-238-768-908-245; 041-879-975-858-398; 048-149-094-961-264; 052-337-723-472-520; 056-905-403-377-274; 063-753-562-544-942; 066-785-118-231-304; 067-860-693-051-223; 069-145-107-243-338; 083-857-356-361-530; 088-909-224-066-322; 099-633-821-597-96X; 104-609-359-888-183; 116-056-471-784-278; 124-912-663-881-389; 125-817-456-334-439; 129-642-811-953-052; 136-798-153-498-59X; 144-124-797-675-052; 151-551-319-524-065; 157-779-950-410-958; 160-331-694-886-887; 194-016-717-022-461,9,false,, 063-661-720-912-563,Analisis Media Sosial Facebook Lite dengan tools Forensik menggunakan Metode NIST,2020-11-17,2020,journal article,"Techno (Jurnal Fakultas Teknik, Universitas Muhammadiyah Purwokerto)",25799096; 14108607,Lembaga Publikasi Ilmiah dan Penerbitan Universitas Muhammadiyah Purwokerto,,Rauhulloh Ayatulloh Khomeini Noor Bintang; Rusydi Umar; Anton Yudhana,"Social Media is becoming very popular among the public today, and the increasing number of social media use has of course a good or bad impact on the course of human life, for example the bad impact is doing cyberbully or chating on social media. Digital forensics is one of the sciences for how to catch criminals in digital which will be needed in evidence in court. Social media criminals need Smartphones to commit digital cybercrime. This research will raise evidence of digital crimes on the Facebook Lite application using forensics. In this study, the forensic tool that will be used is the MOBILEedit Forensic Pro forensic tools with the help of using methods NIST National Institute Of Standars Techlogogy. NIST has a good workflow for extracting digital forensic data. The research results will be obtained in the form of accounts Id, audio, conversations, and images",21,2,125,130,Internet privacy; NIST; Commit; Workflow; Cybercrime; Human life; Computer science; Social media; Digital forensics,,,,,http://jurnalnasional.ump.ac.id/index.php/Techno/article/download/8494/3602 http://jurnalnasional.ump.ac.id/index.php/Techno/article/view/8494/3602 https://doaj.org/article/eee14c43ee4f47bf88c4da1a19962cee,http://dx.doi.org/10.30595/techno.v21i2.8494,,10.30595/techno.v21i2.8494,3101211688,,0,,0,true,cc-by,gold 063-682-957-318-485,Trusted forensics scheme based on digital watermark algorithm in intelligent VANET,2019-05-16,2019,journal article,Neural Computing and Applications,09410643; 14333058,Springer Science and Business Media LLC,Germany,Zhaofeng Ma; Ming Jiang; Weihua Huang,"Trusted forensics is one of the most important problems in VANET, and it often needs continuous video monitoring, once break out emergent vehicle accidents, then specific staff members take steps for forensics to obtain facts and define responsibility. Traditional forensics exists problems of inaccurate information, unfair responsibility definition and risk of leakage of user’s privacy. To solve the above problem, in this paper, we proposed a trusted forensics scheme based on digital image watermark in intelligent VANET, in which we proposed technical and fair algorithms for trusted forensics, and the trusted forensics scheme includes basic forensics parameter data obtaining critical forensics data automatic generation and forensics data extraction. Once there vehicle accident occurred, the forensics system first obtains the location, timestamp, forensics device data as basic forensics parameter data, and then, it embeds the forensics parameter as watermark into the real-time vehicle accident photograph by the proposed digital watermark algorithm, and thus, the real-time and undeniable forensics data are automatic generated as evidence; when necessary, the forensics system can extract the evidence data and watermark data from the critical forensics data. The proposed scheme can detect the content integrity of image data and even find out tampering mark when the image data are tampered. Additionally, we used neural network algorithm for vehicle license plate recognition and rapid vehicle information gathering. Finally, experiments evaluations manifest the proposed is forensics scheme is secure, robust, and efficient in vehicle forensics.",32,6,1665,1678,Timestamp; Algorithm; Forensic science; Digital watermarking; Watermark; Vehicular ad hoc network; Scheme (programming language); Data extraction; License; Computer science; Digital image,,,,,https://dblp.uni-trier.de/db/journals/nca/nca32.html#MaJH20 https://link.springer.com/article/10.1007/s00521-019-04246-1 https://doi.org/10.1007/s00521-019-04246-1,http://dx.doi.org/10.1007/s00521-019-04246-1,,10.1007/s00521-019-04246-1,2946822226,,0,003-040-355-096-378; 011-835-617-244-326; 014-130-776-302-166; 021-048-723-685-07X; 037-778-865-415-046; 044-864-601-790-058; 049-329-917-347-084; 050-601-465-823-611; 050-891-066-907-517; 071-253-739-610-933; 077-739-261-737-967; 079-206-727-458-961; 094-159-442-759-925; 094-493-438-801-573; 099-010-410-958-352; 121-426-157-796-410; 155-003-343-079-553; 171-768-894-018-612; 176-947-927-660-253,4,false,, 063-837-705-607-866,Prelim i - Editorial Board,,2020,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,33,,300989,300989,Editorial board,,,,,,http://dx.doi.org/10.1016/s2666-2817(20)30223-7,,10.1016/s2666-2817(20)30223-7,,,0,,0,true,,bronze 063-964-488-825-120,Forming an investigative opinion in digital forensics,2022-05-09,2022,journal article,WIREs Forensic Science,25739468,Wiley,,Graeme Horsman,,,,,,Digital forensics; Digital evidence; Computer forensics; Computer science; Internet privacy; Data science,,,,,,http://dx.doi.org/10.1002/wfs2.1460,,10.1002/wfs2.1460,,,0,001-691-716-197-657; 003-232-363-219-004; 003-275-658-705-341; 003-982-227-180-136; 010-963-610-208-920; 032-451-540-235-796; 036-189-930-199-369; 047-386-524-667-691; 054-004-313-233-495; 058-717-000-287-105; 064-549-392-650-90X; 071-616-341-516-576; 075-056-106-679-562; 102-243-142-344-71X; 111-488-239-742-003; 173-145-269-859-717; 174-773-910-564-783,0,false,, 064-062-472-395-879,The windows IconCache.db: A resource for forensic artifacts from USB connectable devices,,2013,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Jan Collie,,9,3,200,210,Operating system; Installation; Executable; Host (network); Resource (Windows); Database file; Computer science; USB,,,,,https://www.sciencedirect.com/science/article/pii/S1742287613000078 https://dblp.uni-trier.de/db/journals/di/di9.html#Collie13 http://oro.open.ac.uk/70045/,http://dx.doi.org/10.1016/j.diin.2013.01.006,,10.1016/j.diin.2013.01.006,2031210561,,0,008-514-053-898-213; 009-182-817-779-31X; 040-393-580-637-973; 061-139-633-577-862; 103-469-434-181-498; 135-570-934-604-685; 141-125-834-658-119; 142-226-580-142-17X; 148-698-839-036-557,13,false,, 064-153-704-547-354,Recommendations for capturing signatures digitally to optimize their suitability for forensic handwriting examination.,2020-11-18,2020,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Barbora Geistová Čakovská; Nikolaos Kalantzis; Tomasz Dziedzic; Carina Fernandes; Jan Zimmer; M.J. Branco; Jonathan Heckeroth; Kristofer Axelsson Spjuth; Erich Kupferschmid; Paolo Vaccarone; Axel Kerkoff,"The use of digitally captured signatures in everyday course of business increases annually and, compared to pen and paper signatures, provides various advantages concerning the administration of documents. These signatures may also become subjects of a forensic handwriting examination and, therefore, in order to optimize their suitability for this purpose, they should satisfy several requirements. This paper presents recommendations drawn up by forensic handwriting examiners associated with ENFHEX (ENFSI) in a project aimed at defining best practices in forensic examination of digitally captured signatures. The paper is dedicated mainly to hardware and software developers, providers, and user institutions of digitally captured signature technologies to improve their practice to a level optimized for forensic handwriting examination. The most important requirements outlined in this paper concern digitally captured signature data, hardware, and software used to acquire these data, as well as optimized signing conditions. Following these requirements ensures the suitability of signature data for forensic handwriting examination and, consequently, increases the reliability of the associated electronic documents. In spite of rapidly evolving technology, they can serve as a solid basis for understanding and consideration of the optimal use of digitally captured signatures for signing electronic documents.",66,2,743,747,Signature (logic); Best practice; Information retrieval; Software; Handwriting; Forensic examination; Computer science; Reliability (statistics); Metadata,capturing hardware and software; digitally captured signature; forensic handwriting examination; metadata; numerical data; signing condition,,,Internal Security Fund of the European Union (Project 779485 - STEFA - ISFP-2016-AG-IBA-ENFS),https://europepmc.org/article/MED/33206397 https://www.ncbi.nlm.nih.gov/pubmed/33206397 https://onlinelibrary.wiley.com/doi/full/10.1111/1556-4029.14627 https://pubmed.ncbi.nlm.nih.gov/33206397/,http://dx.doi.org/10.1111/1556-4029.14627,33206397,10.1111/1556-4029.14627,3106460388,,0,018-154-248-980-520; 018-960-538-999-613; 022-810-587-732-756; 092-580-969-032-163; 162-563-903-287-393,2,false,, 064-203-195-549-88X,Comparative Study and Analysis on Integrity of Data Files Using Different Tools and Techniques,2021-06-01,2021,journal article,Journal of Information Security and Cybercrimes Research,16587790; 16587782,Naif Arab University for Security Sciences,,Kumarshankar Raychaudhuri; M. George Christopher; Nayeem Abbas Hamdani,"Digital forensic investigation is the scientific process of collection, preservation, examination, analysis, documentation and presentation of digital evidence from digital devices, so that the evidence is in compliance with legal terms and acceptable in a court of law. Integrity of the digital evidence is an indispensable part of the investigation process and should be preserved to maintain the chain of custody. This is done through hashing technique using standardized forensic tools. However, while handling the evidences , lack of knowledge might lead to unintentional alteration of computed hash. This violates the chain of custody and makes the evidence inadmissible in a court of law. In this paper, our objective is to determine the different conditions under which the original hash value of a digital evidence changes. For this, we create different scenarios using sample data files and compute their hash values. A comparative study and analysis are done to determine in which scenario the original hash value of the data file changes. The results of the research will prove useful and essential for Criminal Justice Functionaries in gaining knowledge about various conditions leading to the change in hash value of digital evidence and therefore, avoid its accidental alteration during forensic investigation/examination.",4,1,43,54,Hash function; Computer science; Digital evidence; Documentation; Digital forensics; Computer security; Audit; Process (computing); Data science,,,,,,http://dx.doi.org/10.26735/symq8715,,10.26735/symq8715,,,0,,0,true,cc-by-nc,gold 064-313-388-228-262,A STATE-OF-THE-ART REVIEW OF CLOUD FORENSICS,,2014,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Sameera Almulla; Youssef Iraqi; Andrew Jones,"Cloud computing and digital forensics are emerging elds of technology. Unlike traditional digital forensics where the target environment can be almost completely isolated, acquired and can be under the investigators control; in cloud environments, the distribution of computation and storage poses unique and complex challenges to the investigators. Recently, the term \cloud forensics"" has an increasing presence in the eld of digital forensics. In this state-of-the-art review, we included the most recent research eorts that used \cloud forensics"" as a keyword and then classify the literature into three dimensions: (1) survey-based, (2) technology-based and (3) forensics-procedural-based. We discuss widely accepted standard bodies and their eorts to address the current trend of cloud forensics. Our aim is not only to reference related work based on the discussed dimensions, but also to analyse them and generate a mind map that will help in identifying research gaps. Finally, we summarize existing digital forensics tools and the available simulation environments that can be used for evidence acquisition, examination and cloud forensics test purposes.",9,4,7,28,Mind map; Cloud forensics; State of the art review; Computer security; Computer science; Cloud computing; Digital forensics,,,,,https://commons.erau.edu/jdfsl/vol9/iss4/2/ https://core.ac.uk/display/44209296 https://commons.erau.edu/cgi/viewcontent.cgi?article=1190&context=jdfsl https://doaj.org/article/f95b981ea64a450ba0505677d36c4c8b https://dblp.uni-trier.de/db/journals/jdfsl/jdfsl9.html#AlmullaIJ14,http://dx.doi.org/10.15394/jdfsl.2014.1190,,10.15394/jdfsl.2014.1190,1757283378,,0,001-100-315-088-620; 001-105-589-691-307; 002-768-711-065-857; 008-308-597-135-954; 016-817-717-158-92X; 017-708-113-657-756; 020-241-721-441-854; 025-319-861-345-580; 026-163-378-046-984; 027-031-165-049-753; 034-773-286-616-44X; 038-845-346-494-188; 039-238-243-413-527; 041-879-975-858-398; 042-603-990-097-418; 042-969-030-470-170; 056-122-492-187-163; 057-421-097-368-120; 061-856-990-083-088; 063-600-821-499-481; 068-823-517-701-518; 091-619-263-117-914; 092-039-178-633-223; 095-691-114-276-825; 099-520-470-483-918; 100-881-789-662-974; 100-892-010-834-933; 101-091-831-428-576; 111-660-907-279-133; 116-317-110-770-148; 121-704-965-852-836; 124-912-663-881-389; 125-817-456-334-439; 144-124-797-675-052; 155-855-942-114-621; 161-201-342-740-519; 167-681-711-973-339; 169-842-425-922-642; 170-108-067-251-840; 173-952-459-161-812; 178-467-155-611-813; 194-016-717-022-461,21,true,cc-by-nc,gold 064-406-213-787-209,Image Processing Operations Identification via Convolutional Neural Network,2020-02-10,2020,journal article,Science China Information Sciences,1674733x; 18691919; 18622836; 10092757,Springer Science and Business Media LLC,China,Bolin Chen; Haodong Li; Weiqi Luo,"In recent years, image forensics has attracted more and more attention, and many forensic methods have been proposed for identifying image processing operations. Up to now, most existing methods are based on hand crafted features, and just one specific operation is considered in their methods. In many forensic scenarios, however, multiple classification for various image processing operations is more practical. Besides, it is difficult to obtain effective features by hand for some image processing operations. In this paper, therefore, we propose a new convolutional neural network (CNN) based method to adaptively learn discriminative features for identifying typical image processing operations. We carefully design the high pass filter bank to get the image residuals of the input image, the channel expansion layer to mix up the resulting residuals, the pooling layers, and the activation functions employed in our method. The extensive results show that the proposed method can outperform the currently best method based on hand crafted features and three related methods based on CNN for image steganalysis and/or forensics, achieving the state-of-the-art results. Furthermore, we provide more supplementary results to show the rationality and robustness of the proposed model.",63,3,1,3,Digital image processing; Steganalysis; Machine learning; Feature detection (computer vision); Artificial intelligence; Pattern recognition; Computer science; Convolutional neural network; Channel (digital image); Image processing; Discriminative model; Robustness (computer science); Image forensics; Identification (information),,,,,https://arxiv.org/abs/1709.02908v1 https://arxiv.org/pdf/1709.02908.pdf http://arxiv.org/abs/1709.02908,http://dx.doi.org/10.1007/s11432-018-9492-6,,10.1007/s11432-018-9492-6,2754544178; 3099914160,,0,000-679-477-475-489; 001-413-792-295-769; 012-708-974-501-567; 019-057-100-507-958; 022-001-306-594-001; 022-104-701-743-259; 023-805-082-979-008; 036-001-472-867-413; 043-801-596-710-759; 044-860-657-165-931; 053-407-707-474-742; 062-261-237-211-047; 067-303-718-151-959; 067-913-828-134-760; 067-978-433-455-065; 068-082-205-208-585; 068-214-206-020-068; 072-044-147-034-528; 076-527-439-347-165; 101-435-060-435-239; 104-138-163-068-767; 112-077-011-771-30X; 124-091-157-560-712; 135-497-576-853-025; 145-108-829-550-497; 178-606-451-314-116; 180-552-666-228-97X; 190-885-498-995-640,19,true,,green 064-409-347-985-677,Forensic Science Research Summary for Forgery Detection of Digital Images,2020-02-28,2020,journal article,International Journal of Engineering and Advanced Technology,22498958,Blue Eyes Intelligence Engineering and Sciences Engineering and Sciences Publication - BEIESP,,null Monika; Mriirs Faridabad degree in Ece; Dipali Bansal; null Director-IQAC,"An important measure of proof collection, storage, and authentication in forensic sciences, which decide the safety and security of any system documents, which can be either portable document formats or scanned images. To gather evidence, or plan a forensic investigation digital images are secured with different modern methodologies. Digital image analysis includes image recovery and surveillance for image information improvement. The goal of forgery detection is to maximize the extraction of information from manipulated images, particularly noisy and post-processed images. Because digital image processing is becoming popular with many advantages in scientific and engineering applications, the forgery techniques are also growing at a rapid rate. Therefore, the main focus is on different types of forgery detection in digital image processing with the help of all transform techniques and comparing their best results for further improvement in order to generate a new approach for a future forensic science investigation.",9,3,1608,1618,Forensic science; Artificial intelligence; Forgery detection; Computer vision; Computer science; Digital image,,,,,https://zenodo.org/record/5575060,http://dx.doi.org/10.35940/ijeat.b2563.029320,,10.35940/ijeat.b2563.029320,3211160506,,0,,1,true,cc-by,gold 064-495-184-947-564,Remote forensics,,2004,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Philip Sealey,,1,4,261,265,Computer security; Computer science,,,,,http://dl.acm.org/citation.cfm?id=2307217.2307246,http://dx.doi.org/10.1016/j.diin.2004.11.002,,10.1016/j.diin.2004.11.002,2911783704,,0,,7,false,, 064-794-485-696-850,Establishing forensics capabilities in the presence of superuser insider threats,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Bharat Manral; Gaurav Somani,,38,,301263,,Information technology management; Insider threat; Insider; Superuser; Service (systems architecture); Security analysis; Computer security; Countermeasure (computer); Computer science; Access control,,,,,https://www.sciencedirect.com/science/article/pii/S2666281721001803,http://dx.doi.org/10.1016/j.fsidi.2021.301263,,10.1016/j.fsidi.2021.301263,3188545728,,0,002-625-978-577-247; 003-126-053-087-131; 004-274-081-845-287; 006-435-365-660-88X; 007-832-595-971-443; 010-791-676-072-730; 018-948-094-812-86X; 021-486-901-460-202; 022-564-463-934-451; 029-008-872-980-253; 035-565-993-122-262; 042-213-928-103-801; 045-742-323-849-793; 046-143-775-958-052; 057-499-209-483-714; 062-002-531-320-264; 063-475-319-066-007; 068-843-092-516-509; 069-914-322-295-556; 078-598-867-814-365; 088-101-969-055-693; 088-568-925-253-101; 091-267-543-249-421; 095-453-755-527-619; 100-190-378-575-89X; 100-947-231-339-501; 103-749-645-980-640; 107-002-676-335-230; 120-575-335-332-233; 124-837-341-752-034; 134-926-807-852-182; 136-014-816-690-921; 153-219-957-625-299; 161-559-022-705-032; 163-853-761-819-084; 168-172-053-240-694; 169-618-113-093-308; 174-186-817-525-708; 181-973-779-953-993,0,false,, 064-866-800-584-825,Prelim i - Editorial Board,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,39,,301321,301321,Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00247-x,,10.1016/s2666-2817(21)00247-x,,,0,,0,true,,bronze 064-938-865-982-891,SpeechToText: An open-source software for automatic detection and transcription of voice recordings in digital forensics,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Miguel Cerdeira Negrão; Patricio Domingues,,38,,301223,,Transcription (linguistics); Full text search; Voice activity detection; Software; Laptop; Jython; Speech recognition; Computer science; Android (operating system); Digital forensics,,,,,https://www.sciencedirect.com/science/article/abs/pii/S2666281721001311 https://doi.org/10.1016/j.fsidi.2021.301223,http://dx.doi.org/10.1016/j.fsidi.2021.301223,,10.1016/j.fsidi.2021.301223,3181867036,,0,003-305-347-473-509; 009-948-671-026-644; 010-620-450-221-40X; 014-508-812-794-295; 019-601-653-291-874; 023-660-936-691-266; 035-198-069-725-410; 036-353-824-536-853; 044-051-353-134-730; 045-377-982-386-523; 046-936-814-184-732; 046-985-863-475-30X; 047-156-819-206-442; 054-986-472-236-744; 056-113-208-119-717; 057-360-375-607-114; 059-149-073-001-124; 059-494-123-799-435; 063-050-303-219-941; 063-136-871-110-749; 069-287-537-141-255; 071-327-829-062-351; 076-259-993-263-34X; 080-226-855-967-158; 086-223-698-549-183; 087-143-542-784-087; 099-403-637-973-562; 105-351-601-997-478; 111-785-821-519-342; 113-409-470-189-794; 118-309-541-911-814; 118-848-462-810-989; 123-446-532-697-045; 126-890-802-449-210; 138-570-997-166-95X; 141-668-824-215-622; 155-758-692-373-705; 163-330-758-807-944; 166-547-932-138-819; 184-925-556-656-468; 193-052-734-829-39X; 199-172-967-270-034,2,false,, 065-452-675-566-99X,Case-Relevance Information Investigation: Binding Computer Intelligence to the Current Computer Forensic Framework,,2005,journal article,International Journal of Digital Evidence,,,,Ruibin Gong; Tony Kai Yun Chan; Mathias Gaertner,"Computer Forensics has grown rapidly in recent years. The current computer forensic investigation paradigm is laborious and requires significant expertise on the part of the investigators. This paper proposes a highly automatic and efficient framework to provide the Case-Relevance information, by binding computer intelligence technology to the current computer forensic framework. Computer intelligence is expected to offer more assistance in the investigation procedures and better knowledge reuse and sharing in computer forensics. Background Cybercrime is a mirror of the dark side of human society in the cyberworld. Its countermeasure, Computer Forensics, also referred as Digital Forensic Science, has been explicitly defined as, The use of scientifically derived and proven methods toward the preservation, collection, validation, identification, analysis, interpretation, documentation and presentation of digital evidence derived from digital sources for the purpose of facilitating or furthering the reconstruction of events found to be criminal, or helping to anticipate unauthorized actions shown to be disruptive to planned operations. [14] The process of ""identifying, preserving, analyzing, and presenting digital evidence in a manner that is legally acceptable via the application of computer technology to the investigation of computer based crime"" is called Forensic Computing [11] or Digital Evidence Investigation. As almost every piece of digital evidence could be challenged, computer forensic investigators are required to follow a rigorous process path. The work of the First Digital Forensics Research Workshop (DFRWS) [14] established a solid ground and allowed",4,,,,Computational intelligence; Computational criminology; Data science; Cybercrime; Digital evidence; Computer technology; Computer security; Computer science; Computer forensics; Documentation; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/ijde/ijde4.html#RuibinYG05 https://www.utica.edu/academic/institutes/ecii/publications/articles/B4A6A102-A93D-85B1-96C575D5E35F3764.pdf,https://dblp.uni-trier.de/db/journals/ijde/ijde4.html#RuibinYG05,,,2159280848,,0,020-944-423-224-895; 032-697-093-668-898; 035-448-415-847-226; 038-668-970-194-854; 085-669-579-012-375; 124-418-163-035-203; 145-900-307-293-904; 167-153-240-063-830; 179-703-555-795-891; 199-745-676-923-766,46,false,, 065-517-309-064-222,Avoiding Burnout at the Digital Forensics Coalface: Targeted Strategies for Forensic Agencies in the Management of Job-related Stress,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Sally F. Kelty; Emma J. McQueen; Carly Pymont; Nathan Green,"Abstract Recent evidence shows digital forensics experts are at risk of burnout and job-related stress. This may be related to the increase in digital evidence and/or repetitive exposure to challenging material, either face to face or via digital imagery in real time or post-event. This exposure includes footage and/or sound recording of extreme violence, child exploitation, suicide, and death scenes. This increase in the risk of stress also aligns with the changing nature of policing with rates of serious crime, especially robbery and homicide decreasing, while digital crime in many countries increases. This increase changes workload demands and requires new skillsets in addition to traditional investigation methods. Workplace stress has high financial and personal costs, impacting organisations, teams, family, friends, and the individual. For organisations and teams, occupational stress is associated with increases in workplace accidents, absenteeism, early retirement, higher intention to quit, lower motivation and disillusionment with work, all of which impacts the cohesion of forensic teams. The aim of this paper is to present a set of key evidence-based, targeted strategies that forensic science and policing agencies can roll-out in order to manage workplace stress, thereby managing the risk of higher turnover, absenteeism and lower workplace innovation.",38,,301127,,Burnout; Absenteeism; Occupational stress; Face-to-face; Workload; Digital evidence; Computer science; Homicide; Applied psychology; Digital forensics,,,,Australian Federal Police,https://dfrws.org/presentation/avoiding-burnout-at-the-digital-forensics-coalface-targeted-strategies-for-forensic-agencies-in-the-management-of-job-related-stress/ https://researchprofiles.canberra.edu.au/en/publications/avoiding-burnout-at-the-digital-forensics-coalface-targeted-strat https://dfrws.org/wp-content/uploads/2021/01/2021_APAC_paper-avoiding_burnout_at_the_digital_forensics_coalface.pdf https://www.sciencedirect.com/science/article/pii/S2666281721000251,http://dx.doi.org/10.1016/j.fsidi.2021.301127,,10.1016/j.fsidi.2021.301127,3124493882,,0,003-465-350-737-256; 003-515-309-951-413; 003-839-478-173-887; 004-667-286-603-895; 007-787-000-383-125; 009-627-096-122-615; 015-984-449-641-211; 017-173-570-144-261; 017-805-463-199-729; 021-201-295-792-01X; 021-364-407-964-047; 025-185-383-460-70X; 028-166-854-587-500; 028-666-896-391-785; 030-223-936-109-852; 030-461-878-149-015; 031-614-539-275-181; 031-765-295-875-09X; 033-887-519-970-976; 040-667-269-018-788; 041-988-413-602-967; 042-544-068-549-235; 045-583-164-562-588; 046-608-153-837-157; 050-389-552-568-721; 051-704-112-565-897; 053-661-832-365-258; 056-754-398-867-512; 056-790-021-627-621; 061-152-473-911-898; 061-650-697-120-894; 062-605-298-093-546; 066-824-458-827-082; 068-715-824-881-688; 073-538-637-110-630; 076-978-451-221-437; 079-819-982-015-318; 081-073-384-566-025; 085-851-989-301-541; 086-211-015-805-881; 088-426-769-403-257; 096-218-094-826-721; 097-794-150-708-79X; 102-845-377-786-086; 105-024-117-660-277; 112-083-919-827-335; 112-666-147-939-621; 119-781-528-548-569; 123-344-253-312-598; 125-396-525-564-682; 125-508-990-959-413; 126-995-721-959-658; 134-557-570-320-178; 136-946-132-481-985; 138-435-369-121-724; 144-342-598-085-266; 144-488-546-528-952; 155-144-144-803-210; 157-454-151-474-60X; 161-423-003-024-482; 162-494-674-103-725; 168-037-498-947-236,0,true,cc-by-nc-nd,hybrid 065-615-931-533-569,Open Source Tools for Phishing Investigations,,2006,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,J. Philip Craiger; Paul Burke; Christopher Marberry,"ABSTRACT With the steady rise of online fraud [1], responders have often had to rely on computer forensic tools to determine the exact nature of incidents. Several commercial digital forensics software suites are available for examining digital media related to computer crimes. Although these tools provide examiners with extensive capabilities for forensic examinations, they can have significant drawbacks in terms of training, initial costs of the tool, and yearly maintenance upgrades. Alternatively, there are free and open source software (FOSS) tools with equivalent functionally that examiners can use to perform most of the same tasks possible by commercial applications. This article describes some FOSS tools that are suited for general forensic examinations, with an emphasis on those capable of the primary forensic examination tasks relevant to phishing cases, including identifying malware, automated and manual recovery of deleted files, creating a timeline, and identifying Web browser trace evidence.",1,3,223,229,World Wide Web; Digital media; Trace evidence; Data science; Software; Computer science; Timeline; Malware; Computer forensics; Phishing; Digital forensics,,,,,https://works.bepress.com/john_craiger/14/ https://dblp.uni-trier.de/db/journals/jdfp/jdfp1.html#CraigerBM06 https://www.tandfonline.com/doi/full/10.1080/15567280601142129,http://dx.doi.org/10.1080/15567280601142129,,10.1080/15567280601142129,2044480279,,0,,1,false,, 065-671-045-136-370,Leveraging CybOX to standardize representation and exchange of digital forensic information,,2015,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Eoghan Casey; Gregory Thomas Back; Sean Barnum,"With the growing number of digital forensic tools and the increasing use of digital forensics in various contexts, including incident response and cyber threat intelligence, there is a pressing need for a widely accepted standard for representing and exchanging digital forensic information. Such a standard representation can support correlation between different data sources, enabling more effective and efficient querying and analysis of digital evidence. This work summarizes the strengths and weaknesses of existing schemas, and proposes the open-source CybOX schema as a foundation for storing and sharing digital forensic information. The suitability of CybOX for representing objects and relationships that are common in forensic investigations is demonstrated with examples involving digital evidence. The capability to represent provenance by leveraging CybOX is also demonstrated, including specifics of the tool used to process digital evidence and the resulting output. An example is provided of an ongoing project that uses CybOX to record the state of a system before and after an event in order to capture cause and effect information that can be useful for digital forensics. An additional open-source schema and associated ontology called Digital Forensic Analysis eXpression (DFAX) is proposed that provides a layer of domain specific information overlaid on CybOX. DFAX extends the capability of CybOX to represent more abstract forensic-relevant actions, including actions performed by subjects and by forensic examiners, which can be useful for sharing knowledge and supporting more advanced forensic analysis. DFAX can be used in combination with other existing schemas for representing identity information (CIQ), and location information (KML). This work also introduces and leverages initial steps of a Unified Cyber Ontology (UCO) effort to abstract and express concepts/constructs that are common across the cyber domain.",12,,S102,S110,World Wide Web; Schema (psychology); Data science; Specific-information; Digital evidence; Cyber threat intelligence; Incident response; Computer science; Strengths and weaknesses; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/di/di12.html#CaseyBB15 https://www.sciencedirect.com/science/article/pii/S1742287615000158 http://www.sciencedirect.com/science/article/pii/S1742287615000158 https://core.ac.uk/display/82037839,http://dx.doi.org/10.1016/j.diin.2015.01.014,,10.1016/j.diin.2015.01.014,2003744325,,0,001-170-920-458-777; 006-008-915-210-060; 011-051-740-313-213; 016-873-099-383-893; 024-735-069-822-749; 033-241-817-699-448; 056-715-378-869-201; 058-052-081-943-595; 060-650-561-577-338; 061-549-181-856-861; 104-758-205-558-797; 105-102-860-204-164; 117-239-595-156-183; 153-474-160-113-956; 154-517-106-328-503,47,true,cc-by-nc-nd,hybrid 065-829-886-071-062,A report on the current status of radiology in forensic odontology in the Indian Scenario,,2017,journal article,International Journal of Forensic Odontology,25425013,MM Publishers,,Selwin Gabriel Samuel; Astha Pandey; null Dahiya,"Forensic odontology deals with various forensics aspects of matters pertaining to dental and perioral tissues. As radiology entered the medical and dental fields for various applications, forensic scientists embraced radiological principles for identification and investigative purposes. Radiographic investigation is a reliable and a standard means by which prime procedures such as age estimation, sex-determination, individual identification and ascertaining the cause of death can be carried out. Radiographic interpretation can be impeded by various factors out of which artifacts and digital image manipulation are not uncommon these days. Any such factor is unnecessary and in the field of forensics, it poses threat to proper delivery of justice. As radiographs are highly credited as sound evidences in court, all attempts should be made to produce ideal and authentic images. The advancements in radiology with pertinence to forensics are so enormous in the recent years. The authors of this paper discuss the recent advancements of forensic radiology in India and its various implications in relation to forensic odontology.",2,1,34,,Radiology; Justice (ethics); Forensic radiology; Forensic odontology; Age estimation; Indian scenario; Medicine; Identification (information),,,,,https://www.ijofo.org/article.asp?issn=2542-5013;year=2017;volume=2;issue=1;spage=34;epage=37;aulast=Samuel http://www.ijofo.org/article.asp?issn=2542-5013;year=2017;volume=2;issue=1;spage=34;epage=37;aulast=Samuel,http://dx.doi.org/10.4103/ijfo.ijfo_6_17,,10.4103/ijfo.ijfo_6_17,2612713951,,0,012-595-160-644-499; 048-100-698-601-414; 096-011-024-228-680; 101-314-377-334-558; 145-051-756-916-069,0,false,, 065-873-523-989-876,Toward a general ontology for digital forensic disciplines.,2014-06-16,2014,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Nickson M. Karie; Hein S. Venter,"Ontologies are widely used in different disciplines as a technique for representing and reasoning about domain knowledge. However, despite the widespread ontology-related research activities and applications in different disciplines, the development of ontologies and ontology research activities is still wanting in digital forensics. This paper therefore presents the case for establishing an ontology for digital forensic disciplines. Such an ontology would enable better categorization of the digital forensic disciplines, as well as assist in the development of methodologies and specifications that can offer direction in different areas of digital forensics. This includes such areas as professional specialization, certifications, development of digital forensic tools, curricula, and educational materials. In addition, the ontology presented in this paper can be used, for example, to better organize the digital forensic domain knowledge and explicitly describe the discipline's semantics in a common way. Finally, this paper is meant to spark discussions and further research on an internationally agreed ontological distinction of the digital forensic disciplines. Digital forensic disciplines ontology is a novel approach toward organizing the digital forensic domain knowledge and constitutes the main contribution of this paper.",59,5,1231,1241,Semantics; Process ontology; Ontology (information science); Domain knowledge; Data science; Specialization (logic); SPARK (programming language); Poison control; Computer security; Computer science; Digital forensics,digital forensics; digital forensics disciplines; digital forensics subdisciplines; ontological distinction; ontology,,,University of Pretoria,https://repository.up.ac.za/handle/2263/40745 https://onlinelibrary.wiley.com/doi/abs/10.1111/1556-4029.12511 https://repository.up.ac.za/bitstream/2263/40745/1/Karie_Toward_2014.pdf https://pubmed.ncbi.nlm.nih.gov/24931294/ https://www.ncbi.nlm.nih.gov/pubmed/24931294,http://dx.doi.org/10.1111/1556-4029.12511,24931294,10.1111/1556-4029.12511,2128428697,,0,001-255-768-346-633; 007-008-600-837-690; 017-616-094-974-749; 023-284-330-325-900; 023-624-827-239-301; 030-136-936-524-671; 036-132-248-316-123; 040-303-410-401-667; 047-937-309-229-62X; 068-413-789-098-79X; 071-236-231-772-179; 074-796-013-951-077; 074-825-521-033-969; 076-403-310-070-21X; 090-714-244-223-446; 092-522-060-753-940; 110-544-488-755-056; 118-331-363-261-775; 124-877-237-466-309; 130-388-474-945-856; 143-441-767-976-48X; 144-108-190-670-351; 166-999-959-693-14X; 170-400-477-414-567; 176-902-260-050-457; 181-971-209-212-545; 198-131-134-915-873,25,false,, 065-927-829-618-673,"Characteristic evidence, counter evidence and reconstruction problems in forensic computing",2015-12-01,2015,journal article,it - Information Technology,16112776; 21967032,Walter de Gruyter GmbH,,Andreas Dewald,"Historically, forensic computing (as digital forensics) developed pragmatically, driven by specific technical needs. Indeed, in comparison with other forensic sciences the field still is rather immature and has many deficits, such as the unclear terminology used in court. In this paper, we introduce notions of (digital) evidence, characteristic evidence, and (characteristic) counter evidence, as well as the definitions of two fundamental forensic reconstruction problems. We show the relation of the observability of the different types of evidence to the solvability of those problems. By doing this, we wish to exemplify the usefulness of formalization in the establishment of a precise terminology. While this will not replace all terminological shortcomings, it (1) may provide the basis for a better understanding between experts, and (2) helps to understand the significance of different types of digital evidence to answer questions in an investigation.",57,6,339,346,Data science; Relation (database); Digital evidence; Forensic computing; Field (computer science); Observability; Computer security; Computer science; Terminology; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/it/it57.html#Dewald15 https://www.degruyter.com/view/j/itit.2015.57.issue-6/itit-2015-0017/itit-2015-0017.xml,http://dx.doi.org/10.1515/itit-2015-0017,,10.1515/itit-2015-0017,2408235858,,0,,3,false,, 066-235-037-082-291,Tiered forensic methodology model for Digital Field Triage by non-digital evidence specialists,,2016,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Ben Hitchcock; Nhien-An Le-Khac; Mark Scanlon,"Due to budgetary constraints and the high level of training required, digital forensic analysts are in short supply in police forces the world over. This inevitably leads to a prolonged time taken between an investigator sending the digital evidence for analysis and receiving the analytical report back. In an attempt to expedite this procedure, various process models have been created to place the forensic analyst in the field conducting a triage of the digital evidence. By conducting triage in the field, an investigator is able to act upon pertinent information quicker, while waiting on the full report.The work presented as part of this paper focuses on the training of front-line personnel in the field triage process, without the need of a forensic analyst attending the scene. The premise has been successfully implemented within regular/non-digital forensics, i.e., crime scene investigation. In that field, front-line members have been trained in specific tasks to supplement the trained specialists. The concept of front-line members conducting triage of digital evidence in the field is achieved through the development of a new process model providing guidance to these members. To prove the model's viability, an implementation of this new process model is presented and evaluated. The results outlined demonstrate how a tiered response involving digital evidence specialists and non-specialists can better deal with the increasing number of investigations involving digital evidence.",16,,75,85,Crime scene; Data science; Triage; Premise; Digital evidence; Field (computer science); Computer security; Computer science; Process (engineering); Process modeling; Digital forensics; Forensic science,,,,,https://forensicsandsecurity.com/papers/TieredForensicMethodologyModelForDigitalFieldTriage.pdf https://dl.acm.org/doi/10.1016/j.diin.2016.01.010 https://researchrepository.ucd.ie/handle/10197/9253 https://forensicsandsecurity.com/papers/TieredForensicMethodologyModelForDigitalFieldTriage.php https://www.sciencedirect.com/science/article/abs/pii/S1742287616300044 http://ui.adsabs.harvard.edu/abs/2016arXiv160403844H/abstract https://www.markscanlon.co/papers/TieredForensicMethodologyModelForDigitalFieldTriage.php https://www.sciencedirect.com/science/article/pii/S1742287616300044 https://dblp.uni-trier.de/db/journals/corr/corr1604.html#HitchcockLS16 https://researchrepository.ucd.ie/bitstream/10197/9253/1/TieredForensicMethodologyModelForDigitalFieldTriage.pdf https://markscanlon.co/papers/TieredForensicMethodologyModelForDigitalFieldTriage.pdf https://core.ac.uk/display/82007263 https://core.ac.uk/download/pdf/82007263.pdf,http://dx.doi.org/10.1016/j.diin.2016.01.010,,10.1016/j.diin.2016.01.010,3122457477; 2297444916,,0,003-982-227-180-136; 022-502-903-446-942; 029-268-367-041-280; 047-630-600-014-492; 073-459-830-156-539; 075-529-701-912-32X; 081-447-017-308-327; 082-508-778-448-650; 094-295-279-676-447; 102-736-860-649-556,42,true,cc-by-nc-nd,hybrid 066-235-108-737-129,Digital forensics in the context of cloud computing data storage services,,2021,journal article,Issues of Forensic Science,05522153,Centralne Laboratorium Kryminalistyczne Policji,,Paweł Olber,"The role and capabilities of digital forensics in the cloud computing environment still remain an unsolved and insufficiently explored scientific area. The growing popularity of cloud-based data storage services makes recovery of evidence on the Internet a major challenge for forensic IT exminers. Existing legal barriers in most cases prevent direct access to cloud stored resources for the purpose of recovering data. In many situations, assistance from foreign law enforcement and judicial authorities is required. Findings made during forensic IT analysis that allow reconstructing user’s activities and indicate the act of taking advantage of cloud computing data storage is a justification for undertaking international cooperation. Therefore, it is important to know potential sources of information that enable the reconstruction of the activity of the user in cloud computing services, as well as the awareness of the current state of knowledge and scientific research in this field.",,312,53,60,Computer data storage; Data science; Context (language use); Computer science; Cloud computing; Digital forensics,,,,,http://dx.doi.org/10.34836/pk.2021.312.2,http://dx.doi.org/10.34836/pk.2021.312.2,,10.34836/pk.2021.312.2,3205055472,,0,,0,false,, 066-249-839-004-372,Variation within physical and digital craniometrics.,2019-11-29,2019,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Matthew Lee; Karina Gerdau-Radonic,,306,,110092,,Statistics; Photogrammetry; Data processing; Multivariate analysis of variance; Rendering (computer graphics); Digital photogrammetry; Reference values; Research environment; Computer science; Digital anthropology,Craniometrics; Digital anthropology; Inter-observer error; Intra-observer error; Laser scanning; Photogrammetry,"Cephalometry/methods; Computer Simulation; Forensic Anthropology; Humans; Imaging, Three-Dimensional; Lasers; Male; Observer Variation; Photogrammetry; Reference Values; Skull/anatomy & histology",,,https://pubmed.ncbi.nlm.nih.gov/31816484/ https://www.sciencedirect.com/science/article/abs/pii/S0379073819305043 https://pubag.nal.usda.gov/catalog/6785455 https://www.ncbi.nlm.nih.gov/pubmed/31816484,http://dx.doi.org/10.1016/j.forsciint.2019.110092,31816484,10.1016/j.forsciint.2019.110092,2989768787,,0,002-214-682-301-085; 006-242-490-013-146; 008-056-012-843-018; 012-809-793-734-217; 016-580-313-404-132; 019-922-207-018-525; 022-388-426-117-073; 026-198-150-050-557; 031-933-665-463-421; 039-684-326-140-341; 041-585-451-530-646; 043-415-200-759-279; 048-399-506-168-441; 049-613-177-920-882; 052-332-973-851-731; 058-742-091-725-979; 066-380-633-522-119; 069-556-330-231-555; 073-933-049-544-280; 084-034-332-190-254; 087-451-816-741-063; 099-372-993-404-324; 102-302-370-093-913; 124-684-494-161-222; 140-675-263-092-798; 171-697-804-734-709; 178-456-110-092-227; 181-622-263-100-135,5,false,, 066-326-667-476-053,Case report: Digital restoration of fragmented non-human skull,,2020,journal article,Forensic Science International: Reports,26659107,Elsevier BV,,Gargi Jani; Abraham Johnson; William R. Belcher,"Abstract Reconstruction of fragmented material remains has been given a considerable attention in the fields of archaeology, forensic anthropology, and palaeoanthropology. Fragmented osseous remains are often found in cases of mass disasters, burning incidents, crash incidents, as well as bodily mutilation through criminal and suicidal activities. In cases where the remains are burnt or fragile, the handling of the remains becomes difficult and improper handling may lead to further destruction of the evidence. In such cases, digital restoration of the remains by means of three-dimensional technology can be done as it is a non-invasive in nature and minimizes physical handling. It has been repeatedly demonstrated that virtual methods facilitate preservation, storage, and conservation of skeletal remains. For this current preliminary study, fragile fragmentary osseous remains were obtained and then digitally reconstructed. The data was acquired using hand-held 3D laser scanners and digitally reconstructed using software. The reconstructed specimen was then printed and could be used for further analysis due to the fragile nature of the original specimen.",2,,100070,,Forensic anthropology; Crash; Skull; Non-human; Digital restoration; Computer science; Forensic engineering,,,,,http://www.sciencedirect.com/science/article/pii/S2665910720300165 https://www.sciencedirect.com/science/article/pii/S2665910720300165,http://dx.doi.org/10.1016/j.fsir.2020.100070,,10.1016/j.fsir.2020.100070,3006093929,,0,000-578-174-768-820; 008-199-912-610-234; 008-223-805-736-429; 008-594-799-452-800; 010-385-539-315-536; 012-821-321-591-571; 013-138-622-173-445; 024-784-179-276-92X; 028-135-903-429-591; 035-799-611-327-441; 044-295-973-878-539; 045-932-907-295-787; 047-504-313-643-90X; 051-402-505-986-98X; 055-273-770-672-76X; 059-572-267-613-848; 089-113-094-597-75X; 112-116-133-628-228; 115-550-078-617-585; 131-666-457-913-08X; 144-373-702-344-62X; 197-422-013-209-01X,4,true,"CC BY, CC BY-NC-ND",gold 066-575-943-278-537,The impact of Brexit on the future of UK forensic science and technology,2019-07-02,2019,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Tim J. Wilson,"This article seeks to assess the prospects of UK forensic science and technology in a post-Brexit world by analysing four interlocking issues: Brexit itself, the evolution of national criminal justice organisational and funding priorities, the increasing interrelationship of science and technology in the forensic domain and the relatively disadvantaged place of forensic science and technology within the contemporary 'scientific state' paradigm. The results are generally pessimistic for the likely future of forensic science. This conclusion is reinforced by scepticism about the wisdom of proceeding with Brexit. The article is structured to identify the potential implications of British political decisions on its national forensic science capabilities and capacity. Some aspects of the analysis are likely to have a wider resonance for international discourse about the future sustainability of forensic science and technology, however, particularly the interface between the globalisation of science and technology with justice.",302,,109870,109870,Criminal justice; Economic Justice; Political science; Globalization; Brexit; Disadvantaged; Poison control; Engineering ethics; Sustainability; Politics,Brexit; Fiscal austerity; Forensic science and technology; International criminal justice cooperation; National science policy,Criminal Law; Forecasting; Forensic Sciences/organization & administration; Humans; International Cooperation; Politics; United Kingdom,,NordForsk; Economic and Social Sciences Research Council; Netherlands Organisation for Scientific Research,https://www.sciencedirect.com/science/article/pii/S0379073819302853 https://northumbria-test.eprints-hosting.org/id/document/269353 https://www.safetylit.org/citations/index.php?fuseaction=citations.viewdetails&citationIds[]=citjournalarticle_617732_2 https://researchportal.northumbria.ac.uk/files/20673825/Wilson_The_impact_of_Brexit_on_the_future_of_UK_forensic_science_OA.pdf https://pubag.nal.usda.gov/catalog/6495397 https://www.sciencedirect.com/science/article/abs/pii/S0379073819302853 http://nrl.northumbria.ac.uk/39874/ https://researchportal.northumbria.ac.uk/en/publications/the-impact-of-brexit-on-the-future-of-uk-forensic-science-and-tec https://pubmed.ncbi.nlm.nih.gov/31302414/ https://europepmc.org/article/MED/31302414 https://www.ncbi.nlm.nih.gov/pubmed/31302414 https://core.ac.uk/download/222790526.pdf,http://dx.doi.org/10.1016/j.forsciint.2019.06.028,31302414,10.1016/j.forsciint.2019.06.028,2954754961,,0,002-705-377-807-828; 009-512-008-130-069; 011-418-508-862-232; 012-725-574-150-045; 013-312-268-786-601; 020-839-888-060-312; 051-562-252-252-111; 052-667-615-516-989; 058-684-324-466-654; 059-276-997-197-050; 059-280-328-595-109; 061-468-041-697-120; 083-286-386-244-814; 091-081-161-718-514; 096-187-379-920-624; 101-436-770-235-826; 106-658-163-908-756; 155-175-646-531-667; 163-309-162-262-895; 167-331-393-671-991,1,true,cc-by,hybrid 066-591-536-952-520,Prelim i - Editorial Board,,2020,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,32,,300965,300965,Editorial board; Computer science; Library science,,,,,,http://dx.doi.org/10.1016/s2666-2817(20)30143-8,,10.1016/s2666-2817(20)30143-8,,,0,,0,true,,bronze 066-742-028-634-396,Towards Sound Forensic Arguments: Structured Argumentation Applied to Digital Forensics Practice,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Virginia N. L. Franqueira; Graeme Horsman,"Abstract Digital forensic practitioners are increasingly facing examinations which are both complex in nature and structure. Throughout this process, during the examination and analysis phases, the practitioner is constantly drawing logical inferences which will be reflected in the reporting of results. Therefore, it is important to expose how all the elements of an investigation fit together to allow review and scrutiny, and to support associated parties to understand the components within it. This paper proposes the use of ‘Structured Argumentation’ as a valuable and flexible ingredient of the practitioners' thinking toolbox. It explores this approach using three case examples which allow discussion of the benefits and application of structured argumentation to real world contexts. We argue that, despite requiring a short learning curve, structured argumentation is a practical method which promotes accessibility of findings facilitating communication between technical and legal parties, peer review, logical reconstruction, jury interpretation, and error detection.",32,,300923,,Structure (mathematical logic); Data science; Scrutiny; Jury; Toolbox; Structured argumentation; Computer science; Process (engineering); Interpretation (philosophy); Digital forensics,,,,,https://research.tees.ac.uk/en/publications/towards-sound-forensic-arguments-structured-argumentation-applied https://kar.kent.ac.uk/79313/ https://www.sciencedirect.com/science/article/pii/S2666281720300184,http://dx.doi.org/10.1016/j.fsidi.2020.300923,,10.1016/j.fsidi.2020.300923,3029143799,,0,001-179-045-822-120; 003-359-256-146-450; 003-902-916-862-498; 021-798-083-032-603; 036-896-387-628-565; 039-756-277-761-714; 044-552-087-341-555; 044-895-263-937-02X; 050-296-813-523-597; 056-716-035-763-135; 061-269-967-405-492; 064-988-327-019-067; 065-645-582-627-774; 077-931-197-141-965; 083-735-750-632-938; 094-148-247-376-28X; 101-436-770-235-826; 102-243-142-344-71X; 103-617-707-115-106; 105-051-562-481-756; 109-789-664-632-419; 110-684-786-606-07X; 112-321-663-201-881; 112-692-088-560-708; 115-471-022-347-349; 117-795-409-550-484; 119-758-101-272-414; 133-186-070-672-357; 142-527-962-979-521; 151-798-189-363-682; 162-042-867-873-198; 163-330-758-807-944; 199-172-967-270-034,1,true,cc-by-nc-nd,hybrid 066-777-702-062-597,Recent Advances in Passive Digital Image Security Forensics: A Brief Review,,2018,journal article,Engineering,20958099,Elsevier BV,United Kingdom,Xiang Lin; Jianhua Li; Shilin Wang; Alan-Wee-Chung Liew; Feng Cheng; Xiaosa Huang,"Abstract With the development of sophisticated image editing and manipulation tools, the originality and authenticity of a digital image is usually hard to determine visually. In order to detect digital image forgeries, various kinds of digital image forensics techniques have been proposed in the last decade. Compared with active forensics approaches that require embedding additional information, passive forensics approaches are more popular due to their wider application scenario, and have attracted increasing academic and industrial research interests. Generally speaking, passive digital image forensics detects image forgeries based on the fact that there are certain intrinsic patterns in the original image left during image acquisition or storage, or specific patterns in image forgeries left during the image storage or editing. By analyzing the above patterns, the originality of an image can be authenticated. In this paper, a brief review on passive digital image forensic methods is presented in order to provide a comprehensive introduction on recent advances in this rapidly developing research area. These forensics approaches are divided into three categories based on the various kinds of traces they can be used to track—that is, traces left in image acquisition, traces left in image storage, and traces left in image editing. For each category, the forensics scenario, the underlying rationale, and state-of-the-art methodologies are elaborated. Moreover, the major limitations of the current image forensics approaches are discussed in order to point out some possible research directions or focuses in these areas.",4,1,29,39,Image (mathematics); Point (typography); Information retrieval; Image editing; Originality; Digital image forensics; Image forensics; Industrial research; Computer science; Digital image,,,,National Key Research and Development Program of China; National Natural Science Foundation of China,https://www.sciencedirect.com/science/article/abs/pii/S2095809917307890 https://doaj.org/article/dd2687b7552b4ef6a0613888c6233afa https://www.sciencedirect.com/science/article/pii/S2095809917307890 https://engineering.org.cn/EN/10.1016/j.eng.2018.02.008 https://core.ac.uk/display/155265417,http://dx.doi.org/10.1016/j.eng.2018.02.008,,10.1016/j.eng.2018.02.008,2789856658,,0,000-679-477-475-489; 000-830-145-464-213; 000-980-904-065-103; 001-266-582-641-136; 001-413-792-295-769; 001-604-584-964-130; 004-377-809-881-072; 004-690-012-680-59X; 006-715-003-756-565; 009-566-662-446-07X; 015-708-405-109-070; 016-617-865-487-243; 017-522-442-322-636; 017-853-220-883-872; 018-677-312-546-562; 019-016-663-630-510; 022-296-050-330-096; 024-148-241-973-367; 024-806-781-026-020; 025-410-507-609-210; 027-757-905-863-260; 034-121-155-020-714; 034-785-721-591-194; 035-182-747-171-407; 036-155-644-690-629; 036-341-049-220-437; 039-604-410-537-357; 040-499-338-725-508; 041-838-544-052-666; 042-324-311-104-451; 044-144-587-337-904; 045-496-560-764-477; 047-322-910-540-450; 049-241-042-800-133; 054-167-448-698-763; 057-831-748-324-829; 067-303-718-151-959; 067-768-123-984-732; 067-913-828-134-760; 076-346-829-732-533; 076-704-896-134-67X; 077-604-852-329-975; 080-794-266-877-942; 083-495-367-906-30X; 084-016-117-488-972; 085-735-767-631-723; 087-814-787-159-954; 087-895-411-431-312; 099-917-904-062-017; 101-435-060-435-239; 106-688-419-298-857; 106-908-142-273-164; 108-896-114-392-841; 110-050-634-028-069; 112-077-011-771-30X; 122-001-451-301-450; 125-328-926-232-377; 136-713-989-335-402; 141-099-823-545-470; 143-695-756-474-732; 152-785-842-665-362; 155-074-178-700-550; 155-355-077-713-919; 159-132-926-596-284; 162-699-965-110-190; 169-110-142-355-656; 180-552-666-228-97X; 182-017-605-279-245; 184-897-235-429-285,47,true,"CC BY, CC BY-NC-ND",gold 066-786-352-814-166,Smoothing Filtering Detection for Digital Image Forensics: Smoothing Filtering Detection for Digital Image Forensics,2014-02-27,2014,journal article,Journal of Electronics & Information Technology,10095896,China Science Publishing & Media Ltd.,China,Jun-yu Xu; Yu-ting Su,,35,10,2287,2293,Artificial intelligence; Digital image forensics; Computer vision; Smoothing; Computer science,,,,,http://pub.chinasciencejournal.com/article/getArticleRedirect.action?doiCode=10.3724/SP.J.1146.2013.00131,http://dx.doi.org/10.3724/sp.j.1146.2013.00131,,10.3724/sp.j.1146.2013.00131,2323274304,,0,,3,false,, 066-807-833-482-350,Smart TV forensics,,2015,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Abdul Boztas; A.R.J. Riethoven; Mark Roeloffs,"The Smart TV is becoming increasingly popular amongst consumers. Many consumers use a Smart TV to gain quick access to the Internet including video on demand, social networking and instant messaging. Most Smart TVs also provide capabilities to connect with external devices such as a USB flash drive, a mobile phone etc. All of these features make a Smart TV a potentially rich source of information for forensic purposes. With increasing utilisation, it is also easier for malicious users to abuse a Smart TV. Therefore a digital forensics study on the field of Smart TV is imperative. This paper proposes new procedures for acquiring, analysing and investigating a Smart TV.",12,,S72,S80,The Internet; Mobile phone; USB flash drive; Instant messaging; Cyber crime; Video on demand; Field (computer science); Computer security; Computer science; Digital forensics,,,,,https://www.sciencedirect.com/science/article/abs/pii/S1742287615000134 https://doi.org/10.1016/j.diin.2015.01.012 https://www.sciencedirect.com/science/article/pii/S1742287615000134 https://www.researchgate.net/profile/A_Boztas/publication/273261826_Smart_TV_forensics_Digital_traces_on_televisions/links/55acc73e08aea3d08686109b.pdf https://core.ac.uk/display/82823751 https://dblp.uni-trier.de/db/journals/di/di12.html#BoztasRR15 https://dl.acm.org/doi/10.1016/j.diin.2015.01.012,http://dx.doi.org/10.1016/j.diin.2015.01.012,,10.1016/j.diin.2015.01.012,2028651713,,0,002-927-911-483-709; 003-504-554-245-316; 017-815-064-018-299; 024-385-303-080-230; 063-377-383-491-594; 074-933-143-629-826; 085-214-277-668-01X,21,true,cc-by-nc-nd,hybrid 067-296-603-956-869,Hypothesis Generation and Testing in Event Profiling for Digital Forensic Investigations,2012-10-01,2012,journal article,International Journal of Digital Crime and Forensics,19416210; 19416229,IGI Global,United States,Lynn Batten; Lei Pan; Nisar Khan,"The need for an automated approach to forensic digital investigation has been recognized for some years, and several authors have developed frameworks in this direction. The aim of this paper is to assist the forensic investigator with the generation and testing of hypotheses in the analysis phase. In doing so, the authors present a new architecture which facilitates the move to automation of the investigative process; this new architecture draws together several important components of the literature on question and answer methodologies including the concept of 'pivot' word and sentence ranking. Their architecture is supported by a detailed case study demonstrating its practicality.",4,4,1,14,Automation; Architecture; Profiling (information science); Ranking; Data science; Computer science; Process (engineering); Event (computing); Word (computer architecture); Digital forensics,,,,,http://dro.deakin.edu.au/view/DU:30051383 https://dro.deakin.edu.au/eserv/DU:30051383/batten-hypothesisgeneration-2012.pdf https://dx.doi.org/10.4018/jdcf.2012100101 http://dx.doi.org/10.4018/jdcf.2012100101 https://www.igi-global.com/chapter/hypothesis-generation-testing-event-profiling/75672 https://dblp.uni-trier.de/db/journals/ijdcf/ijdcf4.html#BattenPK12 https://core.ac.uk/display/14003132 http://hdl.handle.net/10536/DRO/DU:30051383,http://dx.doi.org/10.4018/jdcf.2012100101,,10.4018/jdcf.2012100101,2058844401,,0,007-390-029-051-233; 016-298-063-817-727; 018-620-335-450-996; 019-765-783-176-912; 029-853-045-059-40X; 032-875-845-675-054; 037-105-622-240-257; 047-329-730-660-756; 049-574-664-231-524; 051-985-982-645-181; 053-133-413-166-01X; 062-032-128-092-406; 062-871-282-128-814; 083-192-705-272-816; 134-596-573-556-604; 135-846-709-699-328; 140-184-498-701-838; 155-645-434-190-69X; 195-049-656-826-921; 199-118-235-117-942,0,true,,green 067-475-744-304-50X,Educational egaming: the future for geoscience virtual learners?,2014-07-15,2014,journal article,Geology Today,02666979; 13652451,Wiley,United Kingdom,Jamie K. Pringle,"Current students will mostly comprise the so-called ‘Generation Y’, who have grown up with personal computer and egaming technologies. Used to a variety of digital learning environments, it is probable that, for them at least, educational egaming may provide effective learning, complementary to more traditional teaching methods. Current geoscience digital educational methods are briefly reviewed and examined through three case studies of online educational geoscience egames. These are shown to provide a consistent experience, ‘24/7’ accessibility and effective learning.",30,4,147,150,Geology; Variety (cybernetics); Earth science; Digital learning; Personal computer; Educational method; Teaching method,,,,,https://onlinelibrary.wiley.com/doi/10.1111/gto.12058 https://core.ac.uk/display/43759983 https://core.ac.uk/download/43759983.pdf,http://dx.doi.org/10.1111/gto.12058,,10.1111/gto.12058,2079790978,,0,,12,true,,green 067-577-414-064-539,Digital Forensic Science: A Manifesto,2016-12-16,2016,journal article,South African Computer Journal,23137835; 10157999,South African Institute of Computer Scientists and Information Technologists,South Africa,Martin S. Olivier,"Forensic examination of evidence holds the promise of making claims about the truth of certain propositions with the inherent accuracy; and reliability that characterises scientific endeavours. The propositions may relate to the artefacts examined or related artefacts. The; nature of propositions about which claims can be made depend on the extent to which given propositions fall within the ambit of scientific; knowledge and on the extent to which the examined evidence is suitable for the application of established science. A continuing series; of incidents illustrate that in many forensic disciplines that promise is not met — often because some branch of forensic science happen; to not being scientific at all. In fact, serious assessments of forensic science have shown that many (if not most) branches of forensic; science are not scientifically valid.; Digital forensic science is one of the newest members of the family of forensic sciences. A number of reasons for concern exist that; it is following in the footsteps of its more established footsteps and repeating many of the mistakes of those other branches of forensic; science.; This viewpoint is written in the form of a manifesto that is situated in the current discourse about digital forensic science and practice.; If challenges the current developments in digital forensic science by positing a number of demands that digital forensic science have to; meet to be deemed scientific. The demands are posited as necessary, but not sufficient to ensure that digital forensic science uses science; to contribute to justice. Appropriate responses to the manifesto is a change in digital forensic developments or an informed debate about; the issues raised in the manifesto.",28,2,46,49,Situated; Forensic science; Sociology; Sociology of scientific knowledge; Law; Justice (ethics); Manifesto; Forensic examination; Questioned document examination; Engineering ethics; Digital forensics,,,,,https://doaj.org/article/fd3996c6cd6a4b50a4c43cb3dcef8058 https://sacj.cs.uct.ac.za/index.php/sacj/article/view/442 https://core.ac.uk/display/90989195 https://doi.org/10.18489/sacj.v28i2.442 https://dblp.uni-trier.de/db/journals/saj/saj28a.html#Olivier16 https://sacj.cs.uct.ac.za/index.php/sacj/article/download/442/194 https://www.dspace.up.ac.za/handle/2263/60561 https://repository.up.ac.za/handle/2263/60561,http://dx.doi.org/10.18489/sacj.v28i2.442,,10.18489/sacj.v28i2.442,2566075325,,0,,5,true,cc-by-nc,gold 067-629-806-155-212,Digital Records Forensics: A New Science and Academic Program for Forensic Readiness,,2010,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Luciana Duranti; Barbara Endicott-Popovsky,"This paper introduces the Digital Records Forensics project, a research endeavour located at the University of British Columbia in Canada and aimed at the development of a new science resulting from the integration of digital forensics with diplomatics, archival science, information science and the law of evidence, and of an interdisciplinary graduate degree program, called Digital Records Forensics Studies, directed to professionals working for law enforcement agencies, legal firms, courts, and all kind of institutions and business that require their services. The program anticipates the need for organizations to become “forensically ready,” defined by John Tan as “maximizing the ability of an environment to collect credible digital evidence while minimizing the cost of an incident response (Tan, 2001).” The paper argues the need for such a program, describes its nature and content, and proposes ways of delivering it.",5,2,45,62,World Wide Web; Political science; Digital preservation; Law enforcement; Digital evidence; Digital records; Public relations; Archival science; Computer forensics; Digital forensics; Information science,,,,,https://commons.erau.edu/cgi/viewcontent.cgi?article=1075&context=jdfsl https://core.ac.uk/display/92127065 https://dblp.uni-trier.de/db/journals/jdfsl/jdfsl5.html#DurantiE10 https://commons.erau.edu/jdfsl/vol5/iss2/4/,http://dx.doi.org/10.15394/jdfsl.2010.1075,,10.15394/jdfsl.2010.1075,1780515845,,0,002-383-410-319-043; 003-698-341-514-795; 014-261-775-435-338; 014-863-311-580-850; 014-992-406-139-591; 032-960-619-192-843; 037-647-066-964-858; 038-479-011-420-112; 041-291-462-265-899; 041-620-409-429-393; 049-223-763-769-747; 049-528-917-745-404; 052-308-687-231-910; 060-486-631-843-063; 063-874-121-007-405; 068-225-367-026-800; 069-689-937-128-684; 078-944-278-265-053; 081-042-044-554-106; 082-783-209-447-574; 085-214-277-668-01X; 088-309-759-208-842; 089-196-350-946-08X; 094-069-824-119-270; 100-370-255-379-23X; 105-494-642-200-718; 110-602-215-577-031; 116-679-504-830-017; 117-122-176-437-168; 117-943-382-787-511; 120-964-024-592-598; 121-098-780-472-16X; 124-386-684-933-152; 129-648-544-140-133; 144-924-692-716-271; 153-015-315-567-512; 167-375-606-992-866; 167-448-315-064-968; 174-616-011-533-052; 183-022-500-213-12X; 186-993-770-394-232; 199-172-967-270-034,20,true,cc-by-nc,gold 067-726-260-424-525,Advanced Framework for Digital Forensic Technologies and Procedures,2010-08-23,2010,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Denis Trček; Habtamu Abie; Åsmund Skomedal; Iztok Starc,"Recent trends in global networks are leading toward service-oriented architectures and sensor networks. On one hand of the spectrum, this means deployment of services from numerous providers to form new service composites, and on the other hand this means emergence of Internet of things. Both these kinds belong to a plethora of realms and can be deployed in many ways, which will pose serious problems in cases of abuse. Consequently, both trends increase the need for new approaches to digital forensics that would furnish admissible evidence for litigation. Because technology alone is clearly not sufficient, it has to be adequately supported by appropriate investigative procedures, which have yet become a subject of an international consensus. This paper therefore provides appropriate a holistic framework to foster an internationally agreed upon approach in digital forensics along with necessary improvements. It is based on a top-down approach, starting with legal, continuing with organizational, and ending with technical issues. More precisely, the paper presents a new architectural technological solution that addresses the core forensic principles at its roots. It deploys so-called leveled message authentication codes and digital signatures to provide data integrity in a way that significantly eases forensic investigations into attacked systems in their operational state. Further, using a top-down approach a conceptual framework for forensics readiness is given, which provides levels of abstraction and procedural guides embellished with a process model that allow investigators perform routine investigations, without becoming overwhelmed by low-level details. As low-level details should not be left out, the framework is further evaluated to include these details to allow organizations to configure their systems for proactive collection and preservation of potential digital evidence in a structured manner. The main reason behind this approach is to stimulate efforts on an internationally agreed ""template legislation,"" similarly to model law in the area of electronic commerce, which would enable harmonized national implementations in the area of digital forensics.",55,6,1471,1480,Conceptual framework; Admissible evidence; Implementation; Digital evidence; Data integrity; Service (systems architecture); Computer security; Computer science; Service-oriented architecture; Digital forensics,,Computer Communication Networks; Computer Security; Crime Victims; Forensic Sciences/methods; Humans; Microcomputers,,,https://onlinelibrary.wiley.com/doi/full/10.1111/j.1556-4029.2010.01528.x https://pubmed.ncbi.nlm.nih.gov/20735706/ https://www.ncbi.nlm.nih.gov/pubmed/20735706,http://dx.doi.org/10.1111/j.1556-4029.2010.01528.x,20735706,10.1111/j.1556-4029.2010.01528.x,1935487859,,0,001-013-513-099-990; 002-383-410-319-043; 005-296-771-590-748; 007-790-059-029-953; 009-113-231-305-062; 012-495-836-083-305; 016-922-297-286-929; 019-166-656-621-783; 021-850-998-857-676; 025-032-659-927-511; 031-916-023-841-756; 033-820-436-580-458; 035-223-520-491-228; 044-982-362-158-422; 047-937-309-229-62X; 049-583-911-109-126; 061-326-248-978-030; 092-470-623-967-183; 103-591-877-930-020; 104-249-629-797-999; 109-037-713-202-30X; 110-454-069-963-118; 113-879-148-300-876; 116-776-134-756-458; 137-015-433-850-343; 137-203-237-364-717; 144-145-473-017-363; 144-924-692-716-271; 145-062-913-009-934; 150-249-549-372-358; 159-580-159-849-138; 167-555-622-258-141; 167-592-705-831-583; 183-855-428-130-288,18,false,, 067-844-385-207-96X,Digital forensics: An Analytical Crime Scene Procedure Model (ACSPM),2013-09-13,2013,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Halil Ibrahim Bulbul; H. Güçlü Yavuzcan; Mesut Ozel,,233,1,244,256,Chain of custody; Crime scene; Data science; Law enforcement; Digital evidence; Computer security; Computer science; Process (engineering); Computer forensics; Process modeling; Digital forensics,Chain of custody (COC); Crime scene; Digital evidence; Digital forensics; Procedure model; Standard operating procedure (SOP),"Documentation; Forensic Sciences/organization & administration; Humans; Information Storage and Retrieval/methods; Microcomputers; Models, Organizational; Quality Control",,,https://europepmc.org/article/MED/24314526 http://www.sciencedirect.com/science/article/pii/S0379073813004155 https://pubmed.ncbi.nlm.nih.gov/24314526/ https://www.sciencedirect.com/science/article/abs/pii/S0379073813004155 https://www.ncbi.nlm.nih.gov/pubmed/24314526,http://dx.doi.org/10.1016/j.forsciint.2013.09.007,24314526,10.1016/j.forsciint.2013.09.007,1965613196,,0,001-009-008-665-240; 002-534-435-127-422; 002-856-570-549-435; 004-872-169-627-620; 005-515-442-506-880; 010-086-703-646-194; 017-815-064-018-299; 019-831-293-743-518; 020-944-423-224-895; 021-486-901-460-202; 021-850-998-857-676; 022-723-185-375-121; 024-381-049-056-789; 032-246-414-391-330; 032-697-093-668-898; 034-497-160-604-138; 035-223-520-491-228; 038-668-970-194-854; 047-630-600-014-492; 060-808-935-547-406; 067-950-012-629-210; 083-366-581-383-158; 090-792-295-657-205; 092-058-232-746-872; 099-717-679-430-808; 101-093-348-378-723; 111-090-978-711-139; 120-697-354-224-33X; 122-880-373-616-302; 125-384-800-661-375; 128-301-609-429-087; 132-355-634-397-986; 133-397-275-695-990; 134-927-490-231-285; 135-717-892-795-412; 138-097-495-143-351; 141-445-106-549-822; 151-378-930-836-964; 161-299-499-071-016; 165-770-474-971-736; 170-299-458-679-224; 173-034-553-635-460; 180-327-460-336-608; 183-000-233-873-221; 183-155-928-447-559; 184-948-841-629-735; 186-502-029-675-526; 190-065-821-748-92X; 199-172-967-270-034; 199-745-676-923-766,32,false,, 068-030-546-112-691,Healthcare Data Breaches: Implications for Digital Forensic Readiness,2018-11-28,2018,journal article,Journal of medical systems,1573689x; 01485598,Springer New York,United States,Maxim Chernyshev; Sherali Zeadally; Zubair A. Baig,"While the healthcare industry is undergoing disruptive digital transformation, data breaches involving health information are not usually the result of integration of new technologies. Based on published industry reports, fundamental security safeguards are still considered to be lacking with many documented data breaches occurring as the result of device and equipment theft, human error, hacking, ransomware attacks and misuse. Health information is considered to be one of the most attractive targets for cybercriminals due to its inherent sensitivity, but digital investigations of incidents involving health information are often constrained by the lack of the necessary infrastructure forensic readiness. Following the analysis of healthcare data breach causes and threats, we describe the associated digital forensic readiness challenges in the context of the most significant incident causes. With specific focus on privilege misuse, we present a conceptual architecture for forensic audit logging to assist with capture of the relevant digital artefacts in support of possible future digital investigations.",43,1,7,,Internet privacy; Digital transformation; Health informatics; Data breach; Human error; Audit; Ransomware; Context (language use); Computer science; Digital forensics,Computer crime; Forensics; Health information management; Security; Threat,Computer Security/standards; Confidentiality/legislation & jurisprudence; Electronic Health Records/organization & administration; Forensic Sciences/organization & administration; Health Information Management/legislation & jurisprudence; Humans,,,https://link.springer.com/article/10.1007/s10916-018-1123-2 https://www.ncbi.nlm.nih.gov/pubmed/30488291 https://ro.ecu.edu.au/ecuworkspost2013/5571/ https://pubmed.ncbi.nlm.nih.gov/30488291/ https://doi.org/10.1007/s10916-018-1123-2 http://dro.deakin.edu.au/view/DU:30121030 https://dblp.uni-trier.de/db/journals/jms/jms43.html#ChernyshevZB19 http://hdl.handle.net/10536/DRO/DU:30121030,http://dx.doi.org/10.1007/s10916-018-1123-2,30488291,10.1007/s10916-018-1123-2,2902689954,,0,002-840-278-571-874; 003-803-242-209-367; 015-646-976-755-729; 022-119-460-083-705; 024-703-308-745-394; 026-774-296-742-022; 032-697-093-668-898; 034-263-766-060-719; 043-979-280-803-957; 046-988-024-816-111; 049-404-833-736-24X; 056-205-328-777-528; 060-294-953-084-788; 060-743-410-850-643; 066-671-350-861-612; 082-305-594-294-343; 089-032-971-972-861; 103-511-904-468-642; 107-829-974-201-674; 115-621-396-169-875; 142-437-368-699-894; 165-966-337-114-740; 172-820-491-934-626; 183-660-639-259-524; 184-948-841-629-735,39,false,, 068-079-061-126-566,A crisis for the future of forensic science: Lessons from the UK of the importance of epistemology for funding research and development.,2019-09-13,2019,journal article,Forensic science international. Synergy,2589871x,Elsevier BV,Netherlands,Ruth M. Morgan; E.A. Levin,"Abstract This study presents analysis of forensic science research funded by UK Research and Innovation (UKRI) research councils (2009–2018), representing 150 projects with a cumulative value of £56.1 m (0.01% of the total UKRI budget over this time period). The findings indicate that dedicated forensic science funding represents only 46.0% of the projects included in the dataset. Research focussed on developing technological outputs represented 69.5% of the total funding (£37.2 m) in comparison to foundational research which represented 19.2% (£10.7 m). Traditional forensic science evidence types such as fingerprints and DNA received 1.3% and 5.1% of the total funding respectively, in comparison to digital and cyber projects which received 25.7%. These data offer insight into the scale of the funding crisis in forensic science in the UK, and the need to increase the resources available, to develop ways of articulating value and to ensure that both technological and foundational research are enabled.",1,,243,252,Forensic science; Political science; Value (ethics); Public relations; Scale (social sciences),Crisis; Forensic science; Funding; Research; Technological and foundational,,,Engineering and Physical Sciences Research Council,https://discovery.ucl.ac.uk/id/eprint/10082866/ https://pubmed.ncbi.nlm.nih.gov/32411977/ https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7219127 https://www.sciencedirect.com/science/article/pii/S2589871X19301457,http://dx.doi.org/10.1016/j.fsisyn.2019.09.002,32411977,10.1016/j.fsisyn.2019.09.002,2972580553,PMC7219127,0,001-989-668-917-534; 003-168-641-529-165; 006-365-141-523-025; 009-967-191-859-755; 012-725-574-150-045; 021-462-566-432-813; 028-802-373-898-820; 032-306-447-977-364; 038-696-161-098-553; 039-059-510-666-497; 045-243-165-627-08X; 056-511-125-319-151; 067-307-278-774-180; 068-079-061-126-566; 070-213-659-171-077; 083-398-139-957-135; 101-436-770-235-826; 112-444-833-633-581; 123-088-046-531-835; 140-800-803-852-701; 181-245-973-594-773,7,true,"CC BY, CC BY-NC-ND",gold 068-211-549-219-606,“Hello are you available?” Dealing with online frauds and the role of forensic science,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Olivier Ribaux; Thomas R. Souvignet,"Abstract On August 6, 2019, the 119 members of the School of criminal justice, forensic science and criminology at the University of Lausanne were the target of an online scammer. His/her modus operandi consisted of email masquerading as the Director of the School in an attempt to induce the victims to buy digital gift cards and to transmit the card usage code to the perpetrator. The first author of this paper is the Director of the School, and the second is an expert in digital forensic science and a professor of the School. They worked together in real time to deal with the fraud. Because the fraud occurred in a School of forensic science and criminology, it raised many questions on a variety of overlapping dimensions. The objective of this study was, therefore, to draw lessons from this case from several perspectives ranging from forensic science to cybersecurity, and from practical to academic. The response to the incident has been treated in four typical distinguishable phases: (1) fraud detection; (2) crisis management; (3) post-incident analysis; and (4) reporting to different communities. We conclude this paper by taking lessons from the case to express the essential role of forensic knowledge and crime analysis in interpreting the information conveyed by digital traces to develop innovative cross-disciplinary models for preventing, detecting, analysing, investigating and responding to online fraud.",33,,300978,,Criminal justice; Variety (cybernetics); Forensic science; Sociology; Code (semiotics); Crime analysis; Crisis management; Public relations; Digital forensics,,,,University of Lausanne,https://doi.org/10.1016/j.fsidi.2020.300978 https://serval.unil.ch/notice/serval:BIB_7054F13E76E6 https://www.sciencedirect.com/science/article/pii/S2666281720300810 https://dblp.uni-trier.de/db/journals/di/di33.html#RibauxS20 https://www.sciencedirect.com/science/article/pii/S2666281720300810#! https://core.ac.uk/download/pdf/322688129.pdf,http://dx.doi.org/10.1016/j.fsidi.2020.300978,,10.1016/j.fsidi.2020.300978,3016060622,,0,000-283-292-553-62X; 002-436-870-952-778; 004-373-624-183-050; 006-129-047-122-458; 009-512-003-529-193; 010-951-806-548-929; 015-168-306-989-485; 019-698-064-288-240; 022-358-546-399-506; 030-859-592-601-192; 031-234-153-523-379; 033-400-782-766-385; 039-145-979-009-196; 042-289-392-240-47X; 044-051-299-105-401; 047-976-235-338-816; 064-549-392-650-90X; 078-448-713-257-099; 078-601-393-355-906; 084-861-292-090-257; 090-538-331-138-469; 091-081-161-718-514; 091-511-454-565-387; 093-272-440-861-895; 109-079-071-485-920; 112-856-054-215-074; 115-531-623-920-069; 157-049-748-215-425,2,true,cc-by-nc-nd,hybrid 068-386-024-387-716,Prelim i - Editorial Board,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,40,,301366,301366,Editorial board; Business; Computer science; Library science,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00038-5,,10.1016/s2666-2817(22)00038-5,,,0,,0,true,,bronze 068-508-915-657-575,Optimizing search strategies in mass grave location through the combination of digital technologies,2019-06-03,2019,journal article,Forensic science international. Synergy,2589871x,Elsevier BV,Netherlands,D. Abate; C. Sturdy Colls; N. Moyssi; D. Karsili; M. Faka; A. Anilir; S. Manolis,"Abstract Efforts to locate missing persons resulting from conflict often centre of excavation. Although this approach is the only way to definitively confirm the presence of human remains, it can be costly and labour-intensive, particularly when large areas need to be searched. This paper discusses a wide range of emerging non-invasive digital methods implemented with a view to locating burials and mass graves and increase the excavation recovery rate of the Committee on Missing Persons in Cyprus (CMP). Aerial and terrestrial survey and subsequent 3D modelling were combined with geophysical survey in order to record sites, two of which were excavated to ground-truth the findings. The results demonstrated the effectiveness of these techniques in defining the search parameters of potential burial sites and prioritizing features for investigation. The nature of the collaboration between archaeologists, digital technologists, and forensic experts allowed mutual trust to be built between all parties, whilst also testing the effectiveness of the methods employed.",1,,95,107,Photogrammetry; Data science; Geophysical survey (archaeology); Forensic archaeology; Recovery rate; Excavation; Computer science; Ground-penetrating radar,Digital technologies; Forensic archaeology; Geophysics; Ground penetrating radar; Missing persons; Photogrammetry,,,Marie Sklodowska-Curie Action; Digital Forensic Archaeology,http://eprints.staffs.ac.uk/5681/ https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7219194 https://www.sciencedirect.com/science/article/pii/S2589871X19300828 https://core.ac.uk/download/pdf/210991644.pdf,http://dx.doi.org/10.1016/j.fsisyn.2019.05.002,32411961,10.1016/j.fsisyn.2019.05.002,2948978223,PMC7219194,0,000-936-621-181-317; 004-086-552-514-938; 005-676-466-381-741; 007-036-175-939-263; 012-426-089-826-902; 016-225-015-230-107; 019-763-357-518-984; 025-094-429-798-148; 028-141-955-184-339; 028-205-528-233-343; 034-157-734-842-610; 034-811-831-798-66X; 039-425-885-215-040; 039-770-514-496-83X; 041-265-951-641-438; 066-952-151-953-603; 077-583-394-896-234; 079-602-164-850-584; 079-632-479-718-155; 088-475-666-056-708; 090-878-982-570-90X; 096-031-767-202-21X; 104-379-057-063-150; 105-716-388-241-40X; 106-619-341-791-430; 109-238-249-157-146; 116-918-248-369-633; 132-982-288-075-986; 140-362-010-096-283; 141-104-202-460-179; 155-896-090-630-255; 169-285-065-757-76X; 195-623-056-826-585,9,true,"CC BY, CC BY-NC-ND",gold 068-565-513-246-053,Physical security design of a digital forensic lab,,2021,journal article,International Journal of Electronic Security and Digital Forensics,1751911x; 17519128,Inderscience Publishers,United Kingdom,Doug Weeks; Bing Zhou,The physical security design of a digital forensic lab is one of the key components to ensure investigators are providing a secure environment to process and store evidence that has been entrusted ...,13,1,418,444,Key (cryptography); Physical security; Computer security; Computer science; Process (engineering); Access control; Digital forensics,,,,,https://www.inderscienceonline.com/doi/abs/10.1504/IJESDF.2021.116017,http://dx.doi.org/10.1504/ijesdf.2021.10033951,,10.1504/ijesdf.2021.10033951,3107912113,,0,,0,false,, 068-620-013-373-872,Automatically classifying crime scene images using machine learning methodologies,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Joshua Abraham; Ronnie Ng; Marie Morelato; Mark Tahtouh; Claude Roux,,39,,301273,,Machine learning; Information technology; Support vector machine; Digital transformation; Artificial intelligence; Crime scene; Learning classifier system; Feature (machine learning); Computer science; Convolutional neural network; Classifier (UML),,,,Australian Research Council,https://www.sciencedirect.com/science/article/pii/S2666281721001918,http://dx.doi.org/10.1016/j.fsidi.2021.301273,,10.1016/j.fsidi.2021.301273,3201711885,,0,000-080-989-398-164; 001-088-659-113-528; 001-794-049-244-772; 002-148-956-279-83X; 002-345-873-500-677; 002-508-484-172-239; 005-277-903-158-217; 006-915-702-173-584; 007-619-251-889-048; 007-898-145-584-667; 016-609-780-602-820; 020-233-013-143-936; 021-201-295-792-01X; 023-941-446-929-770; 024-895-772-817-987; 028-922-387-729-397; 029-129-936-385-359; 030-440-271-786-330; 031-665-703-219-844; 032-774-793-587-454; 035-691-875-377-819; 036-275-926-387-114; 038-006-102-898-154; 040-245-428-940-738; 040-806-863-361-404; 045-862-391-747-525; 048-014-302-464-089; 049-764-437-075-282; 051-524-411-942-80X; 053-653-472-639-71X; 057-567-246-168-045; 058-052-081-943-595; 058-533-215-965-851; 068-911-446-161-728; 073-930-781-876-063; 076-518-832-389-690; 077-945-517-360-807; 078-018-661-261-191; 079-190-040-024-805; 087-342-951-350-054; 106-911-017-602-261; 113-877-246-754-354; 117-762-117-967-121; 121-707-574-802-675; 122-553-557-970-535; 139-574-355-751-895; 139-888-759-599-078; 154-344-013-496-951; 162-880-630-852-463; 163-330-758-807-944; 178-606-451-314-116; 179-453-158-396-492; 181-797-068-816-79X; 183-301-098-168-35X,0,false,, 068-669-641-930-403,Theory of Information and Computer Support for Forensic Expert Activities as a New Private Theory of Forensic Expertology,2022-05-08,2022,journal article,Courier of Kutafin Moscow State Law University (MSAL)),27826163; 23115998,Kutafin Moscow State Law University,,E. R. Rossinskaya,"From the stand point of global digitalization, the article substantiates the creation of a new private theory of forensic expertology — the theory of information and computer support of forensic expert activity. The author outlines the main stages of the genesis the processes of automation and informatization for forensic research. At the first stage, in the mid-60s, many works related to the use of cybernetics in the automation of certain types of forensic examinations appeared in the forensic literature. The second stage occurred at the end of the 80s — 90s of the XX century, when the integration of new information technologies, mainly of a technological nature, began to develop in five main directions, thanks to the development of computer technology. In the early 2000s, the third stage of informatization and computerization of forensic expertise began. The processes of digitalization in forensic activity gave a new impetus to the development of not only the areas of information and computer support, which continued to improve, but also the emergence of research in many kinds (types) forensic examinations of new objects expert research — digital footprints. The author states that there was no theoretical basis for their forensic expert research in forensic expertology. Therefore, a new private theory (teaching) of forensic expertology has been developed — the theory of digitalization for forensic expert activity. The subject of this theory and its objects, the place of the new theory in forensic expertology are described. It has been proved that the theory of digitalization for forensic activity, due to the increasingly global nature of digitalization, can be attributed to several private theories, the provisions of which equally apply both to the process of expert research as a whole and to expert research of certain types of expertise. The modern theory of digitalization of forensic activities includes two areas: a system of information and computer support for forensic activities and forensic research of digital footprints.",,2,27,40,Informatization; Computer forensics; Forensic science; Digital forensics; Automation; Computer science; Digital evidence; Expert system; Data science; Engineering ethics; Engineering; Artificial intelligence; Computer security; World Wide Web; History; Mechanical engineering; Archaeology,,,,,,http://dx.doi.org/10.17803/2311-5998.2022.90.2.027-040,,10.17803/2311-5998.2022.90.2.027-040,,,0,,0,true,,hybrid 068-808-995-601-188,Corrigendum to “Data acquisition methods using backup data decryption of sony smartphones” [Foren. Sci. Int: Digital Investigation 31 (2019) 200890],,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,," Hur; Myungseo Park; Giyoon Kim; Younjai Park; Insoo Lee; Jongsung Kim",,37,,301180,,Operating system; Data acquisition; Backup; Data decryption; Computer science,,,,,https://dblp.uni-trier.de/db/journals/di/di37.html#HurPKPLK21,http://dx.doi.org/10.1016/j.fsidi.2021.301180,,10.1016/j.fsidi.2021.301180,3165081096,,0,,0,true,,bronze 068-963-276-741-571,The transfer and persistence of DNA under the fingernails following digital penetration of the vagina,2010-11-04,2010,journal article,Forensic science international. Genetics,18780326; 18724973,Elsevier Ireland Ltd,Netherlands,Nicola Flanagan; Colin McAlister,,5,5,479,483,Penetration (firestop); Vagina; Anus; Sexual assault; Physiology; DNA profiling; Biology,,Alleles; DNA/analysis; Female; Fingers; Humans; Male; Nails/chemistry; Vagina,DNA,,https://europepmc.org/article/MED/21056024 https://www.sciencedirect.com/science/article/abs/pii/S1872497310001742 https://pubmed.ncbi.nlm.nih.gov/21056024/ https://www.ncbi.nlm.nih.gov/pubmed/21056024 http://www.sciencedirect.com/science/article/pii/S1872497310001742,http://dx.doi.org/10.1016/j.fsigen.2010.10.008,21056024,10.1016/j.fsigen.2010.10.008,1978578965,,0,005-581-589-993-21X; 016-413-712-727-264; 020-989-775-008-466; 041-565-738-769-250; 052-025-983-220-36X; 086-088-722-235-16X,18,false,, 069-051-070-055-052,Penerapan Integrated Digital Forensic Investigation Framework v2 (IDFIF) pada Proses Investigasi Smartphone,2016-03-11,2016,journal article,Jurnal Edukasi dan Penelitian Informatika (JEPIN),25489364; 24600741,Tanjungpura University,,Ruuhwan Ruuhwan; Riadi; Yudi Prayudi,"Perkembangan teknologi yang semakin pesat, dapat menimbulkan permasalahan bagi pengguna teknologi itu sendiri, semakin maju kehidupan masyarakat, maka kejahatan juga ikut semakin maju. Smartphone merupakan salah satu bentuk teknologi yang digunakan untuk melakukan penipuan melalui fasilitas Short Message Service ( SMS). Pada saat smartphone yang digunakan untuk melakukan kejahatan maka smartphone tersebut dapat disita oleh aparat penegak hukum sebagai salah satu barang bukti. Cara pembuktian untuk mendapatkan bukti yang valid adalah dengan melakukan investigasi menggunakan pendekatan penanganan bukti digital yang dikenal dengan istilah Framework. Integrated Digital Forensics Investigation Framework versi 2 (IDFIF v2) merupakan framework terbaru yang telah dikembangkan sehingga dapat digunakan untuk proses investigasi smartphone . Kata kunci — Barang Bukti, Framework, IDFIF v2, Smartphone",2,1,,,,,,,,https://doaj.org/article/454dedfda585445eb288e74b545be9b4 https://core.ac.uk/display/88097479 https://core.ac.uk/download/pdf/294889013.pdf,http://dx.doi.org/10.26418/jp.v2i1.14369,,10.26418/jp.v2i1.14369,2295828917,,0,,3,true,cc-by-nc-sa,gold 069-073-265-694-871,Information assurance in a distributed forensic cluster,,2014,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Nick Pringle; Mikhaila Burgess,"Abstract When digital forensics started in the mid-1980s most of the software used for analysis came from writing and debugging software. Amongst these tools was the UNIX utility ‘dd’ which was used to create an image of an entire storage device. In the next decade the practice of creating and using ‘an image’ became established as a fundamental base of what we call ‘sound forensic practice’. By virtue of its structure, every file within the media was an integrated part of the image and so we were assured that it was wholesome representation of the digital crime scene. In an age of terabyte media ‘the image’ is becoming increasingly cumbersome to process, simply because of its size. One solution to this lies in the use of distributed systems. However, the data assurance inherent in a single media image file is lost when data is stored in separate files distributed across a system. In this paper we assess current assurance practices and provide some solutions to the need to have assurance within a distributed system.",11,,S36,S44,Unix; World Wide Web; Debugging; Crime scene; Terabyte; Software; Information assurance; Computer science; Multimedia; Image file formats; Digital forensics,,,,European Social Fund,http://www.sciencedirect.com/science/article/pii/S1742287614000103 https://doi.org/10.1016/j.diin.2014.03.005 https://core.ac.uk/display/81935556 https://www.sciencedirect.com/science/article/pii/S1742287614000103 https://core.ac.uk/download/pdf/81935556.pdf,http://dx.doi.org/10.1016/j.diin.2014.03.005,,10.1016/j.diin.2014.03.005,2059728478,,0,021-563-550-669-43X; 024-721-343-226-994; 029-632-996-742-459; 033-877-222-136-260; 039-449-793-715-298; 050-513-243-638-138; 055-090-334-937-061; 060-799-847-178-231; 067-938-325-014-282; 079-070-981-899-105; 117-239-595-156-183; 134-927-490-231-285,11,true,cc-by-nc-nd,hybrid 069-321-740-091-392,An Exploratory Study on Readiness Framework in IoT Forensics,,2021,journal article,Procedia Computer Science,18770509,Elsevier BV,,Nurul Huda Nik Zulkipli; Gary Wills,"Abstract Forensic readiness is important to ensure that the organization is fully prepared and well-equipped to be forensically ready to conduct the digital forensic investigation. Moreover, forensic readiness in IoT forensic investigation is different from the usual computer forensic readiness. This research discovered the importance of having the forensic readiness in place for the organization before conducting the IoT forensic investigation. Therefore, a readiness framework was proposed as a groundwork before further research is carried out. Literature on related this issues was collected, examined and criticized in order to scrutinize the impact factors in IoT forensics investigations. Finally, the proposed framework was validated by thirty experts from digital forensics in Malaysia using triangulation methods. From the results, this framework will be used in developing an instruments to measure readiness factors among digital forensics stakeholders.",179,,966,973,Forensic science; Data science; Digital forensic investigation; Computer science; Internet of Things; Digital forensics; Exploratory research,,,,"Ministry of Higher Education, Malaysia; Universiti Teknologi MARA",https://www.sciencedirect.com/science/article/pii/S1877050921001186,http://dx.doi.org/10.1016/j.procs.2021.01.086,,10.1016/j.procs.2021.01.086,3130874217,,0,002-383-410-319-043; 002-625-978-577-247; 006-435-365-660-88X; 010-791-676-072-730; 018-552-581-098-658; 021-486-901-460-202; 024-462-843-796-80X; 025-697-732-683-864; 044-927-515-004-191; 045-098-715-794-977; 046-143-775-958-052; 054-448-712-045-982; 058-723-704-218-926; 060-294-953-084-788; 065-654-832-541-493; 075-142-959-030-889; 097-675-162-158-578; 098-748-261-333-651; 104-249-629-797-999; 112-181-239-331-730; 125-334-982-415-97X; 173-791-408-962-068; 199-745-676-923-766,4,true,cc-by-nc-nd,gold 069-498-762-346-193,"File system anti-forensics - types, techniques and tools",,2020,journal article,Computer Fraud & Security,13613723; 18737056,Mark Allen Group,United Kingdom,Mohamad Ahtisham Wani; Ali Alzahrani; Wasim Ahmad Bhat,"Forensics paved the way for the growth of anti-forensics, and the time has come for anti-forensics to return the favour. For that purpose, it is imperative that forensic investigators and practitioners are armed with the knowledge of contemporary anti-forensics types, techniques and tools. This article aims to provide technical information and a comprehensive understanding of file system anti-forensics types, techniques and tools so as to facilitate investigators' ability to collect technically credible and legally admissible digital evidence from crime scenes. Forensics paved the way for the growth of anti-forensics, which tries to prevent, hinder or corrupt the forensic process of evidence acquisition and analysis. The time has come for anti-forensics to return the favour. Mohamad Ahtisham Wani, Ali AlZahrani and Wasim Ahmad Bhat provide technical information and a comprehensive understanding of file system anti-forensics types, techniques and tools so as to facilitate investigators' ability to collect technically credible and legally admissible digital evidence from crime scenes.",2020,3,14,19,Crime scene; Data science; Thesaurus (information retrieval); File system; Digital evidence; Technical information; Computer science; Process (engineering),,,,,https://jglobal.jst.go.jp/en/detail?JGLOBAL_ID=202002238962924261 https://www.sciencedirect.com/science/article/pii/S1361372320300300,http://dx.doi.org/10.1016/s1361-3723(20)30030-0,,10.1016/s1361-3723(20)30030-0,3011988910,,0,002-545-683-320-858; 003-526-475-150-199; 022-723-601-549-961; 036-835-610-186-319; 046-318-533-334-038; 048-060-373-393-81X; 065-061-509-329-026; 100-552-121-697-280; 102-253-978-450-757; 134-502-810-516-308; 135-260-956-420-429; 163-853-761-819-084,12,false,, 069-515-583-360-223,Choose your own murder: Non-linear narratives enhance student understanding in forensic science education.,2020-01-21,2020,journal article,Forensic science international. Synergy,2589871x,Elsevier BV,Netherlands,Tim Thompson,"Abstract Higher education teaching in the forensic sciences tends to follow a traditional format of lectures followed by practical laboratory sessions. Sometimes this approach is not possible or viewed as not innovative enough. The free, open access software Twine was used with final year undergraduates in forensic and crime scene science in a UK university in order to create an interactive learning experience based around the creation of non-linear stories. Evaluation of this approach demonstrated the positive impact on student understanding when compared to the traditional lecture model. Students found the experience engaging and were keen to use Twine again.",2,,82,85,Higher education; Forensic science; Mathematics education; Psychology; Crime scene; Narrative; Order (business); Interactive Learning; Software,Education 4.0; Forensic ecology; Higher education; Learners; Twine,,,Teesside University,https://research.tees.ac.uk/en/publications/choose-your-own-murder-non-linear-narratives-enhance-student-unde https://www.sciencedirect.com/science/article/pii/S2589871X20300097 https://research.tees.ac.uk/ws/files/9918925/Choose_your_own_murder_Non_linear_narratives_enhance_student_understanding_in_forensic_science_education.pdf https://www.ncbi.nlm.nih.gov/pubmed/32412003 https://core.ac.uk/download/pdf/287034243.pdf,http://dx.doi.org/10.1016/j.fsisyn.2020.01.009,32412003,10.1016/j.fsisyn.2020.01.009,3000958558,PMC7219163,0,000-295-290-820-34X; 004-111-425-292-342; 005-847-304-479-774; 006-470-221-692-149; 009-867-191-807-623; 012-002-455-932-627; 012-236-923-792-533; 027-799-596-368-543; 030-043-392-965-213; 036-328-899-769-841; 038-379-496-951-879; 043-329-766-886-030; 043-684-451-827-921; 045-386-322-228-540; 046-850-691-447-936; 048-782-046-899-260; 051-325-692-304-81X; 058-054-431-408-429; 073-679-520-699-41X; 075-101-507-583-473; 103-360-773-318-293; 103-741-613-447-626; 109-232-600-983-182; 121-507-425-513-865; 131-239-640-512-106; 154-339-963-884-249,6,true,"CC BY, CC BY-NC-ND",gold 069-546-445-063-10X,An integrated open forensic environment for digital evidence investigation,2012-11-14,2012,journal article,Wuhan University Journal of Natural Sciences,10071202; 19934998,Springer Science and Business Media LLC,China,Jun Zhang; Lina Wang,"Nowadays, the capability of traditional digital forensic tools fails to meet the demand of ever increasing of criminal or civil cases. One of the challenges is that digital devices and applications are multifarious and changing quickly. Here, we propose a new mode for digital forensic tools utilization via integrating open-source single tools into a platform and setting up into Live DVD/USB. The platform, an Integrated Open Forensic Environment (named IOFE), takes full advantage of these tools and, at the same time, elevates its power and interoperability via standardized input/output data. The IOFE features conducting live and dead investigation and covers three consecutive major phases of digital forensics: acquisition, analysis, and presentation. Our experiments prove that IOFE can carry out manifold acquisition, interpretation, analysis, and presentation task of evidentiary data in an efficient and effective manner.",17,6,511,515,World Wide Web; Interoperability; Presentation; Task (project management); Digital evidence; Computer science; Mode (computer interface); Multimedia; USB; Digital forensics,,,,,https://link.springer.com/article/10.1007/s11859-012-0879-3 https://link.springer.com/content/pdf/10.1007%2Fs11859-012-0879-3.pdf,http://dx.doi.org/10.1007/s11859-012-0879-3,,10.1007/s11859-012-0879-3,2405017237,,0,019-456-366-483-584; 040-483-292-320-671; 050-513-243-638-138; 051-165-387-606-715; 072-072-328-028-440; 074-012-101-472-334; 123-477-592-483-85X; 142-855-067-627-071; 162-864-397-044-696,2,false,, 069-884-249-384-899,Digital evidence and the crime scene.,2021-10-06,2021,journal article,Science & justice : journal of the Forensic Science Society,18764452; 13550306,Forensic Science Society,United Kingdom,Graeme Horsman,"Abstract Many criminal investigations maintain an element of digital evidence, where it is the role of the first responder in many cases to both identify its presence at any crime scene, and assess its worth. Whilst in some instances the existence and role of a digital device at-scene may be obvious, in others, the first responder will be required to evaluate whether any ‘digital opportunities’ exist which could support their inquiry, and if so, where these are. This work discusses the potential presence of digital evidence at crime scenes, approaches to identifying it and the contexts in which it may exist, focusing on the investigative opportunities that devices may offer. The concept of digital devices acting as ‘digital witnesses’ is proposed, followed by an examination of potential ‘digital crime scene’ scenarios and strategies for processing them.",61,6,761,770,Criminal investigation; Crime scene; Work (electrical); Element (criminal law); Data science; First responder; Digital evidence; Digital device; Computer science; Digital forensics,Crime Scene; Digital Evidence; Digital Forensics; First Responder; Investigation,Crime; Humans,,,https://www.sciencedirect.com/science/article/pii/S1355030621001295,http://dx.doi.org/10.1016/j.scijus.2021.10.003,34802650,10.1016/j.scijus.2021.10.003,3205130440,,0,000-385-377-624-228; 007-447-468-912-052; 015-527-658-048-875; 019-831-293-743-518; 022-837-571-402-576; 025-141-025-402-513; 029-164-830-214-360; 044-295-409-596-282; 061-620-309-813-166; 062-137-637-964-947; 066-032-563-680-259; 087-665-408-966-240; 094-142-794-127-63X; 101-898-536-025-026; 143-546-413-886-429; 159-477-048-665-066; 173-145-269-859-717; 184-221-983-536-940; 199-745-676-923-766,0,false,, 070-213-659-171-077,Streamlined forensic reporting: Rhetoric and reality.,2019-05-03,2019,journal article,Forensic science international. Synergy,2589871x,Elsevier BV,Netherlands,Carole McCartney,Abstract Commentary detailing some concerns with Streamlined Forensic Reporting in the UK.,1,,83,85,Rhetoric; Forensic science; Engineering ethics; History,Expert evidence; Forensic investigation; Miscarriages of justice; Streamlined forensic reporting,,,,https://www.sciencedirect.com/science/article/pii/S2589871X19300774 https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7219119 https://researchportal.northumbria.ac.uk/en/publications/streamline-forensic-reporting-rhetoric-and-reality https://researchportal.northumbria.ac.uk/en/publications/streamline-forensic-reporting(f1a2e70d-74fd-4f65-90fa-c2e0653f490b).html http://nrl.northumbria.ac.uk/39213/ https://core.ac.uk/download/199234854.pdf,http://dx.doi.org/10.1016/j.fsisyn.2019.04.004,32411959,10.1016/j.fsisyn.2019.04.004,2943515357,PMC7219119,0,,9,true,"CC BY, CC BY-NC-ND",gold 070-308-945-671-285,Common source identification of images in large databases.,2014-09-08,2014,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Floris Gisolf; Pelle Barens; Ewald Snel; Anwar Malgoezar; Mark Vos; Arjan Mieremet; Zeno Geradts,,244,,222,230,Image (mathematics); Volume (computing); Data mining; Digital camera; Computer cluster; Computer science; Computation; Database; Identification (information); Digital forensics; Noise (video),Digital camera identification; Digital forensics; Large scale common source identification; Photo-response non-uniformity,,,,https://core.ac.uk/display/132739751 https://www.sciencedirect.com/science/article/pii/S0379073814003612 https://www.ncbi.nlm.nih.gov/pubmed/25279802 https://europepmc.org/abstract/MED/25279802 https://www.narcis.nl/publication/RecordID/oai%3Adare.uva.nl%3Apublications%2F6c4763b4-21b8-4d87-878d-5d8ab85c132d http://www.sciencedirect.com/science/article/pii/S0379073814003612,http://dx.doi.org/10.1016/j.forsciint.2014.08.034,25279802,10.1016/j.forsciint.2014.08.034,2077889468,,0,018-276-309-945-450; 026-290-088-195-051; 036-277-431-302-085; 045-226-923-439-105; 048-955-603-721-071; 060-043-515-260-052; 069-847-568-544-420; 070-260-337-691-258; 073-556-368-991-677; 077-828-134-917-257; 083-097-133-928-799; 089-547-267-411-182; 106-295-038-562-776; 125-998-770-927-182; 184-897-235-429-285,16,false,, 070-378-356-319-383,Rules of professional responsibility in digital forensics: A comparative analysis,,2015,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Filipo Sharevski,"The Committee on Identifying the Needs of Forensic Sciences Community (2009) accentuates the establishment of a uniform code of ethics emphasizing the importance of enforceability in strengthening the role that the forensic science plays within the criminal justice system. Equally pertinent to the domain of digital forensics, this imperative entails a research commitment in comparing and contrasting the respective codes of ethics to illustrate their variety, specificity and enforceability to inform the discussion on the associated regulative aspects. Accordingly, this paper reviews the professional regulation inaugurated in both the US and international digital forensics arena giving a detailed perspective on the consolidation of the practice.",10,2,39,54,Criminal justice; Ethical code; Variety (cybernetics); Political science; Professional responsibility; Consolidation (business); Computer security; Information security; Engineering ethics; Computer forensics; Digital forensics,,,,,https://repository.globethics.net/handle/20.500.12424/871090 https://commons.erau.edu/cgi/viewcontent.cgi?article=1201&context=jdfsl https://commons.erau.edu/jdfsl/vol10/iss2/3/,http://dx.doi.org/10.15394/jdfsl.2015.1201,,10.15394/jdfsl.2015.1201,1647780413,,0,004-280-322-555-290; 024-066-028-851-257; 050-721-573-791-625; 054-336-486-986-971; 062-032-128-092-406; 068-345-833-704-493; 076-551-618-438-88X; 078-327-902-374-330; 101-436-770-235-826; 113-522-568-412-928; 114-090-829-194-843; 116-701-124-968-194; 131-516-331-360-906; 132-016-143-282-432; 136-518-828-547-101; 146-749-886-466-706; 151-902-391-890-088; 170-295-594-314-571,5,true,cc-by-nc,gold 070-387-550-064-219,A Digital Video Tampering Forensics Scheme Based on Forensics Hash: A Digital Video Tampering Forensics Scheme Based on Forensics Hash,2014-02-23,2014,journal article,Journal of Electronics & Information Technology,10095896,China Science Publishing & Media Ltd.,China,Hui Wei; Gao-bo Yang; Ming Xia,,35,12,2934,2941,Scheme (programming language); Digital video; Computer security; Computer science; Network forensics; Hash function,,,,,http://pub.chinasciencejournal.com/article/getArticleRedirect.action?doiCode=10.3724/SP.J.1146.2013.00296,http://dx.doi.org/10.3724/sp.j.1146.2013.00296,,10.3724/sp.j.1146.2013.00296,2322926756,,0,,0,false,, 070-740-822-724-693,Forensic Tools Performance Analysis on Android-based Blackberry Messenger using NIST Measurements,2018-10-01,2018,journal article,International Journal of Electrical and Computer Engineering (IJECE),20888708,Institute of Advanced Engineering and Science,Indonesia," Riadi; Rusydi Umar; Arizona Firdonsyah","Blackberry Messenger is one of the popularly used instant messaging applications on Android with user’s amount that increase significantly each year. The increase off Blackberry Messenger users might lead to application misuse, such as for commiting digital crimes. To conduct investigation involving smartphone devices, the investigators need to use forensic tools. Therefore, a research on current forensic tool’s performance in order to handle digital crime cases involving Android smartphones and Blackberry Messenger in particular need to be done. This research focuses on evaluating and comparing three forensic tools to obtain digital evidence from Blackberry Messenger on Android smartphones using parameter from National Institute of Standard Technology and Blackberry Messenger’s acquired digital evidences. The result shows that from comparative analysis conducted, Andriller gives 25% performance value, Oxygen Forensic Suite gives 100% performance value, and Autopsy 4.1.1 gives 0% performance value. Related to National Institute of Standard Technology parameter criterias, Andriller has performance value of 47.61%. Oxygen Forensic Suite has performance value of 61.90%. Autopsy 4.1.1 has performance value of 9.52%.",8,5,3991,4003,NIST; Forensic science; Digital evidence; Computer science; Multimedia; Android (operating system),,,,,http://ijece.iaescore.com/index.php/IJECE/article/view/12964 http://ijece.iaescore.com/index.php/IJECE/article/download/12964/9610 https://core.ac.uk/download/329117642.pdf,http://dx.doi.org/10.11591/ijece.v8i5.pp3991-4003,,10.11591/ijece.v8i5.pp3991-4003,2913018284,,0,,8,true,cc-by-nc,hybrid 070-954-300-168-750,A Prototype of Portable Digital Forensics Imaging Tools using Raspberry Device,2021-02-01,2021,journal article,IOP Conference Series: Materials Science and Engineering,17578981; 1757899x,IOP Publishing,,Fietyata Yudha; Erika Ramadhani; R M Komaryan,"One of the digital forensics activities has the goal to prove a cybercrime. There are several stages in digital forensics when doing an investigation. Each stage has its suitable hardware and software that is used while investigating a case. Standalone forensics hardware is a suitable media in the process of investigation. It can do an acquisition and imaging process at the same time as the investigation process. Nowadays, standalone forensics hardware for imaging devices has a very high price. This paper gives a solution to develop low budget portable imaging forensics devices using a raspberry device. The device enables us to do an acquisition to a hard disk or flash drive. The output has a raw format file type i.e.dd. This device includes a logging file consisting of detailed information related to the digital evidence also hashing to provide file integrity. The result of this paper describes how to construct a prototype low budget portable device for digital forensics acquisition using a raspberry device and how to operate it in GUI. The prototype was successfully created and tested in several scenarios. The performance test of this device has a result of that transfer rate of 1,85 MB/s.",1077,1,012064,,Software; Flash drive; Construct (python library); Digital evidence; Computer science; Digital forensics; Computer hardware; File format; Process (computing); Hash function,,,,,https://iopscience.iop.org/article/10.1088/1757-899X/1077/1/012064/pdf https://iopscience.iop.org/article/10.1088/1757-899X/1077/1/012064/meta https://ui.adsabs.harvard.edu/abs/2021MS&E.1077a2064Y/abstract,http://dx.doi.org/10.1088/1757-899x/1077/1/012064,,10.1088/1757-899x/1077/1/012064,3136799502,,0,003-232-363-219-004; 065-861-995-125-023; 076-508-293-079-677,1,true,cc-by,gold 071-182-359-615-008,Technical reporting in digital forensics.,2022-08-15,2022,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Graeme Horsman,"One of the primary roles of a practitioner in the field of digital forensics (DF) is to conduct the examination of any lawfully seized digital device content and report upon any findings that may support an inquiry being conducted. While there are many intricacies to this task, in some cases, an inquiry will commence with a practitioner carrying out the necessary examination work required to report any findings at a ""technical level."" Such technical reports are often used for intelligence gathering purposes in an attempt to establish the potential evidential value of a device or data set and are often a precursor to, and catalyst for, further and often more extensive forensic work being commissioned. Therefore, the ability to report at a technical level should be considered a fundamental skill required of all practitioners in this discipline and any attempts to provide guidance and support for conducting this task effectively should be encouraged. This work explores the role of technical reporting, where a series of reporting examples are presented that explore the intricacies involved with conveying digital forensic findings at a technical level. Procedural and linguistic challenges are investigated and evaluated in order to acknowledge the pitfalls that practitioners may encounter and to identify potential technical reporting best practices.",,,,,Digital forensics; Task (project management); Work (physics); Set (abstract data type); Computer science; Value (mathematics); Computer forensics; Field (mathematics); Best practice; Engineering ethics; Psychology; Data science; Computer security; Engineering; Political science; Law; Mechanical engineering; Mathematics; Systems engineering; Machine learning; Pure mathematics; Programming language,digital evidence; digital forensics; report writing; technical reporting,,,,,http://dx.doi.org/10.1111/1556-4029.15108,35968719,10.1111/1556-4029.15108,,,0,000-490-412-762-138; 010-061-391-662-193; 029-638-263-419-336; 036-597-490-099-438; 041-365-301-128-075; 050-296-813-523-597; 092-765-349-680-750; 099-377-733-522-116; 117-555-147-368-574; 131-696-619-498-120; 168-245-076-589-180,0,true,,hybrid 071-303-820-692-940,Identifying an existing file via KaZaA artefacts,,2006,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Paul Sanderson,,3,3,174,180,World Wide Web; MD5; CLIPS; Digital video; Computer science; Peer-to-peer; File sharing; Hash function,,,,,https://www.sciencedirect.com/science/article/pii/S1742287606000995 https://dblp.uni-trier.de/db/journals/di/di3.html#Sanderson06,http://dx.doi.org/10.1016/j.diin.2006.08.011,,10.1016/j.diin.2006.08.011,2095170582,,0,,5,false,, 071-363-969-812-87X,Forensic Significance of Cardiac Implantable Device (Pacemaker),2019-05-20,2019,journal article,"International Journal of Scientific Research in Science, Engineering and Technology",23944099; 23951990,Technoscience Academy,,Anju Bhatt; Vaishali Ajugiya; Deepika Bhandari; Neeta Khobragade,"Pacemakers are automated electric medical devices that are imbibed in the pleural cavity near to heart so as to stimulate the heart with electrical inducement to maintain or restore a normal heartbeat. Pacemakers can be implanted temporarily to treat bradycardia after a heart attack, surgery or overdose of medication. They can also be implanted permanently to correct a slow heartbeat or, in some cases, to help treat heart failure. With increase in pacemaker indications and especially implantable cardioverter-defibrillators, the number of patients with implantable devices has been growing steadily. With the enhancement in the technology the design of pacemakers are being modified till date. Pacemakers being an electronic device also stores data of patient's heartrate, pulse rate and number of time it has paced in a day. Since, technology is killing our opportunity to falsify the information; the data stored in the pacemaker can either support or reject the alibi stated by the victim or assailant. The aim of this research paper is to study the concept and type of digital data stored in implantable cardiac device i.e. pacemaker. This study focuses on awareness about the application of pacemaker in solving forensic cases. Digital data provided by the pacemaker in any ongoing investigation will have a huge evidentiary potential, as it can be made admissible in the court of law under Section 65-B of the Indian Evidence Act, 1872. In this paper, we are recommending that pacemakers can be used as digital evidences since, they track the audit trails of the patient.",6,3,340,345,Digital evidence; Medical emergency; Medicine,,,,,http://ijsrset.com/paper/5932.pdf,http://dx.doi.org/10.32628/ijsrset196369,,10.32628/ijsrset196369,2954883516,,0,020-962-517-216-318; 027-205-313-452-016; 033-286-409-075-846; 033-474-564-010-944; 055-093-089-681-931; 063-661-026-375-024; 067-796-348-175-184; 071-372-918-403-464; 082-533-206-961-250; 099-835-315-381-563; 151-048-250-873-903,0,true,,gold 071-422-371-742-739,Assessment of the accuracy of 3D printed teeth by various 3D printers in forensic odontology,2021-10-05,2021,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Abraham Johnson; Gargi Jani; Rachael M. Carew; Astha Pandey,,328,,111044,,Usability; Metric (unit); Engineering drawing; Manufacturing technology; Digital analysis; Forensic odontology; 3d printed; Computer science; 3D printing; Digital Light Processing,3D printing; 3D scanning; Digital analysis; Forensic odontology; Forensic science; Metric analysis,"Bone and Bones; Humans; Printing, Three-Dimensional; Tooth/diagnostic imaging",,,https://www.sciencedirect.com/science/article/pii/S0379073821003649,http://dx.doi.org/10.1016/j.forsciint.2021.111044,34653828,10.1016/j.forsciint.2021.111044,3204139912,,0,002-372-825-803-01X; 006-036-539-291-490; 009-001-256-990-75X; 012-477-285-701-154; 014-479-235-932-693; 016-083-997-169-585; 016-677-185-859-44X; 019-885-756-382-127; 021-806-884-267-864; 022-370-604-992-802; 022-384-106-784-151; 024-784-179-276-92X; 029-582-707-586-195; 032-741-996-198-693; 035-578-241-599-984; 036-403-879-718-18X; 036-642-497-460-687; 037-519-550-685-125; 045-977-597-761-939; 047-188-805-152-507; 047-857-403-343-875; 049-373-362-347-141; 049-903-539-268-808; 051-662-768-319-549; 052-446-300-200-518; 054-677-638-335-39X; 055-826-749-037-03X; 057-796-583-951-339; 066-326-667-476-053; 066-933-307-078-46X; 073-158-742-955-243; 073-933-049-544-280; 075-194-515-120-175; 078-380-583-447-952; 079-459-146-399-444; 081-455-583-763-893; 083-004-685-736-976; 091-899-415-197-503; 092-305-346-660-757; 100-557-961-573-662; 102-868-472-436-983; 109-868-871-859-566; 117-128-572-238-328; 119-808-361-644-061; 139-576-971-424-977; 139-729-629-797-721; 152-707-208-039-547; 178-456-110-092-227,1,false,, 071-788-675-518-847,Adaptive Histogram Equalization Based Image Forensics Using Statistics of DC DCT Coefficients,2018-04-02,2018,journal article,Advances in Electrical and Electronic Engineering,18043119; 13361376,VSB - Technical University of Ostrava,Czech Republic,Neetu Singh; Abhinav Gupta; R C Jain,"The vulnerability of digital images is growing towards manipulation. This motivated an area of research to deal with digital image forgeries. The certifying origin and content of digital images is an open problem in the multimedia world. One of the ways to find the truth of images is finding the presence of any type of contrast enhancement. In this work, novel and simple machine learning tool is proposed to detect the presence of histogram equalization using statistical parameters of DC Discrete Cosine Transform (DCT) coefficients. The statistical parameters of the Gaussian Mixture Model (GMM) fitted to DC DCT coefficients are used as features for classifying original and histogram equalized images. An SVM classifier has been developed to classify original and histogram equalized image which can detect histogram equalized image with accuracy greater than 95% when false rate is less than 5%.",16,1,125,134,Image (mathematics); Histogram equalization; Artificial intelligence; Statistical parameter; Pattern recognition; Discrete cosine transform; Adaptive histogram equalization; Computer science; Digital image; Histogram; Mixture model,,,,,http://advances.utc.sk/index.php/AEEE/article/view/2647 http://advances.vsb.cz/index.php/AEEE/article/view/2647 https://core.ac.uk/display/153610502 https://core.ac.uk/download/161961697.pdf,http://dx.doi.org/10.15598/aeee.v16i1.2647,,10.15598/aeee.v16i1.2647,2795385028,,0,,1,true,cc-by,gold 071-880-034-878-967,"IoT Forensic Frameworks (DFIF, IoTDOTS, FSAIoT): A Comprehensive Study",2022-03-28,2022,journal article,International Journal of Advances in Soft Computing and its Applications,27101274; 20748523,Alzaytoonah University of Jordan,Jordan,Mohammad Hassan; Ghassan Samara; Mohammad Fadda,"Abstract In the Internet of Things, millions of electronic items, including automobiles, smoke alarms, watches, eyeglasses, webcams, and other devices, are now connected to the Internet (IoT). Aside from the luxury and comfort that the individual obtains in the field of IoT, as well as its ability to communicate and obtain information easily and quickly, the other concerning aspect is the achievement of privacy and security in this connection, especially given the rapid increase in the number of existing and new IoT devices. Concerns, threats, and assaults related to IoT security have been regarded as a potential and problematic area of research. This necessitates the quick development or creation of suitable technologies with the nature of crimes in the IoT environment. On the other hand, criminal investigation specialists encounter difficulties and hurdles due to various locations, data types, instruments used, and device recognition. This paper provides an in-depth explanation of the criminal content of the Internet of Things. It compares its stages to the detailed stages of traditional digital forensics in terms of similarities and differences, the frameworks used in dealing with electronic crimes, and the techniques used in both types. This paper presents previous discussions of researchers in the field of digital forensics. For the IoT, which brings us to the most important parts of this paper, which is a comprehensive study of the IoT criminal frameworks that are used to protect communication in the field of IoT, such as Digital Forensic Investigation Framework (DFIF), Digital Forensic Framework for Smart Environments (IoTDOTS), Forensic State Acquisition from the Internet of Things (FSAIoT), and discusses the challenges in their general frameworks and provides solutions and strategies. Keywords: digital forensic, FSAIoT, IoT, IoT Challenges, IoT Forensic, IoT Framework, IOTDOTS.",14,1,73,83,Computer science; Field (mathematics); Computer security; Digital forensics; Internet of Things; Aside; The Internet; Digital evidence; Network forensics; Internet privacy; Data science; World Wide Web; Art; Mathematics; Literature; Pure mathematics,,,,,,http://dx.doi.org/10.15849/ijasca.220328.06,,10.15849/ijasca.220328.06,,,0,,1,true,,bronze 071-968-102-950-243,Digital forensic tool verification: An evaluation of options for establishing trustworthiness,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Angus M. Marshall,,38,,301181,,Risk analysis (engineering); Trustworthiness; Work (electrical); Range (mathematics); Scrutiny; Computer science; Digital forensics,,,,,https://doi.org/10.1016/j.fsidi.2021.301181 https://www.sciencedirect.com/science/article/abs/pii/S2666281721000895,http://dx.doi.org/10.1016/j.fsidi.2021.301181,,10.1016/j.fsidi.2021.301181,3172358839,,0,054-004-313-233-495; 057-151-739-358-411,2,false,, 071-971-352-667-536,An OCL-Based Formal Model for Cloud Forensics,,2014,journal article,Advanced Materials Research,16628985,"Trans Tech Publications, Ltd.",,Jian Wang; Zhen Min Tang; Xian Li Jin,"Cloud Computing is gaining acceptance and increasing in popularity. However, digital forensics within Cloud becomes difficult. This paper proposes an extensible semantic model using OCL (Object Constraint Language) for cloud digital forensics data. We give a brief introduction to Trusted Digital Forensics, and then detail the modeling process using OCL and FODA (Feature Oriented Domain Analysis). Therefore, a feature tree can be built with semantic logical relation in order to get the overall semantic description of features in the forensic domain of digital data.",989-994,,1513,1516,Tree (data structure); Object Constraint Language; Forensic science; Domain (software engineering); Feature-oriented domain analysis; Information retrieval; Relation (database); Computer science; Database; Cloud computing; Digital forensics; Semantic data model,,,,,https://zh.scientific.net/AMR.989-994.1513.pdf https://www.scientific.net/AMR.989-994.1513,http://dx.doi.org/10.4028/www.scientific.net/amr.989-994.1513,,10.4028/www.scientific.net/amr.989-994.1513,2008009364,,0,003-196-924-988-132; 027-829-293-463-29X; 036-427-994-375-326; 044-153-843-280-519; 059-697-278-686-056,0,false,, 072-048-290-400-701,Memory analysis of .NET and .Net Core applications,,2022,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Modhuparna Manna; Andrew Case; Aisha Ali-Gombe; Golden G. Richard,,42,,301404,,,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301404,,10.1016/j.fsidi.2022.301404,,,0,177-638-047-045-946,0,false,, 072-072-328-028-440,Massive threading: Using GPUs to increase the performance of digital forensics tools,,2007,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Lodovico Marziale; Golden G. Richard; Vassil Roussev,"The current generation of Graphics Processing Units (GPUs) contains a large number of general purpose processors, in sharp contrast to previous generation designs, where special-purpose hardware units (such as texture and vertex shaders) were commonly used. This fact, combined with the prevalence of multicore general purpose CPUs in modern workstations, suggests that performance-critical software such as digital forensics tools be ''massively'' threaded to take advantage of all available computational resources. Several trends in digital forensics make the availability of more processing power very important. These trends include a large increase in the average size (measured in bytes) of forensic targets, an increase in the number of digital forensics cases, and the development of ''next-generation'' tools that require more computational resources. This paper presents the results of a number of experiments that evaluate the effectiveness of offloading processing common to digital forensics tools to a GPU, using ''massive'' numbers of threads to parallelize the computation. These results are compared to speedups obtainable by simple threading schemes appropriate for multicore CPUs. Our results indicate that in many cases, the use of GPUs can substantially increase the performance of digital forensics tools.",4,,73,81,SIMD; Parallel computing; Shader; Graphics; File carving; Computer science; Byte; Workstation; Multi-core processor; Digital forensics,,,,,https://doi.org/10.1016/j.diin.2007.06.014 https://www.sciencedirect.com/science/article/pii/S1742287607000436 http://kr.nvidia.com/docs/IO/52430/dfrws2007-gpu.pdf https://www.nvidia.cn/docs/IO/47905/dfrws2007-gpu.pdf https://www.nvidia.com.tw/docs/IO/47905/dfrws2007-gpu.pdf https://www.nvidia.co.jp/docs/IO/51178/dfrws2007-gpu.pdf https://www.504ensics.com/uploads/publications/dfrws2007-gpu.pdf http://www.nvidia.co.jp/docs/IO/51178/dfrws2007-gpu.pdf https://www.nvidia.co.kr/docs/io/52430/dfrws2007-gpu.pdf https://kr.nvidia.com/docs/IO/52430/dfrws2007-gpu.pdf https://dblp.uni-trier.de/db/journals/di/di4.html#MarzialeRR07 https://www.nvidia.com/docs/IO/47905/dfrws2007-gpu.pdf http://www.sciencedirect.com/science/article/pii/S1742287607000436 https://roussev.net/pubs/2007-DFRWS--gpu.pdf,http://dx.doi.org/10.1016/j.diin.2007.06.014,,10.1016/j.diin.2007.06.014,2145490846,,0,021-700-635-282-144; 023-341-419-324-638; 054-653-474-483-663; 079-070-981-899-105; 105-571-633-078-745; 117-789-442-823-99X; 126-700-475-893-575; 148-296-731-685-975; 162-485-003-594-995,75,true,cc-by-nc-nd,hybrid 072-152-153-447-327,Digital tool marks (DTMs): a forensic analysis of file wiping software,2019-07-29,2019,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Graeme Horsman,"Whilst difficult to ascertain the full extent to which so called anti-forensic software applications are in use by the public, their threat to an investigation of digital content is tangible, where...",53,1,96,111,Software; Digital content; Tool marks; Computer science; Multimedia; Digital forensics,,,,,https://www.tandfonline.com/doi/full/10.1080/00450618.2019.1640793 https://research.tees.ac.uk/en/publications/digital-tool-marks-dtms-a-forensic-analysis-of-file-wiping-softwa https://research.tees.ac.uk/ws/files/8363337/DTMs.pdf,http://dx.doi.org/10.1080/00450618.2019.1640793,,10.1080/00450618.2019.1640793,2966655090,,0,008-507-664-901-527; 016-983-559-523-04X; 046-158-992-585-59X; 048-250-488-210-056; 060-382-239-802-033; 078-598-867-814-365; 081-988-024-229-83X,4,true,cc-by-nc-nd,green 072-447-630-272-055,Building Foundations for Digital Records Forensics: A Comparative Study of the Concept of Reproduction in Digital Records Management and Digital Forensics,2011-09-01,2011,journal article,The American Archivist,03609081,Society of American Archivists,United States,Sherry L. Xie,"The Digital Records Forensics project is a research collaboration among the fields of digital records management, law, and police investigation. It seeks to develop concepts and methods for determining the authenticity of digital records when they no longer exist in their originating environment. The project began with comparative studies of scholarly literature in each field to lay a conceptual foundation on which other research methodologies, such as analysis of case law, case study, and ethnography, can be designed and executed. The project expects that this conceptual foundation, along with findings from the other methodologies, will facilitate the proposal of a new discipline called digital records forensics, which will be beneficial to all relevant professions, with complementary strengths deriving from each participating field. This article reports on one of the comparative studies, which examined the concept of reproduction in the fields of digital records management and digital forensics. It pres...",74,2,576,599,Engineering; World Wide Web; Common law; Data science; Reproduction (economics); Police investigation; Digital records; Conceptual foundation; Field (computer science); Computer forensics; Digital forensics,,,,,https://www.jstor.org/stable/23079051 https://meridian.allenpress.com/american-archivist/article/74/2/576/24199/Building-Foundations-for-Digital-Records-Forensics https://americanarchivist.org/doi/10.17723/aarc.74.2.e088666710692t3k,http://dx.doi.org/10.17723/aarc.74.2.e088666710692t3k,,10.17723/aarc.74.2.e088666710692t3k,2191650818,,0,,7,true,,bronze 072-770-372-545-777,Forensic science in Ghana: A review.,2019-07-30,2019,journal article,Forensic science international. Synergy,2589871x,Elsevier BV,Netherlands,Aaron Opoku Amankwaa; Emmanuel Nsiah Amoako; Dan O. M. Bonsu; Moses Banyeh,"Abstract The use of forensic science continues to grow across the world. In Ghana, major advancements took off in 2011, including the introduction of modern DNA profiling and the establishment of an automated fingerprint identification system. These developments have led to some positive impacts on the delivery of justice, including the exoneration of a wrongly incarcerated individual. However, a review of the policy-related aspects of forensic science shows gaps in legislation, governance, service provision, quality assurance and accreditation, education and research. An important recommendation to improve forensic science in Ghana is the creation of a “national policy strategy”, a blueprint informed by relevant stakeholders, best practice from other countries and the status of the field. Resolutions to the policy issues identified in this review will ensure a more robust application of forensic science in delivering safe justice and enhancing public security.",1,,151,160,Blueprint; Political science; Best practice; Justice (ethics); Exoneration; Legislation; National Policy; Corporate governance; Public relations; Accreditation,Education; Forensic science; Ghana; Governance; Impact; Legislation; Policy,,,,https://ir.ucc.edu.gh/xmlui/handle/123456789/5536 https://researchportal.northumbria.ac.uk/files/20933823/Amankwaa_et_al_Forensic_Science_in_Ghana_AAM.pdf https://researchportal.northumbria.ac.uk/en/publications/forensic-science-in-ghana-a-review https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7219169 http://nrl.northumbria.ac.uk/40226/ https://northumbria-test.eprints-hosting.org/id/document/269538 https://www.sciencedirect.com/science/article/pii/S2589871X1930138X https://core.ac.uk/download/222790857.pdf,http://dx.doi.org/10.1016/j.fsisyn.2019.07.008,32411968,10.1016/j.fsisyn.2019.07.008,2964395236,PMC7219169,0,000-709-644-297-304; 003-582-736-351-113; 012-725-574-150-045; 025-292-736-419-571; 028-802-373-898-820; 030-278-650-282-674; 031-072-391-016-998; 038-198-310-819-325; 043-391-057-910-488; 047-925-848-505-154; 057-471-706-604-930; 062-121-021-285-333; 067-938-325-014-282; 073-876-481-872-226; 077-468-916-358-123; 080-331-173-650-983; 088-864-772-744-765; 098-255-777-436-381; 107-611-958-841-813; 113-191-683-670-734; 142-527-962-979-521; 150-412-798-401-348; 162-785-150-537-370; 187-534-710-128-032; 190-693-482-194-21X,2,true,"CC BY, CC BY-NC-ND",gold 072-930-123-652-184,Authentication of Digital Image using Exif Metadata and Decoding Properties,2018-12-01,2018,journal article,"International Journal of Scientific Research in Computer Science, Engineering and Information Technology",24563307,Technoscience Academy,,D. P. Gangwar; Anju Pathania,"This work presents a robust analysis of digital images to detect the modifications/ morphing/ editing signs by using the image’s exif metadata, thumbnail, camera traces, image markers, Huffman codec and Markers, Compression signatures etc. properties. The details of the whole methodology and findings are described in the present work. The main advantage of the methodology is that the whole analysis has been done by using software/tools which are easily available in open sources.",,,335,341,Authentication; Information retrieval; Computer science; Digital image; Decoding methods; Metadata,,,,,http://ijsrcseit.com/CSEIT183815,http://dx.doi.org/10.32628/cseit183815,,10.32628/cseit183815,2978675624,,1,138-109-881-604-975; 142-212-186-613-095,2,false,, 072-934-978-048-044,An Ontology Based on the Timeline of Log2timeline and Psort Using Abstraction Approach in Digital Forensics,2020-04-17,2020,journal article,Symmetry,20738994,MDPI AG,Switzerland,Sandeepak Bhandari; Vacius Jusas,"Digital forensics practitioners encounter numerous new terminologies during time-intensive digital investigation processes because of the explosive growth of the web, an immense amount of data, and rapid changes in technology. In such a scenario, the time needed to find and interpret the cause of the potential digital incident can be affected by the complexity involved in understanding the meaning of newly encountered terminologies. Although various approaches have been designed to assist digital practitioners in understanding the newly encountered terminologies during the investigation of the accident, none of them is capable of supporting investigators to interpret new terminologies. Our work focuses on reconstructing and analyzing the timeline of events and artifacts backed by the abstraction concept to help practitioners in reasoning about the perceived meaning of different digital forensics terminologies that are encountered during the investigation. This paper introduces an ontological approach based on the abstraction concept to reconstruct the timeline provided by command-based digital forensic tools, i.e., Log2timeline and Psort in the L2TCSV format, and assist in resolving the meaning of new encountered concepts. The performed experiments show that the novel methodology is capable of enhancing the timeline and assisting practitioners in determining the significance of encountered terminologies or concepts.",12,4,642,,Data science; Ontology; Computer science; Timeline; Abstraction (linguistics); Meaning (linguistics); Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/symmetry/symmetry12.html#BhandariJ20a http://ui.adsabs.harvard.edu/abs/2020Symm...12..642B/abstract https://www.mdpi.com/2073-8994/12/4/642,http://dx.doi.org/10.3390/sym12040642,,10.3390/sym12040642,3017203559,,0,005-116-312-278-527; 026-787-086-442-120; 030-136-936-524-671; 047-937-309-229-62X; 054-601-093-496-749; 073-194-524-558-213; 074-814-000-483-733; 081-140-064-081-587; 107-338-245-292-063; 114-454-611-706-935; 181-072-396-769-365,1,true,cc-by,gold 073-790-480-897-758,Digital Evidence Certainty Descriptors (DECDs),,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Graeme Horsman,,32,,200896,,Set (psychology); Data science; Digital data; Expression (architecture); Digital evidence; Field (computer science); Computer science; Interpretation (philosophy); Certainty; Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S1742287619303123,http://dx.doi.org/10.1016/j.fsidi.2019.200896,,10.1016/j.fsidi.2019.200896,2990925386,,0,000-281-908-950-22X; 003-359-256-146-450; 006-933-430-647-14X; 008-364-588-981-258; 014-580-488-694-132; 016-033-143-009-953; 017-792-811-186-108; 018-182-926-340-45X; 019-960-035-950-902; 020-867-396-119-347; 021-798-083-032-603; 032-451-540-235-796; 042-788-172-660-874; 044-552-087-341-555; 044-895-263-937-02X; 061-269-967-405-492; 062-923-490-829-764; 067-257-260-685-072; 070-378-356-319-383; 071-940-409-825-573; 101-436-770-235-826; 102-243-142-344-71X; 103-760-328-285-801; 111-488-239-742-003; 149-617-274-050-94X; 182-948-315-861-769,5,false,, 073-910-371-295-970,Windows Mobile advanced forensics,,2010,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,C. Klaver,,6,3,147,167,Operating system; VBScript; Windows Rally; Software versioning; Computer science; Microsoft Windows; Windows CE; Windows Vista; Windows Server; Group Policy,,,,,http://forensischinstituut.nl/images/klaver-c.windows-mobile-advanced-forensics-article-2010_tcm119-434806.pdf https://dx.doi.org/10.1016/j.diin.2010.02.001 http://dx.doi.org/10.1016/j.diin.2010.02.001 https://dblp.uni-trier.de/db/journals/di/di6.html#Klaver10 https://www.sciencedirect.com/science/article/pii/S1742287610000095 https://doi.org/10.1016/j.diin.2010.02.001,http://dx.doi.org/10.1016/j.diin.2010.02.001,,10.1016/j.diin.2010.02.001,2036896909,,0,017-815-064-018-299; 048-141-687-795-752; 048-778-071-128-829; 050-308-742-156-878; 063-377-383-491-594; 074-933-143-629-826; 079-868-704-536-536; 179-503-171-644-756,38,false,, 074-022-824-976-957,Digital forensic tools: Recent advances and enhancing the status quo,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Tina Wu; Frank Breitinger; Stephen O'Shaughnessy,,34,,300999,,Domain (software engineering); Data science; Status quo; Software; Computer science; Plug-in; Documentation; Digital forensics,,,,EPSRC,https://www.sciencedirect.com/science/article/abs/pii/S2666281720301864 https://doi.org/10.1016/j.fsidi.2020.300999,http://dx.doi.org/10.1016/j.fsidi.2020.300999,,10.1016/j.fsidi.2020.300999,3049174507,,0,002-040-122-918-055; 004-652-388-189-304; 005-281-459-480-921; 006-933-430-647-14X; 007-427-320-193-516; 007-648-632-822-878; 008-855-420-001-822; 012-003-633-872-255; 014-859-901-321-603; 015-198-696-887-501; 016-536-694-167-514; 016-922-297-286-929; 018-447-058-666-847; 020-806-126-058-733; 025-203-313-222-331; 027-514-428-442-706; 027-658-395-615-692; 028-656-707-596-927; 033-226-469-871-137; 033-241-817-699-448; 035-516-459-750-954; 036-112-898-081-145; 041-893-031-874-367; 042-493-919-892-887; 044-704-659-321-526; 047-386-524-667-691; 057-241-699-730-045; 057-536-215-897-286; 057-833-301-269-80X; 059-312-234-671-821; 059-613-809-369-308; 059-655-726-130-137; 059-831-618-499-543; 063-784-579-606-267; 064-185-555-697-856; 067-173-707-943-384; 067-788-788-678-981; 068-147-459-781-01X; 071-085-366-660-451; 071-481-521-480-552; 071-563-953-192-545; 072-070-835-286-795; 072-183-867-595-593; 075-264-586-699-234; 077-576-732-213-796; 080-288-823-874-989; 088-998-245-753-751; 089-038-694-381-605; 093-645-133-478-473; 097-527-957-777-263; 097-939-114-561-254; 100-190-378-575-89X; 102-441-399-953-42X; 111-903-319-645-399; 115-380-228-622-98X; 117-843-664-085-149; 119-234-785-721-155; 130-778-270-601-465; 137-942-905-892-531; 139-791-358-003-826; 148-617-284-942-187; 150-709-845-991-991; 160-010-780-231-257; 161-503-717-618-67X; 170-489-073-241-86X; 170-546-031-309-748; 176-413-480-414-825; 178-883-713-153-793; 181-684-050-889-439; 181-984-358-338-291; 183-201-163-862-05X; 186-684-140-528-524; 199-745-676-923-766,10,false,, 074-106-608-573-238,"A study of distribution, sex differences and stability of lip print patterns in an Indian population",2015-02-02,2015,journal article,Saudi journal of biological sciences,1319562x; 22137106,King Saud University,Saudi Arabia,Neeti Kapoor; Ashish Badiye,"Lip prints are very useful in forensic investigations. The objective of this study is to determine predominant lip print pattern found among a central Indian population, to evaluate whether any sex difference exists and to study the permanence of the pattern over a 6 month duration. This study included 200 healthy adult subjects comprising of 100 males and 100 females in the age group of 18-25 years. A convenient and easier method of data collection i.e., digital photography was used instead of the traditional lipstick methods. Lip prints were then divided into four quadrants and recognized as per Suzuki and Tsuchihashi's classification. Type I (30.63%) was found to be most predominant overall in the Marathi population. Type I (29.75%) and Type III (35.75%) were found most prevalent in males and females respectively. Applying the Chi-Square test, statistically significant differences (p < 0.05) were observed between male and female lip print patterns in each of the quadrants individually and all quadrants taken together. The lip print patterns remained stable over a period of six-months. Being stable and with significant sex differences, lip prints can be effectively used as an important tool in forensic investigations for individualization as well as identification of sex of the donor, thus, narrowing down the scope of investigation to almost half.",24,6,1149,1154,Forensic science; Surgery; Demography; Forensic identification; Population; Four quadrants; LIP PRINTS; Indian population; Medicine,Cheiloscopy; Forensic identification; Lip print pattern; Marathi population; Sex differences,,,,https://core.ac.uk/display/88109013 https://europepmc.org/abstract/MED/28855806 https://www.sciencedirect.com/science/article/pii/S1319562X15000157 https://pubmed.ncbi.nlm.nih.gov/28855806/ https://cyberleninka.org/article/n/353469 http://www.sciencedirect.com/science/article/pii/S1319562X15000157 https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5562378 https://core.ac.uk/download/pdf/82794897.pdf,http://dx.doi.org/10.1016/j.sjbs.2015.01.014,28855806,10.1016/j.sjbs.2015.01.014,2040279113,PMC5562378,0,004-761-407-704-547; 009-799-147-134-415; 013-109-805-235-749; 016-308-501-475-373; 017-267-407-729-144; 017-721-415-063-183; 020-932-202-648-418; 022-403-565-698-130; 023-131-676-016-235; 024-348-175-937-523; 040-564-788-010-145; 043-873-653-982-367; 053-705-296-288-915; 058-998-237-936-365; 068-556-377-252-592; 072-758-474-045-712; 074-592-839-818-032; 075-741-536-331-764; 084-449-009-264-801; 086-629-816-352-243; 087-391-588-830-272; 092-332-800-675-574; 120-916-951-244-723; 146-011-725-761-180; 146-318-430-472-775; 156-259-142-844-218; 171-762-241-652-854,29,true,"CC BY, CC BY-NC-ND",gold 074-271-546-742-17X,The prevalence of encoded digital trace evidence in the nonfile space of computer media(,2014-07-23,2014,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Simson L. Garfinkel,"Forensically significant digital trace evidence that is frequently present in sectors of digital media not associated with allocated or deleted files. Modern digital forensic tools generally do not decompress such data unless a specific file with a recognized file type is first identified, potentially resulting in missed evidence. Email addresses are encoded differently for different file formats. As a result, trace evidence can be categorized as Plain in File (PF), Encoded in File (EF), Plain Not in File (PNF), or Encoded Not in File (ENF). The tool bulk_extractor finds all of these formats, but other forensic tools do not. A study of 961 storage devices purchased on the secondary market and shows that 474 contained encoded email addresses that were not in files (ENF). Different encoding formats are the result of different application programs that processed different kinds of digital trace evidence. Specific encoding formats explored include BASE64, GZIP, PDF, HIBER, and ZIP.",59,5,1386,1393,Encoding (memory); Data file; Digital media; Trace evidence; Computer science; Base64; Image file formats; Database; Digital forensics; File format,BASE64; GZIP; Microsoft Xpress; PDF; ZIP; bulk_extractor; digital forensics; encoded nonfile; forensic science; optimistic decompression; real data corpus,,,U.S. Department of Defense,https://europepmc.org/article/PMC/PMC4263158 https://core.ac.uk/display/36736445 http://simson.net/clips/academic/2014.JOFS.EncodedData.pdf https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4263158 https://onlinelibrary.wiley.com/doi/full/10.1111/1556-4029.12528 https://onlinelibrary.wiley.com/doi/pdf/10.1111/1556-4029.12528,http://dx.doi.org/10.1111/1556-4029.12528,25053280,10.1111/1556-4029.12528,1969896394,PMC4263158,0,004-652-388-189-304; 009-832-452-035-773; 010-985-077-415-59X; 025-832-466-975-926; 071-079-281-371-668; 082-363-954-997-25X; 085-214-277-668-01X; 100-925-003-172-052,2,true,cc-by-nc,hybrid 074-302-952-168-459,Detection and localization of copy-paste forgeries in digital videos,2017-10-26,2017,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Raahat Devender Singh; Naveen Aggarwal,,281,,75,91,Artificial intelligence; Set (psychology); Variable (computer science); Demosaicing; Artifact (error); Computer vision; Computer science; Cluster analysis; Motion JPEG; Process (computing); Noise (video),Copy-move forgery; Copy-paste forgery; Digital video forensics; Video content authentication; Video forgery detection; Video tamper detection,,,,https://europepmc.org/article/MED/29127894 https://pubag.nal.usda.gov/catalog/5854541 https://www.sciencedirect.com/science/article/pii/S0379073817304309 https://www.ncbi.nlm.nih.gov/pubmed/29127894,http://dx.doi.org/10.1016/j.forsciint.2017.10.028,29127894,10.1016/j.forsciint.2017.10.028,2766861672,,0,002-839-056-638-879; 005-315-703-269-523; 006-055-061-254-490; 007-503-523-592-551; 011-143-454-030-659; 031-261-569-178-402; 032-362-262-096-276; 033-532-114-133-755; 037-463-824-584-154; 045-082-476-053-250; 050-599-229-186-024; 069-546-549-443-035; 074-796-013-951-077; 077-513-248-805-628; 081-518-517-490-458; 081-554-153-097-003; 093-482-040-873-18X; 104-279-390-845-094; 105-858-163-722-652; 111-840-517-284-736; 124-196-427-755-116; 125-779-419-439-253; 126-532-197-233-357; 132-809-273-124-096; 132-908-840-458-935; 133-451-699-902-388; 144-920-871-189-384; 148-639-592-452-240; 154-043-244-897-745; 154-877-080-535-545; 179-144-844-203-436,19,false,, 074-479-250-810-957,Critical review of the use and scientific basis of forensic gait analysis.,2018-07-03,2018,journal article,Forensic sciences research,24711411; 20961790,Informa UK Limited,England,Nina M. van Mastrigt; Kevin Celie; Arjan Mieremet; Arnout C.C. Ruifrok; Zeno Geradts,"This review summarizes the scientific basis of forensic gait analysis and evaluates its use in the Netherlands, United Kingdom and Denmark, following recent critique on the admission of gait evidence in Canada. A useful forensic feature is (1) measurable, (2) consistent within and (3) different between individuals. Reviewing the academic literature, this article found that (1) forensic gait features can be quantified or observed from surveillance video, but research into accuracy, validity and reliability of these methods is needed; (2) gait is variable within individuals under differing and constant circumstances, with speed having major influence; (3) the discriminative strength of gait features needs more research, although clearly variation exists between individuals. Nevertheless, forensic gait analysis has contributed to several criminal trials in Europe in the past 15 years. The admission of gait evidence differs between courts. The methods are mainly observer-based: multiple gait analysts (independently) assess gait features on video footage of a perpetrator and suspect. Using gait feature databases, likelihood ratios of the hypotheses that the observed individuals have the same or another identity can be calculated. Automated gait recognition algorithms calculate a difference measure between video clips, which is compared with a threshold value derived from a video gait recognition database to indicate likelihood. However, only partly automated algorithms have been used in practice. We argue that the scientific basis of forensic gait analysis is limited. However, gait feature databases enable its use in court for supportive evidence with relatively low evidential value. The recommendations made in this review are (1) to expand knowledge on inter- and intra-subject gait variabilities, discriminative strength and interdependency of gait features, method accuracies, gait feature databases and likelihood ratio estimations; (2) to compare automated and observer-based gait recognition methods; to design (3) an international standard method with known validity, reliability and proficiency tests for analysts; (4) an international standard gait feature data collection method resulting in database(s); (5) (inter)national guidelines for the admission of gait evidence in court; and (6) to decrease the risk for cognitive and contextual bias in forensic gait analysis. This is expected to improve admission of gait evidence in court and judgment of its evidential value. Several ongoing research projects focus on parts of these recommendations.",3,3,183,193,Gait analysis; Poison control; Gait (human); Feature (machine learning); Computer science; Reliability (statistics); Validity; Feature data; Discriminative model; Physical medicine and rehabilitation,Forensic science; biometric characteristics; forensic gait analysis; gait recognition; image analysis; survey; validation; video analysis,,,,https://www.narcis.nl/publication/RecordID/oai%3Adare.uva.nl%3Apublications%2F2c76555d-f603-4578-ae8d-9d5e2b28f960 https://www.tandfonline.com/doi/full/10.1080/20961790.2018.1503579 https://pure.uva.nl/ws/files/31598550/Critical_review_of_the_use_and_scientific_basis_of_forensic_gait_analysis.pdf https://europepmc.org/article/MED/30483668 https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6201773 https://dare.uva.nl/search?identifier=2c76555d-f603-4578-ae8d-9d5e2b28f960,http://dx.doi.org/10.1080/20961790.2018.1503579,30483668,10.1080/20961790.2018.1503579,2897104139,PMC6201773,0,000-927-129-586-430; 001-430-493-193-687; 001-611-660-618-607; 002-189-301-408-208; 002-592-816-604-363; 003-118-882-692-806; 003-853-345-215-108; 003-974-257-717-213; 005-345-226-322-746; 006-118-768-719-779; 006-938-131-823-433; 009-173-537-111-02X; 010-131-487-398-842; 012-092-857-184-942; 013-357-386-685-683; 013-542-609-456-883; 016-710-256-481-117; 024-625-102-283-648; 025-731-993-376-332; 027-959-727-303-898; 027-973-777-251-37X; 029-603-748-712-637; 031-102-339-620-877; 032-334-672-359-173; 032-532-142-382-867; 035-222-635-213-557; 039-742-961-353-170; 045-152-718-551-991; 048-313-414-877-929; 049-585-263-314-496; 051-896-482-464-777; 054-930-618-816-344; 054-937-989-622-874; 056-662-627-328-494; 060-379-118-937-460; 060-454-276-175-403; 060-482-883-867-688; 061-999-034-572-576; 062-979-890-250-498; 066-893-006-877-395; 069-720-659-693-140; 070-250-301-089-899; 082-360-844-374-584; 092-408-604-680-817; 094-242-240-671-447; 095-786-575-956-155; 112-214-203-618-973; 114-145-081-345-263; 115-862-682-527-159; 117-897-854-057-29X; 122-037-298-183-084; 132-093-122-776-109; 138-875-013-544-602; 141-013-716-738-269; 142-527-962-979-521; 146-452-977-466-253; 147-520-345-478-705; 148-443-482-575-771; 163-798-187-249-670; 166-132-112-718-899; 172-681-986-079-345; 185-362-581-918-351,18,true,"CC BY, CC BY-NC",gold 074-538-904-407-989,Digitization in forensic odontology: A paradigm shift in forensic investigations,,2019,journal article,Journal of forensic dental sciences,09751475,Informatics Publishing Limited,India,Ravleen Nagi; Konidena Aravinda; Nitin Rakesh; Supreet Jain; Navneet Kaur; Amrit Kaur Mann,"Forensic dentistry deals with proper handling, examination, and evaluation of dental records, which are then presented in the interest of law for justice. It plays a major role in identification of deceased individuals who cannot be identified visually or by other means after mass disasters or crimes. Digital forensics has revolutionized the traditional forensic investigations in terms of acquisition, analysis, and reporting of forensic evidence and its application is becoming common in the mass disasters, earthquakes, and terrorism. Sophistication of software and advent of digital technologies such as computers, computer-aided design computer-aided manufacturing systems, digital records, facial reconstruction, touch-free autopsy, and virtopsy has resulted in quick identification and extraction of a large amount of data with reduced sampling bias. This paper focuses on the evolution of forensic dentistry for effective detection and resolution of medico-legal matters and also highlights the use of comparison microscopes and new robotic tools by few forensic laboratories for automation of deoxyribonucleic acid sampling processes for human identification.",11,1,5,10,Automation; Sophistication; Data science; Forensic dentistry; Virtopsy; Digitization; Computer science; Paradigm shift; Identification (information); Digital forensics,Digital; forensics; identification; technology; three-dimensional,,,,https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6822309 https://pubmed.ncbi.nlm.nih.gov/31680749/ http://www.jfds.org/article.asp?issn=0975-1475;year=2019;volume=11;issue=1;spage=5;epage=10;aulast=Nagi;type=0,http://dx.doi.org/10.4103/jfo.jfds_55_19,31680749,10.4103/jfo.jfds_55_19,2980462703,PMC6822309,0,000-528-548-051-109; 000-569-541-631-531; 000-954-711-972-306; 003-787-130-621-595; 006-036-539-291-490; 012-515-256-028-110; 018-350-487-975-663; 021-244-228-146-245; 025-962-019-229-599; 027-624-078-583-484; 034-434-894-037-277; 035-398-034-171-557; 038-644-987-023-385; 045-591-364-160-436; 047-960-185-304-258; 054-399-143-835-395; 068-449-654-554-836; 070-835-670-615-878; 079-486-106-556-533; 081-624-961-497-364; 088-393-857-411-128; 097-337-961-360-607; 106-410-195-734-27X; 114-570-239-036-901; 146-777-647-332-83X; 168-431-289-974-989,10,true,cc-by-nc-sa,green 074-665-155-258-112,A Technology-Strategy Integrated Digital Forensic Process Framework Considering Government ICT R&D Strategy and ICT Paradigm Shift,2014-07-31,2014,journal article,Journal of the Korea Institute of Information and Communication Engineering,22344772,The Korean Institute of Information and Communication Sciences,,Jun Woo Shin,"Currently information related service such as internet banking, chatting, social network services are quite well smeared into our daily life. Moreover, a rapid growth of service using smart devices brought an importance of security in internet services and a research activation of digital forensic in a crime investigation. This paper presented a previous digital forensic research trend and based on this, suggested a technology-strategy integrated digital forensic process platform, taking a mid-long term government leading ICT R&D strategy and ICT paradigm shift into account.",18,7,1495,1504,The Internet; Government; Digital forensic process; Service (systems architecture); Computer science; Paradigm shift; Technology strategy; Knowledge management; Information and Communications Technology; Digital forensics,,,,,http://society.kisti.re.kr/sv/SV_svpsbs03V.do?method=download&cn1=JAKO201423261321915 http://koreascience.or.kr/article/ArticleFullRecord.jsp?cn=HOJBC0_2014_v18n7_1495 https://www.kci.go.kr/kciportal/ci/sereArticleSearch/ciSereArtiView.kci?sereArticleSearchBean.artiId=ART001897094 http://www.kpubs.org/article/articleMain.kpubs?articleANo=HOJBC0_2014_v18n7_1495,http://dx.doi.org/10.6109/jkiice.2014.18.7.1495,,10.6109/jkiice.2014.18.7.1495,2031294102,,0,095-691-114-276-825,0,true,,bronze 074-706-219-689-754,Effective resource management in digital forensics: An exploratory analysis of triage practices in four English constabularies,2019-12-04,2019,journal article,Policing: An International Journal,1363951x,Emerald,United Kingdom,Dana Wilson-Kovacs,"Building on the findings of a British Academy-funded project on the development of digital forensics (DF) in England and Wales, the purpose of this paper is to explore how triage, a process that helps prioritise digital devices for in-depth forensic analysis, is experienced by DF examiners and police officers in four English police forces. It is argued that while as a strategy triage can address the increasing demand in the examination of digital exhibits, careful consideration needs to be paid to the ways in which its set-up, undertaking and outcomes impact on the ability of law enforcement agencies to solve cases.,The methodological approach adopted here builds on the ethnographic turn in criminology. The analysis draws on 120 h of ethnographic observations and 43 semi-structured interviews. Observational data of the working DF environment at each location and a systematic evaluation of internal documents, organisational settings and police priorities helped refine emergent analysis threads, which were analytically compared between sites and against the testimonies of members of different occupational groups to identify similarities and differences between accounts.,The findings emphasise the challenges in the triage of digital exhibits as they are encountered in everyday practice. The discussion focusses on the tensions between the delivery of timely and accurate investigation results and current gaps in the infrastructural arrangements. It also emphasises the need to provide police officers with a baseline understanding of the role of DF and the importance of clearly defined strategies in the examination of digital devices.,This paper aims to bridge policy and practice through an analysis of the ways in which DF practitioners and police officers in four English constabularies reflect on the uses of triage in DF to address backlogs and investigative demands. Highlighting the importance of digital awareness beyond the technical remit of DF units, it offers new insights into the ways in which police forces seek to improve the evidential trail with limited resources.",43,1,77,90,Baseline (configuration management); Sociology; Bridge (nautical); Observational study; Triage; Law enforcement; Public relations; Process (engineering); Digital forensics; Resource management,,,,,https://ore.exeter.ac.uk/repository/handle/10871/40462?show=full https://www.emerald.com/insight/content/doi/10.1108/PIJPSM-07-2019-0126/full/html https://ore.exeter.ac.uk/repository/bitstream/10871/40462/1/wilson-kovacs%202019%20triage.pdf https://www.emerald.com/insight/content/doi/10.1108/PIJPSM-07-2019-0126/full/pdf?title=effective-resource-management-in-digital-forensics-an-exploratory-analysis-of-triage-practices-in-four-english-constabularies https://core.ac.uk/download/286383577.pdf,http://dx.doi.org/10.1108/pijpsm-07-2019-0126,,10.1108/pijpsm-07-2019-0126,2995681188,,0,003-982-227-180-136; 004-200-813-216-207; 004-658-259-494-553; 005-636-730-595-540; 009-285-002-570-736; 010-963-610-208-920; 010-985-077-415-59X; 013-568-618-083-770; 016-731-888-079-073; 021-495-249-615-203; 029-638-263-419-336; 031-522-316-310-252; 035-672-281-328-899; 036-197-454-252-092; 037-550-015-414-716; 047-630-600-014-492; 057-904-228-091-384; 058-052-081-943-595; 062-137-637-964-947; 065-197-615-960-447; 073-847-291-567-156; 081-447-017-308-327; 090-752-043-508-733; 094-295-279-676-447; 098-616-316-968-255; 102-117-623-922-990; 125-939-677-745-616; 139-186-775-971-355; 189-064-913-996-787,18,true,,green 074-852-255-750-108,Multiform Korean handwriting authentication by forensic document examiners,2015-07-10,2015,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Tae-Yi Kang; Joong Lee,,255,,133,136,Forensic science; Authentication (law); Psychology; Test (assessment); Handwriting; Speech recognition,Forensic science; Handwriting identification; Peer review; Validation,,,National Forensic Service; National Forensic Service,https://www.ncbi.nlm.nih.gov/pubmed/26205671 https://www.sciencedirect.com/science/article/pii/S0379073815002704 https://europepmc.org/article/MED/26205671 https://pubag.nal.usda.gov/catalog/5526185,http://dx.doi.org/10.1016/j.forsciint.2015.07.002,26205671,10.1016/j.forsciint.2015.07.002,2096852840,,0,005-345-603-327-180; 010-573-520-331-761; 056-711-259-538-874; 078-373-114-642-178; 095-017-486-539-644,2,false,, 075-119-005-863-649,Investigating Proactive Digital Forensics Leveraging Adversary Emulation,2022-09-09,2022,journal article,Applied Sciences,20763417,MDPI AG,,Valentine Machaka; Titus Balan,"Traditional digital forensics techniques are becoming obsolete due to rapid technological change. Proactive digital forensic investigations (PDFI) solve the challenges of cloud computing forensics such as evidence identification, collection, preservation, and timelining from heterogeneous cumulative data. Cumulative data heterogeneity poses significant challenges to the sound collection of electronically stored information (ESI) or digital evidence across cloud endpoints and/or networked systems. In addition, the distribution of networked systems and/or cloud environments makes it impossible for forensics investigators to be present at several premises to perform the investigation. Hence, it is important to have PDFI in place to ensure continuous operation in the event of a cyberattack, because it does not require the presence of an investigator at the target location. In this study, researchers put the idea of proactive digital forensics to the test and concluded that it is an indispensable tool for networked systems and cloud computing environments in response to modern-day digital forensics challenges. This research was based on an experimental computer science and engineering approach using a virtualised environment simulating an information communication infrastructure. To generate evidence (digital artefacts), and validate the proof-of-concept, adversary emulation was used by adapting the MITRE ATT&CK framework. Research results have shown that PDFI improves digital forensics activities in terms of speed and accuracy, thereby providing credible and timely comprehensive digital evidence. Enhanced Incident detection capabilities enable an analyst to focus much more on forensic investigation functions and thus perform their tasks effectively. However, the legality of live and/or remote forensics is still of great concern in several jurisdictions, thereby affecting the credibility of digital artefacts obtained in this manner. Nevertheless, where possible, the law component should also be kept up to date with modern-day technologies to solve any inconveniences caused by the ever-growing technology demands.",12,18,9077,9077,Digital forensics; Computer science; Network forensics; Emulation; Cloud computing; Adversary; Digital evidence; Computer security; Identification (biology); Event (particle physics); Computer forensics; Data science; Botany; Physics; Quantum mechanics; Economics; Biology; Economic growth; Operating system,,,,,,http://dx.doi.org/10.3390/app12189077,,10.3390/app12189077,,,0,005-515-442-506-880; 021-289-112-719-629; 025-815-030-235-519; 026-774-296-742-022; 046-143-775-958-052; 050-182-526-714-74X; 053-343-993-293-183; 091-531-552-633-070; 096-743-348-982-819; 113-474-844-200-128; 183-000-233-873-221; 184-069-302-229-82X,0,true,cc-by,gold 075-171-904-217-913,Advancing the Science of Digital Forensics,,2012,journal article,Computer,00189162,Institute of Electrical and Electronics Engineers (IEEE),United States,Gary C. Kessler,"Digital forensics, the branch of forensic science that focuses on the recovery and investigation of digital data, has applications in many contexts outside the courtroom, including research, policy enforcement, and intelligence gathering.",45,12,25,27,The Internet; Forensic science; Information system; Computer security; Computer science; Network forensics; Computer forensics; Digital forensics,,,,,https://www.computer.org/csdl/magazine/co/2012/12/mco2012120025/13rRUxly9hk https://ieeexplore.ieee.org/document/6383155/ https://www.computer.org/csdl/api/v1/periodical/mags/co/2012/12/mco2012120025/13rRUxly9hk/download-article/pdf https://dl.acm.org/doi/abs/10.1109/MC.2012.399 http://yadda.icm.edu.pl/yadda/element/bwmeta1.element.ieee-000006383155 https://works.bepress.com/gary_kessler/19/ https://dblp.uni-trier.de/db/journals/computer/computer45.html#Kessler12a https://www.infona.pl/resource/bwmeta1.element.ieee-art-000006383155 http://dblp.uni-trier.de/db/journals/computer/computer45.html#Kessler12a,http://dx.doi.org/10.1109/mc.2012.399,,10.1109/mc.2012.399,1969251028,,0,,5,false,, 075-238-627-641-444,"Book reviewHandbook of Digital Multimedia and Forensic Evidence, John J. Barbara (Ed.), Humana Press (2008)",,2009,journal article,Science & Justice,13550306,Elsevier BV,United Kingdom,Angus M. Marshall,,49,3,227,,Forensic science; Library science; Media studies; Digital multimedia; History,,,,,https://www.sciencedirect.com/science/article/pii/S1355030609000094#!,http://dx.doi.org/10.1016/j.scijus.2009.01.007,,10.1016/j.scijus.2009.01.007,2622248042,,0,,0,false,, 075-517-412-509-659,Bolstering forensic science through extended knowledge sharing,,2019,journal article,Forensic Science International: Reports,26659107,Elsevier BV,,Georgina Sauzier; Mubarak A. Bidmos; Graeme Horsman,,1,,100010,,Forensic science; Knowledge sharing; Computer science; Knowledge management,,,,,https://research.tees.ac.uk/en/publications/bolstering-forensic-science-through-extended-knowledge-sharing https://research.tees.ac.uk/ws/files/8720491/Bolstering_Forensic_Science_Through_Extended_Knowledge_Sharing.pdf https://core.ac.uk/download/pdf/228323040.pdf,http://dx.doi.org/10.1016/j.fsir.2019.100010,,10.1016/j.fsir.2019.100010,2977328989,,0,,0,true,"CC BY, CC BY-NC-ND",gold 075-529-701-912-32X,A survey of digital forensic investigator decision processes and measurement of decisions based on enhanced preview,,2013,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Joshua I. James; Pavel Gladyshev,,10,2,148,157,Work (electrical); Data science; Suspect; Law enforcement; Decision process; Digital forensic investigation; Computer science; Operations research; Process (engineering); Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/di/di10.html#JamesG13 http://www.sciencedirect.com/science/article/pii/S1742287613000340 https://www.sciencedirect.com/science/article/pii/S1742287613000340 https://doi.org/10.1016/j.diin.2013.04.005 http://dblp.uni-trier.de/db/journals/di/di10.html#JamesG13,http://dx.doi.org/10.1016/j.diin.2013.04.005,,10.1016/j.diin.2013.04.005,2000577549,,0,019-698-064-288-240; 094-295-279-676-447,25,false,, 075-751-664-637-230,Speculative Animation: Digital Projections of Urban Past and Future:,2017-11-29,2017,journal article,Animation,17468477; 17468485,SAGE Publications,United Kingdom,Joel McKim,"This article explores the growing presence of digital animation within the work of contemporary visual artists, architects and designers concerned with urban geography. While contemporary theorists...",12,3,287,305,Engineering; Visual arts; Work (electrical); Forensic Architecture; Multimedia; Animation; Digital art; Urban geography; Computer animation,,,,,https://core.ac.uk/display/84144569 https://journals.sagepub.com/doi/full/10.1177/1746847717729581 https://core.ac.uk/download/84144569.pdf,http://dx.doi.org/10.1177/1746847717729581,,10.1177/1746847717729581,2730938732,,0,026-434-120-020-199; 027-494-851-169-836; 027-827-932-600-58X; 035-938-923-436-986; 055-129-264-634-190; 056-375-279-147-66X; 059-850-533-612-782; 065-985-411-162-926; 081-430-350-851-71X; 086-798-533-519-960; 099-833-867-457-31X; 110-084-374-606-816; 114-770-748-694-191; 122-288-247-107-379; 160-409-882-075-069; 169-886-537-809-120,3,true,cc-by-nc,hybrid 075-872-921-268-845,Research on the Rules of Electronic Evidence in Chinese Criminal Proceedings,2020-07-01,2020,journal article,International Journal of Digital Crime and Forensics,19416210; 19416229,IGI Global,United States,Jin Du; Ding Liping; Guangxuan Chen,"

As a new object in judicial practice, electronic evidence is of great practical significance. To locate the probative force of electronic evidence, which can be used to prove the facts of the crime, judging the electronic evidence validity, and how to establish scientific rules of electronic evidence, which not only effectively contains crime, but also protects civil rights from illegal infringement of state power becomes very important. This article outlines the definition of electronic evidence and rules and establishes a suitable electronic evidence system of China's criminal procedure system based on the analysis of problems in each link of judicial proof in judicial practice and the four aspects of judicial proof.

",12,3,111,121,Computer science; Engineering ethics,,,,,https://doi.org/10.4018/IJDCF.2020070108 https://www.igi-global.com/article/research-on-the-rules-of-electronic-evidence-in-chinese-criminal-proceedings/252871 https://dblp.uni-trier.de/db/journals/ijdcf/ijdcf12.html#DuDC20,http://dx.doi.org/10.4018/ijdcf.2020070108,,10.4018/ijdcf.2020070108,3015917920,,0,,1,true,,bronze 075-950-021-558-098,"""I couldn't find it your honour, it mustn't be there!"" - Tool errors, tool limitations and user error in digital forensics.",2018-04-17,2018,journal article,Science & justice : journal of the Forensic Science Society,13550306,Forensic Science Society,United Kingdom,Graeme Horsman,"The field of digital forensics maintains significant reliance on the software it uses to acquire and investigate forms of digital evidence. Without these tools, analysis of digital devices would often not be possible. Despite such levels of reliance, techniques for validating digital forensic software are sparse and research is limited in both volume and depth. As practitioners pursue the goal of producing robust evidence, they face the onerous task of both ensuring the accuracy of their tools and, their effective use. Whilst tool errors provide one issue, establishing a tool's limitations also provides an investigatory challenge leading the potential for practitioner user-error and ultimately a grey area of accountability. This article debates the problems surrounding digital forensic tool usage, evidential reliability and validation.",58,6,433,440,Data science; Accountability; Software; Task (project management); Digital evidence; User Error; Field (computer science); Computer science; Reliability (statistics); Digital forensics,Crime; Digital forensics; Errors; Software; Tool testing; Validation,,,,https://www.ncbi.nlm.nih.gov/pubmed/30446072 https://research.tees.ac.uk/ws/files/4187177/621947.pdf https://www.sciencedirect.com/science/article/abs/pii/S1355030617301508 https://core.ac.uk/display/157860311 https://research.tees.ac.uk/en/publications/i-couldnt-find-it-your-honour-it-mustnt-be-there-tool-errors-tool https://pubmed.ncbi.nlm.nih.gov/30446072/ https://core.ac.uk/download/pdf/196165647.pdf,http://dx.doi.org/10.1016/j.scijus.2018.04.001,30446072,10.1016/j.scijus.2018.04.001,2800946632,,0,000-226-390-590-140; 003-982-227-180-136; 008-598-808-594-324; 018-237-240-343-299; 021-039-461-635-181; 030-333-349-393-032; 030-981-431-605-722; 032-451-540-235-796; 059-068-317-738-428; 072-697-564-999-716; 074-299-373-252-299; 075-128-417-091-483; 081-896-209-272-043; 102-223-296-418-971; 122-474-821-859-110; 124-776-641-347-974; 131-807-250-432-699; 142-388-561-082-054; 143-427-291-811-40X; 144-724-915-219-138; 148-698-839-036-557; 182-670-398-460-931; 187-762-907-549-695,17,true,cc-by-nc,green 075-959-964-987-075,ProvNet-IoT: Provenance based network layer forensics in Internet of Things,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Lakshminarayana Sadineni; Emmanuel S. Pilli; Ramesh Babu Battula,,43,,301441,301441,Network forensics; Computer science; Internet of Things; Network packet; Identification (biology); Computer security; Process (computing); Benchmark (surveying),,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301441,,10.1016/j.fsidi.2022.301441,,,0,009-252-104-848-216; 009-747-804-607-928; 016-851-517-126-850; 019-228-281-988-693; 051-662-461-185-849; 068-278-591-200-390; 095-513-193-663-804; 096-091-715-269-337; 139-320-230-645-968,0,false,, 076-508-293-079-677,KES - SEAKER: A mobile digital forensics triage device,,2019,journal article,Procedia Computer Science,18770509,Elsevier BV,,Eric Gentry; Michael Soltys,"Abstract As our world of digital devices continues to expand, the amount of digital evidence encountered by law enforcement during case investigation is ever increasing. Faced with a preponderance of high capacity digital media devices, forensic investigators must be able to review them quickly, and establish which devices merit further attention. Utilizing a small single-board computer called Raspberry Pi, this mobile digital forensics triage device provides fast, targeted feedback for immediate evidence assessment. A digital forensic device is presented in this paper. It is named SEAKER (Storage Evaluator and Knowledge Extraction Reader)[1] and it enables forensic investigators to perform triage on many digital devices very quickly. Developed for on-scene, time-sensitive investigations, its utility extends to preventing over-collection and large backlogs at digital forensics labs worldwide.",159,,1652,1661,Knowledge extraction; Forensic science; Digital media; Triage; Law enforcement; Digital evidence; Computer science; Multimedia; Digital forensics,,,,,https://doi.org/10.1016/j.procs.2019.09.335 https://dblp.uni-trier.de/db/conf/kes/kes2019.html#GentryS19 https://www.sciencedirect.com/science/article/abs/pii/S1877050919315364 https://www.sciencedirect.com/science/article/pii/S1877050919315364,http://dx.doi.org/10.1016/j.procs.2019.09.335,,10.1016/j.procs.2019.09.335,2980390299,,0,066-235-037-082-291; 090-752-043-508-733; 184-069-302-229-82X,4,true,cc-by-nc-nd,gold 076-526-517-597-73X,Web-based expert system to determine digital forensics tool using rule-based reasoning approach,2021-06-01,2021,journal article,Journal of Physics: Conference Series,17426588; 17426596,IOP Publishing,United Kingdom,Erika Ramadhani; H R Pratama; Elyza Gustri Wahyuni,"Digital forensics is a method to trace the digital evidence using knowledge of science. There are several stages in the method of digital forensics. Each stage has their own way to use the method collaborate with the tool of digital forensics. Nowadays, there are tools that we can use in digital forensics. Therefore, not all the tool coming with the help document on how to use the tool. This situation makes the investigator have to check the feature of the tool one by one in order to suit which one is the best tool to use in some stage. To overcome this problem, we made a system to determine the right tool in digital forensics using rule-based reasoning approach. The result of this paper is web-based system to determine the right tool in digital forensics. The system shows that only 40% in suitability to help the investigator to determine the right tool. This cause by lacking of the rule consists in the reasoning approach.",1918,4,042003,,Software engineering; Rule-based system; Digital evidence; Help document; Web based expert system; Computer science; Feature (computer vision); TRACE (psycholinguistics); Digital forensics,,,,,https://iopscience.iop.org/article/10.1088/1742-6596/1918/4/042003 https://iopscience.iop.org/article/10.1088/1742-6596/1918/4/042003/pdf https://ui.adsabs.harvard.edu/abs/2021JPhCS1918d2003R/abstract,http://dx.doi.org/10.1088/1742-6596/1918/4/042003,,10.1088/1742-6596/1918/4/042003,3168746969,,0,006-547-691-138-217; 007-790-059-029-953; 069-862-548-231-596; 084-296-717-156-065; 104-787-005-142-28X,1,true,,gold 076-689-787-688-443,Prelim iii - Contents List,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,38,,301293,301293,Information retrieval,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00211-0,,10.1016/s2666-2817(21)00211-0,,,0,,0,true,,bronze 076-753-080-882-502,Smartphone Forensics Analysis: A Case Study,,2013,journal article,International Journal of Computer and Electrical Engineering,17938163,IACSIT Press,,Mubarak Al-Hadadi; Ali AlShidhani,"Abstract—Smartphone forensics is a sub-set of digital forensics, and refers to the investigation and acquisition of artefacts in mobile phones. New threats to mobile phones made forensic science a challenging endeavour in the last couple of years. Number of mobile users is increasing worldwide and createstremendous problems and challenges. The literature relevant to Smartphone forensics, as explored in this paper, focuses on the architecture of Smartphone operating systems and anti-forensics techniques. It also addresses the digital evidence of Smartphone applications. In this paper, through a consideration of types of crimes involving Smartphone’s, a real case study from the Sultanate of Oman is presented. This case study undertakes practical experiments to identified sources for evidence that can later be used in the judiciary system.",,,576,580,Architecture; Digital evidence; Smartphone application; Computer security; Computer science; Computer forensics; Digital forensics,,,,,http://www.ijcee.org/index.php?m=content&c=index&a=show&catid=55&id=860 http://ijcee.org/papers/776-S0005.pdf,http://dx.doi.org/10.7763/ijcee.2013.v5.776,,10.7763/ijcee.2013.v5.776,2323481372,,0,003-504-554-245-316; 026-201-331-634-716; 062-788-502-964-113; 199-172-967-270-034,18,true,,bronze 077-060-089-183-438,"Deep learning, bias and turnaround time",,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,null Zeno; null Bruce,,39,,301318,301318,Turnaround time; Deep time; Artificial intelligence; Computer science; Psychology,,,,,,http://dx.doi.org/10.1016/j.fsidi.2021.301318,,10.1016/j.fsidi.2021.301318,,,0,,0,false,, 077-218-051-852-509,Cell Forensics on Smart Phone Installed Windows Phone 7 System,,2014,journal article,Chinese Journal of Forensic Sciences,16712072,,,Yao We,"As a new emerging system on smart-phones, Windows Phone maintains a stable development. This paper studies on how to collect forensic evidence on smart-phones installed Windows Phone 7 system. After describing the system architecture and security model of Windows Phone 7, the methodology of Windows Phone 7 forensics was introduced in details. With the help of the native method and Windows Phone SDK, the Windows Phone kernel and other information could be approached.Other tools to acquire and analyze the file from the smart-phone were also used. The experiments showed that the present forensics approach could effectively extract and discover useful evidence such as SMSs, Emails and social network activities.",,,,,Operating system; Engineering; Windows Rally; Embedded system; Microsoft Cordless Phone System; GSM services; Microsoft Windows; Windows CE; Windows Vista; Security and safety features new to Windows Vista; Wallpaper,,,,,http://en.cnki.com.cn/Article_en/CJFDTOTAL-SFJD201404012.htm,http://en.cnki.com.cn/Article_en/CJFDTOTAL-SFJD201404012.htm,,,2373847314,,0,,0,false,, 077-365-322-377-894,The challenge of identifying historic ‘private browsing’ sessions on suspect devices,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Graeme Horsman,,34,,300980,,Internet privacy; The Internet; Work (electrical); Order (exchange); Triage; Suspect; Session (web analytics); Law enforcement; Computer science; Bespoke,,,,,https://www.sciencedirect.com/science/article/pii/S2666281720300822 https://doi.org/10.1016/j.fsidi.2020.300980 https://research.tees.ac.uk/en/publications/the-challenge-of-identifying-historic-private-browsing-sessions-o,http://dx.doi.org/10.1016/j.fsidi.2020.300980,,10.1016/j.fsidi.2020.300980,3036727460,,0,019-851-756-578-933; 112-254-293-106-176; 137-320-816-794-079,2,false,, 077-603-385-952-05X,Proposed Proactive Digital Forensic Approach for Cloud Computing Environment,2018-10-07,2018,journal article,International Journal of Engineering & Technology,2227524x,Science Publishing Corporation,,Ganthan Narayana Samy; Nurazean Maarop; Doris Hooi-Ten Wong; Fiza Abdul Rahim; Noor Hafizah Hassan; Sundresan Perumal; Pritheega Magalingam; Sameer Hasan Albakri,"There are many challenges for the digital forensic process in the cloud computing due to the distinguished features of the cloud computing environment. Many of well-known digital forensic methods and tools are not suitable for cloud computing environment. The multi-tenancy, multi-stakeholder, Internet-based, dynamics expendability, and massive data, logs and datasets are examples of the cloud computing environment features that make conducting digital forensics in the cloud computing environment a very difficult task. Therefore, there is a need to develop an appropriate digital forensic approach for cloud computing environment. Thus, this paper proposed a proactive digital forensic approach for cloud computing environment. ",7,4,12,15,Computer security; Computer science; Cloud computing; Digital forensics,,,,,https://pure.uniten.edu.my/en/publications/proposed-proactive-digital-forensic-approach-for-cloud-computing- https://www.sciencepubco.com/index.php/ijet/article/viewFile/21362/10122,http://dx.doi.org/10.14419/ijet.v7i4.15.21362,,10.14419/ijet.v7i4.15.21362,2941543733,,0,,2,true,,bronze 077-604-181-180-814,The Diplomatic and Digital Forensic Science in Born-Digital Records: The Quest for Authenticity,2018-07-01,2018,journal article,Journal of Integrated OMICS,21820287,Proteomass Scientific Society,,Juan Bernardo Montoya-Mogollón; Sonia Maria Troitiño Rodriguez,"This paper aims at the application of Digital Diplomatic and Digital Forensics Science in digital-born records, in order to guarantee its authenticity in institutional routines and processes, but also as a source of proof in possible legal and juridical scenarios. In view of the vast and fruitful discussions focused on the complexity of the digital records in Archival Science and Information Science (I.S.), there is a gap to manage and preserve the digital records, keeping them reliable, accurate and authentic in systems that have the same conditions. This gap makes it impossible to preserve records in the long term due, firstly, to the fragility of the systems where they are stored and, secondly, to the constant risks of obsolescence of hardware and software that occur on a day by day. Digital Diplomatic Science assists this process by determining the form and content of the record to evidence its legal-diplomatic authenticity and establish its historical value. Digital Forensic Science, in turn, provides support for the chain of custody to remain intact, regardless of the medium on which the digital record is fixed. The following questions is raised: Is it possible to apply the practice of law and the Digital Forensics in the area of the Archival Science and information science, guaranteeing the authenticity of the born-digital record. In addition, in which way does the junction between Digital Diplomatic Science and Digital Forensic Science guarantee the preservation and preservation of the born-digital records. To answer such questions, this research proposes to link five areas of knowledge following the scientific experiences conducted at the University of British Columbia in Canada by the InterPares (International Research on Permanent Authentic Records) group. Areas of knowledge that are offering interesting results for the preservation not only of the record, but also of the social memory: 1.Digital Forensics: discipline that joint Forensics Science with Computer Science to analyze the digital evidence. 2. Diplomatics Science: Science to analyze the form and structure to the records. 3. Archival Science: Science to involves the whole of the principles, policies, strategies, and activities designed to ensure the physical and technological stabilization of records for the purpose of extending indefinitely their life and protecting the accuracy and authenticity of and maintaining the accessibility to their intellectually content [1] . 4. Information Science: Science to analyze the information in different contexts. The research will carried out in a theoretical and qualitative way, taking into account the literature shared in the site Digital Records Forensics Project, coordinated by the author Luciana Duranti of the InterPares group, and the bibliography produced in the country of the areas of knowledge already referenced. The results obtained will contribute to the realization of alternative researches in document conservation within the Archival Science and the Information Science.",8,1,74,76,Chain of custody; Data science; Practice of law; Born-digital; Digital evidence; Obsolescence; Computer science; Archival science; Digital forensics; Information science,,,,,http://www.jiomics.com/index.php/jio/article/view/219 http://dx.doi.org/10.5584/jiomics.v8i1.219,http://dx.doi.org/10.5584/jiomics.v8i1.219,,10.5584/jiomics.v8i1.219,2847700262,,0,,0,false,, 077-836-003-863-252,Challenges and possible severe legal consequences of application users identification from CNG-Logs,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Furkan Gözükara,,39,,301312,,Internet privacy; Terrorism; IPv4; Law enforcement; Ip address; Internet users; Internet Protocol; Computer science; Identification (information); False positive rate,,,,,https://www.sciencedirect.com/science/article/pii/S2666281721002377,http://dx.doi.org/10.1016/j.fsidi.2021.301312,,10.1016/j.fsidi.2021.301312,3213690876,,0,010-443-307-082-641; 024-435-256-640-348; 048-190-689-062-756; 054-886-538-414-972; 060-634-659-906-590; 082-402-248-348-358; 105-837-698-280-843; 107-536-000-593-690; 133-702-043-933-257; 172-751-670-424-334; 174-066-803-069-709,0,false,, 077-923-684-553-780,ForTrace - A holistic forensic data set synthesis framework,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Thomas Göbel; Stephan Maltan; Jan Türr; Harald Baier; Florian Mann,"Digital forensic experts are confronted with a wide variety of investigation objectives, e.g., to deal with an infected IT system. The same holds for digital forensic tools. Mostly different sources of digital traces have to be inspected including persistent storage devices (e.g., SSDs, SD cards, USB drives), volatile main memory snapshots, and network captures, respectively. In order to train experts and tools and keep their knowledge and capabilities up-to-date, a capacious amount of realistic, timely training data is necessary. However, due to different reasons like privacy, secrecy, or intellectual property rights there is a large gap in digital forensic training data. In recent years different synthesis frameworks to generate realistic digital forensic data sets have been proposed. However, none of these frameworks provides a holistic approach to generate realistic digital forensic relevant traces of different sources. In this paper we introduce ForTrace , a holistic framework for the simultaneous generation of persistent, volatile and network traces. Our approach is based on the data synthesis framework hystck . We explain our extension of hystck by defining properties of a holistic data set synthesis framework and by discussing different forensically relevant scenarios and their implementation in ForTrace . We then successfully evaluate ForTrace with respect to diverse realistic and complex scenarios. ForTrace is open source and may be adapted or extended with respect to individual needs.",40,,301344,301344,Computer science; Digital forensics; Set (abstract data type); Variety (cybernetics); Data science; Secrecy; Intellectual property; Computer security,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301344,,10.1016/j.fsidi.2022.301344,,,0,001-134-660-509-890; 013-982-587-242-698; 021-003-216-544-791; 036-112-898-081-145; 047-997-437-748-154; 104-153-499-789-950,1,true,,hybrid 078-327-902-374-330,Developing a new digital forensics curriculum,,2014,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Anthony Lang; Masooda Bashir; Roy H. Campbell; Lizanne DeStefano,"We are developing a new undergraduate certificate program in digital forensics at the University of Illinois at Urbana-Champaign. To create a curriculum consistent with the fundamentally multidisciplinary nature of the field of digital forensics, we assembled a curriculum development team that includes domain experts from the fields of computer science, law, social science, psychology, and accounting. To lower the entry barrier preventing institutions from adopting digital forensics programs, we are designing the curriculum with the express intent of distributing it as a self-contained curriculum package with everything needed to teach the course. When complete, our program will consist of an introductory and an advanced course in digital forensics, with accompanying hands-on labs. At the time of writing, we have developed the curriculum for our introductory course and taught a pilot class, and we are in the process of revising the curriculum for distribution to other institutions. This paper describes our program's goals, methodology, and rationale; our experience developing and teaching our new curriculum; and the revisions we are making based on this experience and feedback from our students.",11,,S76,S84,Curriculum mapping; Emergent curriculum; Class (computer programming); Curriculum development; Computer science; Curriculum; Multimedia; Network forensics; Engineering ethics; Computer forensics; Digital forensics,,,,National Science Foundation,https://www.sciencedirect.com/science/article/pii/S1742287614000516 https://www.sciencedirect.com/science/article/abs/pii/S1742287614000516 https://experts.illinois.edu/en/publications/developing-a-new-digital-forensics-curriculum http://www.sciencedirect.com/science/article/pii/S1742287614000516,http://dx.doi.org/10.1016/j.diin.2014.05.008,,10.1016/j.diin.2014.05.008,2012713286,,0,004-916-146-042-728; 012-314-515-683-048; 023-366-664-256-123; 036-733-117-655-399; 058-216-067-155-646; 063-579-080-753-513; 088-699-775-204-397; 102-679-985-151-761; 106-215-046-097-04X,29,true,cc-by-nc-nd,hybrid 078-350-153-353-641,Application of palmar digital intertriradial distances for sex classification from palmprints: a preliminary study,2021-02-14,2021,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Ivan Jerković; Toni Ljubić; Lucija Bardić; Andrea Kolić; Šimun Anđelinović,"Previous studies have shown that palmprints can be employed to reveal the sex of the print donor when direct identification is not possible. However, most of the methods require that the entire pri...",,,1,12,Artificial intelligence; Pattern recognition; Sex estimation; Computer science; Identification (information),,,,,https://www.tandfonline.com/doi/full/10.1080/00450618.2021.1882573,http://dx.doi.org/10.1080/00450618.2021.1882573,,10.1080/00450618.2021.1882573,3132981906,,0,004-120-355-687-609; 013-238-366-657-94X; 014-109-799-221-020; 020-029-392-079-330; 020-487-765-753-34X; 024-970-949-735-010; 025-826-540-876-328; 027-515-397-916-618; 039-075-798-859-502; 042-055-154-356-504; 046-187-679-510-543; 051-881-036-771-409; 058-011-283-176-653; 065-989-423-538-431; 070-342-990-188-152; 084-452-649-026-374; 095-874-358-491-937; 097-126-930-780-668; 097-668-534-378-024; 100-274-103-077-750; 103-551-327-888-749; 112-677-167-797-273; 124-508-617-958-74X; 148-131-927-306-572,1,false,, 078-527-708-630-261,Digital Forensics on Screen Locked Android Smart Phone,,2015,journal article,Chinese Journal of Forensic Sciences,16712072,,,Wei Ron,"Objective To study the effective method to acquire or recover the data from screen-locked mobile phones with no password and USB debugging enabled. Methods The booting principles of Android smart phone were analyzed. A method based on Android debug bridge protocol was presented in order to clear the screen lock password. Then the USB debugging was opened and forensics tools could be connected. Result Testing on ZTE n760 intelligent mobile phone, the method of mobile phone forensics was proved to be successful, without losing user data. Conclusion In the recovery mode, by connecting the mobile phone to a computer through the ADB protocol and removing the password file, the USB debug port could be opened and the digital forensics could be performed without losing user data.",,,,,Password; Engineering; Embedded system; GSM services; Mobile phone; Lock screen; USB; Android (operating system); Mobile device forensics; Digital forensics,,,,,http://en.cnki.com.cn/Article_en/CJFDTotal-SFJD201501015.htm,http://en.cnki.com.cn/Article_en/CJFDTotal-SFJD201501015.htm,,,2370844477,,0,,0,false,, 078-598-867-814-365,Arriving at an anti-forensics consensus: Examining how to define and control the anti-forensics problem,,2006,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Ryan Harris,"There are no general frameworks with which we may analyze the anti-forensics situation. Solving anti-forensic issues requires that we create a consensus view of the problem itself. This paper attempts to arrive at a standardized method of addressing anti-forensics by defining the term, categorizing the anti-forensics techniques and outlining general guidelines to protect forensic integrity.",3,,44,49,Control (management); Digital evidence; Computer security; Computer science; Term (time); Digital forensics,,,,,https://dl.acm.org/doi/10.1016/j.diin.2006.06.005 http://dx.doi.org/10.1016/j.diin.2006.06.005 https://doi.org/10.1016/j.diin.2006.06.005 https://dx.doi.org/10.1016/j.diin.2006.06.005 https://www.dfrws.org/2006/proceedings/6-Harris.pdf https://dblp.uni-trier.de/db/journals/di/di3.html#Harris06 https://www.sciencedirect.com/science/article/abs/pii/S1742287606000673 https://www.sciencedirect.com/science/article/pii/S1742287606000673,http://dx.doi.org/10.1016/j.diin.2006.06.005,,10.1016/j.diin.2006.06.005,2129010475,,1,004-724-659-618-271; 077-496-942-170-86X; 085-214-277-668-01X; 085-379-403-609-164; 108-847-091-937-878; 132-866-499-809-072,136,true,cc-by-nc-nd,hybrid 078-976-775-035-28X,Digital autopsy : Detection of bullet fragments using “3D volume visualisation with MIP & metal diffraction artifact by whole body MSCT scan in an exhumation case”,,2009,journal article,Journal of Forensic Medicine,24721026,,,AW Shahrom; PG Bagali; Syazana J Nur; H Zarida,"This study involved the full-body visualisation of a firearm injury victim after exhumation with multislice computed tomography (MSCT) as a complement to and subsequent comparison with the classical forensic autopsy findings . Whole Body Scan (WBS) was done of the exhumed body and complete scan data of the head, neck, trunk & lower limbs were acquired by use of one acquisition of less than 1 minute of scanning time. Subsequent to this INFOPSY™ a customised Forensic specific Visualisation solution was used for two-dimensional multiplanar reformations and three-dimensional volume reconstructions. The application runs on high performance computing platform with a high definition resolution display. The body retrieved after exhumation was in advanced state of decomposition and dissection was difficult. The digital autopsy, even when post-processing time was added, was faster than the classical forensic autopsy. More importantly the objective non invasive approach of Digital Autopsy offers certain distinct advantages in exhumation cases that complements the classical forensic autopsy.",26,1,1,4,Dissection; Surgery; Digital autopsy; Artifact (error); Forensic radiology; Whole Body Scan; Nuclear medicine; Multislice computed tomography; Visualization; Volume (compression); Medicine,,,,,https://www.indianjournals.com/ijor.aspx?target=ijor:jfmt&volume=26&issue=1&article=001,https://www.indianjournals.com/ijor.aspx?target=ijor:jfmt&volume=26&issue=1&article=001,,,2278559316,,0,,0,false,, 079-483-836-523-473,Phase-Oriented Advice and Review Structure (PARS) for Digital Forensic Investigations,2022-07-26,2022,journal article,Advances in Multidisciplinary and scientific Research Journal Publication,24888699,Creative Research Publishers,,Aliloulaye Tchaou,"The PARS is the first documented peer review methodology for the digital forensics field, a six staged approach designed to formally support organizations and their staff in their goal of facilitating effective peer review of digital forensic work, from investigative tasks to forensic activities and forensic analysis processes (Pollitt et al., 2018). This assignment discusses how the PARS methodology can be implemented, and the available options and mechanisms available to ease the interpretation of this model into existing practices. Both the early ‘Advisor’ and later ‘Reviewer’ roles in PARS are discussed and their requirements and expectations are defined. Keywords: Digital forensics, Peer review, Digital evidence, Quality assurance, Forensic science Multi-staged Rview, Multi-person Review BOOK Chapter ǀ Research Nexus in IT, Law, Cyber Security & Forensics. Open Access. Distributed Free Citation: Aliloulaye Tchaou (2022): Phase-Oriented Advice and Review Structure (PARS) for Digital Forensic Investigations Book Chapter Series on Research Nexus in IT, Law, Cyber Security & Forensics. Pp 173-180 www.isteams.net/ITlawbookchapter2022. dx.doi.org/10.22624/AIMS/CRP-BK3-P28",1,1,173,180,Digital forensics; Digital evidence; Computer forensics; Nexus (standard); Computer science; Forensic science; Advice (programming),,,,,,http://dx.doi.org/10.22624/aims/crp-bk3-p28,,10.22624/aims/crp-bk3-p28,,,0,,0,true,,bronze 079-499-568-978-91X,Analisis Bukti Digital Facebook Messenger Menggunakan Metode Nist,2018-08-30,2018,journal article,IT JOURNAL RESEARCH AND DEVELOPMENT,25284053; 25284061,UIR Press,,Anton Yudhana; Riadi; Ikhwan Anshori,"Facebook Messenger menjadi media sosial yang populer kedua setelah Whatsapp di tahun 2017. Meningkatnya jumlah pengguna Facebook Messenger tentu membawa dampak positif dan negatif, salah satu efek negatifnya adalah beberapa orang yang menggunakan Facebook Messenger melakukan kejahatan digital. Jika sebuah smartphone android menjadi bukti dalam kasus pidana dan Facebook Messenger terinstall di smartphone tersebut, maka pada aplikasi ini bukti digital dapat diidentifikasi dan dapat diharapkan menjadi pilihan untuk membantu penegakan hukum dalam mengungkap kejahatan digital. Proses identifikasi berdasarkan proses forensic mobile yang berdasarkan metode NIST (National Institute of Standards Technology). NIST memiliki panduan kerja baik itu kebijakan dan standar untuk menjamin setiap examiner mengikuti alur kerja yang sama sehingga pekerjaan mereka terdokumentasikan dan hasilnya dapat di ulang (repeatable) dan dapat dipertahankan (defendable). Penelitian ini menjelaskan gambaran umum bagaimana teknik-teknik yang dapat digunakan untuk mengembalikan bukti digital berupa text,gambar, dan audio pada Facebook Mesenger yang ada di Smartphone Android.",3,1,13,21,,,,,,http://journal.uir.ac.id/index.php/ITJRD/article/download/1658/1225 https://core.ac.uk/download/pdf/322502217.pdf,http://dx.doi.org/10.25299/itjrd.2018.vol3(1).1658,,10.25299/itjrd.2018.vol3(1).1658,2898508302,,0,,7,true,cc-by-sa,gold 079-590-646-744-113,The Applicability of Holography in Forensic Identification: A Fusion of the Traditional Optical Technique and Digital Technique,,2005,journal article,Journal of Forensic Sciences,00221198,ASTM International,United States,Hitoshi Biwasaka; Kiyoshi Saigusa; Yasuhiro Aoki,,50,2,1,7,,,,,,,http://dx.doi.org/10.1520/jfs2004333,,10.1520/jfs2004333,,,0,,10,false,, 079-726-245-728-809,A survey of electromagnetic side-channel attacks and discussion on their case-progressing potential for digital forensics,,2019,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Asanka Sayakkara; Nhien-An Le-Khac; Mark Scanlon,"Abstract The increasing prevalence of Internet of Things (IoT) devices has made it inevitable that their pertinence to digital forensic investigations will increase into the foreseeable future. These devices produced by various vendors often posses limited standard interfaces for communication, such as USB ports or WiFi/Bluetooth wireless interfaces. Meanwhile, with an increasing mainstream focus on the security and privacy of user data, built-in encryption is becoming commonplace in consumer-level computing devices, and IoT devices are no exception. Under these circumstances, a significant challenge is presented to digital forensic investigations where data from IoT devices needs to be analysed. This work explores the electromagnetic (EM) side-channel analysis literature for the purpose of assisting digital forensic investigations on IoT devices. EM side-channel analysis is a technique where unintentional electromagnetic emissions are used for eavesdropping on the operations and data handling of computing devices. The non-intrusive nature of EM side-channel approaches makes it a viable option to assist digital forensic investigations as these attacks require, and must result in, no modification to the target device. The literature on various EM side-channel analysis attack techniques are discussed – selected on the basis of their applicability in IoT device investigation scenarios. The insight gained from the background study is used to identify promising future applications of the technique for digital forensic analysis on IoT devices – potentially progressing a wide variety of currently hindered digital investigations.",29,1,43,54,Group method of data handling; Encryption; Eavesdropping; Computer security; Computer science; Side channel attack; USB; Bluetooth; Wireless; Digital forensics,,,,EM; EM,https://www.markscanlon.co/papers/SurveyEMSideChannelsForensics.php https://www.sciencedirect.com/science/article/abs/pii/S1742287618303840 https://ui.adsabs.harvard.edu/abs/2019arXiv190307703S/abstract https://markscanlon.co/papers/SurveyEMSideChannelsForensics.pdf http://arxiv.org/pdf/1903.07703.pdf https://doi.org/10.1016/j.diin.2019.03.002 https://forensicsandsecurity.com/papers/SurveyEMSideChannelsForensics.php http://dblp.uni-trier.de/db/journals/corr/corr1903.html#abs-1903-07703 https://forensicsandsecurity.com/papers/SurveyEMSideChannelsForensics.pdf https://arxiv.org/abs/1903.07703 https://dblp.uni-trier.de/db/journals/corr/corr1903.html#abs-1903-07703 http://arxiv.org/abs/1903.07703,http://dx.doi.org/10.1016/j.diin.2019.03.002,,10.1016/j.diin.2019.03.002,3105177289; 2921035272,,0,004-935-670-222-50X; 006-204-392-444-738; 009-745-160-749-680; 009-935-696-637-959; 011-792-058-837-127; 012-673-816-043-057; 012-867-377-866-486; 014-137-537-326-066; 014-995-077-316-676; 015-315-804-193-751; 015-704-870-742-148; 016-139-631-313-175; 016-661-251-213-668; 016-820-759-114-076; 017-328-201-360-86X; 017-335-677-993-203; 017-916-684-775-525; 018-728-219-873-777; 021-998-933-410-065; 022-391-080-797-645; 023-170-919-695-853; 024-831-771-938-864; 024-993-702-381-603; 025-837-173-916-001; 026-591-248-665-825; 027-163-958-987-808; 027-265-141-482-204; 027-933-119-794-851; 029-159-400-662-132; 029-748-683-221-796; 030-644-948-433-321; 030-879-422-716-26X; 032-501-427-040-287; 033-089-942-594-860; 034-306-162-114-437; 035-008-147-148-461; 036-198-835-759-991; 036-315-839-495-866; 037-304-752-152-900; 038-294-110-895-85X; 038-334-854-136-016; 039-627-889-157-293; 040-565-525-219-769; 040-595-011-464-174; 042-636-923-996-676; 043-588-566-141-540; 044-367-276-167-133; 045-216-191-719-769; 045-470-586-870-387; 046-267-876-132-772; 047-818-759-270-572; 050-834-445-581-19X; 051-174-262-378-725; 051-544-952-658-711; 051-870-124-075-370; 057-662-229-017-371; 058-638-649-158-740; 059-527-744-465-444; 060-369-813-003-88X; 060-517-968-088-162; 063-818-522-978-273; 063-878-126-628-743; 064-092-804-942-240; 064-446-276-797-689; 064-832-676-494-842; 065-472-112-492-569; 066-529-103-339-301; 066-759-931-116-967; 067-682-730-995-831; 068-491-843-060-017; 069-007-833-693-813; 069-607-942-284-68X; 071-311-399-697-624; 074-614-672-576-143; 075-492-908-245-230; 081-034-805-666-007; 081-519-923-581-499; 082-042-701-545-24X; 082-746-024-018-906; 083-139-412-854-983; 084-979-800-495-589; 085-868-644-488-858; 088-023-546-650-123; 089-885-926-905-621; 091-352-470-901-517; 093-795-930-617-994; 095-736-127-631-909; 099-985-373-806-439; 104-773-981-185-87X; 107-999-389-297-283; 108-005-459-485-988; 110-311-156-990-220; 111-386-363-549-545; 111-442-189-014-994; 116-516-196-774-036; 117-795-652-474-055; 118-286-558-259-165; 118-783-365-990-346; 120-462-880-448-150; 122-118-487-000-106; 122-494-525-238-756; 126-201-670-860-991; 127-616-531-697-881; 133-753-731-718-112; 137-755-137-054-864; 144-493-153-671-981; 150-470-771-960-137; 160-370-472-488-703; 160-630-210-597-764; 163-360-724-847-54X; 165-994-624-449-955; 166-252-929-809-812; 170-972-427-798-244; 177-636-893-655-197; 183-574-974-997-451,42,true,,green 079-756-125-507-152,Battling Anti-Forensics: Beating the U3 Stick,2007-06-22,2007,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Thijs Bosschert,"ABSTRACT With the growing knowledge of digital forensics there is also a growing knowledge in the field of anti-forensics. More software and products see the light each day, which can make digital forensic investigations more difficult to do. One new product in the world of anti-forensics is a USB stick, which can be used to take your favorite programs and files with you on the road. You can use them on any computer and leave no traces of what you have been doing on the computer. Besides being useful for a lot of people, the features of this stick can also be abused. Offences like hacking, fraud, spamming, and the like could be harder to investigate if no traces of the offense are to be found on the computer because one of these USB sticks has been used. This article is about the U3 USB stick; it offers you the opportunity to travel with your files and programs, but does it indeed leave no traces?",1,4,265,273,Spamming; New product development; Software; Free space; Field (computer science); Computer security; Computer science; USB; Digital forensics; Hacker,,,,,https://dblp.uni-trier.de/db/journals/jdfp/jdfp1.html#Bosschert06 https://www.tandfonline.com/doi/abs/10.1080/15567280701417975,http://dx.doi.org/10.1080/15567280701417975,,10.1080/15567280701417975,1969404756,,2,,9,false,, 080-245-929-057-813,Fostering Forensic Innovation,2010-10-01,2010,journal article,Measurement and Control,00202940,SAGE Publications,United States,Julie Mennell,"Forensic science has a significant current and future role in crime detection, policing and the criminal justice system. Government and societal drivers, police priorities and advances in science and technology are demanding, as well as providing opportunities, for its impact and potential to be expanded, evaluated and assessed further.Within this, there is a need for the Criminal Justice System to be clear what it is looking for in respect of forensic science and to identify what the priorities, opportunities and processes are for development and possible expansion (of some areas, such as Digital Forensics, Biometrics and Imaging technologies). For example, if the police service's primary forensic science requirements are for reductions in unit costs, improvements in detection rates or faster turn-around times then this should be clearly specified to internal and external providers, while recognising that such requirements could have consequences for the development and delivery of forensic science, as w...",43,8,248,250,Criminal justice; Engineering; Forensic science; Government; Crime detection; Detection rate; Service (systems architecture); Computer security; Public relations; Unit (housing); Digital forensics,,,,,https://journals.sagepub.com/doi/pdf/10.1177/002029401004300805 http://mac.sagepub.com/content/43/8/248.full.pdf https://journals.sagepub.com/doi/abs/10.1177/002029401004300805,http://dx.doi.org/10.1177/002029401004300805,,10.1177/002029401004300805,2040457892,,0,,0,true,cc-by,gold 080-788-467-889-236,The Definition of Digital Criminalistics as the Origin of a Misleading Direction in Science. Part 2,2021-03-25,2021,journal article,Legal education and science,18131190,The Publishing Group Jurist,,Oleg S. Kuchin; Yaroslava O. Kuchina,"Purpose. To compare and analyze the trend of appearance of the pseudo-term ‘digital criminology’ in the science of criminology and prove that this is incorrect. Methodology: induction, deduction, synthesis, analysis, formal legal method, comparative legal method, logical method. Conclusions. The evolution of methods of committing crimes and instruments of crime does not always require the evolution of the science of criminology and the emergence of its varieties. You just have to assess the prospects of extrapolative ways and methods of proving the circumstances of the crimes in the era of digitalization of social relations, in terms of the provisions of modern criminal law and only criminal-legal research unit. The definition of ‘digital criminalistics’, which has recently appeared in science, actually misleads the scientific community with its novelty and originality, since such criminalistics in nature does not exist a priori. It is necessary to speak only about forensic or expert research of carriers of digital (electronic or computer) information. In criminalistics, it is logical to develop a new direction-the forensic study of electronic media of digital information and the use of computer expertise in establishing all the circumstances of the crime committed. And this is just a new section of forensic technology, studying a new subject of research for this naki. Here, the traditional forensic methodology should be applied, which will be aimed ‘atlinking’ the electronic carrier of digital information and the digital information itself to a specific crime and to a specific person. Scientific and practical significance. The research is aimed at orienting forensic theory and practice towards the study of specific objects and contributes to the fact that all these studies are further applicable to the practice of crime investigation, and not only for theoretical purposes.",3,,25,33,Epistemology; Philosophy,,,,,http://dx.doi.org/10.18572/1813-1190-2021-3-25-33,http://dx.doi.org/10.18572/1813-1190-2021-3-25-33,,10.18572/1813-1190-2021-3-25-33,3215654066,,0,,0,true,,bronze 081-075-040-457-06X,Digital crime – A review article,2010-01-06,2010,journal article,Journal of Forensic Medicine,24721026,,,C.R. Vasudeva Murthy; P.S. Chidananda; Manisa Mohanty; Natasha Nambia; K.P. Harsha,"As computers become more integrated into people's daily lives, investigators are encountering an increasing amount of evidence of criminal activity in the digital form. There is growing need of understanding these methods and trained experts to process digital evidence. So training and laws related must keep pace with advances in computer technology making digital forensics an exciting field.",4,1,58,60,Internet privacy; Review article; Pace; Digital evidence; Computer technology; Mathematics; Field (computer science); Process (engineering); Digital forensics,,,,,http://www.i-scholar.in/index.php/ijfmt/article/view/45843 http://www.indianjournals.com/ijor.aspx?target=ijor:ijfmt&volume=4&issue=1&article=020,http://www.i-scholar.in/index.php/ijfmt/article/view/45843,,,3038072372,,0,,0,false,, 081-152-890-798-991,Digital forensic standards and digital evidence in Polish criminal proceedings. An updated definition of digital evidence in forensic science,,2021,journal article,International Journal of Electronic Security and Digital Forensics,1751911x; 17519128,Inderscience Publishers,United Kingdom,Piotr Lewulis,Digital evidence is increasingly popular in criminal proceedings - not only to those commonly referred to as 'cybercrimes'. The credibility criteria of such evidence are in theory governed by a set...,13,1,403,417,Forensic science; Set (abstract data type); Data science; Credibility; Digital evidence; Computer science; Digital forensics,,,,,https://www.inderscienceonline.com/doi/abs/10.1504/IJESDF.2021.116024,http://dx.doi.org/10.1504/ijesdf.2021.10034988,,10.1504/ijesdf.2021.10034988,3122539278,,0,,0,false,, 081-274-353-682-729,Exploring the Learning Efficacy of Digital Forensics Concepts and Bagging & Tagging of Digital Devices in Immersive Virtual Reality,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Courtney Hassenfeldt; Jillian Jacques; Ibrahim Baggili,"Abstract This work presents the first account of evaluating learning inside a VR experience created to teach Digital Forensics (DF) concepts, and a hands-on laboratory exercise in Bagging & Tagging a crime scene with digital devices. First, we designed and developed an immersive VR experience which included a lecture and a lab. Next, we tested it with (n = 57) participants in a controlled experiment where they were randomly assigned to a VR group or a physical group. Both groups were subjected to the same lecture and lab, but one was in VR and the other was in the real world. We collected pre- and post-test results to assess the participants’ knowledge in DF concepts learned. Our experimental results indicated no significant differences in scores between the immersive VR group and the physical group. However, our results showed faster completion times in VR by the participants, which hints at VR being more time efficient, as virtual environments can be spun programmatically with little downtime.",33,,301011,,Crime scene; Virtual reality; Controlled experiment; Time efficient; Computer science; Multimedia; Digital forensics,,,,National Science Foundation,https://digitalcommons.newhaven.edu/cgi/viewcontent.cgi?article=1102&context=electricalcomputerengineering-facpubs https://digitalcommons.newhaven.edu/electricalcomputerengineering-facpubs/101/ https://dfrws.org/wp-content/uploads/2020/10/2020_USA_paper-exploring_the_learning_efficacy_of_digital_forensics_concepts.pdf https://www.sciencedirect.com/science/article/pii/S2666281720302602 https://doi.org/10.1016/j.fsidi.2020.301011 https://dfrws.org/presentation/is-my-digital-forensics-professor-better-in-virtual-reality-vr-exploring-learning-in-vr-versus-the-physical-world/,http://dx.doi.org/10.1016/j.fsidi.2020.301011,,10.1016/j.fsidi.2020.301011,3080767672,,0,000-490-412-762-138; 002-413-691-537-198; 002-569-181-368-890; 003-103-703-899-739; 004-916-146-042-728; 005-733-361-126-371; 007-790-059-029-953; 011-006-176-487-462; 014-425-849-204-654; 017-429-170-321-915; 020-449-343-773-669; 022-041-246-309-040; 046-408-723-602-346; 049-223-763-769-747; 066-264-702-071-211; 074-169-238-052-790; 078-327-902-374-330; 100-595-188-241-720; 109-149-174-428-014; 115-048-509-763-725; 118-244-930-021-861; 129-632-250-604-450; 147-117-297-573-555; 149-617-274-050-94X; 151-378-930-836-964; 151-419-635-835-131; 172-573-079-472-196; 193-779-398-308-524; 194-308-670-883-17X,5,true,cc-by-nc-nd,hybrid 081-458-407-971-603,Virtualization and Digital Forensics: A Research and Education Agenda,2008-05-27,2008,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Mark Pollitt; Kara Nance; Brian Hay; Ronald Dodge; Philip Craiger; Paul Burke; Chris Marberry; Bryan Brubaker,"The application of virtualization software and techniques in information technology research and education has provided a foundational environment to advance the state-of-the-art in research and education in many related areas. Commercial and open source virtualization products are being used by researchers and educators to create a wide variety of virtual environments. These virtual environments facilitate systems design and development and product development as well as the testing and modeling of production and preproduction systems. As the capabilities, functionality, and stability of these products have evolved, the use of virtualization has expanded, necessitating the identification of new research areas to investigate the impacts of virtualization on digital forensics. In February 2007, a group of digital forensics researchers, educators, and practitioners gathered at the National Center for Forensic Science at the University of Central Florida for the 2007 Workshop on Virtualization in Digital Forensics to discuss these issues and develop a research and education agenda for virtualization and digital forensics. This article outlines some of the ideas generated and new research categories and areas identified at this meeting.",2,2,62,73,Information technology; Engineering; Variety (cybernetics); World Wide Web; New product development; Data science; Software; Systems design; Virtualization; Identification (information); Digital forensics,,,,,https://dl.acm.org/doi/10.1080/15567280802047135 https://www.tandfonline.com/doi/full/10.1080/15567280802047135 https://works.bepress.com/john_craiger/1/ http://dblp.uni-trier.de/db/journals/jdfp/jdfp2.html#PollittNHDCBMB08 https://doi.org/10.1080/15567280802047135 http://dx.doi.org/10.1080/15567280802047135 https://dblp.uni-trier.de/db/journals/jdfp/jdfp2.html#PollittNHDCBMB08,http://dx.doi.org/10.1080/15567280802047135,,10.1080/15567280802047135,2158522906,,0,012-454-770-976-950; 014-821-022-292-339; 019-490-982-760-206; 032-712-671-997-435; 033-458-528-145-593; 037-438-836-197-317; 038-914-873-897-532; 059-577-872-928-63X; 075-010-608-747-672; 123-833-341-570-578,29,false,, 081-833-857-658-915,Digital forensics : the missing piece of the internet of things promise,,2016,journal article,Computer Fraud & Security,13613723,Mark Allen Group,United Kingdom,Steve Watson; Ali Dehghantanha,"As technology advances at a blinding pace, the promise of new gadgets to enhance every facet of our lives tempts every consumer and organisation. From the ease of automation, control and monitoring of the most mundane aspects of our lives to advanced lifesaving and monitoring capabilities, our world is changing daily. ; No reliable forensics application or digital forensics guidance exists to retrieve the data from IoT devices in the event of an attack, an active investigation or a litigation request. ; The digital forensics of Internet of things (IoT) technologies is the missing conversation in our headlong rush to the promise of connecting every device on the planet. Steve Watson of VTO Labs and Ali Dehghantanha of the University of Salford discuss the issues and the importance of further development in this field. And they elaborate on how forensics practitioners, device manufacturers and legal authorities could share their efforts and minimise this gap.",2016,6,5,8,Internet privacy; Automation; Watson; Conversation; Pace; Computer security; Computer science; Event (computing); Internet of Things; Digital forensics,,,,,http://www.sciencedirect.com/science/article/pii/S1361372315300452 https://www.sciencedirect.com/science/article/abs/pii/S1361372315300452 https://usir.salford.ac.uk/id/eprint/39539/,http://dx.doi.org/10.1016/s1361-3723(15)30045-2,,10.1016/s1361-3723(15)30045-2,2462696620,,0,002-678-878-129-227; 074-815-704-684-263; 078-431-972-023-034; 112-181-239-331-730,82,true,,green 082-140-450-245-734,IDENTIFICATION OF DIGITAL EVIDENCE FACEBOOK MESSENGER ON MOBILE PHONE WITH NATIONAL INSTITUTE OF STANDARDS TECHNOLOGY (NIST) METHOD,2019-01-15,2019,journal article,Kursor,23016914; 02160544,University of Trunojoyo Madura,,Anton Yudhana; Riadi; Ikhwan Anshori,"Facebook Messenger is a popular social media. The increasing number of Facebook Messenger users certainly has a positive and negative impact, one of the negative effects is being used for digital crime. One of the sciences to get digital evidence is to do Digital forensics. Digital forensics can be done on a smartphone used by criminals. This research will carry out as much evidence of digital crime as possible from Facebook Messenger. In this study the forensic devices, Magnet AXIOM and Oxygen Forensics Suite 2014 were used using the National Institute of Standards Technology (NIST) method. NIST has work guidelines for both policies and standards to ensure that each examiner follows the same workflow so that their work is documented and the results can be repeated and maintained. The results of the research in the Magnet AXIOM and Oxygen Forensics Suite 2014 get digital evidence in the form of accounts, conversation texts, and images. This study successfully demonstrated the results of an analysis of forensic devices and digital evidence on Facebook Messenger. The results of the performance evaluation of forensic tools in the acquisition process using AXIOM Magnets are considered the best compared to Oxygen Forensics Suite 2014.",9,3,,,NIST; World Wide Web; Mobile phone; Digital evidence; Computer science; Identification (information),,,,,http://kursorjournal.org/index.php/kursor/article/view/152 https://kursorjournal.org/index.php/kursor/article/download/152/95,http://dx.doi.org/10.28961/kursor.v9i3.152,,10.28961/kursor.v9i3.152,2915261871,,0,000-225-165-729-99X; 070-740-822-724-693; 087-863-544-029-830,0,true,cc-by,gold 082-306-008-484-107,Review of: Practical Digital Imaging—Applications and Techniques,2012-04-19,2012,journal article,Journal of Forensic Sciences,00221198,Wiley,United States,B S Rod Englert,,57,3,849,849,Digital imaging; Computer science; Computer hardware,,,,,http://onlinelibrary.wiley.com/doi/10.1111/j.1556-4029.2012.02061.x/abstract http://onlinelibrary.wiley.com/doi/10.1111/j.1556-4029.2012.02061.x/full,http://dx.doi.org/10.1111/j.1556-4029.2012.02061.x,,10.1111/j.1556-4029.2012.02061.x,2170251726,,0,,0,false,, 082-417-796-624-941,A near-miss management system architecture for the forensic investigation of software failures.,2015-10-28,2015,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,M.A. Bihina Bella; Jan H. P. Eloff,"Abstract Digital forensics has been proposed as a methodology for doing root-cause analysis of major software failures for quite a while. Despite this, similar software failures still occur repeatedly. A reason for this is the difficulty of obtaining detailed evidence of software failures. Acquiring such evidence can be challenging, as the relevant data may be lost or corrupt following a software system's crash. This paper proposes the use of near-miss analysis to improve on the collection of evidence for software failures. Near-miss analysis is an incident investigation technique that detects and subsequently analyses indicators of failures. The results of a near-miss analysis investigation are then used to detect an upcoming failure before the failure unfolds. The detection of these indicators – known as near misses – therefore provides an opportunity to proactively collect relevant data that can be used as digital evidence, pertaining to software failures. A Near Miss Management System (NMS) architecture for the forensic investigation of software failures is proposed. The viability of the proposed architecture is demonstrated through a prototype.",259,,234,245,Architecture; Software system; Crash; Management system; Near miss; Software; Digital evidence; Computer security; Computer science; Digital forensics,Digital evidence; Digital forensics; Near miss; Near-miss management system (NMS); Software failure,,,,https://www.sciencedirect.com/science/article/pii/S0379073815004314 https://www.ncbi.nlm.nih.gov/pubmed/26727616 https://europepmc.org/abstract/MED/26727616 https://repository.up.ac.za/handle/2263/56011 https://repository.up.ac.za/bitstream/2263/56011/1/Bella_NearMiss_2016.pdf,http://dx.doi.org/10.1016/j.forsciint.2015.10.007,26727616,10.1016/j.forsciint.2015.10.007,2193388524,,0,001-808-197-846-489; 002-366-662-229-867; 005-867-919-846-09X; 005-902-773-372-039; 009-662-282-544-479; 011-905-511-601-111; 013-081-766-379-747; 013-887-768-477-01X; 021-448-156-714-737; 031-611-368-763-776; 042-185-248-691-579; 045-920-797-897-761; 045-930-609-986-652; 056-639-947-708-941; 058-507-647-155-191; 064-314-255-895-12X; 079-314-174-384-71X; 079-406-212-807-655; 109-985-341-960-184; 110-398-250-080-48X; 114-542-186-088-354; 114-839-605-739-519; 147-557-846-895-696; 153-054-383-154-973; 166-411-911-305-152; 168-678-724-053-274; 191-707-142-292-682,0,true,,green 082-660-953-020-851,Feature: Challenges ahead on the digital forensics and audit trails,,2014,journal article,Network Security,13534858,Mark Allen Group,Netherlands,Steve Gold,"Digital forensics is a relatively new science in the increasing complex field of IT security, data governance and auditing. This was why the Forensic Science Society recently held its inaugural conference in York on the topic - at which a range of speakers drawn from the rapidly-emerging industry gave a series of presentations - along with a discussion of some of the key issues that affecting IT security professionals at the sharp end. Digital forensics is a relatively new science in the increasingly complex field of IT security, data governance and auditing. This was why the Forensic Science Society recently held its inaugural conference in York. A range of speakers drawn from this rapidly-emerging industry revealed a lot about the challenges that face even senior and well-experienced IT security professionals, largely as a result of the rapid pace of evolution in the security ecosphere. Steve Gold on the issues raised at the event",2014,6,12,17,Data governance; Audit; Pace; Face (sociological concept); Ecosphere; Computer security; Public relations; Computer science; Event (computing); Audit trail; Digital forensics,,,,,https://doi.org/10.1016/S1353-4858(14)70060-1 https://www.sciencedirect.com/science/article/abs/pii/S1353485814700601 http://www.sciencedirect.com/science/article/pii/S1353485814700601 https://www.sciencedirect.com/science/article/abs/pii/S1353485814700601#! https://dblp.uni-trier.de/db/journals/ns/ns2014.html#Gold14a https://www.infona.pl/resource/bwmeta1.element.elsevier-57a1405b-e0ff-39df-97db-9bb4da6d536f,http://dx.doi.org/10.1016/s1353-4858(14)70060-1,,10.1016/s1353-4858(14)70060-1,2478359822,,0,090-966-234-339-091,1,false,, 082-793-334-095-933,Scenario-Based Digital Forensics Challenges in Cloud Computing,2016-10-20,2016,journal article,Symmetry,20738994,MDPI AG,Switzerland,Erik Miranda Lopez; Seo Yeon Moon; Jong Hyuk Park,"The aim of digital forensics is to extract information to answer the 5Ws (Why, When, Where, What, and Who) from the data extracted from the evidence. In order to achieve this, most digital forensic processes assume absolute control of digital evidence. However, in a cloud environment forensic investigation, this is not always possible. Additionally, the unique characteristics of cloud computing create new technical, legal and architectural challenges when conducting a forensic investigation. We propose a hypothetical scenario to uncover and explain the challenges forensic practitioners face during cloud investigations. Additionally, we also provide solutions to address the challenges. Our hypothetical case scenario has shown that, in the long run, better live forensic tools, development of new methods tailored for cloud investigations and new procedures and standards are indeed needed. Furthermore, we have come to the conclusion that forensic investigations biggest challenge is not technical but legal.",8,10,107,,Digital evidence; Cloud forensics; Scenario based; Computer security; Computer science; Cloud computing; Digital forensics,,,,Ministry of Science ICT and Future Planning,https://www.mdpi.com/2073-8994/8/10/107/pdf https://dblp.uni-trier.de/db/journals/symmetry/symmetry8.html#LopezMP16 https://doaj.org/article/16744493008a4c63a18fc76483706aef https://ui.adsabs.harvard.edu/abs/2016Symm....8..107M/abstract https://core.ac.uk/display/90726715 https://www.mdpi.com/2073-8994/8/10/107,http://dx.doi.org/10.3390/sym8100107,,10.3390/sym8100107,2538056117,,0,000-360-120-513-679; 001-148-044-584-317; 011-972-444-921-827; 017-708-113-657-756; 019-119-495-482-994; 023-338-081-058-709; 025-319-861-345-580; 027-031-165-049-753; 028-180-038-189-484; 028-290-062-141-840; 029-934-518-651-564; 035-448-415-847-226; 042-767-661-429-064; 047-221-550-114-462; 048-001-521-822-787; 049-977-511-720-26X; 050-032-081-738-330; 052-152-063-024-042; 058-122-722-153-464; 058-631-300-195-90X; 061-960-915-134-527; 074-503-636-433-987; 083-322-626-930-350; 086-091-202-010-191; 086-365-780-774-340; 091-619-263-117-914; 092-655-509-442-333; 100-459-328-094-990; 115-547-184-477-216; 116-798-667-947-625; 121-704-965-852-836; 124-912-663-881-389; 125-371-043-627-395; 144-124-797-675-052; 148-434-515-794-491; 148-732-709-522-772; 156-313-798-378-998; 166-183-210-534-575; 170-108-067-251-840; 171-483-137-477-150; 179-568-985-512-784,10,true,cc-by,gold 082-814-492-264-296,Forensic analysis of open-source XMPP multi-client social networking apps on iOS devices,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Alex Akinbi; Ehizojie Ojie,,36,,301122,,World Wide Web; Encryption; Anonymity; User information; File system; Contact list; Open source; Focus (computing); Computer science; Metadata,,,,,https://www.sciencedirect.com/science/article/pii/S2666281721000196 https://dblp.uni-trier.de/db/journals/di/di36.html#AkinbiO21,http://dx.doi.org/10.1016/j.fsidi.2021.301122,,10.1016/j.fsidi.2021.301122,3126635022,,0,036-213-488-430-19X; 046-512-599-163-701; 049-131-797-799-081; 057-360-375-607-114; 077-859-446-810-741; 092-265-021-685-792; 102-664-242-084-236; 103-689-898-584-521; 103-738-494-539-60X; 106-759-637-118-717; 117-065-920-586-287; 123-798-616-638-738; 125-552-808-845-523; 128-985-340-093-196; 155-758-692-373-705; 166-183-210-534-575; 166-547-932-138-819,2,false,, 082-851-209-039-37X,Towards reliable digital forensics investigations through measurement science,2020-01-03,2020,journal article,WIREs Forensic Science,25739468,Wiley,,Nicolas Hughes; Umit Karabiyik,,2,4,,,Data science; Measurement science; Computer science; Digital forensics,,,,,https://wires.onlinelibrary.wiley.com/doi/10.1002/wfs2.1367 https://onlinelibrary.wiley.com/doi/full/10.1002/wfs2.1367,http://dx.doi.org/10.1002/wfs2.1367,,10.1002/wfs2.1367,2998225505,,0,000-084-741-857-185; 000-225-165-729-99X; 004-652-388-189-304; 010-963-610-208-920; 011-340-105-227-149; 015-084-347-434-584; 020-885-011-437-897; 021-039-461-635-181; 023-418-828-545-549; 030-178-593-043-926; 036-112-898-081-145; 038-509-596-583-914; 043-093-846-816-675; 047-386-524-667-691; 054-004-313-233-495; 064-549-392-650-90X; 104-153-499-789-950; 104-787-005-142-28X; 106-964-315-836-68X; 114-315-827-345-69X; 131-807-250-432-699; 131-948-799-258-180,5,false,, 082-965-731-295-793,Towards green frameworks for digital forensics investigation,2013-01-31,2013,journal article,Journal of Convergence Information Technology,19759320; 22339299,AICIT,South Korea,Ali Dehghantanha; Ramlan Mahmod; Nur Izura Udzir,"Despite the fact that digital forensics involves strict procedures and complies with fixed regulations and principles, but as this paper presents, there are plenty of opportunities that can be practically employed in digital forensics to make this science greener. Virtualization can cost effectively reduce the number of workstations running forensic tools in the lab. Cloud computing and consolidating; servers and storage devices in green data centers not only facilitate managing and securing services but also decline the number of required network and cooling facilities. Forensic labs can also be optimized with regard to environmental preservation. Using remote protocols and digitalizing paperwork procedures are environmentally helpful practices to accelerate investigation progress as; well. Improving electrical power needs of labs and forensic devices is another issue that should be taken into consideration. Employing storage devices with optimal energy usage in digital forensics may highly reduce energy consumption. This paper study established green technologies particularly in information technology field and suggests a framework for implementing compatible techniques in digital forensics in order to reduce greenhouse gas pollutants, limit carbon emissions, and preserve the environment.",8,2,669,678,Risk analysis (engineering); Information technology; Energy consumption; Field (computer science); Computer security; Computer science; Virtualization; Workstation; Cloud computing; Digital forensics; Server,,,,,http://psasir.upm.edu.my/id/eprint/30595/ https://core.ac.uk/display/153811845 https://core.ac.uk/download/153811845.pdf,http://dx.doi.org/10.4156/jcit.vol8.issue2.80,,10.4156/jcit.vol8.issue2.80,2078143495,,0,,4,true,,green 082-979-454-097-058,Prelim iii - Contents List,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,37,,301203,301203,Computer science; Information retrieval,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00111-6,,10.1016/s2666-2817(21)00111-6,,,0,,0,true,,bronze 083-400-942-048-619,Comparative Analysis of Forensic Software on Android-based Blackberry Messenger using NIJ Framework,2018-11-01,2018,journal article,Proceeding of the Electrical Engineering Computer Science and Informatics,2407439x,Institute of Advanced Engineering and Science,," Riadi; Sunardi Sunardi; Arizona Firdonsyah","Instant Messaging application is the most widely used application all over the world. Blackberry Messenger is a multiplatform instant messaging with lots of features that can be a magnet for many people to use Blackberry Messenger for commiting digital crimes. In the process of investigating digital crime cases, digital evidences are required. To obtain digital evidence, a set of forensic tools are needed to conduct forensic process on physical evidences. The topic of this research is to describe the forensic process and to compare the current forensic tools used based on acquired digital evidences by using method that refers to mobile device forensic guidelines made by the National Institute of Justice (NIJ). The forensic tools used in this research are Magnet AXIOM, Belkasoft Evidence Center, and MOBILedit Forensic Express. The outcome shows that Magnet AXIOM has the highest capability to obtain digital evidences, Belkasoft Evidence Center has superiority in terms of data text acquisition, and MOBILedit Forensic Express has superiority in physical evidence preserving and cloning.",5,1,472,477,Forensic science; Mobile device; Data science; Software; Digital evidence; Instant messaging; Computer science; Android (operating system); Digital forensics,,,,,http://journal.portalgaruda.org/index.php/EECSI/article/view/1615 http://journal.portalgaruda.org/index.php/EECSI/article/download/1615/1128 https://core.ac.uk/download/pdf/296976143.pdf,http://dx.doi.org/10.11591/eecsi.v5.1615,,10.11591/eecsi.v5.1615,2981464727,,0,002-633-335-300-244; 006-700-167-776-341; 055-473-899-043-485; 185-798-265-234-254,0,true,, 083-495-367-906-30X,Blind Forensics of Median Filtering in Digital Images,,2011,journal article,IEEE Transactions on Information Forensics and Security,15566013,Institute of Electrical and Electronics Engineers (IEEE),United States,Hai-Dong Yuan,"Exposing the processing history of a digital image is an important problem for forensic analyzers and steganalyzers. As the median filter is a popular nonlinear denoising operator, the blind forensics of median filtering is particularly interesting. This paper proposes a novel approach for detecting median filtering in digital images, which can 1) accurately detect median filtering in arbitrary images, even reliably detect median filtering in low-resolution and JPEG compressed images; and 2) reliably detect tampering when part of a median-filtered image is inserted into a nonmedian-filtered image, or vice versa. The effectiveness of the proposed approach is exhaustively evaluated in five different image databases.",6,4,1335,1345,Filter (signal processing); Steganalysis; Steganography; Artificial intelligence; Noise reduction; Transform coding; Pattern recognition; JPEG; Image resolution; Computer vision; Computer science; Digital image; Median filter,,,,,https://dl.acm.org/doi/10.1109/TIFS.2011.2161761 https://dblp.uni-trier.de/db/journals/tifs/tifs6.html#Yuan11 http://yadda.icm.edu.pl/yadda/element/bwmeta1.element.ieee-000005951772 https://ieeexplore.ieee.org/abstract/document/5951772 http://ieeexplore.ieee.org/document/5951772/ https://www.infona.pl/resource/bwmeta1.element.ieee-art-000005951772,http://dx.doi.org/10.1109/tifs.2011.2161761,,10.1109/tifs.2011.2161761,2160921722,,1,005-021-673-285-683; 006-920-289-715-189; 007-566-227-370-91X; 007-677-584-264-981; 023-624-827-239-301; 024-148-241-973-367; 024-793-013-451-77X; 025-410-507-609-210; 027-757-905-863-260; 037-876-003-882-934; 039-604-410-537-357; 044-144-587-337-904; 044-860-657-165-931; 044-976-667-940-502; 046-576-078-025-736; 050-283-647-974-356; 068-082-205-208-585; 080-701-775-077-358; 082-579-789-806-407; 106-688-419-298-857; 122-164-403-164-304; 127-939-567-826-987; 139-888-759-599-078; 172-112-498-122-981; 194-411-986-203-711,157,false,, 083-529-261-546-580,Design of expert system for tool selection in digital forensics investigation,2020-07-01,2020,journal article,IOP Conference Series: Materials Science and Engineering,17578981; 1757899x,IOP Publishing,,Erika Ramadhani; Elyza Gustri Wahyuni; Hanif R. Pratama,"Along with the diverse types of electronic goods and digital evidence, techniques have also developed in conducting digital forensic investigations. Another effect is the increase in types and types of tools for conducting digital forensic investigations. The problem is the increasing number of digital forensic tools is not always developed in conjunction with the manual book. So this is what makes the investigator to check the tool to make it suitable for investigations. Choosing the right tool is very important in the investigation process, because each stage of the forensic investigation process has a different treatment for each of its staging. Seeing these conditions, then in this paper we make a system design to facilitate investigators in choosing the right digital forensic tool and in accordance with using an expert system. The design system shows that it's still needed to confirm to an expert to get a match output if there is a new rule. Later this system will be implemented with website technology.",852,1,012137,,Software engineering; Selection (linguistics); Digital evidence; Design systems; Systems design; Computer science; Process (engineering); Expert system; Digital forensics,,,,,http://ui.adsabs.harvard.edu/abs/2020MS&E..852a2137R/abstract https://iopscience.iop.org/article/10.1088/1757-899X/852/1/012137,http://dx.doi.org/10.1088/1757-899x/852/1/012137,,10.1088/1757-899x/852/1/012137,3044515827,,0,004-349-162-988-304; 012-857-477-749-00X; 055-856-741-899-572; 070-450-084-258-436; 110-850-368-587-487; 139-527-080-444-375,1,true,,gold 083-839-476-807-171,Digital enhancement of sub-quality bitemark photographs.,2001-07-01,2001,journal article,Journal of forensic sciences,00221198,Wiley-Blackwell,United States,C. P. Karazalus; Timothy Palmbach; Henry C. Lee,"Digital enhancement software was used to enhance bitemark photographs. This enhancement technique improved the resolution of the bitemark images. Lucis was the software program utilized in this study and case applications. First, this technique was applied on known bitemark images to evaluate the potential effectiveness of this digital enhancement method. Subsequently, Lucis was utilized on two separate unsolved cases involving enhancement of bitemark evidence. One case involved a severely beaten infant with a bitemark on the upper thigh. The second case involves a bitemark observed on the breast of a female sexual assault strangulation victim. In both cases, bitemark images were significantly improved after digital enhancement.",46,4,954,958,Artificial intelligence; Quality (business); Upper thigh; Forensic odontology; Sexual assault; Computer vision; Computer science,,"Adult; Bites, Human/pathology; Female; Forensic Medicine/methods; Humans; Image Processing, Computer-Assisted/methods; Infant; Photography; Software",,,https://www.astm.org/DIGITAL_LIBRARY/JOURNALS/FORENSIC/PAGES/JFS15076J.htm https://europepmc.org/article/MED/11451085,http://dx.doi.org/10.1520/jfs15076j,11451085,10.1520/jfs15076j,1481984022,,0,000-097-289-632-651; 011-505-697-523-453; 014-411-327-735-573; 036-528-395-889-096,5,false,, 084-021-092-390-691,"Control systems/SCADA forensics, what's the difference?",,2014,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,R.M. van der Knijff,,11,3,160,174,SCADA; Information technology; Network security; Crash; Business continuity; USable; Field (computer science); Computer security; Computer science; Process safety,,,,Dutch National Coordinator for Security and Counterterrorism,https://doi.org/10.1016/j.diin.2014.06.007 https://www.sciencedirect.com/science/article/pii/S1742287614000814 https://dl.acm.org/citation.cfm?id=2724492 https://dl.acm.org/doi/10.1016/j.diin.2014.06.007 http://www.sciencedirect.com/science/article/pii/S1742287614000814,http://dx.doi.org/10.1016/j.diin.2014.06.007,,10.1016/j.diin.2014.06.007,2009166708,,0,007-472-112-945-149; 011-691-926-649-618; 013-330-516-271-455; 017-815-064-018-299; 024-806-994-188-875; 037-321-675-678-849; 050-572-314-303-635; 056-715-378-869-201; 065-760-418-407-837; 074-933-143-629-826; 117-132-049-546-221; 121-437-625-840-931; 127-188-165-826-250; 128-790-975-772-352; 149-984-104-390-727; 177-696-123-391-61X; 182-848-793-036-01X; 189-104-249-595-291,37,false,, 084-366-417-503-417,The State of Art in Digital Audio Forensic Authentication,,2014,journal article,Chinese Journal of Forensic Sciences,16712072,,,Zeng Jin-hu,"With the popularity of digital recorders, and the popular trend of audio tampering methods, the traditional techniques have met great challenges in the current practice of digital audio forensic authentication. The latest progress in the field of the pattern recognition and artificial intelligence offers a feasible way for digital audio forensic authentication. In this paper,the latest achievements of digital audio forensic authentication in the fields of the machine learning and pattern recognition were reviewed and the current main methods in the practice of digital audio forensic authentication were analyzed. Then, problems, challenges, and future trends of digital audio forensic authentication were discussed. It was concluded that the collaborative coexistence of traditional methods based on expert experience and statistical quantitative computation techniques would be an inevitable trend and an efficient solution for digital audio forensic authentication.",,,,,Authentication (law); Pattern recognition (psychology); Digital recording; Popularity; State of art; Current practice; Field (computer science); Computer science; Multimedia; Digital audio,,,,,http://en.cnki.com.cn/Article_en/CJFDTOTAL-SFJD201404013.htm,http://en.cnki.com.cn/Article_en/CJFDTOTAL-SFJD201404013.htm,,,2368419307,,0,,0,false,, 084-507-679-986-419,Building a Digital Forensic Laboratory: Establishing and Managing a Successful Facility. By A. Jones and C. Valli,2010-03-18,2010,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Gary C. Kessler,"Like so many things in our just-in-time world, this book was sent to me just as one of my colleagues was looking for a text for a course he was developing in computer forensics laboratory operation...",3,1,62,63,Engineering; World Wide Web; Computer security; Computer forensics; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/jdfp/jdfp3.html#Kessler10 https://www.tandfonline.com/doi/abs/10.1080/15567280903463801 https://dl.acm.org/doi/10.1080/15567280903463801 https://works.bepress.com/gary_kessler/47/,http://dx.doi.org/10.1080/15567280903463801,,10.1080/15567280903463801,2273917388,,0,,0,false,, 084-513-290-038-788,Review of: Investigating Digital Crime,2010-04-28,2010,journal article,Journal of Forensic Sciences,00221198,Wiley,United States,Mark Pollitt,,55,5,1408,1408,,,,,,http://onlinelibrary.wiley.com/doi/10.1111/j.1556-4029.2010.01486.x/abstract,http://dx.doi.org/10.1111/j.1556-4029.2010.01486.x,,10.1111/j.1556-4029.2010.01486.x,2043024541,,0,,0,false,, 084-624-696-297-925,Let the robots do it! – Taking a look at Robotic Process Automation and its potential application in digital forensics,,2019,journal article,Forensic Science International: Reports,26659107,Elsevier BV,,Alisha Asquith; Graeme Horsman,"Abstract The challenges of tackling increasing caseloads, large volumes of digital data and maintaining examination efficiency in order to adhere to tight criminal justice system deadlines persist. As the field looks towards techniques for improving efficiency, forms of automation are both simultaneously touted as a potential solution, whilst also attracting criticism. The potential for techniques which mechanise parts of the digital forensic examination process, and do it reliably, is great, however developing the capability to do this remains a challenge. This work provides an introductory discussion to Robotic Process Automation, a form of service task automation. Its potential application is debated and two case studies are offered demonstrating potential areas of applicability. An objective evaluation is offered, debating whether technology has a place in improving efficiency in this field.",1,,100007,,Risk analysis (engineering); Automation; Process automation system; Task (project management); Field (computer science); Service (systems architecture); Computer science; Process (engineering); Digital forensics; Robot,,,,"School of Science, Engineering & Design, Teesside University, Middlesbrough, United Kingdom",https://research.tees.ac.uk/ws/files/8028012/Let_the_robots_do_it.pdf https://research.tees.ac.uk/en/publications/let-the-robots-do-it-taking-a-look-at-robotic-process-automation- https://www.sciencedirect.com/science/article/pii/S2665910719300076 https://core.ac.uk/download/pdf/225624897.pdf,http://dx.doi.org/10.1016/j.fsir.2019.100007,,10.1016/j.fsir.2019.100007,2956049776,,0,005-859-821-142-158; 014-713-031-827-317; 014-767-056-602-687; 023-858-572-607-02X; 025-319-861-345-580; 031-522-316-310-252; 042-134-300-645-458; 050-366-537-900-675; 050-513-243-638-138; 059-220-411-265-931; 061-549-181-856-861; 065-520-849-771-46X; 080-196-042-005-758; 090-138-553-295-037; 100-136-470-500-690; 131-068-965-289-412; 144-724-915-219-138; 150-249-549-372-358; 154-517-106-328-503,25,true,"CC BY, CC BY-NC-ND",gold 085-204-724-336-334,Computer Forensic Methodology and Tools,2020-05-01,2020,journal article,Digital Forensics (4n6) Journal,25821172,Digital Forensics (4N6),,Hriday Raval,"The Computer Forensic has long played a vital role across the domains - Cyber Crimes Investigations, Incident Response, Cyber Threat Intelligence and Corporate Cybersecurity. In the past Digital Evidence lost their validity in the Courtrooms. Prior, similar to some other Physical Evidence, courts used to consider evidence procured from computer systems as genuine. In any case, as time passed, we figured out the fact that it is so natural to corrupt, destroy, or alter computer data, all three stages - storage, network and computation. In the least complex model, if an individual basically opens a computer file, it's absolutely impossible to demonstrate the last date that the document was refreshed aka updated. Computers are intended to record the time and date of an accessed file on its own by default features of an operating system. Examiners later understood that they have to build up the essential devices and procedures to separate the necessary data from computers without influencing the data all the while. With time, specialists concocted systems to securely recover data, preserve and analyze to derive the insights useful in Computer related Crimes. This part of forensic science is currently well known as Computer Forensics.",,,15,20,Forensic science; Data science; Computer science,,,,,http://dx.doi.org/10.46293/4n6/2020.02.02.02,http://dx.doi.org/10.46293/4n6/2020.02.02.02,,10.46293/4n6/2020.02.02.02,3022560827,,0,,0,false,, 085-482-775-276-618,Digital transformations and the viability of forensic science laboratories: Crisis-opportunity through decentralisation.,2018-05-19,2018,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Eoghan Casey; Olivier Ribaux; Claude Roux,,289,,e24,e25,Decentralization; Forensic science; Public administration; Computer science,,,,,https://serval.unil.ch/resource/serval:BIB_35EABF29DF1D.P002/REF.pdf https://www.ncbi.nlm.nih.gov/pubmed/29885922 https://serval.unil.ch/notice/serval:BIB_35EABF29DF1D https://opus.lib.uts.edu.au/handle/10453/128626 https://europepmc.org/abstract/MED/29885922 https://core.ac.uk/download/188208638.pdf,http://dx.doi.org/10.1016/j.forsciint.2018.04.055,29885922,10.1016/j.forsciint.2018.04.055,2804200674,,0,031-872-123-976-197; 116-798-937-864-169; 117-605-535-046-57X,5,true,,green 085-666-602-084-614,KES - Semantic Representation and Integration of Digital Evidence,,2013,journal article,Procedia Computer Science,18770509,Elsevier BV,,Spyridon Dosis; Irvin Homem; Oliver Popov,"The ever-increasing complexity and sophistication of computer and network attacks challenge society's dependability on digital infrastructure. Digital investigations recover and reconstruct the digital trails of such events and may employ practices from various subfields (computer, network forensics), each with its own set of techniques and tools. Integration of evidence from heterogeneous sources of data (e.g. disk images, network packet captures, logs) is often a manual and time- consuming process relying significantly on the investigator's expertise. In this paper, we propose and develop an approach, based on the Semantic Web framework, for ontologically representing and integrating digital evidence. The presented approach enhances existing forensic analysis techniques by providing partial and eventually full automation of the investigative process.",22,,1266,1275,Forensic science; Network packet; Knowledge representation and reasoning; Information system; Semantic Web; Data science; Digital evidence; Computer science; Process (engineering); Network forensics; Dependability,,,,,https://doi.org/10.1016/j.procs.2013.09.214 https://dblp.uni-trier.de/db/conf/kes/kes2013.html#DosisHP13 https://core.ac.uk/display/82030201 http://su.diva-portal.org/smash/record.jsf?pid=diva2%3A676278 http://www.sciencedirect.com/science/article/pii/S1877050913010077 http://www.diva-portal.org/smash/record.jsf?pid=diva2:676278 https://www.sciencedirect.com/science/article/pii/S1877050913010077 https://core.ac.uk/download/pdf/82030201.pdf,http://dx.doi.org/10.1016/j.procs.2013.09.214,,10.1016/j.procs.2013.09.214,1985620065,,0,006-008-915-210-060; 011-051-740-313-213; 014-012-834-363-307; 019-831-293-743-518; 024-559-797-435-528; 024-735-069-822-749; 030-758-631-051-726; 033-877-222-136-260; 038-793-093-462-716; 061-549-181-856-861; 085-958-650-852-408; 104-758-205-558-797; 132-081-686-366-385; 134-927-490-231-285; 178-883-713-153-793; 180-327-460-336-608; 184-948-841-629-735,18,true,,gold 085-688-325-132-346,Y-STR analysis of digital and/or penile penetration cases with no detected spermatozoa.,2014-10-23,2014,journal article,Forensic science international. Genetics,18780326; 18724973,Elsevier Ireland Ltd,Netherlands,Andrew McDonald; Emma Jones; Jennie Lewis; Paula O’Rourke,,15,,84,89,Penetration (firestop); Andrology; Y-STR; Sperm; Sexual assault; Biology,AmpFlSTR(®) Yfiler(®); Forensic science; Penetration; Sexual assault; Sperm Elution(©); Y-STR,"Chromosomes, Human, Y; Coitus; DNA/isolation & purification; Fingers; Forensic Genetics; Humans; Male; Microsatellite Repeats/genetics; Sex Offenses; Spermatozoa/cytology",DNA,,https://www.ncbi.nlm.nih.gov/pubmed/25458926 https://www.sciencedirect.com/science/article/pii/S1872497314002312,http://dx.doi.org/10.1016/j.fsigen.2014.10.015,25458926,10.1016/j.fsigen.2014.10.015,2120525547,,0,033-577-716-335-02X; 040-216-240-465-100; 042-812-528-704-805; 047-729-883-364-926; 055-662-399-612-736; 058-249-020-911-214; 067-979-076-844-955; 069-841-346-439-433; 072-710-213-303-709; 116-691-395-333-223,25,false,, 085-701-545-219-906,Repeatability and reproducibility of earprint acquisition.,,2008,journal article,Journal of forensic sciences,00221198; 15564029,Wiley-Blackwell,United States,Ivo Alberink; Arnout C.C. Ruifrok,"For all forensic disciplines dealing with identification -- e.g., of glass, tool marks, fibers, faces, fingers, handwriting, speakers -- in which manual (subjective, nonautomated) processes play a role, operator dependencies are relevant. With respect to earprint identification, in the period 2002-2005, the Forensic Ear Identification research project collected a database of 1229 donors, three prints per ear, and laid down a ""best practice"" for print acquisition. Repeatability and reproducibility aspects of the print acquisition are tested. The study suggests that different operators may acquire prints of differing quality, with equal error rates of the matching system ranging from 9% to 19%. Moreover, it turns out that ""matching"" earprints are more alike when taken in a consecutive row than when taken on separate occasions. This underlines the importance of (1) studying operator effects, (2) operator training, and (3) not gathering ""matching"" reference material at the same occasion.",53,2,325,330,Engineering; Repeatability; Matching (statistics); Biometrics; Handwriting; Quality (business); Speech recognition; Operator (computer programming); Identification (information); Reproducibility,,"Algorithms; Ear, External/anatomy & histology; Europe; Forensic Medicine/methods; Humans; Image Processing, Computer-Assisted; Reproducibility of Results",,,https://www.onlinelibrary.wiley.com/doi/abs/10.1111/j.1556-4029.2008.00663.x https://www.ncbi.nlm.nih.gov/pubmed/18366563 https://pubmed.ncbi.nlm.nih.gov/18366563/,http://dx.doi.org/10.1111/j.1556-4029.2008.00663.x,18366563,10.1111/j.1556-4029.2008.00663.x,2072701565,,0,014-367-686-446-268; 014-530-173-462-227; 037-926-621-329-418; 067-249-945-305-415; 089-961-115-838-172,15,false,, 086-248-055-124-414,Sample Preparation For Pesticide Analysis in A Forensic Toxicology Laboratory: A Review,2018-05-07,2018,journal article,Journal of Forensic Sciences and Digital Investigation,26377136,Northern California Open Access Publications,,,,,,27,45,Forensic toxicology; Toxicology; Computational biology; Biology; Chemistry; Chromatography,,,,,,http://dx.doi.org/10.29199/2637-7136/fsdi-101016,,10.29199/2637-7136/fsdi-101016,,,0,,0,true,cc-by,gold 086-307-917-965-338,Dental identification using digital images via computer network.,,2000,journal article,The American journal of forensic medicine and pathology,01957910; 1533404x,Lippincott Williams and Wilkins,United States,Masato Funayama; Jun Kanetake; Hidenori Ohara; Yumi Nakayama; Yasuhiro Aoki; Toshihiko Suzuki; Masayuki Nata; Sohtaro Mimasaka; Kou Takahashi,"Dental identification is a useful scientific method. In Japan, however, there are only a few forensic odontologists; moreover, until now, forensic dental services have only been offered by general dentists. These dentists may not be able to offer such forensic services during office time. For a quick comparison, the authors tried sending digital photos, taken with a 2-million-pixel digital camera, to dental offices via the Internet. If a dental office has Internet access, it is possible for dental charting to be sent directly to the autopsy room. Of course, digital images only provide the first outline. However, when antemortem dental records of the person in question are available at autopsy, a quick comparison can be made.",21,2,178,183,The Internet; Artificial intelligence; Digital camera; Image analysis; Dental Offices; Dental identification; Computer vision; Computer science; Digital image; Medical emergency; Identification (information); Internet access,,"Adult; Autopsy; Female; Forensic Anthropology/methods; Forensic Dentistry/methods; Humans; Image Processing, Computer-Assisted; Internet; Male; Middle Aged; Photography",,,https://www.ncbi.nlm.nih.gov/pubmed/10871136 https://tohoku.pure.elsevier.com/en/publications/dental-identification-using-digital-images-via-computer-network,http://dx.doi.org/10.1097/00000433-200006000-00017,10871136,10.1097/00000433-200006000-00017,2312463225,,0,,10,false,, 086-653-920-850-621,Dataset construction challenges for digital forensics,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Graeme Horsman; James R. Lyle,,38,,301264,,Work (electrical); Order (exchange); Best practice; Data science; Test (assessment); Task (project management); Field (computer science); Computer science; Reliability (statistics); Digital forensics,,,,,https://www.sciencedirect.com/science/article/abs/pii/S2666281721001815,http://dx.doi.org/10.1016/j.fsidi.2021.301264,,10.1016/j.fsidi.2021.301264,3193013883,,0,000-084-741-857-185; 004-652-388-189-304; 005-116-312-278-527; 006-933-430-647-14X; 009-512-003-529-193; 029-537-963-034-821; 030-178-593-043-926; 032-451-540-235-796; 032-994-506-285-854; 036-112-898-081-145; 043-542-316-129-203; 044-914-554-944-765; 047-386-524-667-691; 054-004-313-233-495; 068-278-591-200-390; 075-950-021-558-098; 077-287-216-746-675; 079-608-144-438-784; 082-851-209-039-37X; 089-925-000-216-519; 104-153-499-789-950; 132-772-069-558-472; 134-927-490-231-285; 152-714-058-023-050; 159-513-941-346-557,5,false,, 086-705-619-249-214,Preparing for the age of the digital palimpsest,2012-08-31,2012,journal article,Library Hi Tech,07378831,Emerald,United Kingdom,Jason Bengtson,"Purpose – The purpose of this paper is to define and stimulate interest in a potential new specialty within the information science field.Design/methodology/approach – Sources on digital forensics and digital archeology are discussed, and the topic is examined critically from a librarian perspective. The author examines the possibility of an information science specialty pursuing the reconstruction of “digital palimpsests”, where data that later becomes historically significant has been deleted or partially overwritten on digital media.Findings – The author identifies at least one key incident (the NASA moon landing tapes) where this potential field has already started to be defined. Examination of the literature indicates that emphasis in data recovery to this point has centered on the needs of law enforcement and disaster recovery rather than on the considerations of manuscript preservation, recovery, and curation. The author emphasizes the need for librarians to bring together the skills of multiple fi...",30,3,513,522,Information technology; Disaster recovery; Data management; Data science; Law enforcement; Computer science; Digital library; Engineering ethics; Digital forensics; Data curation; Information science,,,,,https://dblp.uni-trier.de/db/journals/lht/lht30.html#Bengtson12 https://www.emerald.com/insight/content/doi/10.1108/07378831211266636/full/html https://core.ac.uk/display/33381889 https://www.emeraldinsight.com/doi/abs/10.1108/07378831211266636 https://core.ac.uk/download/33381889.pdf,http://dx.doi.org/10.1108/07378831211266636,,10.1108/07378831211266636,2042602410,,0,016-983-559-523-04X; 040-576-453-232-211; 044-834-247-088-997; 074-933-143-629-826; 081-056-635-953-384; 113-785-550-473-284; 149-881-992-194-908,2,true,,green 086-941-914-029-374,Prelim iii - Contents List,,2020,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,33,,300991,300991,Information retrieval,,,,,,http://dx.doi.org/10.1016/s2666-2817(20)30225-0,,10.1016/s2666-2817(20)30225-0,,,0,,0,true,,bronze 087-342-951-350-054,The Kodak Syndrome: Risks and Opportunities Created by Decentralization of Forensic Capabilities.,2018-07-05,2018,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Eoghan Casey; Olivier Ribaux; Claude Roux,"Forensic science laboratories are being challenged by the expanding decentralization of forensic capabilities, particularly for digital traces. This study recommends laboratories undertake digital transformations to capitalize on the decentralization movement, develop a more comprehensive understanding of crime and security-relevant problems, and play a more central role in problem-solving collaboratively with law enforcement organizations and other stakeholders. A framework for the bilateral transfer of information and knowledge is proposed to magnify the impact of forensic science laboratories on abating crime, strengthening security, and reinforcing the criminal justice system. To accomplish digital transformations, laboratories require personnel with different expertise, including investigative reasoning, knowledge codification, data analytics, and forensic intelligence. Ultimately, this study encourages managers, educators, researchers, and policymakers to look beyond the usefulness of forensic results for solving individual investigations, and to realize the value of combined forensic knowledge and intelligence for developing broader strategies to deal with crime in digitalized society.",64,1,127,136,Criminal justice; Decentralization; Forensic science; Business; Value (ethics); Law enforcement; Forensic intelligence; Engineering ethics; Big data; Problem-oriented policing,Kodak syndrome; big data analysis; forensic intelligence; forensic science; intelligence-led strategies; knowledge management; problem-oriented policing; systematic knowledge reuse,,,,https://europepmc.org/abstract/MED/29975983 https://onlinelibrary.wiley.com/doi/abs/10.1111/1556-4029.13849 https://dialnet.unirioja.es/servlet/articulo?codigo=6794302 https://serval.unil.ch/notice/serval:BIB_9B5E17694E54 https://www.ncbi.nlm.nih.gov/pubmed/29975983 https://pubmed.ncbi.nlm.nih.gov/29975983/,http://dx.doi.org/10.1111/1556-4029.13849,29975983,10.1111/1556-4029.13849,2821019258,,0,010-639-953-090-261; 010-951-806-548-929; 011-524-509-576-368; 014-466-907-950-761; 015-168-306-989-485; 016-609-780-602-820; 017-176-620-267-416; 019-791-004-497-741; 022-358-546-399-506; 031-872-123-976-197; 035-031-257-128-045; 042-944-602-727-47X; 053-522-882-246-521; 056-524-463-164-028; 058-052-081-943-595; 063-257-284-816-393; 067-307-278-774-180; 094-295-279-676-447; 094-768-593-308-084; 106-728-147-372-737; 117-605-535-046-57X; 121-670-778-513-502; 125-939-677-745-616; 142-790-196-752-819,38,false,, 087-397-133-140-694,User profiles’ image clustering for digital investigations,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Rahimeh Rouhi; Flavio Bertini; Danilo Montesi,,38,,301171,301182,Artificial intelligence; Fingerprint (computing); User profile; Computer vision; Computer science; Upload; Cluster analysis; Image sensor; Robustness (computer science); Process (computing); Noise (video),,,,,https://cris.unibo.it/handle/11585/821989 https://www.sciencedirect.com/science/article/pii/S2666281721000792,http://dx.doi.org/10.1016/j.fsidi.2021.301171,,10.1016/j.fsidi.2021.301171,3170536019,,0,000-430-308-353-938; 002-538-193-234-353; 003-499-035-235-702; 004-217-703-126-930; 008-384-425-921-152; 010-311-623-215-974; 011-291-694-500-933; 014-079-494-188-077; 014-294-779-021-838; 021-855-372-553-446; 030-530-604-211-746; 033-075-931-413-596; 035-500-720-397-693; 044-664-700-815-752; 044-914-554-944-765; 048-824-767-205-356; 051-588-498-518-528; 053-632-452-824-069; 053-781-637-768-867; 054-777-831-929-040; 056-817-850-080-480; 058-291-488-141-824; 060-983-905-471-058; 062-592-881-065-956; 064-189-799-565-495; 064-592-809-689-329; 064-761-037-934-965; 067-919-751-107-162; 069-160-876-625-897; 070-260-337-691-258; 070-308-945-671-285; 070-828-284-928-176; 083-097-133-928-799; 083-156-585-547-951; 083-340-435-542-637; 084-206-568-186-081; 087-814-787-159-954; 096-592-471-467-147; 102-940-527-584-734; 105-504-797-118-862; 105-505-966-086-414; 105-723-921-283-372; 107-839-639-045-183; 111-982-110-211-707; 117-846-648-589-367; 117-912-294-389-01X; 122-486-087-773-74X; 122-912-050-557-786; 134-907-746-310-369; 135-488-578-174-515; 145-276-382-101-056; 160-499-752-557-23X; 160-685-922-453-820; 160-937-548-077-316; 162-509-740-935-570; 163-087-900-197-431; 166-183-210-534-575; 174-243-332-690-623; 179-480-901-640-193; 180-088-494-514-913; 181-302-353-649-364; 184-897-235-429-285; 189-275-677-101-573,1,false,, 087-597-848-929-337,Awareness and Understanding of Computer Forensics in the Ghana Legal System,2014-03-26,2014,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,Michael AdjeiFrempong; Kamal Kant Hiran,"era of Technological age also called digital age, most transactions are conducted electronically. This modern-day paradigm makes way for the possibility of harmful unanticipated information security breaches of both civil and criminal nature. However, there is a tremendous knowledge gap in the legal system concerning computer/digital forensics with respect to digital evidence. Courtroom and Legal issues relevant to computer/digital forensics are extensive and differs with respect to procedural evidence rules that ensure reliability of the evidence so produced in the court of law for fair adjudication. Electronic evidence is very fundamental to the successful handling of cases related to such information security breaches. This paper on the impact of awareness and understanding of computer/digital forensics in the Ghana Legal System especially Judges, with regards to the electronic evidence, laws and jurisprudence covered twenty (20) superior Judges. The findings revealed a gap between the Judges and issues on computer forensics which if not looked at may create problems in relation to the influx of computer related crimes.",89,20,54,59,Internet privacy; Civil law (legal system); Adjudication; Relation (database); Digital evidence; Computer security; Computer science; Information security; Computer forensics; Jurisprudence; Digital forensics,,,,,http://ui.adsabs.harvard.edu/abs/2014IJCA...89t..54A/abstract https://research.ijcaonline.org/volume89/number20/pxc3894640.pdf https://www.ijcaonline.org/archives/volume89/number20/15752-4640,http://dx.doi.org/10.5120/15752-4640,,10.5120/15752-4640,2165564806,,0,048-645-419-219-088; 052-320-348-197-350; 086-103-316-225-727; 087-348-393-776-727; 098-323-575-091-372; 119-385-247-230-234; 124-038-348-278-602; 140-402-089-386-286; 199-172-967-270-034,3,true,,bronze 087-687-602-305-742,Making it Work! Adding a Digital Forensics Unit to Your Laboratory,,2022,journal article,Forensic Science International: Synergy,2589871x,Elsevier BV,,Tracy Walraven,,4,,100256,100256,Digital forensics; Unit (ring theory); Computer science; Computer forensics; Work (physics); Digital evidence; Data science,,,,,,http://dx.doi.org/10.1016/j.fsisyn.2022.100256,,10.1016/j.fsisyn.2022.100256,,,0,,0,true,"CC BY, CC BY-NC-ND",gold 088-037-666-536-509,Managing the current growth in demand for digital forensic services within the metropolitan police service,,2010,journal article,Science & Justice,13550306,Elsevier BV,United Kingdom,M. Stokes; C. Summers,,50,1,43,,Internet privacy; Business; Current (fluid); Metropolitan police; Service (business); Computer security; Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S1355030609002354,http://dx.doi.org/10.1016/j.scijus.2009.11.063,,10.1016/j.scijus.2009.11.063,1589576045,,0,,0,false,, 088-309-759-208-842,Computer forensics and records management – compatible disciplines,2006-05-01,2006,journal article,Records Management Journal,09565698,Emerald,United Kingdom,Alastair Irons,"Purpose – To explore the meaning, methods and techniques associated with the subject of computer forensics and consider the implications of computer forensics for records managers and recordkeeping.Design/methodology/approach – Critically analyses the principles of computer forensics in the context of records characteristics – authenticity, reliability, integrity and usability – and the UK Association of Chief Police Officers (ACPO) principles and procedures for the collection of digital evidence.Findings – The disciplines of records management and computer forensics are potentially mutually compatible. Computer forensics allows for identification of incidents, gathering of evidence, analysis of evidence and potentially recovery of records. Records managers can utilise computer forensics principles to positively enhance records management and have valuable knowledge and expertise to share with their computer forensics colleagues; e.g. metadata expertise, functional requirements for electronic records mana...",16,2,102,112,Data security; Engineering; World Wide Web; Usability; Data science; Context (language use); Computer forensics; Functional requirement; Identification (information); Digital forensics; Metadata,,,,,https://sure.sunderland.ac.uk/1650/ https://core.ac.uk/display/5892089 https://www.emerald.com/insight/content/doi/10.1108/09565690610677463/full/html https://www.emeraldinsight.com/doi/abs/10.1108/09565690610677463,http://dx.doi.org/10.1108/09565690610677463,,10.1108/09565690610677463,2145935757,,0,004-916-146-042-728; 005-864-457-096-322; 007-790-059-029-953; 012-806-731-619-471; 020-195-870-396-757; 066-701-921-148-891; 114-662-274-536-758; 121-140-777-839-393; 128-811-038-738-475; 140-730-540-277-926; 199-745-676-923-766,11,false,, 088-597-318-557-237,Towards the Development of a Test Corpus of Digital Objects for the Evaluation of File Format Identification Tools and Signatures,2012-03-09,2012,journal article,International Journal of Digital Curation,17468256,Edinburgh University Library,,Andrew Fetherston; Tim Gollins,"The digital preservation community currently utilises a number of tools and automated processes to identify and validate digital objects. The identification of digital objects is a vital first step in their long-term preservation, but the results returned by tools used for this purpose are lacking in transparency, and are not easily tested or verified. This paper suggests that a test corpus of digital objects is one way of providing this verification and validation, ultimately improving trust in the tools, and providing further stimulus to their development. Issues to be considered are outlined, and attention is drawn to particular examples of existing digital corpora which could conceivably provide a useable framework or starting point for our own communities needs. This paper does not seek to answer all questions in this area, but merely attempts to set out areas for consideration in any next step that is taken.",7,1,16,26,World Wide Web; Information retrieval; Digital preservation; Computer science; File format,,,,,http://www.ijdc.net/index.php/ijdc/article/download/201/270 http://www.ijdc.net/index.php/ijdc/article/view/201 https://core.ac.uk/display/91041797 https://dblp.uni-trier.de/db/journals/ijdc/ijdc7.html#FetherstonG12 https://dx.doi.org/10.2218/ijdc.v7i1.211 http://dx.doi.org/10.2218/ijdc.v7i1.211 https://core.ac.uk/download/pdf/162675717.pdf,http://dx.doi.org/10.2218/ijdc.v7i1.211,,10.2218/ijdc.v7i1.211,2132913549,,0,004-652-388-189-304; 084-728-993-518-663; 120-072-322-429-12X,2,true,cc-by,gold 089-380-540-556-832,Forensic Inspection of Sensitive User Data and Artifacts from Smartwatch Wearable Devices,2019-06-10,2019,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Nicole R. Odom; Jesse M. Lindmar; John Hirt; Josh Brunty,"Wearable devices allow users the ability to leave mobile phones behind while remaining connected to the digital world; however, this creates challenges in the examination, acquisition, identification, and analysis of probative data. This preliminary research aims to provide an enhanced understanding of where sensitive user data and forensic artifacts are stored on smartwatch wearable devices, both through utilization as a connected and standalone device. It also provides a methodology for the forensically sound acquisition of data from a standalone smartwatch wearable device. The results identify significant amounts of data on the SamsungTM Gear S3 Frontier, greater than that stored on the companion mobile phone. An Apple Watch Series 3 manual examination method which produces native screenshots was identified; however, the companion mobile phone was found to store the greatest amount of data. As a result of this research, a data extraction tool for the SamsungTM Gear S3 Frontier was created.",64,6,1673,1686,Human–computer interaction; Wearable computer; Mobile phone; Data extraction; Smartwatch; Computer science; Data recovery; Wearable technology; Mobile device forensics; Digital forensics,data recovery; digital forensics; forensic artifacts; forensic science; internet of things; mobile forensics; smartwatch wearable devices,Artifacts; Computer Security; Forensic Sciences; Humans; Information Storage and Retrieval; Smartphone; Wearable Electronic Devices,,,https://dialnet.unirioja.es/servlet/articulo?codigo=7121547 https://www.ncbi.nlm.nih.gov/pubmed/31674672 https://onlinelibrary.wiley.com/doi/abs/10.1111/1556-4029.14109,http://dx.doi.org/10.1111/1556-4029.14109,31674672,10.1111/1556-4029.14109,2952607946,,0,000-281-222-726-856; 019-698-064-288-240; 024-225-776-970-302; 025-549-978-484-457; 051-558-525-539-694; 084-452-444-628-355,15,false,, 089-419-432-581-673,A Survey on Digital Forensics in Internet of Things,,2020,journal article,IEEE Internet of Things Journal,23274662; 23722541,Institute of Electrical and Electronics Engineers (IEEE),United States,Jianwei Hou; Yuewei Li; Jingyang Yu; Wenchang Shi,"Internet of Things (IoT) is increasingly permeating peoples’ lives, gradually revolutionizing our way of life. Due to the tight connection between people and IoT, now civil and criminal investigations or internal probes must take IoT into account. From the forensic perspective, the IoT environment contains a rich set of artifacts that could benefit investigations, while the forensic investigation in IoT paradigm may have to alter to accommodate characteristics of IoT. Therefore, in this article, we analyze the impact of IoT on digital forensics and systematize the research efforts made by previous researchers from 2010 to 2018. We sketch the landscape of IoT forensics and examine the state of IoT forensics under a 3-D framework. The 3-D framework consists of a temporal dimension, a spatial dimension, and a technical dimension. The temporal dimension walks through the standard digital forensic process while the spatial dimension explores where to identify sources of evidence in IoT environment. These two dimensions attempt to provide principles and guidelines for standardizing digital investigations in the context of IoT. The technical dimension guides a way to the exploration of tools and techniques to ensure the enforcement of digital forensics in the ever-evolving IoT environment. Put together, we present a holistic overview of digital forensics in IoT. We also highlight open issues and outline promising suggestions to inspire future study.",7,1,1,15,Criminal investigation; Forensic science; Data science; Digital forensic process; Dimension (data warehouse); Enforcement; Context (language use); Computer science; Cloud computing; Digital forensics,,,,National Natural Science Foundation of China; Natural Science Foundation of Beijing Municipality; National High-tech Research and Development Program,https://doi.org/10.1109/JIOT.2019.2940713 https://ieeexplore.ieee.org/document/8831387 https://dblp.uni-trier.de/db/journals/iotj/iotj7.html#HouLYS20,http://dx.doi.org/10.1109/jiot.2019.2940713,,10.1109/jiot.2019.2940713,2972531726,,0,000-725-081-314-034; 001-507-239-208-313; 002-927-911-483-709; 003-029-378-692-335; 004-611-464-291-773; 004-750-320-878-25X; 005-630-640-664-939; 006-138-917-123-177; 009-747-804-607-928; 010-084-169-561-57X; 011-630-171-346-715; 013-013-001-967-18X; 015-239-387-608-474; 016-526-859-340-786; 018-362-897-068-538; 018-552-581-098-658; 019-360-393-097-72X; 019-698-064-288-240; 019-912-316-692-552; 020-957-111-490-556; 024-462-843-796-80X; 024-846-790-183-200; 026-764-618-898-849; 027-267-966-628-617; 029-164-830-214-360; 029-934-518-651-564; 030-433-196-114-204; 035-417-616-880-24X; 035-859-793-614-223; 039-999-270-718-277; 042-767-661-429-064; 046-143-775-958-052; 046-357-391-782-442; 047-125-525-662-686; 047-492-292-707-760; 047-782-671-230-742; 049-871-818-826-194; 050-834-040-747-382; 053-242-584-326-535; 054-888-023-799-702; 055-811-656-615-740; 055-996-756-667-066; 056-205-328-777-528; 057-980-219-952-36X; 058-156-586-882-704; 060-294-953-084-788; 064-733-456-850-063; 065-322-784-190-818; 065-654-832-541-493; 066-807-833-482-350; 067-749-619-156-62X; 068-520-918-599-405; 072-070-835-286-795; 080-792-696-174-439; 081-067-855-263-493; 081-833-857-658-915; 083-134-473-348-002; 083-232-193-192-073; 084-021-092-390-691; 084-312-028-371-525; 084-452-444-628-355; 091-339-033-909-469; 091-540-399-535-662; 092-827-935-965-207; 093-117-308-515-186; 103-681-534-784-390; 106-885-306-836-498; 107-942-544-689-539; 112-181-239-331-730; 118-008-780-783-558; 125-166-157-303-425; 125-682-509-275-554; 128-603-018-655-844; 134-072-762-404-610; 134-300-841-995-57X; 138-518-998-385-929; 144-184-475-249-995; 156-972-666-676-888; 167-751-222-897-487; 170-516-749-420-456; 172-334-035-729-772; 175-905-531-284-640,41,false,, 089-695-854-791-989,A method and a case study for the selection of the best available tool for mobile device forensics using decision analysis,,2016,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Shahzad Saleem; Oliver Popov; Ibrahim Baggili,"The omnipresence of mobile devices (or small scale digital devices - SSDD) and more importantly the utility of their associated applications for our daily activities, which range from financial transactions to learning, and from entertainment to distributed social presence, create an abundance of digital evidence for each individual. Some of the evidence may be a result of illegal activities that need to be identified, understood and eventually prevented in the future. There are numerous tools for acquiring and analyzing digital evidence extracted from mobile devices. The diversity of SSDDs, types of evidence generated and the number of tools used to uncover them posit a rather complex and challenging problem of selecting the best available tool for the extraction and the subsequent analysis of the evidence gathered from a specific digital device. Failing to select the best tool may easily lead to incomplete and or improper extraction, which eventually may violate the integrity of the digital evidence and diminish its probative value. Moreover, the compromised evidence may result in erroneous analysis, incorrect interpretation, and wrong conclusions which may eventually compromise the right of a fair trial. Hence, a digital forensics investigator has to deal with the complex decision problem from the very start of the investigative process called preparatory phase. The problem could be addressed and possibly solved by using multi criteria decision analysis. The performance of the tool for extracting a specific type of digital evidence, and the relevance of that type of digital evidence to the investigative problem are the two central factors for selecting the best available tool, which we advocate in our work. In this paper we explain the method used and showcase a case study by evaluating two tools using two mobile devices to demonstrate the utility of our proposed approach. The results indicated that XRY (Alt1) dominates UFED (Alt2) for most of the cases after balancing the requirements for both performance and relevance.",16,,S55,S64,Multiple-criteria decision analysis; Decision problem; Data mining; Relevance (law); Decision analysis; Mobile device; Data science; Digital evidence; Computer science; Mobile device forensics; Digital forensics,,,,,https://www.sciencedirect.com/science/article/abs/pii/S1742287616300020 https://core.ac.uk/display/82434076 https://digitalcommons.newhaven.edu/electricalcomputerengineering-facpubs/52/ https://doi.org/10.1016/j.diin.2016.01.008 https://dl.acm.org/doi/10.1016/j.diin.2016.01.008 https://www.sciencedirect.com/science/article/pii/S1742287616300020 http://www.diva-portal.org/smash/record.jsf?pid=diva2:806835 http://digitalcommons.newhaven.edu/cgi/viewcontent.cgi?article=1052&context=electricalcomputerengineering-facpubs https://core.ac.uk/download/pdf/82434076.pdf,http://dx.doi.org/10.1016/j.diin.2016.01.008,,10.1016/j.diin.2016.01.008,638340418,,0,002-633-335-300-244; 013-428-450-747-670; 021-274-925-963-096; 024-696-473-476-447; 050-956-099-345-084; 067-545-085-582-063; 088-133-805-930-451; 092-879-045-056-401; 094-587-727-381-031; 098-955-499-112-850; 114-090-829-194-843; 132-942-022-718-554; 153-061-100-745-489; 154-092-845-528-110; 159-094-605-033-945; 192-810-463-153-431,12,true,cc-by-nc-nd,hybrid 090-632-465-818-866,IoT network traffic analysis: Opportunities and challenges for forensic investigators?,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Tina Wu; Frank Breitinger; Stephen Niemann,,38,,301123,,Data science; Traffic analysis; Computer science; Internet of Things,,,,,https://dfrws.org/presentation/iot-network-traffic-analysis-opportunities-and-challenges-for-forensic-investigators/ https://dfrws.org/wp-content/uploads/2021/01/2021_APAC_paper-iot_network_traffic_analysis_opportunities_and_challenges_for_forensic_investigators.pdf,http://dx.doi.org/10.1016/j.fsidi.2021.301123,,10.1016/j.fsidi.2021.301123,3121924025,,0,012-448-745-874-660; 039-999-270-718-277; 086-481-092-658-846; 088-553-642-323-93X; 097-939-114-561-254,0,true,cc-by-nc-nd,hybrid 090-980-715-883-62X,Trustworthy Digital Forensics in the Cloud,,2016,journal article,Computer,00189162,Institute of Electrical and Electronics Engineers (IEEE),United States,Shams Zawoad; Ragib Hasan,"Digital forensics is used to help investigate cybercrime. Because of its characteristics and rapid adoption, the cloud requires its own form of forensics, which must be reliable. The authors have developed the Open Cloud Forensics (OCF) model and FECloud architecture, which would enable effective cloud forensics.",49,3,78,81,Forensic science; Trustworthiness; Cloud computing security; Cybercrime; Cloud forensics; Computer security; Computer science; Cloud computing; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/computer/computer49.html#ZawoadH16 http://ieeexplore.ieee.org/document/7433340/ https://ieeexplore.ieee.org/document/7433340/ https://www.computer.org/csdl/magazine/co/2016/03/mco2016030078/13rRUwwslxu https://doi.org/10.1109/MC.2016.89,http://dx.doi.org/10.1109/mc.2016.89,,10.1109/mc.2016.89,2303474472,,0,042-458-608-620-40X; 059-655-726-130-137; 088-909-224-066-322; 118-008-780-783-558; 125-817-456-334-439; 132-342-259-584-364,14,false,, 091-023-567-376-838,Image super-resolution for outdoor digital forensics. Usability and legal aspects,,2018,journal article,Computers in Industry,01663615,Elsevier BV,Netherlands,Salvador Villena; Miguel Vega; Javier Mateos; Duska Rosenberg; Fionn Murtagh; Rafael Molina; Aggelos K. Katsaggelos,"Abstract Digital Forensics encompasses the recovery and investigation of data, images, and recordings found in digital devices in order to provide evidence in the court of law. This paper is devoted to the assessment of digital evidence which requires not only an understanding of the scientific technique that leads to improved quality of surveillance video recordings, but also of the legal principles behind it. Emphasis is given on the special treatment of image processing in terms of its handling and explanation that would be acceptable in a court of law. In this context, we propose a variational Bayesian approach to multiple-image super-resolution based on Super-Gaussian prior models that automatically enhances the quality of outdoor video recordings and estimates all the model parameters while preserving the authenticity, credibility and reliability of video data as digital evidence. The proposed methodology is validated both quantitatively and visually on synthetic videos generated from single images and real-life videos and applied to a real-life case of damages and stealing in a private property.",98,,34,47,Scientific technique; Usability; Information retrieval; Context (language use); Credibility; Digital evidence; Computer science; Reliability (statistics); Digital forensics; Image processing,,,,Spanish Ministry of Economy and Competitiveness; Spanish Ministry of Economy and Competitiveness; Department of Energy; ONR; NSF IDEAS; DARPA ReImagine,https://pure.hud.ac.uk/ws/files/12535345/Villena_et_al_Image_super_resolution_for_outdoor_digital_forensics_ComputersInIndustry_Feb2018.pdf https://pure.hud.ac.uk/en/publications/image-super-resolution-for-outdoor-digital-forensics-usability-an https://doi.org/10.1016/j.compind.2018.02.004 https://www.scholars.northwestern.edu/en/publications/image-super-resolution-for-outdoor-digital-forensics-usability-an https://www.sciencedirect.com/science/article/pii/S0166361517306358 https://core.ac.uk/download/237460172.pdf,http://dx.doi.org/10.1016/j.compind.2018.02.004,,10.1016/j.compind.2018.02.004,2793898592,,0,000-324-540-227-902; 001-178-621-720-858; 001-608-908-883-352; 004-117-785-181-23X; 004-723-592-537-121; 004-958-229-709-669; 008-215-658-916-277; 010-037-102-410-599; 011-306-628-371-474; 012-016-836-079-639; 013-491-140-953-577; 014-062-160-299-737; 014-862-525-960-731; 016-134-735-893-511; 016-915-586-462-874; 017-815-064-018-299; 019-831-293-743-518; 019-894-616-057-466; 021-496-988-088-093; 023-644-847-408-449; 025-384-948-751-89X; 035-262-200-703-668; 038-668-970-194-854; 038-985-210-009-934; 041-012-928-243-751; 043-730-176-138-623; 044-400-889-251-073; 046-053-037-634-196; 057-967-268-379-508; 062-196-740-572-626; 063-532-297-436-449; 064-280-057-388-079; 065-589-633-902-745; 066-173-954-451-110; 069-544-521-452-109; 071-908-933-643-362; 072-245-054-212-971; 074-006-536-890-200; 075-555-480-212-889; 079-806-321-227-601; 081-015-835-254-704; 082-218-851-096-466; 082-850-619-602-511; 084-009-578-367-756; 084-031-713-999-539; 085-379-403-609-164; 089-769-185-795-841; 091-048-622-639-68X; 091-107-184-025-131; 092-098-207-359-420; 095-563-603-963-814; 095-907-092-910-396; 101-330-403-204-926; 111-710-523-428-585; 114-599-315-973-390; 114-651-231-792-299; 114-791-371-428-899; 116-398-928-717-260; 128-199-263-914-537; 134-927-490-231-285; 142-043-074-549-848; 165-101-260-380-991; 173-034-553-635-460,4,true,cc-by-nc-nd,green 091-454-341-452-919,A Study of Minimization of Cybercrimes by the Implementation of Cyber Forensics Tool Kit,2022-03-31,2022,journal article,International Journal for Research in Applied Science and Engineering Technology,23219653,International Journal for Research in Applied Science and Engineering Technology (IJRASET),,Danish Rehman; Er. Jasdeep Singh,"Abstract: To identify whether the victim has committed a crime, both criminal and forensic investigators need the help of digital forensics. As a result, an investigator must use an adequate, accurate, affordable, and trustworthy cyber forensic tool for forensics investigations related to crimes. Digital forensics, also known as computer forensic analysis, computer analysis, and computer inspection, is the practise of painstakingly evaluating computer media (hard discs, diskettes, cassettes, and so on) for evidence. A comprehensive inspection by a qualified examiner may result in the reorganisation of a computer's operations. It's a step-by-step technique for investigating crimes utilising digital evidence employing scientific methodologies and processes. While many amazing solutions have been developed to protect our information communication networks, these devices require much more frequent updating. Individuals with both research abilities and a professional grasp of how the internet works, as well as those who know how to examine PC network security problems, are in great demand. This gives an attack-resistant investigative framework, as well as understanding of how the internet operates and the skills to assess cybercrime apparatus to discover who, what, when, why, and how. The study's findings led to the development of Digital Forensic tool solutions for investigators looking to expand their capabilities in using these tools. Keywords: Forensic, Cybercrime, investigation, toolkit",10,3,1335,1345,Computer forensics; Cybercrime; Digital forensics; Computer science; Digital evidence; Network forensics; The Internet; Computer security; GRASP; Trustworthiness; Criminal investigation; Data science; Internet privacy; World Wide Web; Software engineering; Criminology; Psychology,,,,,,http://dx.doi.org/10.22214/ijraset.2022.40867,,10.22214/ijraset.2022.40867,,,0,,0,true,,gold 091-696-315-070-855,Explainable digital forensics AI: Towards mitigating distrust in AI-based digital forensics analysis using interpretable models,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Abiodun A. Solanke,"The present level of skepticism expressed by courts, legal practitioners, and the general public over Artificial Intelligence (AI) based digital evidence extraction techniques has been observed, and understandably so. Concerns have been raised about closed-box AI models’ transparency and their suitability for use in digital evidence mining. While AI models are firmly rooted in mathematical, statistical, and computational theories, the argument has centered on their explainability and understandability, particularly in terms of how they arrive at certain conclusions. This paper examines the issues with closed-box models; the goals; and methods of explainability/interpretability. Most importantly, recommendations for interpretable AI-based digital forensics (DF) investigation are proposed.",42,,301403,301403,Interpretability; Skepticism; Distrust; Transparency (behavior); Computer science; Digital forensics; Argument (complex analysis); Digital evidence; Artificial intelligence; Data science; Computer security; Psychology; Epistemology; Psychotherapist; Philosophy; Biochemistry; Chemistry,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301403,,10.1016/j.fsidi.2022.301403,,,0,000-360-120-513-679; 000-449-131-016-986; 003-015-137-620-130; 003-026-991-770-318; 003-360-732-233-044; 007-392-723-533-629; 018-822-581-363-834; 023-063-388-078-229; 025-060-592-657-50X; 025-415-725-538-599; 033-344-357-648-800; 036-563-037-799-705; 044-638-092-768-171; 052-696-669-041-854; 053-071-743-643-578; 054-547-096-894-887; 054-819-045-052-125; 055-502-988-908-057; 055-807-088-113-125; 059-149-073-001-124; 059-786-079-109-47X; 065-001-388-509-041; 066-042-439-542-747; 070-717-463-864-129; 071-860-959-402-137; 083-839-515-156-421; 086-574-303-424-904; 087-323-490-534-091; 094-581-471-765-72X; 102-225-149-387-887; 109-466-069-133-838; 123-498-859-171-509; 124-191-464-465-991; 125-939-677-745-616; 139-924-660-355-079; 153-221-094-384-217; 189-305-371-273-262,0,true,,hybrid 091-892-724-900-950,"Amino acid profiling from fingerprints, a novel methodology using UPLC-MS",,2017,journal article,Analytical Methods,17599660; 17599679,Royal Society of Chemistry (RSC),United Kingdom,Ward van Helmond; Chris Jan Kuijpers; Elise Van Diejen; Jincey Spiering; Brent Maagdelijn; Marcel de Puit,"Fingermark evidence is extensively used in criminal investigations. Hence, there have been many investigations into the chemical compounds present in fingerprint deposits. In this technical note we describe the analysis of non-derivatised amino acid profiles obtained from fingerprints. We used UPLC with an amide stationary phase and subsequent detection using a triple quadrupole MS/MS and TOF-MS detector. The linearity (R2) was satisfactory for both MS detectors (>0.98 for all amino acids in the case of the triple quadrupole MS/MS and >0.96 in the case of the TOF-MS). Although the triple quadrupole had a higher sensitivity for most amino acids, both mass spectrometers were able to retrieve the amino acid profiles of fingerprints from 19 donors. Between these profiles, only minor differences were observed between the separate analyses on the different mass analyzers, mainly in L-proline, L-lysine and L-phenylalanine abundances. Surprisingly, the mean RSD in amino acid profiles from duplicate fingerprints turned out to be lower for the TOF-MS (18.6% ± 6.6% vs. 13.2% ± 3.8%), as did the mean RSD of the intraday reproducibility (8.22% ± 1.94% vs. 9.54% ± 3.07%).",9,38,5697,5702,Analytical chemistry; Mass spectrometry; Triple quadrupole mass spectrometer; High-performance liquid chromatography; Chemistry; Amide; Stationary phase; Uplc ms ms; Chromatography; Amino acid; Reproducibility,,,,Nederlandse Organisatie voor Wetenschappelijk Onderzoek,https://hbo-kennisbank.nl/resolve/hogeschoolamsterdam/eyJoIjogImRmN2Q4MTFlZTJlMTFiMmE5MzI3Y2FmYzI5MzVhNGI1OThhZGYzYzA5MGY4NWI3OWY5NzRhNzA1MjI0YWM0OTciLCAidSI6ICJodHRwczovL3B1cmUuaHZhLm5sL3dzL2ZpbGVzLzQzNzU1NDgvYzdheTAxNjAzZC5wZGYifQ== https://repository.tudelft.nl/islandora/object/uuid%3A07404946-1ecd-4d88-927b-a644e2c8b7b1/datastream/OBJ/download http://pubs.rsc.org/en/content/articlelanding/2017/ay/c7ay01603d https://pure.hva.nl/ws/files/4375548/c7ay01603d.pdf http://pubs.rsc.org/en/content/articlehtml/2017/ay/c7ay01603d?page=search https://repository.tudelft.nl/islandora/object/uuid%3A07404946-1ecd-4d88-927b-a644e2c8b7b1 http://xlink.rsc.org/?DOI=C7AY01603D https://research.tudelft.nl/en/publications/amino-acid-profiling-from-fingerprints-a-novel-methodology-using- https://www.narcis.nl/publication/RecordID/oai%3Atudelft.nl%3Auuid%3A07404946-1ecd-4d88-927b-a644e2c8b7b1 https://pubs.rsc.org/en/content/articlepdf/2017/ay/c7ay01603d https://pubs.rsc.org/en/content/articlelanding/2017/ay/c7ay01603d,http://dx.doi.org/10.1039/c7ay01603d,,10.1039/c7ay01603d,2743386892,,0,017-475-159-795-447; 019-313-265-814-008; 022-926-871-843-546; 027-173-519-900-466; 031-577-843-822-493; 033-835-248-545-913; 041-608-181-694-032; 045-830-532-366-077; 053-551-505-531-143; 067-030-451-906-169; 067-255-920-027-544; 092-849-252-226-832; 094-496-234-007-777,17,true,cc-by-nc,hybrid 091-934-600-025-114,Likelihood ratio method for the interpretation of iPhone health app data in digital forensics,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,M. (Marouschka) Vink; M.J. (Marjan) Sjerps; A. (Abdul) Boztas; J.P. (Jan Peter) van Zandwijk,,41,,301389,301389,Computer science; Digital forensics; Field (mathematics); Sensitivity (control systems); Interpretation (philosophy); Data mining; Calibration; Statistics; Computer security; Mathematics; Engineering; Electronic engineering; Pure mathematics; Programming language,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301389,,10.1016/j.fsidi.2022.301389,,,0,005-715-450-998-72X; 007-199-278-427-478; 008-733-402-517-23X; 009-678-795-915-075; 011-085-215-003-810; 012-693-115-841-628; 014-961-689-075-177; 016-886-829-561-085; 022-896-866-582-746; 023-766-437-138-867; 025-010-654-468-777; 034-180-335-918-441; 036-237-056-429-781; 039-158-280-114-980; 046-919-141-111-859; 048-011-673-789-33X; 054-126-844-371-315; 056-029-289-343-419; 058-506-041-812-981; 059-216-039-945-794; 066-193-937-643-661; 074-695-197-880-37X; 084-264-375-349-935; 091-016-585-939-256; 096-986-617-825-552; 103-760-328-285-801; 109-526-829-068-859; 116-473-356-479-419; 119-261-946-266-987; 120-388-714-246-243; 121-368-250-344-993; 138-332-223-612-203,0,false,, 092-046-002-157-986,Digital Forensic Logistics: The Basics of Scientific Theory,,2021,journal article,International Journal of Law and Society,26401894,Science Publishing Group,,Sergey Zuev; Dmitry Bakhteev,"Investigations of complex crimes with digital evidence increasingly require the use of modern digital devices and computer programs. Working with big data involves the accumulation, processing, and analysis of forensic information for further algorithmization and modeling of investigative actions, as well as the automation of the organizational activities of investigators. The article substantiates the need for the use of digital forensic logistics to optimize information flows and build the most effective analytical human and computer processing, not excluding the use of artificial intelligence systems. Digital forensic logistics is a sub-branch of digital forensics in the collection, identification, storage, verification, and analysis of data, as well as the generation of electronic evidence for evidence in court. The article provides the main directions of digital forensic logistics, including the logistics of evidence in criminal cases; logistics of the general organization of crime investigation; logistics planning (selection of tools and methods of investigation); logistics of putting forward versions of events; logistics of decisions in criminal matters. It is argued that the efficiency of the entire system will largely depend on the establishment of information flows and the prioritization of tasks. Quality work requires the improvement of applied digital technologies capable of providing the necessary algorithms of the evidentiary process. The use of special software, including the use of artificial intelligence systems, is becoming increasingly relevant. The logistics of making decisions in criminal cases ideally represents an electronic assistant, endowed with artificial intelligence or in the form of a special computer program, capable, based on the determination of the forensic significance of the obtained digital information (electronic evidence), to offer the investigator solutions that can change the course of the investigation and transfer the entire information system in a new state.",4,2,83,,Automation; Information system; Data science; Digital evidence; Computer science; Process (engineering); State (computer science); Big data; Identification (information); Digital forensics,,,,,https://article.sciencepublishinggroup.com/pdf/10.11648.j.ijls.20210402.14.pdf https://membership.sciencepublishinggroup.com/journal/paperinfo?journalid=306&doi=10.11648/j.ijls.20210402.14 http://www.sciencepublishinggroup.com/journal/paperinfo?journalid=306&doi=10.11648/j.ijls.20210402.14,http://dx.doi.org/10.11648/j.ijls.20210402.14,,10.11648/j.ijls.20210402.14,3163211431,,0,,0,true,cc-by,gold 092-223-657-810-83X,THE INTEGRATION OF DIGITAL FORENSICS SCIENCE AND ISLAMIC EVIDENCE LAWS,2019-12-15,2019,journal article,"International Journal of Law, Government and Communication",01281763,Global Academic Excellence (M) Sdn Bhd,,Mohamad Khairudin Kallil; Ahmad Che Yaacob,"Evidence is anything that tends to prove or disprove a fact at issue in legal action. It involves the offering of alleged proof through testimony or objects at court proceedings to persuade the trier of fact about an issue in dispute. Islamic Evidence Law is a body of rules that helps to govern conduct and determines what will admissible in certain legal proceedings and trials. In the proceeding that involves digital evidence, the court will consider whether the digital evidence is admissible or inadmissible depends on the requirements of admissibility stated in law statutes in force and the existence of any Standard Operating Procedure (SOP). Under section 33 of the Syariah Court (Federal Territories) Evidence Act or other Syariah Evidence Enactments, digital evidence is subjected to be authenticated by the digital forensics experts. In digital forensics, the process of identification, preservation, collection, analysis, and presentation is the main procedures contained in any Standard Operating Procedure (SOP) of any digital forensics services. The court will ensure that this procedure can maintain the authenticity and the originality of the evidence especially on the issue of expert qualification, a chain of custody and analysis part. Thus, digital forensics is integrated with the Islamic law of evidence to maintain justice in delivering judgment. Therefore, this article examines the standard requirement of the admissibility of digital evidence by digital forensic methodology by using the qualitative approach on the analysis of articles, books, law statutes documents and law cases. The results show that the need for amendment of Syariah Court Evidence and Procedure statutes and the necessity of the existence of Standard Operating Procedure (SOP) on digital evidence in the Syariah courts as a guideline for judges, lawyers and parties involved.",4,17,61,70,Law; Computer science; Islam; Digital forensics,,,,,http://dx.doi.org/10.35631/ijlgc.417006,http://dx.doi.org/10.35631/ijlgc.417006,,10.35631/ijlgc.417006,2999286939,,0,,1,true,,gold 092-305-346-660-757,An Overview of 3D Printing in Forensic Science: The Tangible Third-Dimension,2020-05-13,2020,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Rachael M. Carew; David Errickson,"There has been a rapid development and utilization of three-dimensional (3D) printing technologies in engineering, health care, and dentistry. Like many technologies in overlapping disciplines, these techniques have proved to be useful and hence incorporated into the forensic sciences. Therefore, this paper describes how the potential of using 3D printing is being recognized within the various sub-disciplines of forensic science and suggests areas for future applications. For instance, the application can create a permanent record of an object or scene that can be used as demonstrative evidence, preserving the integrity of the actual object or scene. Likewise, 3D printing can help with the visualization of evidential spatial relationships within a scene and increase the understanding of complex terminology within a courtroom. However, while the application of 3D printing to forensic science is beneficial, currently there is limited research demonstrated in the literature and a lack of reporting skewing the visibility of the applications. Therefore, this article highlights the need to create good practice for 3D printing across the forensic science process, the need to develop accurate and admissible 3D printed models while exploring the techniques, accuracy and bias within the courtroom, and calls for the alignment of future research and agendas perhaps in the form of a specialist working group.",65,5,1752,1760,Data science; Dimension (data warehouse); Visibility (geometry); Visualization; Computer science; Process (engineering); 3D printing; Terminology; Object (computer science); Demonstrative evidence,3D imaging; 3D printing; additive manufacturing; courtroom; evidence reconstruction; forensic science; interpretation,,,,http://europepmc.org/article/MED/32401341 https://discovery.ucl.ac.uk/id/eprint/10095709/ https://www.ncbi.nlm.nih.gov/pubmed/32401341 https://dspace.lib.cranfield.ac.uk/handle/1826/15474 https://pubmed.ncbi.nlm.nih.gov/32401341/ https://www.scilit.net/article/b45fe8f99ec225457e152f1b19d9a9fc https://onlinelibrary.wiley.com/doi/full/10.1111/1556-4029.14442,http://dx.doi.org/10.1111/1556-4029.14442,32401341,10.1111/1556-4029.14442,3024562486,,0,000-888-174-251-366; 002-372-825-803-01X; 002-757-600-778-594; 003-065-924-063-359; 003-278-228-480-094; 006-036-539-291-490; 008-506-174-322-456; 012-284-250-841-340; 012-509-983-163-123; 013-064-849-740-249; 015-123-182-480-038; 017-771-114-812-721; 022-384-106-784-151; 024-416-092-966-777; 025-795-404-962-994; 029-074-883-182-893; 030-324-007-987-987; 032-306-447-977-364; 036-403-879-718-18X; 042-141-941-221-562; 046-302-937-018-123; 047-485-222-477-01X; 047-857-403-343-875; 053-525-211-728-03X; 065-573-984-313-778; 068-449-654-554-836; 070-162-352-490-885; 073-823-317-995-663; 073-933-049-544-280; 078-112-101-635-74X; 078-380-583-447-952; 080-002-979-766-70X; 081-002-886-134-478; 094-157-424-165-470; 102-404-606-341-483; 103-841-948-557-307; 105-957-127-123-920; 118-868-650-625-180; 122-232-540-191-933; 135-210-456-615-128; 138-112-529-065-72X; 139-576-971-424-977; 139-729-629-797-721; 178-456-110-092-227; 194-228-860-188-338,21,true,cc-by,hybrid 092-461-654-973-880,Studying the Documentation Process in Digital Forensic Investigation Frameworks/ Models,,2015,journal article,Journal of Al-Nahrain University-Science,18145922; 25190881,Al-Nahrain Journal of Science,,Talib M. Jawad Abbas,"With the proliferation of the digital crime around the world, there are numerous and diverse digital forensic investigation models for driving digital investigation processes. Now more than ever, it must be a criminal investigation to obtain digital evidence which wouldn't be admissible in court. Therefore, digital forensic investigation should be implemented successfully, and there are a number of significant steps that should be taken into account. Each step and phase produces documents that are essential in understanding how the investigation process is built.The aim of this paper is to study models/ frameworks for the digital forensic investigation over a time period of ten years and find out the degree and level of attention to the process of documentation. This paper also includes definitions and descriptions of the basic and core concepts that the frameworks/ models use.",18,4,153,162,Criminal investigation; Systems engineering; Data science; Digital evidence; Digital forensic investigation; Computer science; Process (engineering); Documentation; Digital forensics,,,,,https://anjs.edu.iq/index.php/anjs/article/download/299/1699 https://anjs.edu.iq/index.php/anjs/article/view/299 https://www.iasj.net/iasj?func=fulltext&aId=107014,http://dx.doi.org/10.22401/jnus.18.4.21,,10.22401/jnus.18.4.21,2588900731,,0,006-708-208-065-949; 010-086-703-646-194; 019-698-064-288-240; 032-697-093-668-898; 109-482-615-363-500; 170-299-458-679-224; 170-346-482-774-626; 190-065-821-748-92X; 199-172-967-270-034; 199-745-676-923-766,1,false,, 092-506-898-894-624,Towards a Comprehensive Ontology Based-Investigation for Digital Forensics Cybercrime,2015-10-31,2015,journal article,International Journal on Communications Antenna and Propagation (IRECAP),25332929; 20395086,Praise Worthy Prize,Italy,Amir Mohamed Talib; Fahad Omar Alomary,"Cyber physical attacks against information and computer systems are a tangible and dangerous threat that requires an effective response. In this paper, digital forensics cybercrime ontology is proposed to collect, examine, analyze, prepare, acquire and preserve evidence of computer crimes of digital forensics in cyberspace. The power of the proposed ontology is to determine the difficulties of association of the digital crime types and their collection evidences in digital forensics cases. Ontology development has consists three main steps, 1) domain, purpose and scope setting, 2) important terms acquisition, classes and class hierarchy conceptualization and 3) instances creation. Digital forensics and ontology are two normally unrelated topics. Ontology congruent to this paper is method that will help to better understanding and defining terms of digital forensics. Our proposed digital forensics cybercrime ontology resulting from the Protege has a total of 180 classes, 179 subclasses and 84 instances regarding digital forensics crime cases.",5,5,263,268,World Wide Web; Ontology (information science); Protégé; Cybercrime; Cyberspace; Class hierarchy; Computer science; Computer forensics; Digital forensics; Conceptualization,,,,,https://www.praiseworthyprize.org/jsm/index.php?journal=irecap&page=article&op=view&path%5B%5D=17418,http://dx.doi.org/10.15866/irecap.v5i5.6112,,10.15866/irecap.v5i5.6112,2283915427,,0,014-384-963-565-48X; 095-437-078-101-003; 105-646-650-348-579; 160-810-323-281-473; 181-072-396-769-365; 187-367-973-147-176,8,false,, 092-689-605-929-980,Forensic Investigation and Analysis of User Input Information in Business Application,2016-07-14,2016,journal article,Indian Journal of Science and Technology,09745645; 09746846,Indian Society for Education and Environment,India,Funminiyi Olajide; Sanjay Misra,"Objectives: This paper investigates the amount of user input that can be recovered from the volatile memory of Windows computer systems while an application is still running. Additionally, an investigation into temporal, functional analysis and event reconstruction of user input activities in business application is discussed and reported upon. Methods/Analysis: Forensically, relevant user information is suitable for an evidentiary purpose. Therefore, the qualitative assessment of user input on commonly used windows-based applications is presented. Findings: In this research, detailed emphasis has been laid on the quality of evidence recovered from the allocated line numbers of the application memory. This approach describes the process of securing digital evidence for investigators. The research uncovers the process of analysing the forensically relevant data recovered from Windows applications. The investigation comprises of the following; dumping of memory, data extraction, strings evidence strings conversion, result finding of the evidence and also, reconstructing the extracted evidence of user information. Applications/Improvement: This research focuses on digital forensic investigation of digital images captured and the memory analysis of user information on using some very popular windows based applications. It is aimed that this may become part of forensic analysis in digital investigations.",9,25,1,7,Data mining; Information retrieval; Data extraction; User information; Digital evidence; Digital forensic investigation; Computer science; Digital image; Process (computing),,,,,https://indjst.org/articles/forensic-investigation-and-analysis-of-user-input-information-in-business-application http://www.i-scholar.in/index.php/indjst/article/view/134916,http://dx.doi.org/10.17485/ijst/2016/v9i25/95211,,10.17485/ijst/2016/v9i25/95211,2485980299,,0,016-536-694-167-514; 018-332-230-662-937; 030-121-862-351-330; 036-093-518-856-770; 046-189-168-242-806; 052-994-844-746-276; 064-388-382-052-645; 076-095-910-918-008; 078-598-867-814-365; 130-093-060-692-651; 141-182-449-198-823; 149-010-267-691-537; 155-874-936-366-797; 170-957-355-705-751,2,true,,gold 092-765-349-680-750,The different types of reports produced in digital forensic investigations.,2021-06-27,2021,journal article,Science & justice : journal of the Forensic Science Society,18764452; 13550306,Forensic Science Society,United Kingdom,Graeme Horsman,"Abstract The importance of ensuring the results of any digital forensic (DF) examination are effectively communicated cannot be understated. In most cases, this communication will be done via written report, yet despite this there is arguably limited best practice guidance available which is specific for this field in regards to report construction. Poor reporting practices in DF are likely to undermine the reliability of evidence provided across this field, where there is a need for formalised guidance regarding the requirements for effective DF report construction; this should not be a task left solely to each individual practitioner to determine without instruction. For this, the field of DF should look to the wider forensic community and the existing work in this area for support. In line with many other ‘traditional’ forensic science types, a DF practitioner can be commissioned to report in one of three ways - ‘technical’, ‘investigative’ or ‘evaluative’, where each reporting type maintains a specific purpose and interpretative-context, determined by the examination workflow undertaken by a practitioner following client instruction. This work draws upon guidance set out in fundamental forensic science reporting literature in order to describe each reporting type in turn, outlining their scope, content and construction requirements in an attempt to provide support for the DF field.",61,5,627,634,Set (psychology); Work (electrical); Workflow; Best practice; Task (project management); Scope (project management); Field (computer science); Computer science; Engineering ethics; Digital forensics,Digital forensics; Evaluation; Investigation; Report,Forensic Medicine; Forensic Sciences/methods; Humans; Reproducibility of Results,,,https://www.sciencedirect.com/science/article/abs/pii/S1355030621000927,http://dx.doi.org/10.1016/j.scijus.2021.06.009,34482943,10.1016/j.scijus.2021.06.009,3176874416,,0,001-691-716-197-657; 002-062-018-830-835; 004-934-589-759-348; 005-715-450-998-72X; 007-702-479-851-182; 009-512-003-529-193; 010-061-391-662-193; 036-597-490-099-438; 038-668-970-194-854; 040-450-549-766-994; 041-365-301-128-075; 061-560-419-292-70X; 064-376-774-486-022; 067-505-834-517-458; 071-616-341-516-576; 101-549-415-202-81X; 102-243-142-344-71X; 121-830-022-805-361; 133-397-275-695-990; 142-790-196-752-819; 143-959-640-326-451; 173-145-269-859-717,6,false,, 092-878-184-623-918,Digital video forensics: a comprehensive survey,,2019,journal article,International Journal of Advanced Intelligence Paradigms,17550386; 17550394,Inderscience Enterprises Ltd,United Kingdom,Mohammad A. Alsmirat; Ruba A. Al-Hussien; Walaa Al-Sarayrah; Yaser Jararweh; Morad Etier,"The wide spread of digital devices and tools causes the simplification of the manipulation of any digital multimedia content. As a result, digital videos and photos are not trusted to be used as evidence in courts. This fact raises the need for finding techniques to ensure the authenticity of digital multimedia contents. Experts in digital-signal processing conducted a huge number of researches to find new strategies, using digital forensics, to verify digital evidences and trace its origins. The aim of this paper is to collect and provide the definitions of the main concepts related to media forensics. Also, this paper gives an overview of the different techniques used in media forensics concentrating on video forensics. Furthermore, it classifies the work done in the field according to the main technique used in the proposed solution approach.",15,3,437,456,Double compression; Digital multimedia; Image forensics; Digital video; Field (computer science); Computer science; Multimedia; TRACE (psycholinguistics); Data compression; Digital forensics,,,,,https://www.inderscienceonline.com/doi/abs/10.1504/IJAIP.2020.106040 https://dblp.uni-trier.de/db/journals/ijaip/ijaip15.html#AlsmiratAAJE20 http://dblp.uni-trier.de/db/journals/ijaip/ijaip15.html#AlsmiratAAJE20 https://doi.org/10.1504/IJAIP.2020.106040,https://www.inderscienceonline.com/doi/abs/10.1504/IJAIP.2020.106040,,,2810653893,,0,,3,false,, 092-928-929-272-765,Attacking contrast enhancement forensics in digital images,2014-01-08,2014,journal article,Science China Information Sciences,1674733x; 18691919; 18622836; 10092757,Springer Science and Business Media LLC,China,Gang Cao; Yao Zhao; Rongrong Ni; Huawei Tian; Lifang Yu,"Currently, plenty of digital image forensic techniques have been proposed and used as diagnostic tools. It is urgent and significant to assess the reliability of such techniques applied in practical scenarios. In this paper, we investigate the security of existing digital image contrast enhancement (CE) forensic algorithms. From the standpoint of attackers, we propose two types of attacks, CE trace hiding attack and CE trace forging attack, which could invalidate the forensic detector and fabricate two types of forensic errors, respectively. The CE trace hiding attack is implemented by integrating local random dithering into the design of pixel value mapping. The CE trace forging attack is proposed by modifying the gray level histogram of a target pixel region to counterfeit peak/gap artifacts. Such trace forging attack is typically applied to create sophisticated composite images which could deceive the prior CE-based composition detectors. Extensive experimental results demonstrate the efficacy of our proposed CE anti-forensic schemes.",57,5,1,13,Artificial intelligence; Pixel; Computer vision; Computer security; Computer science; Digital image; Histogram; Dither; TRACE (psycholinguistics); Composite image filter; Digital forensics; Detector,,,,,https://dblp.uni-trier.de/db/journals/chinaf/chinaf57.html#CaoZNTY14 https://www.mysciencework.com/publication/show/attacking-contrast-enhancement-forensics-digital-images-8a01093d https://link.springer.com/article/10.1007/s11432-013-4928-0,http://dx.doi.org/10.1007/s11432-013-4928-0,,10.1007/s11432-013-4928-0,1999957465,,0,006-920-289-715-189; 017-853-220-883-872; 023-663-565-874-023; 024-793-013-451-77X; 025-410-507-609-210; 031-876-583-652-183; 041-796-476-831-023; 042-074-416-956-571; 044-860-657-165-931; 045-950-922-443-150; 067-192-574-918-890; 067-303-718-151-959; 076-527-439-347-165; 079-709-089-662-769; 108-896-114-392-841; 112-054-275-475-385; 122-164-403-164-304; 136-713-989-335-402; 151-133-832-890-443; 152-785-842-665-362; 166-999-959-693-14X; 171-914-226-715-693; 180-552-666-228-97X,15,false,, 093-284-648-437-717,Toward a cost–benefit analysis of quality programs in digital forensic laboratories in the United States,2021-05-13,2021,journal article,WIREs Forensic Science,25739468,Wiley,,Nicolas Hughes; Erika Ziemak; Carisa Martinez; Peter Stout,,4,1,,,Risk analysis (engineering); Cost–benefit analysis; Business; Quality management system; Quality (business); Digital forensics,,,,,https://wires.onlinelibrary.wiley.com/doi/epdf/10.1002/wfs2.1422 https://onlinelibrary.wiley.com/doi/abs/10.1002/wfs2.1422,http://dx.doi.org/10.1002/wfs2.1422,,10.1002/wfs2.1422,3161430366,,0,005-715-450-998-72X; 022-996-739-162-018; 030-178-593-043-926; 047-386-524-667-691; 050-417-440-823-404; 054-004-313-233-495; 067-924-117-018-660; 067-938-325-014-282; 094-749-198-770-814; 115-128-752-794-126; 131-807-250-432-699; 140-373-143-221-23X; 145-833-224-516-423,1,false,, 093-622-612-071-02X,"Maintaining Continuity of Evidence Within Forensic Labs Through Training, Accreditation, and Developing Better Digital Communication with Investigators and Prosecutors",,2019,journal article,Forensic Science International: Synergy,2589871x,Elsevier BV,,Stephen Campbell,,1,,S4,,Forensic science; Psychology; Training (civil); Medical education; Accreditation,,,,,https://api.elsevier.com/content/article/PII:S2589871X19300075?httpAccept=text/xml,http://dx.doi.org/10.1016/j.fsisyn.2019.02.006,,10.1016/j.fsisyn.2019.02.006,2933984024,,0,,0,true,"CC BY, CC BY-NC-ND",gold 093-958-345-280-896,Welcome to the 9th annual DFRWS Europe conference!,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,40,,301356,301356,Political science; History,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301356,,10.1016/j.fsidi.2022.301356,,,0,,0,true,,bronze 094-295-279-676-447,Investigation Delayed Is Justice Denied: Proposals for Expediting Forensic Examinations of Digital Evidence*,2009-09-16,2009,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Eoghan Casey; Monique Mattei Ferraro; Lam Nguyen,"There is an urgent need to reduce the growing backlog of forensic examinations in Digital Forensics Laboratories (DFLs). Currently, DFLs routinely create forensic duplicates and perform in-depth forensic examinations of all submitted media. This approach is rapidly becoming untenable as more cases involve increasing quantities of digital evidence. A more efficient and effective three-tiered strategy for performing forensic examinations will enable DFLs to produce useful results in a timely manner at different phases of an investigation, and will reduce unnecessary expenditure of resources on less serious matters. The three levels of forensic examination are described along with practical examples and suitable tools. Realizing that this is not simply a technical problem, we address the need to update training and establish thresholds in DFLs. Threshold considerations include the likelihood of missing exculpatory evidence and seriousness of the offense. We conclude with the implications of scaling forensic examinations to the investigation.",54,6,1353,1364,Risk analysis (engineering); Expediting; Forensic science; Justice (ethics); Seriousness; Legal case; Exculpatory evidence; Digital evidence; Computer security; Medicine; Digital forensics,,"Computers; Efficiency, Organizational; Forensic Medicine/ethics; Humans; Information Storage and Retrieval; Software",,,https://pubmed.ncbi.nlm.nih.gov/19761473/ https://dialnet.unirioja.es/servlet/articulo?codigo=7623754 https://onlinelibrary.wiley.com/doi/full/10.1111/j.1556-4029.2009.01150.x https://www.ncbi.nlm.nih.gov/pubmed/19761473,http://dx.doi.org/10.1111/j.1556-4029.2009.01150.x,19761473,10.1111/j.1556-4029.2009.01150.x,2087888801,,0,019-827-009-556-765; 020-944-423-224-895; 038-668-970-194-854; 046-527-367-793-765; 047-630-600-014-492; 063-257-284-816-393; 069-256-079-734-894; 117-239-595-156-183; 123-381-842-499-453; 199-745-676-923-766,62,false,, 094-554-538-037-791,Application of droplet digital PCR method for DNA methylation-based age prediction from saliva.,2021-11-17,2021,journal article,"Legal medicine (Tokyo, Japan)",18734162; 13446223,Elsevier,Netherlands,Min Ho Lee; Jung Hee Hwang; Ki Min Seong; Jeong Jin Ahn; Seung Jun Kim; Seung Yong Hwang; Si-Keun Lim,,54,,101992,,Gene; CpG site; DNA methylation; Nucleic acid; Bisulfite; Methylation; Digital polymerase chain reaction; Genetics; DNA; Biology,Age prediction; DNA methylation; Droplet Digital PCR; Forensic science; Saliva,"Child, Preschool; CpG Islands/genetics; DNA Methylation; Forensic Genetics; Genetic Markers; Humans; Polymerase Chain Reaction; Saliva",Genetic Markers,,https://www.sciencedirect.com/science/article/pii/S1344622321001565 https://pubmed.ncbi.nlm.nih.gov/34814096/ https://www.ncbi.nlm.nih.gov/pubmed/34814096,http://dx.doi.org/10.1016/j.legalmed.2021.101992,34814096,10.1016/j.legalmed.2021.101992,3212405386,,0,002-870-654-523-022; 003-440-788-933-293; 010-969-646-137-105; 013-286-906-370-496; 020-179-515-956-318; 025-559-167-584-998; 029-852-741-217-34X; 033-438-843-783-343; 038-068-235-777-333; 047-508-653-005-507; 047-828-114-686-166; 075-255-587-657-138; 076-875-986-109-343; 086-374-352-695-819; 087-936-040-856-423; 095-179-565-370-607; 113-962-973-673-127; 120-853-173-614-525; 125-767-553-634-668; 194-961-861-881-523,0,false,, 094-631-307-774-31X,Digital Forensics Specialist Group,2014-01-28,2014,journal article,Digital Evidence and Electronic Signature Law Review,20548508; 17564611,School of Advanced Study,Spain,Miranda Moore; Simon Iveson,Miranda Moore QC and Simon Iveson give a personal impression on the work of the Digital Forensics Specialist Group and the difficulties in identifying appropriately qualified digital evidence specialists in the UK Index words: Digital Forensics Specialist Group; Forensic Science Regulator; Forensic Science Advisory Council; accreditation; digital forensic methods; validation,9,0,,,Psychology; Index (publishing); Digital evidence; Computer security; Medical education; Computer forensics; Accreditation; Digital forensics,,,,,https://journals.sas.ac.uk/deeslr/article/view/1995 https://sas-space.sas.ac.uk/5418/,http://dx.doi.org/10.14296/deeslr.v9i0.1995,,10.14296/deeslr.v9i0.1995,2150343373,,0,,0,true,cc-by-nc-nd,hybrid 095-686-500-915-641,Application of Adobe® Photoshop® CC 2018 for Identifying the Source of HP® Color Laser Printouts,2019-06-15,2019,journal article,Arab Journal of Forensic Sciences & Forensic Medicine,16586786; 16586794,Naif Arab University for Security Sciences,,Ahmad S. Salim; Asmaa A. Abdall,"Abstract In today’s digital world, printer forensics is one of the most important disciplines to reveal the authenticity of printed documents and track criminals. Digital steganography is an advanced approach to secure color laser printing processes, but it cannot be applied to monochrome laser printers. Therefore, the identity of the machine used to print color questioned documents provides a valuable means for detecting forgery crimes in digital forensic labs and law enforcement agencies. Based on this, we introduced a new forensic method that unveils the steganography (hidden information) embedded in color laser printouts via an adopted preset in Adobe® Photoshop® CC 2018. This forensic tool can be applied as a nondestructive and indirect tool for image processing. In the present work, printing, scanning, extraction, and measurements for the embedded tracking dots of candidate color laser printouts were conducted. Thirty-five HP® color laser printers were selected with different and same models with different serial numbers and used to print a hundred color laser printouts. The defined coded dots matrix patterns that characterized the color laser machines of the HP® brand could clearly be determined. Therefore, this procedure could successfully be applied to distinguish between various color laser printouts printed by HP® printers with a variant serial number in digital forensic labs with a conclusive accuracy ratio attained to one hundred percent.",1,9,1164,1164,Steganography; Computer graphics (images); Monochrome; Laser printing; Adobe photoshop; Computer science; Laser; Digital forensics; Image processing,,,,,https://repository.nauss.edu.sa/handle/123456789/66175,http://dx.doi.org/10.26735/16586794.2019.002,,10.26735/16586794.2019.002,2944947099,,0,,0,true,cc-by-nc,gold 095-691-114-276-825,An integrated conceptual digital forensic framework for cloud computing,,2012,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Ben Martini; Kim-Kwang Raymond Choo,"Increasing interest in and use of cloud computing services presents both opportunities for criminal exploitation and challenges for law enforcement agencies (LEAs). For example, it is becoming easier for criminals to store incriminating files in the cloud computing environment but it may be extremely difficult for LEAs to seize these files as the latter could potentially be stored overseas. Two of the most widely used and accepted forensic frameworks – McKemmish (1999) and NIST (Kent et al., 2006) – are then reviewed to identify the required changes to current forensic practices needed to successfully conduct cloud computing investigations. We propose an integrated (iterative) conceptual digital forensic framework (based on McKemmish and NIST), which emphasises the differences in the preservation of forensic data and the collection of cloud computing data for forensic purposes. Cloud computing digital forensic issues are discussed within the context of this framework. Finally suggestions for future research are made to further examine this field and provide a library of digital forensic methodologies for the various cloud platforms and deployment models.",9,2,71,80,Software deployment; NIST; World Wide Web; Context (language use); Law enforcement; Digital evidence; Computer science; Computer forensics; Cloud computing; Digital forensics,,,,,http://www.sciencedirect.com/science/article/pii/S174228761200059X http://dx.doi.org/10.1016/j.diin.2012.07.001 https://www.sciencedirect.com/science/article/abs/pii/S174228761200059X https://www.infona.pl/resource/bwmeta1.element.elsevier-f6af9062-2002-39d9-b1f2-0f2f2e2559b0 https://doi.org/10.1016/j.diin.2012.07.001 https://fenix.tecnico.ulisboa.pt/downloadFile/563568428736506/Martini2012.pdf https://dblp.uni-trier.de/db/journals/di/di9.html#MartiniC12 https://dx.doi.org/10.1016/j.diin.2012.07.001,http://dx.doi.org/10.1016/j.diin.2012.07.001,,10.1016/j.diin.2012.07.001,2122122011,,1,004-753-336-309-960; 009-832-452-035-773; 014-851-281-685-88X; 019-698-064-288-240; 028-325-831-077-28X; 034-773-286-616-44X; 035-448-415-847-226; 043-386-830-253-686; 045-051-768-618-936; 052-152-063-024-042; 066-521-283-222-779; 073-545-912-961-452; 075-976-616-114-109; 093-158-141-304-133; 124-837-341-752-034; 134-927-490-231-285; 135-567-652-645-895; 155-855-942-114-621; 162-255-141-911-414; 167-109-432-601-404; 170-108-067-251-840,210,true,,green 095-847-865-864-079,Forensic Importance of SIM Cards as a Digital Evidence,,2016,journal article,Journal of Forensic Research,21577145,OMICS Publishing Group,,Ankit Srivastava; Pratik Vatsal,"Digital Forensics is a branch of Forensic Science pertaining to evidential articles of digital and electronic nature, of which mobile forensics is a major stream. A proliferation of handheld cellular devices and crimes involving mobile phones in the previous years has led to an enormous demand for specialists in the field of mobile forensics. The interesting part is that any mobile phone is incomplete without a SIM card. Therefore, SIM cards are the most common type of forensic evidence to be found in cases where handheld devices are involved, a SIM card is imperative, no matter the phone belongs to the normal mobile phones category or the satellitephones that contain an iDEN (Integrated Digital Enhanced Network) SIM. These cards are all around us and are now being integrated in driving licenses, debit cards, credit cards, ATM cards, Identity cards, etc. Digital Forensic Science is the skill of a forensic expert to apply the knowledge of computer sciences and the investigative measures for a legal cause requiring the analysis of digital evidences. It is the process of identifying, preserving, analyzing, and presenting digital evidence in a manner that is legally acceptable. The motive of the process is to preserve any digital evidence in its most original form while performing a planned analysis by identifying, collecting and validating the digital information for the purpose of reconstructing past events.",7,2,1,4,ATM card; Mobile device; Mobile phone; Digital evidence; Computer security; Subscriber identity module; Computer science; Computer forensics; Mobile device forensics; Digital forensics,,,,,https://www.hilarispublisher.com/open-access/forensic-importance-of-sim-cards-as-a-digital-evidence-2157-7145-1000322.pdf https://www.hilarispublisher.com/abstract/forensic-importance-of-sim-cards-as-a-digital-evidence-36355.html https://www.omicsonline.org/open-access/forensic-importance-of-sim-cards-as-a-digital-evidence-2157-7145-1000322.pdf https://www.mendeley.com/catalogue/e95a0629-9d1f-3e8a-9e81-8ab38be513b3/,http://dx.doi.org/10.4172/2157-7145.1000322,,10.4172/2157-7145.1000322,2516654580,,0,084-620-225-862-010; 132-234-095-047-23X; 155-784-834-321-193; 159-516-414-584-397,2,true,cc-by,hybrid 095-972-507-485-24X,Research of Blind Forensics Algorithm on Digital Image Tampering,2014-07-01,2014,journal article,Indonesian Journal of Electrical Engineering and Computer Science,25024752,,,Hongying Jin,"With rapid development of the internet and the multimedia technology, the digital images tampering with blind forensics technology become a new research direction in the study of information security. The technology is based on the digital image, and it is only to realize image integrity and authenticity of the certification, so it is widely used in the civil fields such as news reports, judicial proof and military fields such as military intelligence analysis. So the research of it has great significance and broad application prospect.  In the paper, the exploration and research on the paste tampering and splicing tampering with blind forensics algorithm are made. The blind forensics algorithm based on radial Krawtchouk copy-and-paste invariant moment is proposed. As the current copy-and-paste blind forensics algorithm has low localization accuracy, and poor robustness of the post-processing in solving the problem. Based on sliding window block matching method and the radial Krawtchouk invariant moment, it proposes a copy-and-paste tampering with blind forensics algorithm. The experimental results show that the algorithm can effectively locate the tampered area, and it has very strong robustness of the rotating operation, JPEG compression, Gaussian noise, etc.",12,7,5399,5407,The Internet; Algorithm; Forensic science; Computer science; Gaussian noise; Digital image; Invariant (mathematics); Information security; Robustness (computer science),,,,,http://ijeecs.iaescore.com/index.php/IJEECS/article/download/3643/1923 http://ijeecs.iaescore.com/index.php/IJEECS/article/view/3643 http://iaesjournal.com/online/index.php/TELKOMNIKA/article/view/5373,http://ijeecs.iaescore.com/index.php/IJEECS/article/view/3643,,,2003143664,,0,,2,false,, 095-973-013-007-891,Root morphology and anatomical patterns in forensic dental identification: a comparison of computer-aided identification with traditional forensic dental identification.,2010-11-02,2010,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Dirk T. Van Der Meer; Paula C. Brumit; Bruce A. Schrader; Stephen B Dove; David R. Senn,"An online forensic dental identification exercise was conducted involving 24 antemortem-postmortem (AM-PM) dental radiograph pairs from actual forensic identification cases. Images had been digitally cropped to remove coronal tooth structure and dental restorations. Volunteer forensic odontologists were passively recruited to compare the AM-PM dental radiographs online and conclude identification status using the guidelines for identification from the American Board of Forensic Odontology. The mean accuracy rate for identification was 86.0% (standard deviation 9.2%). The same radiograph pairs were compared using a digital imaging software algorithm, which generated a normalized coefficient of similarity for each pair. Twenty of the radiograph pairs generated a mean accuracy of 85.0%. Four of the pairs could not be used to generate a coefficient of similarity. Receiver operator curve and area under the curve statistical analysis confirmed good discrimination abilities of both methods (online exercise = 0.978; UT-ID index = 0.923) and Spearman's rank correlation coefficient analysis (0.683) indicated good correlation between the results of both methods. Computer-aided dental identification allows for an objective comparison of AM-PM radiographs and can be a useful tool to support a forensic dental identification conclusion.",55,6,1499,1503,Rank correlation; Digital imaging; Dentistry; Forensic dentistry; Dental radiography; Computer-aided; Forensic identification; Orthodontics; Receiver operating characteristic; Medicine; Identification (information),,"Forensic Dentistry; Health Personnel; Humans; Image Interpretation, Computer-Assisted; Internet; Observer Variation; Professional Competence; Radiographic Image Enhancement; Radiography, Dental; Radiography, Dental, Digital; Sensitivity and Specificity; Tooth Root/anatomy & histology",,,https://scholars.uthscsa.edu/en/publications/root-morphology-and-anatomical-patterns-in-forensic-dental-identi https://www.ncbi.nlm.nih.gov/pubmed/20629904 https://pubmed.ncbi.nlm.nih.gov/20629904/ https://europepmc.org/article/MED/20629904 https://uthscsa.influuent.utsystem.edu/en/publications/root-morphology-and-anatomical-patterns-in-forensic-dental-identi https://onlinelibrary.wiley.com/doi/full/10.1111/j.1556-4029.2010.01492.x,http://dx.doi.org/10.1111/j.1556-4029.2010.01492.x,20629904,10.1111/j.1556-4029.2010.01492.x,2142421599,,0,005-843-656-192-525; 009-001-256-990-75X; 011-538-945-617-135; 011-993-115-696-078; 018-634-496-195-495; 025-638-804-032-527; 041-323-543-835-80X; 071-617-496-196-540; 073-732-187-364-99X; 075-553-051-003-588; 098-363-976-033-794; 103-406-257-112-548; 107-909-266-296-422; 123-780-980-626-893; 130-781-276-719-576; 136-113-748-591-588,18,false,, 096-483-556-640-313,Editorial: The epic story of scientific interpretation in digital investigations,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Eoghan Casey,,34,,301063,,EPIC; Literature; Interpretation (philosophy); History,,,,,https://doi.org/10.1016/j.fsidi.2020.301063,http://dx.doi.org/10.1016/j.fsidi.2020.301063,,10.1016/j.fsidi.2020.301063,3091008978,,0,,0,false,, 096-655-404-701-429,Forensic analysis of newer TomTom devices,,2016,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Jens Elstner; Mark Roeloffs,,16,16,29,37,Embedded system; Data acquisition; Flash memory; Navigation system; Task (project management); First generation; Computer science; Process (engineering); Global Positioning System; Core dump,,,,,https://dblp.uni-trier.de/db/journals/di/di16.html#ElstnerR16 https://dl.acm.org/doi/10.1016/j.diin.2016.01.016 https://www.sciencedirect.com/science/article/pii/S174228761630010X#! https://www.infona.pl/resource/bwmeta1.element.elsevier-256ee770-72a8-3a3e-add9-0e0e37f2b710 https://www.sciencedirect.com/science/article/abs/pii/S174228761630010X https://dl.acm.org/citation.cfm?id=2906705,http://dx.doi.org/10.1016/j.diin.2016.01.016,,10.1016/j.diin.2016.01.016,2278766910,,0,010-127-508-296-844; 016-046-803-187-724; 017-815-064-018-299; 055-967-961-527-254; 066-807-833-482-350; 074-933-143-629-826; 084-021-092-390-691; 094-777-730-460-109,3,false,, 096-725-651-767-207,Empirical Evaluation of the Reliability of Photogrammetry Software in the Recovery of Three‐Dimensional Footwear Impressions,2020-05-14,2020,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Hannah J Larsen; Matthew R. Bennett,"This paper examines the reliability of Structure from Motion (SfM) photogrammetry as a tool in the capture of forensic footwear marks. This is applicable to photogrammetry freeware DigTrace but is equally relevant to other SfM solutions. SfM simply requires a digital camera, a scale bar, and a selection of oblique photographs of the trace in question taken at the scene. The output is a digital three-dimensional point cloud of the surface and any plastic trace thereon. The first section of this paper examines the reliability of photogrammetry to capture the same data when repeatedly used on one impression, while the second part assesses the impact of varying cameras. Using cloud to cloud comparisons that measure the distance between two-point clouds, we assess the variability between models. The results highlight how little variability is evident and therefore speak to the accuracy and consistency of such techniques in the capture of three-dimensional traces. Using this method, 3D footwear impressions can, in many substrates, be collected with a repeatability of 97% with any variation between models less than ~0.5 mm.",65,5,1722,1729,Photogrammetry; Point cloud; Structure from motion; Artificial intelligence; Software; Digital camera; Computer vision; Computer science; Reliability (statistics); Scale (map); Cloud computing,3D; digital evidence; evidence recovery; footwear impression; reliability testing; three-dimensional; validity,,,U.K. Natural Environment Research Council (NE/M021459/1),https://pubmed.ncbi.nlm.nih.gov/32407555/ https://www.onlinelibrary.wiley.com/doi/pdf/10.1111/1556-4029.14455 https://www.ncbi.nlm.nih.gov/pubmed/32407555 https://onlinelibrary.wiley.com/doi/full/10.1111/1556-4029.14455 http://eprints.bournemouth.ac.uk/34012/ https://europepmc.org/article/MED/32407555 https://core.ac.uk/download/323108559.pdf,http://dx.doi.org/10.1111/1556-4029.14455,32407555,10.1111/1556-4029.14455,3025651539,,0,013-821-112-405-687; 015-123-182-480-038; 039-684-326-140-341; 041-423-699-652-143; 047-348-590-414-767; 047-375-324-891-038; 052-010-126-807-228; 121-847-862-251-147; 134-425-675-466-849; 136-371-932-328-861; 170-502-821-118-095; 178-564-771-899-288,3,true,cc-by,hybrid 096-869-517-203-032,Development of latent fingermarks from rocks and stones.,2014-02-06,2014,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Ido Hefetz; Amit Cohen; Yaron Cohen; Alan Chaikovsky,"Since the beginning of recorded history, stones have been used in the commission of crimes due to their widespread availability. Stones can be used as a lethal weapon that sometimes might be the only evidence in a serious case. The common perception, even in professional fingermark circles, is that stones do not yield identifiable latent fingermarks. The authors of this research paper examined the feasibility of developing fingermarks from seven types of stones using three latent fingermark techniques: magnetic powder, cyanoacrylate fuming, and ninhydrin. The paper will demonstrate that by classifying stones and rocks according to their natural properties (porosity, permeability, and the nature of surface area), even application of the simplest development techniques can produce good results. In conclusion, chert and limestone yielded the most qualitative and quantitative results using magnetic powder. The time factor is also important in recovering latent fingermarks on stones and rocks.",59,5,1226,1230,Chemistry; Mineralogy; Time factor; Magnetic powder,cyanoacrylate; forensic science; latent fingerprints; ninhydrin; porosity; rock; stone,,,,https://onlinelibrary.wiley.com/doi/full/10.1111/1556-4029.12438 https://www.ncbi.nlm.nih.gov/pubmed/24502220 https://pubmed.ncbi.nlm.nih.gov/24502220/ http://onlinelibrary.wiley.com/doi/10.1111/1556-4029.12438/full https://onlinelibrary.wiley.com/doi/10.1111/1556-4029.12438/abstract,http://dx.doi.org/10.1111/1556-4029.12438,24502220,10.1111/1556-4029.12438,2170708397,,0,103-857-226-889-269; 140-609-017-992-859; 145-506-913-058-730; 191-603-041-523-836,3,false,, 096-899-831-703-200,Using a standard approach to the design of next generation e-Supply Chain Digital Forensic Readiness systems,,2016,journal article,SAIEE Africa Research Journal,19911696,Institute of Electrical and Electronics Engineers (IEEE),,D.J.E. Masvosvere; Hein S. Venter,"The internet has had a major impact on how information is shared within supply chains, and in commerce in general. This has resulted in the establishment of information systems such as e-supply chains (eSCs) amongst others which integrate the internet and other information and communications technology (ICT) with traditional business processes for the swift transmission of information between trading partners. Many organisations have reaped the benefits that come from adopting the eSC model, but have also faced the challenges with which it comes. One such major challenge is information security. With the current state of cybercrime, system developers are challenged with the task of developing cutting edge digital forensic readiness (DFR) systems that can keep up with current technological advancements, such as (eSCs). Hence, the problem addressed in this paper is the lack of a well-formulated DFR approach that can assist system developers in the development of e-supply chain digital forensic readiness systems. The main objective of such a system being that it must be able to provide law enforcement/digital forensic investigators (DFI) with forensically sound and readily available potential digital evidence that can expedite and support digital forensics incident response processes. This approach, if implemented can also prepare trading partners for security incidents that might take place, if not prevent them from occurring. Therefore, the work presented in this paper is aimed at providing a procedural approach that is based on digital forensics principles. This paper discusses the limitations of current system monitoring tools in relation to the kind of specialised DFR systems that are needed in the eSC environment and proposes an eSC-DFR process model and architectural design model that can lead to the development of next-generation eSC DFR systems. It is the view of the authors that the conclusions drawn from this paper can spearhead the development of cutting-edge next-generation digital forensic readiness systems, and bring attention to some of the shortcomings of current system monitoring tools.",107,2,104,120,Supply chain; The Internet; Risk analysis (engineering); Information system; System monitoring; Digital evidence; Computer science; Information security; Information and Communications Technology; Digital forensics,,,,,https://ieeexplore.ieee.org/document/8531546,http://dx.doi.org/10.23919/saiee.2016.8531546,,10.23919/saiee.2016.8531546,2903793168,,0,006-435-365-660-88X; 015-568-093-985-132; 019-831-293-743-518; 030-252-857-464-20X; 031-119-185-862-726; 036-436-057-429-275; 106-885-306-836-498; 160-562-609-354-05X; 172-491-030-512-776,5,true,"CC BY, CC BY-NC-ND",gold 096-993-850-376-090,Triage in Live Digital Forensic Analysis,2013-07-02,2013,journal article,The International Journal of Forensic Computer Science,18099807; 19807333,ABEAT - Associacao Brasileira de Especialistas em Alta Tecnologia,,Muhammad Shamraiz Bashir; M. A. Khan; Shaheed Zulfikar; Ali Bhutto,"Due to frequent use of Internet and with technological advancements, cyber and malware attacks over the digital devices have increased manifold. Activities performed electronically can be investigated by means of digital forensic analysis methodologies. Live digital forensic tools are used for digital evidence collection and investigations of malicious activities that occurred on a standalone system or networks. Since compromised system remains active while using these tools, some serious issues relating to malicious functionalities and policy violations could lead to serious damages like data theft or data loss. In this paper, we present a critical review of the triage in live forensic. This paper discusses several techniques being used for performing live forensic analysis and critically evaluate their efficacy in terms of their applicability and reliability. A brief anecdote about the pros and cons of these techniques are also discussed. We present the findings of our study in the critical section.",8,1,35,44,The Internet; Engineering; Data loss; Triage; Damages; Data theft; Digital evidence; Computer security; Malware; Digital forensics,,,,,http://www.ijofcs.org/V08N1-PP05-TRIAGE-IN-LIVE-DIGITAL.pdf http://www.ijofcs.org/abstract-v08n1-pp05.html,http://dx.doi.org/10.5769/j201301005,,10.5769/j201301005,2314982172,,0,003-871-070-011-964; 020-626-957-505-364; 026-024-733-636-162; 030-351-009-711-953; 035-269-627-388-435; 037-483-791-552-006; 040-105-187-457-272; 040-483-292-320-671; 051-645-938-939-51X; 052-209-716-598-874; 062-325-585-829-185; 093-448-702-012-591; 105-002-898-852-695; 127-286-301-080-684; 132-606-863-800-090; 147-707-428-925-566,27,false,, 097-001-053-310-699,Photographic evidence protocol: The use of digital imaging methods to rectify angular distortion and create life size reproductions of Bite mark evidence,2002-01-01,2002,journal article,Journal of forensic sciences,00221198,Wiley-Blackwell,United States,Charles Michael Bowers; Raymond J. Johansen,"Bite mark evidence seen in skin injuries or objects is commonly photographed for evidentiary documentation, preservation, and analysis. Distortion in forensic evidence photographs diminishes the outcome of analytical procedures available to the forensic odontologist. Inaccurate positioning of the evidence, camera, or measurement reference scale creates perspective and parallax distortion of the captured image. These variables must be eliminated, if possible, to ensure reliable results derived from comparison of the suspect teeth and the bite mark. Detection and measurement of camera/evidence/scale misalignment is the threshold step in evidence evaluation, and is possible through digital imaging methods coupled with established methods. Correction (rectification) of perspective distortion is possible through the application of additional digital editing techniques. This study establishes type categories of perspective and parallax distortion seen in bite mark evidence, validates the use of the digital imaging tools of Adobe® Photoshop® to correct certain types of distortion, and establishes a forensic protocol to verify the accuracy of evidence photographs requiring dimensional accuracy.",47,1,178,185,Digital imaging; Distortion; Photography; Perspective (graphical); Engineering; Artificial intelligence; Parallax; Forensic dentistry; Perspective distortion; Protocol (science); Computer vision,,"Bites, Human; Forensic Dentistry/methods; Humans; Image Processing, Computer-Assisted; Photography; Sensitivity and Specificity; Software",,,https://europepmc.org/article/MED/12064648 https://www.astm.org/DIGITAL_LIBRARY/JOURNALS/FORENSIC/PAGES/JFS15221J.htm https://www.astm.org/cgi-bin/googleScholar.cgi?JFS15221J+PDF,http://dx.doi.org/10.1520/jfs15221j,12064648,10.1520/jfs15221j,9726582,,0,000-097-289-632-651; 002-822-634-996-811; 015-840-881-736-102; 019-019-577-536-660; 028-647-558-047-152; 095-856-925-718-642; 105-166-314-182-714; 117-533-140-820-84X,18,false,, 097-567-011-227-46X,Next-generation digital forensics,,2006,journal article,Communications of the ACM,00010782; 15577317,Association for Computing Machinery (ACM),United States,Golden G. Richard; Vassil Roussev,The digital forensics community requires new tools and strategies for the rapid turnaround of large forensic targets.,49,2,76,80,World Wide Web; Forensic science; Computer security; Computer science; Digital forensics,,,,,https://doi.acm.org/10.1145/1113034.1113074 https://dl.acm.org/doi/abs/10.1145/1113034.1113074 https://dblp.uni-trier.de/db/journals/cacm/cacm49.html#RichardR06,http://dx.doi.org/10.1145/1113034.1113074,,10.1145/1113034.1113074,2054018023,,0,023-341-419-324-638; 044-720-373-398-974; 046-527-367-793-765; 065-520-849-771-46X; 079-070-981-899-105; 101-604-510-533-229; 105-427-271-392-801; 115-547-184-477-216; 170-707-612-203-751,130,false,, 097-729-559-656-234,Cyber Forensic – A Literature Review,,2019,journal article,"Trinity Journal of Management, IT & Media",23206470,ACS Publisher,,Aparna Chaturvedi; Ashish Awasthi,"Cyber Forensics is a branch of forensic science that is aimed to restore, collect and examine the digital evidence of materials found in digital devices, in relation to cybercrimes. With the advancement in cyber area, frequent use of internet and technologies leads to cyber-attacks. Cyber forensic is opted for acquiring electronic information and investigation of malicious evidence found in system or on network in such a manner that makes it admissible in court. It is also used to recover lost information in a system. The retrived information is used to prosecute a criminal. Number of crimes committed against an internet and malware attacks over the digital devices have increased. This paper contains a brief review of the literature aimed to identify the relevant pieces of knowledge in the digital forensics field.",10,1,24,29,Digital forensics; Digital evidence; Computer forensics; Computer security; Cyber crime; The Internet; Malware; Computer science; Network forensics; Relation (database); Field (mathematics); Internet privacy; Forensic examination; Cybercrime; Data science; World Wide Web; Engineering; Data mining; Forensic engineering; Mathematics; Pure mathematics,,,,,,http://dx.doi.org/10.48165/tjmitm.2019.1002,,10.48165/tjmitm.2019.1002,,,0,,1,false,, 097-939-114-561-254,IoT forensic challenges and opportunities for digital traces,,2019,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Francesco Servida; Eoghan Casey,"Abstract The increasing number of IoT devices in personal environments such as smarthomes presents opportunities and risks from a forensic perspective. These devices generate traces that can be useful for investigative and forensic purposes in any type of offense. At the same time, newer IoT devices are not supported by existing digital forensic tools and methods, making it difficult for practitioners to extract data from them without the support of a forensic advisor with specialized knowledge in this area. In addition, these traces can present evaluation challenges for forensic scientists, and can contain vulnerabilities that pose privacy risks. Security vulnerabilities of IoT devices create opportunities for extracting traces but might also be used by criminals to undermine a device. The aim of this work is to increase familiarity with traces from various IoT devices in a smarthome, and demonstrate how traces from IoT devices in a smarthome can be useful for investigative and forensic purposes. This work presents a study of IoT devices and associated smartphone applications, providing approaches to extracting and analyzing digital traces. This research led to the discovery of vulnerabilities in multiple devices, and a scenario for the DFRWS IoT forensic challenge was developed.",28,,S22,S29,Data science; Specialized knowledge; Smartphone application; Computer science; Internet of Things; Digital forensics,,,,,https://www.mendeley.com/catalogue/e3cf9d1d-4196-3739-9172-1f7e473d2f3e/ https://www.sciencedirect.com/science/article/pii/S1742287619300222 https://dfrws.org/wp-content/uploads/2021/05/2019_EU_paper-iot_forensic_challenges_and_opportunities_for_digital_traces.pdf https://dfrws.org/presentation/iot-forensic-challenges-and-opportunities-for-digital-traces/ https://doi.org/10.1016/j.diin.2019.01.012 https://core.ac.uk/download/226982753.pdf,http://dx.doi.org/10.1016/j.diin.2019.01.012,,10.1016/j.diin.2019.01.012,2942103749,,0,005-630-640-664-939; 009-747-804-607-928; 014-184-535-135-778; 014-466-907-950-761; 018-552-581-098-658; 019-831-293-743-518; 029-200-392-412-396; 029-434-105-390-369; 039-999-270-718-277; 060-294-953-084-788; 061-269-967-405-492; 130-633-255-506-737,60,true,cc-by-nc-nd,hybrid 098-368-307-587-856,Forensic dental age estimation by measuring root dentin translucency area using a new digital technique.,2014-03-07,2014,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Ashith B. Acharya,"Dentin translucency measurement is an easy yet relatively accurate approach to postmortem age estimation. Translucency area represents a two-dimensional change and may reflect age variations better than length. Manually measuring area is challenging and this paper proposes a new digital method using commercially available computer hardware and software. Area and length were measured on 100 tooth sections (age range, 19-82 years) of 250 μm thickness. Regression analysis revealed lower standard error of estimate and higher correlation with age for length than for area (R = 0.62 vs. 0.60). However, test of regression formulae on a control sample (n = 33, 21-85 years) showed smaller mean absolute difference (8.3 vs. 8.8 years) and greater frequency of smaller errors (73% vs. 67% age estimates ≤ ± 10 years) for area than for length. These suggest that digital area measurements of root translucency may be used as an alternative to length in forensic age estimation.",59,3,763,768,Forensic science; Regression analysis; Standard error; Range (statistics); Dentin; Orthodontics; Dental age; Mathematics; Regression; Estimation,Adobe Photoshop®; age prediction; area measurement; dentin transparency; forensic odontology; forensic science; regression analysis,"Adult; Age Determination by Teeth/methods; Aged; Aged, 80 and over; Dentin/anatomy & histology; Female; Forensic Dentistry/methods; Humans; Image Processing, Computer-Assisted; Male; Middle Aged; Regression Analysis; Software; Tooth Root/anatomy & histology; User-Computer Interface; Young Adult",,,https://www.ncbi.nlm.nih.gov/pubmed/24602092 http://doi.wiley.com/10.1111/1556-4029.12385 https://pubmed.ncbi.nlm.nih.gov/24602092/ https://www.onlinelibrary.wiley.com/doi/abs/10.1111/1556-4029.12385,http://dx.doi.org/10.1111/1556-4029.12385,24602092,10.1111/1556-4029.12385,1976522752,,0,000-883-995-555-655; 001-986-698-642-259; 003-632-311-229-545; 006-301-925-071-781; 016-821-344-540-473; 017-204-691-508-032; 020-676-875-990-752; 025-434-714-849-504; 037-246-319-245-943; 044-681-505-058-033; 044-726-962-299-023; 045-879-490-143-541; 047-081-427-423-671; 058-168-509-916-18X; 063-946-493-687-827; 064-041-181-792-433; 081-317-997-035-778; 086-569-354-883-493; 089-334-095-778-850; 099-230-667-456-977; 121-891-248-055-152; 138-000-103-750-31X; 140-798-332-967-43X; 162-924-933-752-963,9,false,, 098-570-643-235-402,BitCurator: Tools and Techniques for Digital Forensics in Collecting Institutions,,2012,journal article,D-Lib Magazine,10829873,CNRI Acct,United States,Christopher A. Lee; Alexandra Chassanoff; Kam Woods; Matthew G. Kirschenbaum; Porter Olsen,"This paper introduces the BitCurator Project, which aims to incorporate digital forensics tools and methods into collecting institutions' workflows. BitCurator is a collaborative effort led by the School of Information and Library Science (SILS) at the University of North Carolina at Chapel Hill and Maryland Institute for Technology in the Humanities (MITH) at the University of Maryland. The project arose from a perceived need in the library/archives community to develop digital forensics tools with interfaces, documentation, and functionality that can support the workflows of collecting institutions. This paper describes current efforts, ongoing work, and implications for future development of forensic-based, analytic software for born-digital materials.",18,5,3,,World Wide Web; Work (electrical); Workflow; Data science; Software; Chapel; Computer science; Documentation; Digital forensics,,,,,http://www.dlib.org/dlib/may12/lee/05lee.html https://dblp.uni-trier.de/db/journals/dlib/dlib18.html#LeeCWKO12 https://dialnet.unirioja.es/servlet/articulo?codigo=3992216,http://dx.doi.org/10.1045/may2012-lee,,10.1045/may2012-lee,2077832206,,0,037-647-066-964-858; 067-629-806-155-212; 072-447-630-272-055; 074-028-601-448-433; 134-927-490-231-285; 151-783-042-648-550,12,true,,gold 098-711-946-154-008,Legal Regulation thе Forensic Activities in Digitalization,2022-05-09,2022,journal article,Courier of Kutafin Moscow State Law University (MSAL)),27826163; 23115998,Kutafin Moscow State Law University,,A. A. Sarkisian,"The article is devoted to the analysis some features of legal regulation of digitalization of forensic science. Some aspects of development of professional standards were also considered. The author examines in detail the main purposes of accreditation of testing and calibration laboratories. From a practical point of view, the shortcomings of some approaches to the legal regulation of digital traces research in forensic science.",,2,157,160,Accreditation; Digital forensics; Engineering ethics; Forensic science; Point (geometry); Political science; Computer science,,,,,,http://dx.doi.org/10.17803/2311-5998.2022.90.2.157-160,,10.17803/2311-5998.2022.90.2.157-160,,,0,,0,true,,hybrid 098-736-168-238-010,Digital forensics and the American Journal of Neuroradiology.,2007-11-30,2007,journal article,AJNR. American journal of neuroradiology,1936959x; 01956108,American Society of Neuroradiology,United States,Mauricio Castillo,"Peer review doesn’t necessarily say that a paper is right. It says that it’s worth publishing.Martin Blume, Past Editor, Journals of the American Physics Society ; ; In the media, the term “digital forensics” usually refers to investigations regarding the mining of data stored in digital",29,2,211,212,Data science; Neuroradiology; Computer forensics; Term (time); Medicine; Digital forensics,,"Computer Graphics; Editorial Policies; Forensic Sciences/methods; Neuroradiography/ethics; Periodicals as Topic/ethics; Scientific Misconduct/ethics; Signal Processing, Computer-Assisted; United States; Word Processing/ethics; Writing/standards",,,http://www.ajnr.org/content/29/2/211.short http://www.ajnr.org/content/ajnr/29/2/211.full.pdf https://europepmc.org/article/MED/18055566 https://www.ncbi.nlm.nih.gov/pubmed/18055566 http://www.ajnr.org/content/29/2/211 http://www.ajnr.org/content/29/2/211.full.pdf,http://dx.doi.org/10.3174/ajnr.a0914,18055566,10.3174/ajnr.a0914,2051472487,PMC8118986,0,061-119-111-269-928,1,true,cc-by,hybrid 098-748-261-333-651,Digital forensic research: current state of the art,2012-11-13,2012,journal article,CSI Transactions on ICT,22779078; 22779086,Springer Science and Business Media LLC,,Sriram Raghavan,"Digital forensics is the process of employing scientific principles and processes to analyze electronically stored information and determine the sequence of events which led to a particular incident. In this digital age, it is important for researchers to become aware of the recent developments in this dynamic field and understand scope for the future. The past decade has witnessed significant technological advancements to aid during a digital investigation. Many methodologies, tools and techniques have found their way into the field designed on forensic principles. Digital forensics has also witnessed many innovative approaches that have been explored to acquire and analyze digital evidence from diverse sources. In this paper, we review the research literature since 2000 and categorize developments in the field into four major categories. In recent years the exponential growth of technological has also brought with it some serious challenges for digital forensic research which is elucidated. Within each category, research is sub-classified into conceptual and practical advancements. We highlight the observations made by previous researchers and summarize the research directions for the future.",1,1,91,114,Electronically stored information; Data science; Scope (project management); Digital evidence; Research literature; Field (computer science); Computer science; Process (engineering); State (computer science); Digital forensics,,,,,https://link.springer.com/content/pdf/10.1007%2Fs40012-012-0008-7.pdf https://link.springer.com/article/10.1007/s40012-012-0008-7/fulltext.html https://paperity.org/p/33082795/digital-forensic-research-current-state-of-the-art https://securecyberspace.org/yahoo_site_admin/assets/docs/df-survey.334154504.pdf https://link.springer.com/article/10.1007/s40012-012-0008-7 http://securecyberspace.org/yahoo_site_admin/assets/docs/df-survey.334154504.pdf,http://dx.doi.org/10.1007/s40012-012-0008-7,,10.1007/s40012-012-0008-7,1996767106,,1,000-004-275-385-957; 001-170-920-458-777; 001-255-768-346-633; 002-495-833-326-831; 002-534-435-127-422; 003-126-053-087-131; 003-182-041-034-40X; 003-412-732-826-511; 004-441-167-148-170; 004-652-388-189-304; 004-723-592-537-121; 007-455-522-527-690; 007-579-380-265-043; 007-832-595-971-443; 008-202-966-214-573; 008-769-224-564-600; 009-692-861-529-254; 010-388-991-543-520; 011-569-292-128-546; 012-495-836-083-305; 013-518-815-622-627; 013-610-410-193-416; 014-595-195-942-667; 014-761-788-507-645; 015-056-577-655-683; 015-123-573-514-32X; 016-046-803-187-724; 017-840-378-634-021; 017-890-768-257-247; 018-625-482-431-173; 019-166-656-621-783; 019-831-293-743-518; 020-944-423-224-895; 021-850-998-857-676; 022-530-184-398-582; 024-216-399-693-64X; 024-547-287-369-649; 024-735-069-822-749; 025-166-987-232-333; 025-492-951-217-100; 025-811-569-298-195; 026-810-683-474-561; 027-678-595-672-200; 028-149-820-987-827; 028-863-422-831-18X; 029-830-915-206-759; 030-121-862-351-330; 030-359-893-882-572; 031-542-664-705-080; 031-977-004-268-359; 032-192-641-675-455; 032-512-289-321-120; 033-241-817-699-448; 035-223-520-491-228; 035-381-853-639-810; 035-748-805-312-328; 036-412-863-725-881; 038-668-970-194-854; 039-280-558-160-949; 040-092-459-357-823; 041-327-075-056-562; 042-450-851-467-680; 043-093-846-816-675; 043-386-830-253-686; 043-570-313-872-171; 046-505-599-865-150; 046-527-367-793-765; 047-937-309-229-62X; 047-955-569-661-805; 050-000-944-827-798; 051-165-387-606-715; 052-308-687-231-910; 053-376-195-646-045; 054-432-750-459-549; 055-090-334-937-061; 055-574-774-155-611; 056-689-263-355-386; 056-766-410-127-532; 057-329-251-106-443; 057-339-420-567-97X; 058-409-370-512-563; 058-448-820-778-759; 060-650-561-577-338; 060-688-922-446-557; 061-326-248-978-030; 061-549-181-856-861; 062-026-157-734-278; 063-257-284-816-393; 068-247-722-587-280; 071-079-281-371-668; 071-303-820-692-940; 072-072-328-028-440; 073-524-789-009-542; 074-503-617-334-537; 075-597-189-600-363; 079-111-468-801-62X; 080-018-383-947-573; 080-288-823-874-989; 080-351-281-760-491; 081-437-161-307-223; 081-933-261-712-915; 082-897-694-197-796; 083-257-751-016-80X; 085-214-277-668-01X; 085-343-554-667-033; 085-669-579-012-375; 085-945-868-640-464; 087-690-831-820-163; 087-814-787-159-954; 088-568-925-253-101; 093-378-923-246-489; 093-668-583-258-461; 093-924-528-715-586; 095-219-247-465-217; 095-701-116-223-192; 096-169-714-378-299; 097-070-578-392-34X; 097-567-011-227-46X; 098-037-265-553-060; 102-602-192-826-532; 102-697-093-502-764; 105-427-271-392-801; 108-086-708-688-274; 109-426-377-800-755; 109-598-947-309-943; 111-471-986-310-852; 112-642-164-834-390; 117-211-438-018-858; 117-239-595-156-183; 118-095-530-189-407; 118-151-141-280-905; 120-697-354-224-33X; 121-127-640-488-995; 123-830-244-984-847; 125-082-012-062-802; 125-430-871-426-81X; 126-548-323-218-403; 127-444-480-388-473; 128-450-652-988-596; 129-842-013-619-240; 133-752-203-150-119; 134-927-490-231-285; 135-262-782-091-897; 135-717-892-795-412; 139-495-561-188-858; 142-226-580-142-17X; 142-729-737-144-734; 142-816-347-811-541; 142-870-885-548-418; 142-884-607-464-932; 147-855-964-291-004; 149-010-267-691-537; 150-249-549-372-358; 150-280-000-852-253; 152-771-716-159-330; 153-558-290-301-726; 155-310-759-030-139; 156-571-272-274-491; 156-991-897-001-400; 157-954-859-648-506; 161-171-671-691-645; 162-485-003-594-995; 162-864-397-044-696; 166-298-834-407-97X; 166-842-256-824-283; 169-067-821-124-904; 172-965-192-520-527; 178-883-713-153-793; 183-320-282-603-781; 184-948-841-629-735; 185-786-886-555-378; 190-065-821-748-92X; 191-232-053-606-145; 191-787-431-475-170; 195-393-139-218-445; 196-123-893-303-752; 196-559-417-455-648; 199-745-676-923-766,100,true,,bronze 098-789-704-370-365,An Analysis of Zinc-Toxicological Profiling from Forensic Biological Evidence-Urine,2019-04-25,2019,journal article,Journal of Forensic Sciences and Digital Investigation,,Northern California Open Access Publications,,,,,,55,59,Forensic science; Profiling (computer programming); Urine; DNA profiling; Biology; Computational biology; Computer science; Genetics; Biochemistry; DNA; Operating system,,,,,,http://dx.doi.org/10.29199/2637-7136/fsdi-201023,,10.29199/2637-7136/fsdi-201023,,,0,,0,true,cc-by,hybrid 098-857-083-857-534,Scientific underpinnings and background to standards and accreditation in digital forensics,,2011,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Jason Beckett; Jill Slay,"Abstract With its use highlighted in many high profile court cases around the world, Digital forensics over the last decade has become an integral part of the modern legal system and corporate investigations. As the discipline grows and it use becomes widely accepted, there is a need to align it with traditional forensic sciences and move towards strengthening an accreditation regime for the discipline. This paper examines the origins of science and scientific method to form the core premises for establishing criteria to assess digital forensics as a science and hence justifying the basis for standards and accreditation.",8,2,114,121,Computer security; Computer science; Engineering ethics; Accreditation; Scientific method; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/di/di8.html#BeckettS11 https://www.sciencedirect.com/science/article/pii/S1742287611000661 https://dx.doi.org/10.1016/j.diin.2011.08.001 http://dx.doi.org/10.1016/j.diin.2011.08.001 http://www.sciencedirect.com/science/article/pii/S1742287611000661,http://dx.doi.org/10.1016/j.diin.2011.08.001,,10.1016/j.diin.2011.08.001,2077656476,,0,000-557-324-827-169; 002-702-684-301-487; 003-623-861-051-599; 008-201-414-319-938; 012-723-051-030-715; 018-804-658-663-933; 020-856-140-900-988; 024-066-562-741-584; 028-103-684-022-268; 029-160-529-912-567; 030-359-893-882-572; 038-668-970-194-854; 043-083-546-914-143; 046-015-348-618-436; 047-310-841-930-720; 055-846-648-067-457; 064-881-578-398-364; 067-938-325-014-282; 082-662-595-257-435; 085-379-403-609-164; 098-119-729-918-419; 099-260-308-235-782; 100-226-961-489-480; 101-440-319-450-443; 102-475-675-632-290; 103-327-744-686-658; 109-435-258-852-67X; 111-741-773-111-021; 114-791-371-428-899; 116-585-073-059-277; 122-988-175-691-701; 134-281-875-742-22X; 134-927-490-231-285; 138-927-365-940-299; 139-709-872-302-081; 145-743-906-992-348; 152-265-820-213-454; 159-021-500-439-319; 170-801-816-294-529; 172-214-329-616-03X; 189-598-793-297-549,11,true,,green 098-880-940-361-257,The use of Artificial Intelligence in digital forensics: An introduction,2014-01-27,2014,journal article,Digital Evidence and Electronic Signature Law Review,20548508; 17564611,School of Advanced Study,Spain,F. Mitchell,"Dr Faye Mitchell argues that the use of Artificial Intelligence, which is a well-established area of modern computer science that is capable of dealing with computationally large or complex problems, could be useful for digital forensics. Digital forensics is becoming increasingly important, and often requires the intelligent analysis of large amounts of complex data. Artificial Intelligence could help to bridge the gap.",7,0,35,41,Artificial intelligence; Bridge (interpersonal); Complex problems; Computer science; Digital forensics,,,,,https://pureportal.coventry.ac.uk/en/publications/the-use-of-artificial-intelligence-in-digital-forensics-an-introd https://sas-space.sas.ac.uk/5533/ https://journals.sas.ac.uk/deeslr/article/view/1922/1859 https://core.ac.uk/download/228154935.pdf,http://dx.doi.org/10.14296/deeslr.v7i0.1922,,10.14296/deeslr.v7i0.1922,2026744384,,0,,15,true,cc-by-nc-nd,hybrid 098-964-702-246-112,Forensik Web Layanan Instant Messaging Menggunakan Metode Association of Chief Police Officers (ACPO),2019-09-26,2019,journal article,Mobile and Forensics,26566257,Universitas Ahmad Dahlan,," Riadi; Rusydi Umar; Muhammad Aziz","Aplikasi instant messaging khususnya yang terdapat layanan berbasis web , sangat memungkinkan untuk dijadikan sasaran oleh para pelaku tindak kejahatan digital atau cybercrime. Vulnerabilitas dari aplikasi instant messaging berbasis web dapat dieksploitasi oleh pihak-pihak yang tidak bertanggung jawab untuk melakukan tindak kejahatan digital. Penelitian ini difokuskan pada tahapan-tahapan investigasi forensik kasus tindak kejahatan digital yang terjadi di layanan berbasis web aplikasi instant messaging WhatsApp, LINE dan Telegram. Metode yang digunakan dalam penelitian ini merujuk pada metode Association of Chief Police Officers dengan alur plan, capture, analyse dan present. Penelitian ini dalam proses investigasi forensiknya berhasil didapatkan artifact dari layanan berbasis web aplikasi instant messaging . Alat atau tools investigasi forensik yang digunakan dalam penelitian ini adalah FTK imager , NetWitness Investigator, dan Wireshark. Tingkat kerberhasilan penelitian ini mencapai 40% pada aplikasi Telegram, 60% untuk aplikasi LINE, dan aplikasi WhatsApp yang menduduki pringkat tertinggi dengan tingkat keberhasilan sebesar 85%.",1,1,29,38,,,,,,http://journal2.uad.ac.id/index.php/mf/article/download/705/pdf http://journal2.uad.ac.id/index.php/mf/article/view/705 https://www.mendeley.com/catalogue/429e5000-0745-3cd6-9909-83ed5e5f71a3/ https://core.ac.uk/download/pdf/267886810.pdf,http://dx.doi.org/10.12928/mf.v1i1.705,,10.12928/mf.v1i1.705,2981572450,,0,,0,true,cc-by-sa,gold 099-085-540-086-878,A Novel Android Memory Forensics for Discovering Remnant Data,2020-06-13,2020,journal article,"International Journal on Advanced Science, Engineering and Information Technology",24606952; 20885334,Insight Society,Indonesia,Gandeva Bayu Satrya; Febrian Kurniawan,"As recently updated on the vulnerability statistics shown in 2019, Android-driven smartphones, tablet PCs, and other Android devices are vulnerable, whether from internal or external threats. Most users store sensitive data like emails, photos, cloud storage access, and contact lists on Android smartphones. This information holds a growing-importance for the digital investigation process of mobile devices, e.g., internal memory or random-access memory (RAM) forensics, or external memory or read-only memory (ROM) forensics on Android smartphones. Internal memory retrieval is considered flawed and difficult by some researchers as it alters the digital evidence in an intrusive way. On the other hand, external memory retrieval also called logical acquisition that implies the image of logical storage items (e.g., files, database, directories, etc.) that locate on logical storage. This research provides a novel methodology that focuses only on internal memory forensic in a forensically sound manner. This research also contributes two algorithms, e.g., collect raw information (CRI) for parsing the raw data, and investigate raw information (IRI) for extracting the digital evidence to be more readable. This research conducted with fourteenth events to be analyzed, and each event was captured by SHA-1 as digital evidence. By using GDrive as the case study, the authors concluded that the proposed methodology could be used as guidance by forensics analyst(s), cyberlaw practitioner(s), and expert witness(es) in the court.",10,3,1008,1015,Raw data; Parsing; Mobile device; Information retrieval; Memory forensics; Cloud storage; Digital evidence; Computer science; Android (operating system); Auxiliary memory,,,,,https://dx.doi.org/10.18517/ijaseit.10.3.9363 http://dx.doi.org/10.18517/ijaseit.10.3.9363 http://ijaseit.insightsociety.org/index.php?option=com_content&view=article&id=9&Itemid=1&article_id=9363 https://core.ac.uk/download/pdf/325990748.pdf,http://dx.doi.org/10.18517/ijaseit.10.3.9363,,10.18517/ijaseit.10.3.9363,3039367688,,0,007-429-717-105-19X; 032-742-818-342-992; 046-708-956-042-655; 080-161-175-307-872; 092-015-325-499-970; 092-198-110-549-592; 096-319-685-631-822; 099-208-939-924-674; 111-484-206-251-752; 135-711-521-588-783,3,true,, 099-377-733-522-116,Part 1: The need for peer review in digital forensics,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Graeme Horsman; Nina Sunde,"Abstract The importance of peer review in the field of digital forensics cannot be underestimated as it often forms the primary, and sometimes only form of quality assurance process an organisation will apply to their practitioners' casework. Whilst there is clear value in the peer review process, it remains an area which is arguably undervalued and under-researched, where little academic and industrial commentary can be found describing best practice approaches. This work forms the first of a two part series discussing why the digital forensics discipline and its organisations should conduct peer review in their laboratories, what it should review as part of this process, and how this should be undertaken. Here in part one, a critical review of the need to peer review is offered along with a discussion of the limitations of existing peer review mechanisms. Finally, the ‘Peer Review Hierarchy’ is offered, outlining the seven levels of peer review available for reviewing practitioner findings.",35,,301062,,Peer review; Sociology; Work (electrical); Best practice; Value (ethics); Hierarchy; Process (engineering); Engineering ethics; Digital forensics,,,,Norwegian Police University College,https://dblp.uni-trier.de/db/journals/di/di35.html#HorsmanS20 https://www.sciencedirect.com/science/article/pii/S2666281720303590 https://research.tees.ac.uk/en/publications/part-1-the-need-for-peer-review-in-digital-forensics https://core.ac.uk/download/362894515.pdf,http://dx.doi.org/10.1016/j.fsidi.2020.301062,,10.1016/j.fsidi.2020.301062,3087768853,,0,003-168-641-529-165; 005-232-046-693-557; 005-392-088-749-603; 005-542-560-321-688; 007-337-082-788-602; 007-582-851-613-954; 012-189-717-454-526; 012-410-670-929-028; 018-607-295-495-260; 019-831-293-743-518; 030-178-593-043-926; 034-021-215-110-765; 035-519-584-610-671; 036-963-912-777-09X; 042-230-817-975-353; 047-386-524-667-691; 047-859-979-695-194; 049-404-833-736-24X; 050-994-414-657-166; 075-950-021-558-098; 080-545-688-531-696; 083-828-164-442-528; 091-872-704-948-238; 093-309-498-241-337; 094-498-765-194-523; 102-599-064-891-853; 103-294-378-905-305; 109-098-876-649-367; 149-467-515-040-638; 167-366-167-352-677; 171-256-463-941-932; 181-545-693-146-583; 197-872-262-830-083,9,true,cc-by-nc-nd,hybrid 099-407-105-258-080,Cell site analysis: Roles and interpretation.,2019-06-06,2019,journal article,Science & justice : journal of the Forensic Science Society,18764452; 13550306,Forensic Science Society,United Kingdom,Matthew Tart; Susan Pope; David Baldwin; Robert Bird,,59,5,558,564,Information retrieval; Computer science; Interpretation (philosophy); Digital forensics; Site analysis,Cellsite analysis; Digital forensics; Forensic interpretation,Cell Phone Use; Data Analysis; Expert Testimony/standards; Forensic Sciences/standards; Humans; Professional Role; Records/legislation & jurisprudence; Terminology as Topic,,,https://www.ncbi.nlm.nih.gov/pubmed/31472801 https://pubmed.ncbi.nlm.nih.gov/31472801/,http://dx.doi.org/10.1016/j.scijus.2019.06.005,31472801,10.1016/j.scijus.2019.06.005,2949975690,,0,003-582-736-351-113; 005-715-450-998-72X; 022-757-007-442-155; 026-943-588-349-358; 058-717-000-287-105; 123-573-244-607-342; 173-145-269-859-717,6,false,, 099-446-510-492-905,Digital investigations: relevance and confidence in disclosure,2021-09-21,2021,journal article,ERA Forum,16123093; 18639038,Springer Science and Business Media LLC,Germany,Philip Anderson; Dave Sampson; Seanpaul Gilroy,"AbstractThe field of digital forensics has grown exponentially to include a variety of digital devices on which digitally stored information can be processed and used for different types of crimes. As a result, as this growth continues, new challenges for those conducting digital forensic examinations emerge. Digital forensics has become mainstream and grown in importance in situations where digital devices used in the commission of a crime need examining. This article reviews existing literature and highlights the challenges while exploring the lifecycle of a mobile phone examination and how the disclosure and admissibility of digital evidence develops.",22,4,587,599,,,,,,,http://dx.doi.org/10.1007/s12027-021-00687-1,,10.1007/s12027-021-00687-1,,,0,009-284-801-057-774; 050-618-920-212-97X; 088-938-096-763-07X; 094-468-232-325-36X; 167-751-222-897-487,0,true,cc-by,hybrid 099-717-679-430-808,Forensics examination of volatile system data using virtual introspection,,2008,journal article,ACM SIGOPS Operating Systems Review,01635980,Association for Computing Machinery (ACM),,Brian Hay; Kara Nance,"While static examination of computer systems is an important part of many digital forensics investigations, there are often important system properties present only in volatile memory that cannot be effectively recovered using static analysis techniques, such as offline hard disk acquisition and analysis. An alternative approach, involving the live analysis of target systems to uncover this volatile data, presents significant risks and challenges to forensic investigators as observation techniques are generally intrusive and can affect the system being observed. This paper provides a discussion of live digital forensics analysis through virtual introspection and presents a suite of virtual introspection tools developed for Xen (VIX tools). The VIX tools suite can be used for unobtrusive digital forensic examination of volatile system data in virtual machines, and addresses a key research area identified in the virtualization in digital forensics research agenda [22].",42,3,74,82,Hypervisor; Introspection; Data science; Virtual machine; Computer security; Computer science; Network forensics; Virtualization; Volatile memory; Digital forensics; Static analysis,,,,,https://dl.acm.org/doi/10.1145/1368506.1368517 https://dl.acm.org/citation.cfm?id=1368517 https://doi.org/10.1145%2F1368506.1368517,http://dx.doi.org/10.1145/1368506.1368517,,10.1145/1368506.1368517,2006172326,,1,007-067-041-476-760; 010-241-132-069-684; 019-490-982-760-206; 026-338-656-846-212; 029-648-389-747-342; 032-712-671-997-435; 038-914-873-897-532; 056-911-519-963-065; 078-675-122-704-758; 081-458-407-971-603; 099-962-375-117-782; 105-427-271-392-801; 115-710-046-287-630; 130-722-890-299-997,135,false,, 099-820-647-132-182,A Detailed Study to Examine Digital Forensics and Cyber Security: Trends and Pattern in India,,2020,journal article,International Journal of Forensic Sciences,25731734,Medwin Publishers,,Zlatko Jakjovski,,5,2,,,Digital forensics; Computer security; Cyber crime; Computer forensics; Internet privacy; Computer science,,,,,,http://dx.doi.org/10.23880/ijfsc-16000184,,10.23880/ijfsc-16000184,,,0,,0,false,, 100-154-746-639-394,A Proactive Approach in Network Forensic Investigation Process,2016-05-23,2016,journal article,International Journal of Computer Applications Technology and Research,23198656,Association of Technology and Science,,Joseph MbuguaChahira; Jane KinanuKiruki; Peter KipronoKemei,"Information Assurance and Security (IAS) is a crucial component in the corporate environment to ensure that the secrecy of sensitive data is protected, the integrity of important data is not violated, and the availability of critical systems is guaranteed. The advancement of Information communication and technology into a new era and domain such as mobility and Internet of Things, its ever growing user’s base and sophisticated cyber-attacks forces the organizations to deploy automated and robust defense mechanism to manage resultant digital security incidences in real time. Digital forensic is a scientific process that facilitates detection of illegal activities and in-appropriate behaviors using scientific tools, techniques and investigation frameworks. This research aims at identifying processes that facilitate and improves digital forensic investigation process. Existing digital forensic framework will be reviewed and the analysis will be compiled toderive a network forensic investigation framework that include evidence collection, preservation and analysis at a sensor level and in real time. It is aimed to discover complete relationship with optimal performance among known and unseen/new alerts generated by multiple network sensors in order to improve the quality of alert and recognize attack strategy",5,5,304,311,Scientific instrument; Data science; Secrecy; Quality (business); Digital security; Information assurance; Computer science; Process (engineering); Component (UML); Digital forensics,,,,,http://ijcat.com/archives/volume5/issue5/ijcatr05051012.pdf,http://dx.doi.org/10.7753/ijcatr0505.1012,,10.7753/ijcatr0505.1012,2395405024,,0,004-706-447-836-905; 005-102-962-333-180; 005-515-442-506-880; 010-086-703-646-194; 014-147-422-032-729; 016-661-251-213-668; 020-944-423-224-895; 021-850-998-857-676; 031-604-145-879-389; 032-697-093-668-898; 038-668-970-194-854; 042-744-922-949-227; 047-630-600-014-492; 051-380-288-368-274; 099-306-422-758-350; 109-482-615-363-500; 111-090-978-711-139; 118-859-184-492-143; 133-397-275-695-990; 143-562-788-834-457; 183-000-233-873-221; 187-515-487-119-788; 190-065-821-748-92X; 199-745-676-923-766,0,true,,bronze 100-289-225-534-501,Challenges and Requirements of Digital Forensics Investigation in Wireless Ad-hoc Networks,,2012,journal article,International Journal of Advanced Research in Computer Science,09765697,,,Muhammad Sufyian Mohd Azmi; Labeeb Mohsin Abdullah Abdulrahman H. Altalhi; Zailani Mohamed Sidek,"Digital forensics involves the acquisition and investigation of materials that are collected from digital devices involved in digital crimes. Currently, the term ―digital forensics ― is used to cover the investigation of all devices used to store digital data .There are some technologies that have the ability of expanding, and wireless ad-hoc network technology is one of them. Due to the nature of wireless ad-hoc networks, difficulties commonly arise, and as a result, investigating such networks, create large challenges. Thus, the goals of this paper are to understand the concepts of wireless ad-hoc networks and the challenges of collecting live evidence on such networks, to highlight the research requirements, and to propose solutions to some of these challenges. Keywords: Digital forensics, Wireless Ad-hoc networks, Digital crimes, Digital investigation.",3,1,26,30,Digital data; Cover (telecommunications); Computer science; Multimedia; Wireless; Term (time); Digital forensics; Wireless ad hoc network,,,,,https://www.ijarcs.info/index.php/Ijarcs/article/view/980,https://www.ijarcs.info/index.php/Ijarcs/article/view/980,,,2948414786,,0,,0,false,, 100-346-321-311-04X,An overview of the digital forensic investigation infrastructure of Ghana,2020-10-21,2020,journal article,Forensic science international. Synergy,2589871x,Elsevier BV,Netherlands,Richard Apau; Felix Nti Koranteng,"Abstract Cybercrime incidents continue to plague economic development in the African region. Prior research indicates that millions of dollars are lost annually due to this menace. The prospects of Digital Forensics Investigation (DFI) as evident in developed countries provide hope for defeating cybercriminals. The paper assesses the effectiveness of legal infrastructure, technical mechanisms, the availability of capacity building programs, organisational infrastructure as well as the existence of cooperation mechanisms among relevant institutions in Ghana. The paper contends to the existence of legislation and mandated institutions. It concludes that, though the sector has recorded advancements over the years, the progress has been very slow leaving DFI still at an infant stage. Existing legislations are scattered and cumbersome whereas mandated institutions lack the requisite capacity. There is a need to streamline existing laws into a comprehensively harmonized legal framework. Furthermore, heavy investments must be deployed to boost the capacities of relevant institutions.",2,,299,309,Business; Developed country; Legislation; Plague (disease); Cybercrime; Capacity building; Digital evidence; Digital forensic investigation; Economic growth; Digital forensics,Cybercrime investigation; Digital evidence; Digital forensic; Electronic legislation; Ghana; National critical infrastructure,,,US; CID; BNI; NTCE; NAB; The World Bank; European Union; United Nations; UK; University of Cordoba; UCC; UCC; KNUST,https://europepmc.org/article/MED/33145488 https://www.ncbi.nlm.nih.gov/pubmed/33145488 https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7593527 https://www.sciencedirect.com/science/article/pii/S2589871X20300619,http://dx.doi.org/10.1016/j.fsisyn.2020.10.002,33145488,10.1016/j.fsisyn.2020.10.002,3093622239,PMC7593527,0,000-709-644-297-304; 003-582-736-351-113; 004-872-169-627-620; 007-411-735-241-376; 009-419-475-682-691; 012-725-574-150-045; 015-537-092-918-913; 017-792-811-186-108; 028-274-575-795-698; 030-278-650-282-674; 031-621-266-495-757; 034-775-139-760-344; 038-198-310-819-325; 041-350-452-684-86X; 041-910-794-497-127; 042-834-363-982-491; 043-391-057-910-488; 047-925-848-505-154; 050-618-920-212-97X; 068-159-520-206-777; 071-218-059-184-033; 072-770-372-545-777; 078-730-781-174-18X; 080-331-173-650-983; 080-678-246-220-267; 083-307-371-214-831; 098-255-777-436-381; 100-191-989-806-719; 102-679-985-151-761; 107-611-958-841-813; 126-735-819-163-77X; 132-355-634-397-986; 142-790-196-752-819; 143-783-016-324-165; 147-468-204-783-014; 162-785-150-537-370,0,true,"CC BY, CC BY-NC-ND",gold 100-812-050-439-994,Prelim iii - Contents List,,2020,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,34,,301068,301068,Information retrieval; Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(20)30365-6,,10.1016/s2666-2817(20)30365-6,,,0,,0,true,,bronze 100-844-851-261-838,Analysis of Digital Forensics in the Implementation of Intrusion Detection using Snort,2022-04-01,2022,journal article,FUOYE Journal of Pure and Applied Sciences (FJPAS),26161419,"Faculty of Science, Federal University Oye-Ekiti",,,"Cyber-attacks are becoming more prominent as cyber science advances and individuals use the internet and technologies more frequently. Digital forensics is used to collect electronic data and investigate malicious evidence found in a system or on a network in a way that allows it can be used in court. Network forensic analysis is a method of analyzing intrusion evidence collected from a networked environment so as to identify suspicious entities. The use of Intrusion Detection Systems (IDS) such as Snort and Wireshark is the first step in detecting and reporting a network flooding attack. In this paper, a Local Area Network was set up, an intrusion scenario was created and honeypot was set up to run some real system services on the network. Configured IDS-SNORT monitored and captured activities targeted at the honeypot. The IDS captured these attack activities and the logs were analyzed. The first snort analysis without Forensic mechanism gave a 3.14% malicious detection alerts of total packet and 89.08% of total packet were analyzed while snort analysis with forensic mechanism in the second analysis gave 6.94% malicious detection alerts and an average 99.98% of the total number of packet was analyzed. The difference in the number of alert rate in both test cases and percentage of packets analyzed show that Snort with Forensic mechanism exhibited a better performance over Snort without Forensic mechanism.",7,1,100,107,Honeypot; Computer science; Intrusion detection system; Network packet; Digital forensics; Network forensics; Digital evidence; Packet analyzer; Computer security; Network security; The Internet; Computer network; Operating system,,,,,,http://dx.doi.org/10.55518/fjpas.ijms6335,,10.55518/fjpas.ijms6335,,,0,,0,true,,hybrid 100-852-334-797-730,Value and prospects of constructing digital slides data of forensic medicine,2013-01-20,2013,journal article,Chinese Journal of Medical Education Research,20951485,,,Jun Su; Liang Liu; Shaohua Zhu; Hongmei Dong; Man Liang; Qian Liu,"As a rising histological specimen carrier,digital slide has advantages of easy search and fast browse.By digital scanning and stitching of traditional slides and uploading traditional slides as well as pathological information to network servers,the construction of digital slides data can take its own superiority to assist forensic medicine teaching.Combined with our research and teaching experience,this article discussed the application prospects of digital slide technology and digital slides data so as to provide references for the improvement and reformation of forensic medicine education.; ; Key words: ; Medical education; Forensic medicine; Digital slide; Practice",12,01,39,41,Key (cryptography); Value (mathematics); Image stitching; Digital slide; Computer science; Multimedia; Upload; Server,,,,,http://rs.yiigle.com/CN116021201301/216148.htm,http://rs.yiigle.com/CN116021201301/216148.htm,,,3032519862,,0,,0,false,, 101-083-734-725-35X,The complexity of internet of things forensics: A state-of-the-art review,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Pantaleon Lutta; Mohamed Sedky; Mohamed Hassan; Uchitha Jayawickrama; Benhur Bakhtiari Bastaki,,38,,301210,,The Internet; Systematic review; Key (cryptography); Data science; Cybercrime; State of the art review; Computer science; Home automation; Internet of Things; Digital forensics,,,,,http://eprints.staffs.ac.uk/6934/ https://www.sciencedirect.com/science/article/abs/pii/S2666281721001189 https://repository.lboro.ac.uk/articles/journal_contribution/The_complexity_of_internet_of_things_forensics_A_state-of-the-art_review/14884137/1,http://dx.doi.org/10.1016/j.fsidi.2021.301210,,10.1016/j.fsidi.2021.301210,3171151628,,0,000-490-412-762-138; 000-781-175-000-905; 003-029-378-692-335; 004-611-464-291-773; 004-750-320-878-25X; 005-630-640-664-939; 010-196-658-878-056; 014-144-528-890-509; 015-239-387-608-474; 016-526-859-340-786; 018-552-581-098-658; 019-360-393-097-72X; 019-912-316-692-552; 025-484-846-284-184; 026-764-618-898-849; 026-885-005-782-449; 030-433-196-114-204; 034-581-158-056-04X; 035-859-793-614-223; 047-125-525-662-686; 047-782-671-230-742; 051-330-401-796-575; 055-811-656-615-740; 056-161-895-385-676; 058-156-586-882-704; 060-294-953-084-788; 061-461-493-341-860; 065-322-784-190-818; 065-654-832-541-493; 067-746-157-973-903; 074-204-121-502-453; 075-366-793-103-250; 075-623-366-558-183; 084-452-444-628-355; 085-425-338-426-218; 088-553-642-323-93X; 090-774-592-907-144; 092-827-935-965-207; 093-117-308-515-186; 104-098-703-521-179; 111-753-203-548-051; 112-181-239-331-730; 122-568-647-193-751; 125-682-509-275-554; 128-603-018-655-844; 137-153-736-677-264; 145-501-944-463-55X; 167-751-222-897-487; 170-108-067-251-840; 170-516-749-420-456,5,false,, 101-293-356-927-389,Third molar maturity index by measurements of open apices in a Libyan sample of living subjects,2016-08-09,2016,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Ashref Ali K. Dardouri; Roberto Cameriere; Stefano De Luca; Stefano Vanin,"In most countries, forensic age estimation in living subjects has become increasingly important in the last few years. In addition, as the age of legal majority ranges from 14 to 18 in many countries, and in Libya it is 18 years, radiographic assessment of the degree of third molar development is essential for forensic age estimation of adolescents and young adults. The aim of this paper is to assess the accuracy of the cut-off value of 0.08, by measurements of third molar index (I3M), in determining if a subject is adult or not in Libyan population. Digital panoramic radiographs of 307 healthy subjects (163 girls, 144 boys), aged between 14 and 22, were analysed. The I3M, the age and the sex of the subjects were used as predictive variable for age estimation. Using a cut-off of 0.08, the sensitivity of the test for boys was 90.9% and the specificity 100%. The proportion of correctly classified individuals was 95.1% (95% CI: 91.5–98.7%). The sensitivity for girls was 90.6% and the specificity 100%. The proportion of correctly classified individuals was 94.5% (95% CI: 90.9–98.1%). Estimated post-test probability in boys and girls was 100%. Further analyses, performed using a cut-off of 0.09, do not affect the specificity (100%) while they improve the sensitivity for both boys and girls.",267,,230.e1,230.e6,Maturity (psychological); Forensic science; Demography; Sample (material); Molar; Young adult; Index (economics); Population; Age estimation; Medicine,Age estimation; Forensic anthropology population data; Forensic sciences; Maturity; Mediterranean; Third molar index,"Adolescent; Age Determination by Teeth; Female; Humans; Libya; Likelihood Functions; Male; Molar, Third/diagnostic imaging; Radiography, Dental, Digital; Radiography, Panoramic; Sensitivity and Specificity; Tooth Apex/diagnostic imaging; Young Adult",,,http://www.sciencedirect.com/science/article/pii/S0379073816303243 https://www.ncbi.nlm.nih.gov/pubmed/27622753 http://eprints.hud.ac.uk/id/eprint/29281/ https://www.sciencedirect.com/science/article/abs/pii/S0379073816303243 https://pure.hud.ac.uk/en/publications/third-molar-maturity-index-by-measurements-of-open-apices-in-a-li https://core.ac.uk/display/74211145 https://core.ac.uk/download/74211145.pdf,http://dx.doi.org/10.1016/j.forsciint.2016.07.020,27622753,10.1016/j.forsciint.2016.07.020,2505188940,,0,001-498-910-410-381; 002-120-146-455-374; 002-558-601-257-422; 002-569-454-947-741; 002-757-040-487-632; 004-619-614-615-806; 005-168-122-511-345; 005-503-826-592-097; 006-772-467-494-533; 008-083-157-357-006; 010-233-208-745-686; 011-271-812-041-777; 012-078-866-141-118; 013-129-024-094-603; 013-233-646-142-454; 013-290-066-049-115; 018-587-668-701-720; 019-055-515-381-948; 019-304-565-708-691; 028-623-408-620-279; 031-101-109-413-384; 037-843-865-919-365; 041-265-017-880-915; 045-036-447-944-436; 049-764-437-075-282; 050-150-090-871-931; 053-698-102-089-748; 057-936-428-923-25X; 064-765-741-996-535; 066-745-217-847-255; 067-194-512-881-315; 068-245-242-120-703; 070-013-598-429-874; 071-231-010-099-782; 071-565-796-632-496; 076-951-901-666-506; 083-675-140-804-534; 085-574-955-451-530; 106-315-881-060-281; 116-960-432-214-26X; 123-644-562-630-631; 153-572-616-447-17X; 159-958-546-922-376; 167-990-816-086-428; 172-190-079-472-593; 178-231-484-645-554,28,true,cc-by-nc-nd,green 101-313-419-021-994,Understanding Computer Forensics Requirements in China via the “Panda Burning Incense” Virus Case,,2014,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Kam-Pui Chow; Frank Y. W. Law; Y. H. Mai,"In March 2012, Mainland China has amended its Criminal Procedure Law, which includes the introduction of a new type of evidence, i.e., digital evidence, to the court of law. To better understand the development of computer forensics and digital evidence in Mainland China, this paper discusses the Chinese legal system in relation to digital investigation and how the current legal requirements affect the existing legal and technical usage of digital evidence at legal proceedings. Through studying the famous ""Panda Burning Incense (Worm.WhBoy.cw)"" virus case that happened in 2007, this paper aims to provide a better understanding of how to properly conduct computer forensics examination and present digital evidence at court of law in Mainland China.",9,2,51,58,Mainland China; Political science; China; Law; Digital evidence; Computer security; Criminal procedure; Incense; Computer forensics,,,,,https://core.ac.uk/display/91667418 https://doaj.org/article/d8d352362129465b89a2631dfcac16ab https://commons.erau.edu/jdfsl/vol9/iss2/5/ https://commons.erau.edu/cgi/viewcontent.cgi?article=1170&context=jdfsl https://dblp.uni-trier.de/db/journals/jdfsl/jdfsl9.html#ChowLM14 https://www.mendeley.com/catalogue/5cc31364-f57d-3fb0-8321-cb4f4a8f7c35/,http://dx.doi.org/10.15394/jdfsl.2014.1170,,10.15394/jdfsl.2014.1170,2130476451,,0,001-139-787-841-711; 021-850-998-857-676; 029-611-752-396-235; 110-079-538-894-548; 140-967-697-100-606; 199-172-967-270-034,0,true,cc-by-nc,gold 101-384-574-847-735,On the SPN Estimation in Image Forensics: A Systematic Empirical Evaluation,,2017,journal article,IEEE Transactions on Information Forensics and Security,15566013; 15566021,Institute of Electrical and Electronics Engineers (IEEE),United States,Mustafa Al-Ani; Fouad Khelifi,"Extracting a fingerprint of a digital camera has fertile applications in image forensics, such as source camera identification and image authentication. In the last decade, photo response non_uniformity (PRNU) has been well established as a reliable unique fingerprint of digital imaging devices. The PRNU noise appears in every image as a very weak signal, and its reliable estimation is crucial for the success rate of the forensic application. In this paper, we present a novel methodical evaluation of 21 state-of-the-art PRNU estimation/enhancement techniques that have been proposed in the literature in various frameworks. The techniques are classified and systematically compared based on their role/stage in the PRNU estimation procedure, manifesting their intrinsic impacts. The performance of each technique is extensively demonstrated over a large-scale experiment to conclude this case-sensitive study. The experiments have been conducted on our created database and a public image database, the “Dresden image database.”",12,5,1067,1081,Digital imaging; Artificial intelligence; Fingerprint recognition; Authentication; Fingerprint; Fingerprint (computing); Digital camera; Computer vision; Computer science; Reliability (statistics); Digital forensics; Noise (video),,,,EPSRC Research,http://ieeexplore.ieee.org/document/7784769 http://nrl.northumbria.ac.uk/29339/ https://researchportal.northumbria.ac.uk/en/publications/on-the-sensor-pattern-noise-estimation-in-image-forensics-a-syste https://doi.org/10.1109/TIFS.2016.2640938 https://ieeexplore.ieee.org/document/7784769/ http://dblp.uni-trier.de/db/journals/tifs/tifs12.html#Al-AniK17 https://dblp.uni-trier.de/db/journals/tifs/tifs12.html#Al-AniK17 https://core.ac.uk/download/74229065.pdf,http://dx.doi.org/10.1109/tifs.2016.2640938,,10.1109/tifs.2016.2640938,2560868627,,0,002-538-193-234-353; 003-499-035-235-702; 007-398-225-185-040; 012-412-270-035-761; 013-752-677-050-928; 014-079-494-188-077; 014-209-941-360-32X; 016-617-865-487-243; 023-250-909-140-002; 024-720-897-645-918; 026-290-088-195-051; 036-277-431-302-085; 039-198-919-376-428; 039-909-224-291-709; 040-008-392-568-081; 042-009-574-409-02X; 045-226-923-439-105; 050-432-029-658-563; 053-781-637-768-867; 060-043-515-260-052; 060-983-905-471-058; 063-504-721-532-205; 064-189-799-565-495; 067-919-751-107-162; 071-982-082-400-578; 073-556-368-991-677; 073-955-765-956-961; 075-086-734-221-525; 077-828-134-917-257; 083-097-133-928-799; 087-814-787-159-954; 087-895-411-431-312; 088-756-740-481-093; 090-396-124-495-446; 093-664-113-855-239; 094-342-788-061-511; 102-561-386-891-641; 106-295-038-562-776; 108-821-845-305-493; 108-896-114-392-841; 122-262-717-372-439; 124-562-211-839-940; 125-162-036-005-386; 129-870-899-398-886; 135-323-514-589-740; 140-895-288-214-960; 143-793-077-455-213; 145-315-241-560-557; 149-174-829-589-843; 151-372-268-187-893; 160-685-922-453-820; 169-067-821-124-904; 177-953-972-022-282; 180-088-494-514-913; 184-383-682-403-230; 184-897-235-429-285,41,true,,green 101-417-271-073-240,A comparative study on data protection legislations and government standards to implement Digital Forensic Readiness as mandatory requirement,,2018,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Sungmi Park; Nikolay Akatyev; Yunsik Jake Jang; Jisoo Hwang; Dong-Hyun Kim; Woonseon Yu; Hyun Woo Shin; Changhee Han; Jonghyun Kim,"Abstract Many data breaches happened due to poor implementation or complete absence of security controls in private companies as well as in government organizations. Many countries work on improvement of security requirements and implementing them in their legislation. However, most of the security frameworks are reactive and do not address relevant threats. The existing research suggests Digital Forensic Readiness as proactive measures, but there is only one example of its implementation as a policy. Our work surveys the current state of data protection legislation in the selected countries and their initiatives for the implementation of Digital Forensic Readiness. Then we discuss if Digital Forensic Readiness as a mandatory requirement can improve data protection state in both public and private sectors, evaluating possible challenges. We contribute suggestions for the adoption of Digital Forensic Readiness as a mandatory requirement for private companies and government organizations.",24,,S93,S100,Private sector; Government; Data breach; Work (electrical); Security controls; Legislation; Public relations; Computer science; Data Protection Act 1998; Digital forensics,,,,KITRI (Korea IT Research Institute),https://dblp.uni-trier.de/db/journals/di/di24.html#ParkAJHKYSHK18 https://www.sciencedirect.com/science/article/pii/S1742287618300446 https://www.sciencedirect.com/science/article/abs/pii/S1742287618300446,http://dx.doi.org/10.1016/j.diin.2018.01.012,,10.1016/j.diin.2018.01.012,2790971054,,0,000-123-040-686-642; 008-751-783-762-210; 019-698-064-288-240; 021-486-901-460-202; 035-565-993-122-262; 054-331-725-373-265; 062-160-327-683-926; 097-675-162-158-578; 130-919-597-852-457; 136-618-607-762-754; 144-924-692-716-271; 183-365-568-336-243,11,true,cc-by-nc-nd,hybrid 101-448-987-380-635,Customized blockchain-based architecture for secure smart home for lightweight IoT,,2021,journal article,Information Processing & Management,03064573; 18735371,Elsevier BV,United Kingdom,Meryem Ammi; Shatha Alarabi; Elhadj Benkhelifa,,58,3,102482,,The Internet; Information system; Interoperability; Cloud storage; Service (systems architecture); Computer security; Computer science; Home automation; Server; Transparency (human–computer interaction),,,,,https://dblp.uni-trier.de/db/journals/ipm/ipm58.html#AmmiAB21 https://www.sciencedirect.com/science/article/abs/pii/S0306457320309717,http://dx.doi.org/10.1016/j.ipm.2020.102482,,10.1016/j.ipm.2020.102482,3125425014,,0,002-602-949-519-361; 004-232-346-311-155; 006-129-714-228-417; 009-225-827-148-391; 009-733-726-448-062; 014-448-058-704-128; 018-541-770-775-407; 021-886-834-162-282; 022-281-420-650-598; 026-037-120-558-475; 039-049-374-311-077; 039-503-976-801-29X; 054-079-583-763-10X; 055-520-745-133-145; 055-694-149-090-820; 058-729-147-158-648; 068-201-598-480-086; 077-864-008-508-362; 081-138-471-843-208; 095-059-171-903-312; 096-091-715-269-337; 118-813-006-449-763; 121-097-801-793-903; 130-057-547-194-322; 131-338-927-190-080; 142-528-666-471-197; 161-688-509-157-403; 170-656-000-611-976,27,false,, 101-549-415-202-81X,Standardization of forming and expressing preliminary evaluative opinions on digital evidence,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Eoghan Casey,,32,,200888,,Standardization; Data science; Standardized approach; Interim; International community; Digital evidence; Computer science; Reliability (statistics); Interpretation (philosophy); Digital forensics,,,,,https://www.sciencedirect.com/science/article/abs/pii/S1742287619303147 https://doi.org/10.1016/j.fsidi.2019.200888,http://dx.doi.org/10.1016/j.fsidi.2019.200888,,10.1016/j.fsidi.2019.200888,3003603895,,0,009-512-003-529-193; 010-963-610-208-920; 014-966-931-773-938; 015-238-949-406-002; 018-182-926-340-45X; 021-798-083-032-603; 028-472-372-312-622; 040-376-945-320-975; 041-724-921-575-089; 048-250-488-210-056; 050-296-813-523-597; 058-717-000-287-105; 061-269-967-405-492; 064-549-392-650-90X; 066-351-117-066-660; 085-315-744-117-237; 085-370-444-410-812; 087-342-951-350-054; 106-010-372-725-049; 117-555-147-368-574; 123-006-126-477-128; 131-696-619-498-120; 141-366-693-391-357; 148-223-435-969-407; 173-145-269-859-717,15,false,, 101-819-655-568-965,Analisis Investigasi Forensik WhatsApp Messanger Smartphone Terhadap WhatsApp Berbasis Web,2017-06-30,2017,journal article,Jurnal Ilmiah Teknik Elektro Komputer dan Informatika,23383062; 23383070,"Universitas Ahmad Dahlan, Kampus 3",,Nuril Anwar; Riadi,"Perkembangan telekomunikasi meningkat sangat pesat semenjak layanan pesan instan berbasis internet merambat cepat ke Indonesia. WhatsApp adalah aplikasi pesan instan paling populer dibanding layanan pesan instan lain, menurut situs website statista pengguna per Januari 2017 sebanyak 1,2 miliar orang secara aktif menggunakan aplikasi ini. Seiring pembaruan WhatsApp berbagai fitur disematkan dalam aplikasi ini diantaranya Whatsapp Berbasis Web untuk Komputer, fitur ini mempermudah pengguna dalam berbagi file tertentu serta dapat tersinkronisasi terhadap smartphone maupun komputer penggunanya. Disamping sisi positif yang didapati aplikasi, WhatsApp juga memberikan celah keamanan akan privasi penggunanya salah satunya yaitu penyadapan percakapan yang melibatkan kedua devices ; smartphone dan komputer. Penanganan tindak kejahatan yang melibatkan piranti digital perlu ditekankan sehingga dapat membantu proses peradilan akan efek yang ditimbulkannya. Investigasi Forensika Digital turut berperan serta terhadap penindakan penyalahgunaan fitur layanan pesan instan WhatsApp diantaranya langkah investigasi penanganan kasus penyadapan percakapan WhatsApp melalui serangkaian tahapan baku sesuai prosedur forensika digital. Eksplorasi barang bukti (digital evidence) percakapan WhatsApp akan menjadi acuan akan tindak kejahatan penyadapan telekomunikasi yang selanjutnya akan dilakukan report investigation forensics yang melibatkan barang bukti smartphone dan komputer korban.",3,1,1,10,,,,,,http://dx.doi.org/10.26555/jiteki.v3i1.6643 http://journal.uad.ac.id/index.php/JITEKI/article/download/6643/3530 https://dx.doi.org/10.26555/jiteki.v3i1.6643 http://journal.uad.ac.id/index.php/JITEKI/article/view/6643/3530 https://core.ac.uk/download/pdf/295348216.pdf,http://dx.doi.org/10.26555/jiteki.v3i1.6643,,10.26555/jiteki.v3i1.6643,2748440010,,0,,7,true,cc-by-sa,gold 102-117-623-922-990,ISSE - Digital Forensics as a Big Data Challenge,,2013,journal article,ISSE 2013 Securing Electronic Business Processes,,Springer Fachmedien Wiesbaden,,Alessandro Guarino,"Digital Forensics, as a science and part of the forensic sciences, is facing new challenges that may well render established models and practices obsolete. The dimensions of potential digital evidence supports has grown exponentially, be it hard disks in desktop and laptops or solid state memories in mobile devices like smartphones and tablets, even while latency times lag behind. Cloud services are now sources of potential evidence in a vast range of investigations and network traffic also follows a growing trend and in cyber security the necessity of sifting through vast amount of data quickly is now paramount. On a higher level investigations - and intelligence analysis - can profit from sophisticated analysis of such datasets as social network structures, corpora of text to be analysed for authorship and attribution. All of the above highlights the convergence between so-called data science and digital forensics, to tack the fundamental challenge of analyse vast amount of data (""big data"") in actionable time while at the same time preserving forensic principles in order for the results to be presented in a court of law. The paper, after introducing digital forensics and data science, explores the challenges above and proceed to propose how techniques and algorithms used in big data analysis can be adapted to the unique context of digital forensics, ranging from the managing of evidence via Map-Reduce to machine learning techniques for triage and analysis of big forensic disk images and network traffic dumps. In the conclusion the paper proposes a model to integrate this new paradigm into established forensic standards and best practices and tries to foresee future trends.",,,197,203,Solid-state; Internet privacy; Best practice; Mobile device; Data science; Digital evidence; Computer science; Intelligence analysis; Big data; Cloud computing; Digital forensics,,,,,https://doi.org/10.1007/978-3-658-03371-2_17 https://rd.springer.com/chapter/10.1007/978-3-658-03371-2_17 http://www.studioag.pro/wp-content/uploads/2013/10/DigitalForensicsBigData.pdf https://link.springer.com/chapter/10.1007/978-3-658-03371-2_17 https://dblp.uni-trier.de/db/conf/isse/isse2013.html#Guarino13,http://dx.doi.org/10.1007/978-3-658-03371-2_17,,10.1007/978-3-658-03371-2_17,138782056,,0,001-741-032-719-461; 087-690-831-820-163,54,false,, 102-169-873-723-040,Reconstructing streamed video content: A case study on YouTube and Facebook Live stream content in the Chrome web browser cache,,2018,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Graeme Horsman,"Abstract With the increased popularity of online video streaming comes the risk of this technology's subsequent abuse. With a number of cases noted in 2017 where individuals have engaged with illegal or policy breaching video content, digital forensics practitioners are often tasked with investigating the subsequent ‘fingerprint’ of such acts. This is often to determine both the content of a stream in question, and, how it has been interacted with, typically from an analysis of data residing on a suspect's local device. This article provides an examination of the forensic procedures required to identify and reconstruct cached video stream data using both YouTube and Facebook Live as example case studies. Stream reconstruction methodologies are offered where results show that where a YouTube and Facebook Live video have been played, buffered video stream data can be reassembled to produce a viewable video clip of content.",26,,S30,S37,Cache; World Wide Web; Suspect; Content (Freudian dream analysis); Popularity; Stream data; Web browser; Live video; Computer science; Digital forensics,,,,,https://www.sciencedirect.com/science/article/abs/pii/S1742287618301932 https://dblp.uni-trier.de/db/journals/di/di26.html#Horsman18a https://research.tees.ac.uk/en/publications/reconstructing-streamed-video-content-a-case-study-on-youtube-and https://doi.org/10.1016/j.diin.2018.04.017 https://research.tees.ac.uk/ws/files/6554397/621817.pdf https://www.sciencedirect.com/science/article/pii/S1742287618301932 https://core.ac.uk/download/322331504.pdf,http://dx.doi.org/10.1016/j.diin.2018.04.017,,10.1016/j.diin.2018.04.017,2795378978,,0,,16,true,cc-by-nc-nd,hybrid 102-243-142-344-71X,Formalising investigative decision making in digital forensics: Proposing the Digital Evidence Reporting and Decision Support (DERDS) framework,,2019,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Graeme Horsman,"Abstract In the field of digital forensics it is crucial for any practitioner to possess the ability to make reliable investigative decisions which result in the reporting of credible evidence. This competency should be considered a core attribute of a practitioner’s skill set and it is often taken for granted that all practitioners possess this ability; in reality this is not the case. A lack of dedicated research and formalisation of investigative decision making models to support digital forensics practitioner’s is an issue given the complexity of many digital investigations. Often, the ability to make forensically sound decisions regarding the reliability of any findings is arguably an assumed trait of the practitioner, rather than a formally taught competency. As a result, the digital forensic discipline is facing increasing recent scrutiny with regards to the quality and validity of evidence it’s practitioners are producing. This work offers the Digital Evidence Reporting and Decision Support (DERDS) framework, designed to help the practitioner assess the reliability of their ‘inferences, assumptions of conclusions’ in relation to any potentially evidential findings. The structure and application of the DERDS framework is discussed, demonstrating the stages of decision making a practitioner must undergo when evaluating the accuracy of their findings, whilst also recognising when content may be deemed unsafe to report.",28,,146,151,Decision support system; Set (psychology); Relation (database); Scrutiny; Quality (business); Digital evidence; Decision-making models; Computer science; Knowledge management; Digital forensics,,,,,https://jglobal.jst.go.jp/en/detail?JGLOBAL_ID=201902227595710700 https://research.tees.ac.uk/en/publications/formalising-investigative-decision-making-in-digital-forensics-pr https://dblp.uni-trier.de/db/journals/di/di28.html#Horsman19 https://www.sciencedirect.com/science/article/pii/S1742287618302731,http://dx.doi.org/10.1016/j.diin.2019.01.007,,10.1016/j.diin.2019.01.007,2911386828,,0,000-659-280-122-390; 004-200-813-216-207; 008-598-808-594-324; 012-410-670-929-028; 026-774-296-742-022; 034-773-286-616-44X; 042-230-817-975-353; 050-513-243-638-138; 061-269-967-405-492; 064-549-392-650-90X; 066-235-037-082-291; 075-529-701-912-32X; 078-730-781-174-18X; 080-196-042-005-758; 111-488-239-742-003; 120-454-127-510-479; 137-755-137-054-864; 142-790-196-752-819; 182-670-398-460-931,24,true,cc-by-nc-nd,green 102-385-975-365-674,Forensic analysis of a Sony PlayStation 4,,2015,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Matthew Davies; Huw Read; Konstantinos Xynos; Iain Sutherland,"The primary function of a games console is that of an entertainment system. However the latest iteration of these consoles has added a number of new interactive features that may prove of value to the digital investigator. This paper highlights the value of these consoles, in particular Sony's latest version of their PlayStation. This console provides a number of features including web browsing, downloading of material and chat functionality; all communication features that will be of interest to forensic investigators. In this paper we undertake an initial investigation of the PlayStation 4 games console. This paper identifies potential information sources of forensic value with the PlayStation 4 and provides a method for acquiring information in a forensically sound manner. In particular issues with the online and offline investigative process are also identified.",12,,S81,S89,World Wide Web; Online and offline; Computer science; Process (engineering); Video game packaging; Multimedia; Entertainment; Web navigation; Upload; Function (engineering),,,,,https://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1939&context=ecuworkspost2013 https://core.ac.uk/display/82136117 https://www.sciencedirect.com/science/article/pii/S1742287615000146 https://www.sciencedirect.com/science/article/abs/pii/S1742287615000146 https://www.mendeley.com/catalogue/09696697-6a81-3f40-ae11-bde85b2dac7f/ https://dl.acm.org/doi/10.1016/j.diin.2015.01.013 https://doi.org/10.1016/j.diin.2015.01.013 https://dblp.uni-trier.de/db/journals/di/di12.html#DaviesRXS15 https://ro.ecu.edu.au/ecuworkspost2013/938/ https://core.ac.uk/download/pdf/82136117.pdf,http://dx.doi.org/10.1016/j.diin.2015.01.013,,10.1016/j.diin.2015.01.013,2090057777,,0,027-835-655-333-208; 045-793-574-611-616; 052-783-938-076-074; 081-216-246-651-622; 087-705-894-476-40X; 109-496-095-188-012; 160-818-318-297-75X,11,true,cc-by-nc-nd,hybrid 102-410-389-190-13X,Prelim iii - Contents List,,2020,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,32,,300967,300967,Information retrieval; Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(20)30145-1,,10.1016/s2666-2817(20)30145-1,,,0,,0,false,, 102-504-980-030-915,Splicing forgery localization via noise fingerprint incorporated with CFA configuration.,2022-09-11,2022,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Lei Liu; Peng Sun; Yubo Lang; Jingjiao Li; Shaopei Shi,,340,,111464,111464,Noise (video); Gaussian noise; Artificial intelligence; Value noise; Gradient noise; Dark-frame subtraction; Salt-and-pepper noise; Computer science; Pixel; Computer vision; Fingerprint (computing); Noise reduction; Median filter; Image noise; Additive white Gaussian noise; Pattern recognition (psychology); Interpolation (computer graphics); Mathematics; Noise measurement; White noise; Image processing; Image (mathematics); Noise floor; Telecommunications,CFA configuration; Digital image forensics; Forgery localization; Noise estimation,Algorithms,,,,http://dx.doi.org/10.1016/j.forsciint.2022.111464,36162299,10.1016/j.forsciint.2022.111464,,,0,003-499-035-235-702; 008-944-622-967-339; 014-134-947-982-724; 015-008-156-784-827; 023-412-841-082-502; 025-425-975-627-809; 029-406-524-233-132; 029-548-051-486-220; 040-425-146-348-064; 042-229-154-933-073; 045-496-560-764-477; 045-812-091-260-656; 046-712-860-860-954; 053-202-076-343-746; 069-847-568-544-420; 072-687-923-553-865; 083-097-133-928-799; 083-403-058-426-643; 094-512-991-043-860; 104-279-390-845-094; 107-411-322-170-595; 110-356-583-096-716; 119-887-749-030-849; 130-663-370-547-398; 132-815-339-277-37X; 133-556-409-136-613; 135-262-782-091-897; 171-483-137-477-150,0,false,, 102-562-783-311-06X,A Comprehensive Collection and Analysis Model for the Drone Forensics Field.,2022-08-29,2022,journal article,"Sensors (Basel, Switzerland)",14248220; 14243210,Multidisciplinary Digital Publishing Institute (MDPI),Switzerland,Fahad Mazaed Alotaibi; Arafat Al-Dhaqm; Yasser D Al-Otaibi; Abdulrahman A Alsewari,"Unmanned aerial vehicles (UAVs) are adaptable and rapid mobile boards that can be applied to several purposes, especially in smart cities. These involve traffic observation, environmental monitoring, and public safety. The need to realize effective drone forensic processes has mainly been reinforced by drone-based evidence. Drone-based evidence collection and preservation entails accumulating and collecting digital evidence from the drone of the victim for subsequent analysis and presentation. Digital evidence must, however, be collected and analyzed in a forensically sound manner using the appropriate collection and analysis methodologies and tools to preserve the integrity of the evidence. For this purpose, various collection and analysis models have been proposed for drone forensics based on the existing literature; several models are inclined towards specific scenarios and drone systems. As a result, the literature lacks a suitable and standardized drone-based collection and analysis model devoid of commonalities, which can solve future problems that may arise in the drone forensics field. Therefore, this paper has three contributions: (a) studies the machine learning existing in the literature in the context of handling drone data to discover criminal actions, (b) highlights the existing forensic models proposed for drone forensics, and (c) proposes a novel comprehensive collection and analysis forensic model (CCAFM) applicable to the drone forensics field using the design science research approach. The proposed CCAFM consists of three main processes: (1) acquisition and preservation, (2) reconstruction and analysis, and (3) post-investigation process. CCAFM contextually leverages the initially proposed models herein incorporated in this study. CCAFM allows digital forensic investigators to collect, protect, rebuild, and examine volatile and nonvolatile items from the suspected drone based on scientific forensic techniques. Therefore, it enables sharing of knowledge on drone forensic investigation among practitioners working in the forensics domain.",22,17,6486,6486,Drone; Context (archaeology); Digital forensics; Field (mathematics); Computer science; Network forensics; Process (computing); Crime scene; Computer security; Data science; Data collection; Geography; Statistics; Genetics; Mathematics; Pure mathematics; Biology; Operating system; Archaeology,UAV; design science research; drone forensics; smart cities,Forensic Medicine; Unmanned Aerial Devices,,King Abdulaziz University (IFPRC-062-611-2020),,http://dx.doi.org/10.3390/s22176486,36080945,10.3390/s22176486,,PMC9460793,0,003-098-343-640-278; 003-905-226-015-068; 004-829-487-366-119; 008-667-688-301-190; 010-084-169-561-57X; 010-206-941-178-65X; 010-992-143-070-67X; 013-086-940-357-037; 013-467-951-735-805; 013-718-596-619-888; 017-000-288-040-682; 017-401-436-617-234; 018-648-349-943-059; 020-810-000-409-691; 024-725-750-359-063; 029-239-733-639-707; 035-361-375-885-946; 038-444-083-130-202; 042-354-079-994-804; 042-467-831-044-091; 045-273-252-346-857; 047-976-152-994-121; 048-014-163-114-221; 049-482-656-997-863; 051-970-323-275-12X; 053-991-905-768-763; 056-748-337-856-317; 058-258-776-859-131; 059-025-029-154-030; 063-660-644-964-526; 063-920-550-419-453; 064-421-137-320-740; 070-697-536-773-450; 072-085-485-974-257; 072-183-867-595-593; 082-349-614-760-490; 082-411-807-694-99X; 087-277-393-686-275; 088-125-215-873-987; 089-691-112-427-434; 090-055-896-921-710; 091-777-010-917-052; 094-653-770-630-278; 101-999-935-205-318; 102-058-634-554-487; 105-606-711-193-894; 106-493-355-516-535; 106-498-187-784-620; 110-126-104-344-257; 110-286-232-290-188; 113-763-888-485-306; 114-264-712-796-928; 118-967-097-205-079; 119-090-938-429-332; 122-505-249-443-681; 123-270-078-215-31X; 123-623-736-184-422; 140-930-491-847-027; 145-157-030-537-719; 154-999-855-381-883; 158-752-499-155-521; 159-105-758-152-663; 162-557-179-336-48X; 169-354-069-570-392; 176-972-878-781-87X; 182-533-951-303-229; 184-428-240-098-87X; 193-314-328-330-910; 197-747-601-577-121,0,true,cc-by,gold 102-664-242-084-236,Forensic analysis of BiP Messenger on android smartphones,2019-05-06,2019,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Erhan Akbal; Ibrahim Baloglu; Turker Tuncer; Sengul Dogan,"Nowadays, social media applications and communication tools are utilized as communication platforms and the vast majority of communication is performed using these tools. The instant messaging appl...",52,5,590,609,Instant messaging; Computer science; Multimedia; Social media; Android (operating system); Mobile device forensics; Digital forensics,,,,,https://www.tandfonline.com/doi/full/10.1080/00450618.2019.1610064,http://dx.doi.org/10.1080/00450618.2019.1610064,,10.1080/00450618.2019.1610064,2944445773,,0,004-379-948-536-390; 017-815-064-018-299; 029-159-400-662-132; 029-819-338-371-65X; 036-213-488-430-19X; 038-208-479-675-255; 049-131-797-799-081; 053-516-207-442-042; 058-248-784-098-150; 077-859-446-810-741; 085-214-277-668-01X; 088-938-096-763-07X; 098-880-940-361-257; 113-193-064-453-131; 119-637-551-813-328; 123-393-129-372-391; 152-061-431-586-535; 155-758-692-373-705; 166-183-210-534-575,7,false,, 102-814-076-156-265,Establishing the Validity of Md5 and Sha-1 Hashing in Digital Forensic Practice in Light of Recent Research Demonstrating Cryptographic Weaknesses in these Algorithms,2013-04-18,2013,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,Veronica Schmitt; Jason Jordaan,"and SHA-1 cryptographic hash algorithms are a standard practice in digital forensics that is used in the preservation of digital evidence and ensuring the integrity of the digital evidence. Recent studies have shown that both MD5 and SHA-1 have vulnerabilities and collisions. Based on this, the use of MD5 and SHA-1 hash algorithms in the practice of digital forensics to preserve and ensure the integrity of digital evidence has been questioned in certain instances. Using experimentation, the researcher proves the validity of using either MD5 or SHA-1 hashing algorithms to ensure the integrity of seized digital evidence, from the moment of seizure of the evidence, through to eventual presentation and use of the evidence in court; thus demonstrating that the use of hashing remains a valid forensic methodology to ensure the integrity of digital evidence. Keywordsforensics, integrity of digital evidence, hash collisions,",68,23,40,43,Algorithm; Forensic science; MD5; Cryptography; Digital evidence; Computer security; Computer science; Cryptographic hash function; SHA-1; Digital forensics; Hash function,,,,,http://www.lex-informatica.org/2%20Ensuring%20the%20Legality%20of%20the%20Digital%20Forensics%20Process%20in%20South%20Africa.pdf https://www.ijcaonline.org/archives/volume68/number23/11723-7433 https://research.ijcaonline.org/volume68/number23/pxc3887433.pdf https://www.ijcaonline.org/archives/volume68/number23/11723-7433?format=pdf,http://dx.doi.org/10.5120/11723-7433,,10.5120/11723-7433,2106303773,,0,017-167-454-912-226; 033-361-255-406-653; 085-214-277-668-01X; 095-080-443-019-181; 124-466-422-768-986; 142-108-488-120-966; 154-255-264-599-600; 159-970-925-091-033,9,true,,bronze 103-294-378-905-305,Part 1:- quality assurance mechanisms for digital forensic investigations: Introducing the Verification of Digital Evidence (VODE) framework,,2020,journal article,Forensic Science International: Reports,26659107,Elsevier BV,,Horsman Graeme,"Abstract Quality assurance measures in the field of digital forensics play a vital role for upholding and developing investigatory standards. Coupled with the fast pace of technology, practitioners in this discipline are often faced with the challenge of interpreting previously unseen or undocmented forms of potentially evidential digital data, content which may be crucial to a current case under investigation. Mechanisms to support this interpretative process offer support for the practitioner, helping to guide them through this task and the steps involved in ensuring any reported information is accurate. This work presents the Verification of Digital Evidence (VODE) framework, designed to support digital forensic practitioners when testing and verifying their interpretation of digital data. The stages of VODE are discussed and its application placed in context.",2,,100038,,Quality assurance; Data science; Pace; Digital data; Context (language use); Task (project management); Digital evidence; Computer science; Process (engineering); Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S2665910719300386 https://research.tees.ac.uk/en/publications/part-1-quality-assurance-mechanisms-for-digital-forensic-investig https://core.ac.uk/download/pdf/232941017.pdf,http://dx.doi.org/10.1016/j.fsir.2019.100038,,10.1016/j.fsir.2019.100038,2981002495,,0,006-933-430-647-14X; 010-963-610-208-920; 017-792-811-186-108; 018-552-581-098-658; 026-810-683-474-561; 028-413-064-651-69X; 030-178-593-043-926; 038-803-786-854-954; 039-999-270-718-277; 047-386-524-667-691; 061-269-967-405-492; 063-579-080-753-513; 064-549-392-650-90X; 066-840-680-591-488; 078-730-781-174-18X; 089-048-294-489-077; 095-691-114-276-825; 102-243-142-344-71X; 105-904-512-640-36X; 111-488-239-742-003; 137-755-137-054-864; 142-790-196-752-819; 184-948-841-629-735,2,true,"CC BY, CC BY-NC-ND",gold 104-787-005-142-28X,ARTIFICIAL INTELLIGENCE BASED DIGITAL FORENSICS FRAMEWORK,2017-10-20,2017,journal article,International Journal of Advanced Research in Computer Science,09765697,IJARCS International Journal of Advanced Research in Computer Science,,Parag H. Rughani,"With increase in number of Internet and smartphone users, cyber crimes are equally increased. Current resources including man power are not sufficient to investigate and solve cyber crimes with the pace they are committed. Present tools and technology require human interaction at large scale, which slows down the process. There is acute need to optimize speed and performance of Digital Forensic Tools to keep pace with the reported cyber crimes. An Artificial Intelligence Based Digital Forensics Framework is proposed in this paper to overcome above issues. The framework proposed in this paper require minimum user interaction and does majority of routine operations by intelligence acquired from training. Outcome of the work is mentioned in the form of proposed framework to optimize digital forensics process.",8,8,10,14,The Internet; Artificial architecture; Artificial intelligence; Pace; Scale (chemistry); Human interaction; Cyber crime; Computer science; Process (engineering); Digital forensics,,,,,http://www.ijarcs.info/index.php/Ijarcs/article/download/4571/4116 http://ijarcs.info/index.php/Ijarcs/article/view/4571,http://dx.doi.org/10.26483/ijarcs.v8i8.4571,,10.26483/ijarcs.v8i8.4571,2765088361,,0,016-661-251-213-668; 038-668-970-194-854; 095-691-114-276-825; 119-234-785-721-155; 134-927-490-231-285,12,true,cc-by,hybrid 105-101-095-930-34X,Digital Forensics,2020-12-30,2020,journal article,Advanced Computing and Communications,,Advanced Computing and Communications Society - ACCS,,Sanjay Sahay,"Digital forensics is the science of recovery and investigation of material found on digital devices. It started in correlation to computer / cybercrimes. In reality, digital forensics use is not limited to criminal investigation in the strict sense of the term, it can proactively encompass the investigative element of every facet of our digital life. The very nature of technology by way of strict and infallible documentation allows for its all pervasiveness. It has the potential to provide an intelligence of the functional type, which generally seems to be missing besides adding a new dimension to criminal investigation.",,,,,Digital forensics; Computer forensics; Digital evidence; Computer science; Documentation; Facet (psychology); Dimension (graph theory); Computer security; Crime scene; Criminal investigation; Term (time); Data science; World Wide Web,,,,,,http://dx.doi.org/10.34048/2020.4.f2,,10.34048/2020.4.f2,,,0,,0,true,,bronze 105-172-469-227-770,Coffee forensics — Reconstructing data in IoT devices running Contiki OS,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Jens-Petter Sandvik; Katrin Franke; Habtamu Abie; André Årnes,"Abstract The ability to examine evidence and reconstruct files from novel IoT operating systems, such as Contiki with its Coffee File System, is becoming vital in digital forensic investigations. Two main challenges for an investigator facing such devices are that (i) the forensic artifacts of the file system are not well documented, and (ii) there is a lack of available forensic tools. To meet these challenges, we use code review and an emulator to gain insight into the Coffee file system, including its functionality, and implement reconstruction of deleted and modified data from extracted flash memory in software. We have integrated this into a forensic tool, COFFOR, and analyzed the Coffee File System to reconstruct deleted and modified files. This paper presents an overview of the artifacts in the file system and implements methods for the chronological ordering of the deleted file versions, and discusses these methods’ limitations. Our results demonstrate that forensic acquisition and analysis of devices running the Contiki operating system can reveal live and deleted files, as well as file version history. In some cases, a complete, chronological ordering of the version history can be reconstructed.",37,,301188,,Operating system; Code review; Flash memory; Software; File system; Version history; Computer science; Internet of Things; Digital forensics,,,,Norges Forskningsråd,https://www.sciencedirect.com/science/article/pii/S2666281721000962 https://dfrws.org/wp-content/uploads/2021/09/2021-usa-paper-16-coffee_forensics_reconstructing_data_in_iot_devices_running_contiki_os.pdf https://dfrws.org/presentation/coffee-forensics-reconstructing-data-in-iot-devices-running-contiki-os/,http://dx.doi.org/10.1016/j.fsidi.2021.301188,,10.1016/j.fsidi.2021.301188,3184044395,,0,004-417-329-905-163; 005-899-402-239-840; 013-013-001-967-18X; 021-639-389-699-293; 025-166-880-695-59X; 039-999-270-718-277; 043-331-339-299-600; 053-242-584-326-535; 055-759-190-950-68X; 072-070-835-286-795; 074-933-143-629-826; 081-746-298-679-238; 085-008-427-439-371; 092-043-845-339-506; 092-827-935-965-207; 107-942-544-689-539; 112-181-239-331-730; 112-223-617-110-787; 131-874-028-513-738; 196-499-458-512-993,1,true,cc-by-nc-nd,hybrid 105-656-858-306-780,Forensic Investigation of Cooperative Storage Cloud Service: Symform as a Case Study.,2016-11-25,2016,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Yee-Yang Teing; Ali Dehghantanha; Kim-Kwang Raymond Choo; Tooska Dargahi; Mauro Conti,"Researchers envisioned Storage as a Service (StaaS) as an effective solution to the distributed management of digital data. Cooperative storage cloud forensic is relatively new and is an under-explored area of research. Using Symform as a case study, we seek to determine the data remnants from the use of cooperative cloud storage services. In particular, we consider both mobile devices and personal computers running various popular operating systems, namely Windows 8.1, Mac OS X Mavericks 10.9.5, Ubuntu 14.04.1 LTS, iOS 7.1.2, and Android KitKat 4.4.4. Potential artefacts recovered during the research include data relating to the installation and uninstallation of the cloud applications, log-in to and log-out from Symform account using the client application, file synchronization as well as their time stamp information. This research contributes to an in-depth understanding of the types of terrestrial artifacts that are likely to remain after the use of cooperative storage cloud on client devices.",62,3,641,654,Engineering; Mobile device; Cooperative storage cloud; Cloud storage; Storage as a service; Computer security; OS X; Android (operating system); Mobile device forensics; Database; Cloud computing,Symform analysis; cloud forensics; cooperative cloud; digital forensics; forensic science; mobile app forensics; mobile device forensics; peer-to-peer forensics,,,European Council International Incoming Fellowship; European Commission; EU TagItSmart! Project; EU-India REACH Project; University of Padua,https://dialnet.unirioja.es/servlet/articulo?codigo=6016974 https://eprints.whiterose.ac.uk/128357/ https://onlinelibrary.wiley.com/doi/full/10.1111/1556-4029.13271 https://core.ac.uk/display/46611218 https://usir.salford.ac.uk/40496/ https://www.research.unipd.it/handle/11577/3211495 https://core.ac.uk/download/151397165.pdf,http://dx.doi.org/10.1111/1556-4029.13271,27885663,10.1111/1556-4029.13271,2555320672,,0,000-132-422-881-51X; 002-768-711-065-857; 003-135-959-594-644; 007-803-508-283-309; 010-286-028-596-352; 011-211-518-312-834; 011-972-444-921-827; 013-206-935-502-854; 018-696-253-395-568; 019-698-064-288-240; 024-894-908-869-686; 025-723-055-730-999; 028-290-062-141-840; 040-652-005-186-639; 041-879-975-858-398; 045-701-748-075-614; 047-833-989-327-699; 049-977-511-720-26X; 051-368-118-380-383; 056-205-328-777-528; 057-421-097-368-120; 058-631-300-195-90X; 059-697-278-686-056; 061-960-915-134-527; 063-637-896-533-25X; 068-459-443-764-162; 069-436-005-091-548; 069-754-697-292-909; 074-503-636-433-987; 083-322-626-930-350; 087-836-903-404-986; 091-540-399-535-662; 091-619-263-117-914; 095-691-114-276-825; 096-289-210-165-616; 101-091-831-428-576; 102-182-774-566-752; 102-734-676-905-303; 116-075-998-238-410; 121-704-965-852-836; 141-164-327-638-772; 144-124-797-675-052; 170-108-067-251-840,24,true,,green 106-021-721-854-935,The Art and Science of Digital Visual Media Forensics,2018-12-26,2018,journal article,"Forensic, Legal & Investigative Sciences",2473733x,Herald Scholarly Open Access,,Raahat Devender Singh,,4,,1,6,Visual media; Computer science; Multimedia,,,,,http://dx.doi.org/10.24966/flis-733x/100021 https://dx.doi.org/10.24966/flis-733x/100021,http://dx.doi.org/10.24966/flis-733x/100021,,10.24966/flis-733x/100021,2911759662,,0,,0,true,cc-by,gold 106-169-386-186-36X,P2DF: A Privacy-Preserving Digital Forensics Framework,2021-11-01,2021,journal article,International Journal of Digital Crime and Forensics,19416210; 19416229,IGI Global,United States,Muhammad Abulaish; Nur Al Hasan Haldar; Jahiruddin Jahiruddin,"

The extensive use of digital devices by individuals generates a significant amount of private data which creates challenges for investigation agencies to protect suspects' privacy. Existing digital forensics models illustrate the steps and actions to be followed during an investigation, but most of them are inadequate to investigate a crime with all the processes in an integrated manner and do not protect suspect's privacy. In this paper, we propose the development of a privacy-preserving digital forensics (P2DF) framework, which facilitates investigation through maintaining confidentiality of the suspects through various privacy standards and policies. It includes an access control mechanism which allows only authorized investigators to access private data and identified digital evidences. It is also equipped with a digital evidence preservation mechanism which could be helpful for the court of law to ensure the authenticity, confidentiality, and reliability of the evidences, and to verify whether privacy of the suspect was preserved during the investigation process.

",13,6,1,15,Privacy preserving; Computer security; Computer science; Digital forensics,,,,,https://www.igi-global.com/viewtitle.aspx?TitleId=288547,http://dx.doi.org/10.4018/ijdcf.288547,,10.4018/ijdcf.288547,3206525595,,0,001-381-793-304-07X; 012-608-868-939-962; 020-944-423-224-895; 021-850-998-857-676; 026-774-296-742-022; 028-656-707-596-927; 031-400-709-717-795; 035-129-008-760-918; 039-365-534-871-351; 041-018-610-330-094; 045-581-544-307-619; 062-325-585-829-185; 087-665-408-966-240; 089-048-294-489-077; 098-748-261-333-651; 105-972-775-368-649; 109-652-769-766-539; 121-830-022-805-361; 125-833-554-920-626; 127-948-386-055-225; 134-927-490-231-285; 142-388-561-082-054; 159-477-048-665-066,0,true,,gold 106-295-038-562-776,Improved photo response non-uniformity (PRNU) based source camera identification,2013-01-09,2013,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Alan J. Cooper,,226,1,132,141,Image (mathematics); Artificial intelligence; Pixel; Matching (statistics); JPEG; Camera identification; Computer vision; Computer science; Wavelet; Median filter; Digital forensics,,,,,http://europepmc.org/abstract/MED/23312587 https://www.sciencedirect.com/science/article/pii/S0379073812005695 http://www.sciencedirect.com/science/article/pii/S0379073812005695,http://dx.doi.org/10.1016/j.forsciint.2012.12.018,23312587,10.1016/j.forsciint.2012.12.018,2037023837,,0,004-023-060-478-098; 007-398-225-185-040; 013-766-124-774-712; 013-950-329-613-867; 033-644-112-851-231; 053-781-637-768-867; 060-043-515-260-052; 073-556-368-991-677; 083-097-133-928-799; 083-328-037-401-562; 086-191-392-686-704; 086-329-707-207-093; 101-099-911-506-948; 122-262-717-372-439; 124-562-211-839-940; 127-647-658-616-390; 138-044-084-375-642; 151-372-268-187-893; 159-132-926-596-284; 159-194-489-256-073; 160-685-922-453-820; 163-715-300-552-254; 164-717-721-813-673; 168-543-482-106-856; 172-636-430-281-377; 184-897-235-429-285; 187-010-103-642-446,42,false,, 106-326-322-500-176,Digital forensics in a post-truth age.,2018-06-06,2018,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Hany Farid,,289,,268,269,Internet privacy; Social responsibility; Deception; MEDLINE; Post truth; Computer science; Digital forensics,,Deception; Forensic Sciences; Humans; Social Media/legislation & jurisprudence; Social Responsibility,,,https://pubmed.ncbi.nlm.nih.gov/29909299/ https://www.ncbi.nlm.nih.gov/pubmed/29909299,http://dx.doi.org/10.1016/j.forsciint.2018.05.047,29909299,10.1016/j.forsciint.2018.05.047,2805243269,,0,,12,false,, 106-438-149-842-522,“Scaffolding” responses to digital forensic inquiries,2021-11-27,2021,journal article,WIREs Forensic Science,25739468,Wiley,,Graeme Horsman,,4,4,,,Engineering; Multimedia; Digital forensics; Scaffold,,,,,https://wires.onlinelibrary.wiley.com/doi/pdf/10.1002/wfs2.1451,http://dx.doi.org/10.1002/wfs2.1451,,10.1002/wfs2.1451,3215802464,,0,000-084-741-857-185; 002-288-892-034-343; 005-715-450-998-72X; 006-933-430-647-14X; 009-512-003-529-193; 010-061-391-662-193; 010-963-610-208-920; 012-564-492-558-122; 021-850-998-857-676; 024-350-847-240-124; 024-445-108-979-867; 036-189-930-199-369; 075-128-417-091-483; 077-287-216-746-675; 079-858-593-881-513; 086-653-920-850-621; 092-765-349-680-750; 099-377-733-522-116; 102-243-142-344-71X; 110-700-351-633-754; 111-488-239-742-003; 113-520-825-550-67X; 118-838-969-146-870; 142-790-196-752-819; 173-145-269-859-717; 179-703-555-795-891,0,false,, 106-447-661-962-51X,A Comprehensive Study of Cloud Forensics,2021-03-29,2021,journal article,Archives of Computational Methods in Engineering,11343060,Springer Netherlands,Spain,Prasad Purnaye; Vrushali Kulkarni,"Cloud Computing has many facets to it which makes it diverse. Investigation of a cyber-crime that involves the cloud as a subject, object, or as an environment, is cloud forensics. Challenges in cloud forensics exist at every phase of digital forensics. To provide a holistic solution to overcome these challenges we must first understand the cloud forensics landscape (the Cloud). The elements which give the Cloud the diversity that it has, and have an impact on the forensics process of the cloud should be taken into consideration while designing the cloud forensics framework. In this paper, the researchers present a comprehensive survey of the research trend in cloud forensics. The paper also proposes a cloud forensics taxonomy based on the paradigms of cloud computing that have an impact on cloud forensics. Although forensics solution taxonomies have been proposed earlier, this paper aims at a taxonomy solution at a more generic level. The proposed taxonomy provides cloud forensics solution strategies for efficient cloud forensics.",,,1,14,Data science; Cloud forensics; Computer science; Process (engineering); Object (computer science); Cloud computing; Digital forensics; Taxonomy (general),,,,,https://link.springer.com/article/10.1007/s11831-021-09575-w https://research.mitwpu.edu.in/publication/a-comprehensive-study-of-cloud-forensics-1,https://link.springer.com/article/10.1007/s11831-021-09575-w,,,3146114005,,0,000-566-000-503-971; 001-105-589-691-307; 001-214-207-935-293; 001-495-985-827-938; 003-803-242-209-367; 005-647-704-356-945; 005-800-655-385-595; 008-358-741-185-610; 008-875-575-844-574; 009-780-085-303-411; 015-646-976-755-729; 015-654-094-120-991; 016-073-660-398-930; 016-297-571-355-202; 018-945-932-052-000; 020-935-855-484-274; 021-170-286-847-139; 024-462-843-796-80X; 026-685-280-764-118; 026-921-491-508-650; 030-112-829-048-888; 030-858-457-088-176; 031-187-019-653-974; 034-940-557-037-083; 039-821-878-655-894; 040-652-005-186-639; 043-089-104-450-801; 046-364-966-577-737; 048-866-174-146-800; 049-977-511-720-26X; 051-804-053-721-965; 053-087-626-910-661; 056-205-328-777-528; 057-036-175-579-265; 060-428-330-194-375; 060-874-727-746-537; 061-663-543-986-735; 065-770-524-941-274; 065-773-430-414-653; 069-321-593-565-593; 075-366-793-103-250; 076-889-170-335-628; 083-091-368-558-414; 088-909-224-066-322; 090-300-716-873-333; 090-331-699-962-239; 091-912-350-006-721; 092-039-178-633-223; 103-749-645-980-640; 104-400-810-483-504; 106-644-756-826-249; 112-001-298-556-592; 115-590-422-782-51X; 121-020-778-766-986; 125-682-509-275-554; 130-121-633-175-084; 131-679-830-757-808; 132-342-259-584-364; 135-834-233-194-309; 137-672-184-733-524; 141-227-167-540-818; 178-467-155-611-813,2,false,, 106-660-897-288-659,A systematic analysis on the readiness of Blockchain integration in IoT forensics,,2022,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Salam Khanji; Omar Alfandi; Liza Ahmad; Lubna Kakkengal; Mousa Al-kfairy,,42-43,,301472,,,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301472,,10.1016/j.fsidi.2022.301472,,,0,002-020-246-447-998; 010-284-227-477-250; 011-346-280-278-987; 018-948-094-812-86X; 025-366-195-449-207; 041-749-004-943-703; 046-143-775-958-052; 051-785-078-933-787; 055-314-742-278-00X; 065-770-524-941-274; 088-553-642-323-93X; 097-939-114-561-254; 100-122-713-786-092; 126-634-051-095-972; 154-393-793-915-985; 161-748-679-720-416; 167-751-222-897-487,0,false,, 106-951-294-774-578,ssdeeper: Evaluating and improving ssdeep,,2022,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Carlo Jakobs; Martin Lambertz; Jan-Niclas Hilgert,,42,,301402,,,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301402,,10.1016/j.fsidi.2022.301402,,,0,004-652-388-189-304; 030-121-862-351-330; 033-361-255-406-653; 080-288-823-874-989,0,false,, 107-291-552-186-572,"Drone GPS data analysis for flight path reconstruction: A study on DJI, Parrot & Yuneec make drones",,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Ravin Kumar; Animesh Kumar Agrawal,,38,,301182,,Personalization; restrict; Gps data; Field (computer science); Computer security; Computer science; Drone,,,,,https://www.sciencedirect.com/science/article/pii/S2666281721000901 https://doi.org/10.1016/j.fsidi.2021.301182,http://dx.doi.org/10.1016/j.fsidi.2021.301182,,10.1016/j.fsidi.2021.301182,3167698676,,0,008-667-688-301-190; 011-755-498-862-139; 016-443-729-291-767; 028-151-765-287-993; 029-563-465-806-154; 046-314-745-466-915; 122-122-879-514-001; 170-162-481-967-059,4,false,, 107-331-068-996-577,"Genesis and Issues of Using Latest Technologies and Artificial Intelligence in Criminalistics, Forensic Expert Activity and Pre-Trial Investigation",2021-12-30,2021,journal article,Theory and Practice of Forensic Science and Criminalistics,19930917,Hon. Prof. M.S. Bokarius Kharkiv Research Institute of Forensic Examinations,,Oleksandr Ukhno,"The genesis of development and ways to improve theoretical and applied areas of criminalistics, forensic expertology and criminal procedure for solving forensic, procedural, organizational and other issues of implementation and use of science and technology in pre-trial investigation and trial of criminal offenses in various historical offenses in Ukraine. Special attention is paid to the scientific approach to the selection, implementation, use of computers, telecommunications, digital and other modern technologies and networks, artificial intelligence and advances in science and technology in forensics, expertise and pretrial investigation. The scientific positions of individual scientists and representatives of domestic and foreign scientific schools on these issues were studied and analyzed (inparticular, on the discussion, coverage and legislative consolidation in the legal and procedural mechanisms of selection, implementation and use of these technologies). The author’s vision is expressed and the scientific position on the raised problem questions and ways of their decision is formulated. ; The aim is to analyze the historical development and current state of forensic, procedural and organizational issues of selection, licensing, use, adaptation of modern information, digital, telecommunications, computer and other technologies (including artificial intelligence) in forensics, expertise and pre-trial investigation, as well as the regulatory framework governing certain issues in this area.",25,3,40,59,,,,,,,http://dx.doi.org/10.32353/khrife.3.2021.04,,10.32353/khrife.3.2021.04,,,0,,0,true,cc-by,gold 107-338-245-292-063,THE USE OF ONTOLOGIES IN FORENSIC ANALYSIS OF SMARTPHONE CONTENT,,2015,journal article,"Journal of Digital Forensics, Security and Law",15587223,Embry-Riddle Aeronautical University/Hunt Library,,Mohammed Alzaabi; Thomas Martin; Kamal Taha; Andrew Jones,"Digital forensics investigators face a constant challenge in keeping track with evolving technologies such as smartphones. Analyzing the contents of these devices to infer useful information is becoming more time consuming as the volume and complexity of data are increasing. Typically, such analysis is undertaken by a human, which makes it dependent on the experience of the investigator. To overcome such impediments, an automated technique can be utilized in order to aid the investigator to quickly and eciently analyze the data. In this paper, we propose F-DOS; a set of ontologies that models the smartphone content for the purpose of forensic analysis. F-DOS can form a knowledge management component in a forensic analysis system. Its importance lies in its ability to encode the semantics of the smartphone content using concepts and their relationships that are modeled by F-DOS.",10,4,105,114,Semantics; World Wide Web; Set (psychology); Ontology (information science); Data science; Computer science; Component (UML); Network forensics; ENCODE; Mobile device forensics; Digital forensics,,,,,https://ro.ecu.edu.au/cgi/viewcontent.cgi?article=3507&context=ecuworkspost2013 https://commons.erau.edu/jdfsl/vol10/iss4/9/ https://core.ac.uk/display/81695325 https://commons.erau.edu/cgi/viewcontent.cgi?article=1215&context=jdfsl https://ro.ecu.edu.au/ecuworkspost2013/2496/ https://core.ac.uk/download/81695325.pdf,http://dx.doi.org/10.15394/jdfsl.2015.1215,,10.15394/jdfsl.2015.1215,2277703527,,0,016-123-869-009-118; 019-963-643-739-67X; 036-673-313-594-640; 071-645-975-039-209; 085-666-602-084-614; 095-437-078-101-003; 104-788-654-788-51X; 181-072-396-769-365,3,true,cc-by-nc,gold 108-070-913-448-812,From time theft to time stamps: mapping the development of digital forensics from law enforcement to archival authority,2019-03-04,2019,journal article,International Journal of Digital Humanities,25247832; 25247840,Springer Science and Business Media LLC,,Corinne Rogers,"The field of digital forensics seems at first glance quite separate from archival work and digital preservation. However, professionals in both fields are trusted to attest to the identity and integrity of digital documents and traces – they are regarded as experts in the acquisition, interpretation, description and presentation of that material. Archival science and digital forensics evolved out of practice and grew into established professional disciplines by developing theoretical foundations, which then returned to inform and standardize that practice. They have their roots in legal requirements and law enforcement. A significant challenge to both fields, therefore, is the identification of records (archival focus) and evidence (digital forensics focus) in digital systems, establishing their contexts, provenance, relationships, and meaning. This paper traces the development of digital forensics from practice to theory and presents the parallels with archival science.",1,1,13,28,Data science; Parallels; Presentation; Digital preservation; Law enforcement; Archival science; Interpretation (philosophy); Identification (information); Digital forensics; History,,,,,https://link.springer.com/article/10.1007/s42803-019-00002-y,http://dx.doi.org/10.1007/s42803-019-00002-y,,10.1007/s42803-019-00002-y,2920267616,,0,002-214-848-360-115; 002-328-258-595-526; 004-441-167-148-170; 005-573-416-928-102; 013-133-468-228-985; 016-004-336-259-323; 017-840-378-634-021; 020-944-423-224-895; 021-850-998-857-676; 025-421-213-608-128; 031-234-153-523-379; 032-960-619-192-843; 037-647-066-964-858; 038-113-177-930-482; 038-668-970-194-854; 043-589-904-668-295; 055-740-268-775-122; 066-537-795-300-925; 067-629-806-155-212; 069-713-118-371-629; 088-309-759-208-842; 091-484-846-148-688; 098-120-541-214-151; 111-741-773-111-021; 127-086-844-715-002; 127-948-386-055-225; 133-397-275-695-990; 134-927-490-231-285; 149-080-386-855-18X; 151-378-930-836-964; 157-954-859-648-506; 167-906-378-249-754; 178-883-713-153-793; 190-065-821-748-92X; 199-745-676-923-766,2,false,, 108-285-718-831-232,Digital imaging methods as an aid in dental identification of human remains.,2002-03-01,2002,journal article,Journal of forensic sciences,00221198,Wiley-Blackwell,United States,C. Michael Bowers; Raymond J. Johansen,"The physical comparison of known (K) and questioned (Q) evidence samples is an accepted tool in numerous forensic identification disciplines (1). A subset of this process is the use of antemortem and postmortem dental radiographs to identify unidentified human remains. This method has been generally accepted for decades (2). The outcome is performed with a considerable degree of accuracy, due in part to a finite pool of possible candidates for identification derived via the NCIC database, passenger lists, and law enforcement Missing Persons reports. This paper describes a dental identification comparison protocol that incorporated digital imaging technology in this process. The computer was used to create digital exemplars of the K and Q evidence that were spatially and quantitatively compared (3). The digital mode allowed direct metric and morphologic comparison through the aid of a digital camera, desktop computer, monitor, and printer. The well-known computer program Adobe Photoshop 5.0 (4) was used to process the digital information in two forensic cases described in this paper. It is a commercially available digital imaging editing program that is operated on laptop and desktop computers possessing sufficient chip speed and RAM (Pentium II or equivalent and at least 76MB RAM) to open the large-size files generated by high-resolution digital capture devices. This program accepts raster-based image formats (e.g. .JPG, .BMP). Photoshop is noted for its diverse imaging functions, which allow the computer monitor to be used as a comparison microscope when Q and K sample images are tiled side-by-side and/or superimposed. Two and three-dimensional Q and K evidence samples can be individually digitized and then independently resized to allow two-dimensional comparison. The investigator also has the ability to create magnified images (200% to 300%) when the original digital image has been captured at near photoquality resolution (300 dpi). The visual comparison of physical features on the computer monitor permits a large field of view and robust digital control over image quality. Photographic measurement and enhancement features of Adobe Photoshop mimics and in some circumstances surpasses the historic use of conventional photographic manipulation in forensic casework. This paper presents two cases processed via routine forensic odontology identification protocols. These protocols had minimal results due to limitations described in the case histories. The additional application of digital methods proved useful in the ultimate identification of these human remains.",47,2,354,359,Digital imaging; Computer graphics (images); Engineering; Raster graphics; Computer monitor; Digital camera; Forensic identification; Digital image; Image file formats; Identification (information),,"Adolescent; Adult; Dental Restoration, Permanent; Female; Forensic Anthropology/methods; Forensic Dentistry/methods; Humans; Odontometry/methods; Postmortem Changes; Radiography, Dental, Digital/methods; Time Factors; Tooth Root/anatomy & histology",,,https://europepmc.org/article/MED/11908607 https://www.astm.org/DIGITAL_LIBRARY/JOURNALS/FORENSIC/PAGES/JFS15257J.htm http://www.astm.org/DIGITAL_LIBRARY/JOURNALS/FORENSIC/PAGES/JFS15257J.htm https://www.ncbi.nlm.nih.gov/pubmed/11908607 https://pubmed.ncbi.nlm.nih.gov/11908607/,http://dx.doi.org/10.1520/jfs15257j,11908607,10.1520/jfs15257j,1809936814,,0,,23,false,, 109-149-174-428-014,Issues in the development of a digital forensics curriculum,2006-12-01,2006,journal article,Journal of Computing Sciences in Colleges,19374763,,,Tim McGuire; Karon N. Murff,"Digital technology is experiencing an explosion in growth and applications. This explosion has created the new concept of the cyber criminal and the need for security and forensics experts in the digital environment. This paper discusses the theory and rationale used in the development of curricula to provide experts for today's society in the digital security arena. It covers the rationale of the curriculum at the undergraduate and graduate levels. The course content discussed will combine digital forensics theory, history and practice with related technical abilities taught in a lab environment.",22,2,274,280,Software engineering; Forensic science; Digital security; Computer science; Curriculum; Engineering ethics; Digital forensics,,,,,https://dl.acm.org/doi/10.5555/1181901.1181947,https://dl.acm.org/doi/10.5555/1181901.1181947,,,144692667,,0,004-916-146-042-728,15,false,, 109-348-478-867-966,Assessing the Psychological Well-being and Coping Mechanisms of Law Enforcement Investigators vs. Digital Forensic Examiners of Child Pornography Investigations,2017-12-04,2017,journal article,Journal of Police and Criminal Psychology,08820783; 19366469,Springer Science and Business Media LLC,Germany,Kathryn C. Seigfried-Spellar,"Previous research indicates law enforcement investigators and digital forensic examiners working child exploitation cases are at an increased risk for experiencing psychological distress; however, the roles of digital forensic examiners and investigators often overlap substantially when working child pornography cases. Thus, the current study was the first to compare the psychological well-being, job satisfaction, coping mechanisms, and attitudes toward mental health services for individuals working as either digital forensic examiners and/or investigators of child pornography cases. Law enforcement officers were solicited from the Internet Crimes Against Children task force listserv, and based on their current self-reported duties, 20 were classified as digital forensic examiners-only, 71 as investigators-only, and 38 as both digital forensic examiners and investigators of cases involving Internet child pornography. Results showed significant differences between groups; individuals performing both duties scored significantly higher on secondary traumatic stress, higher on feelings of worthlessness, and lower on concentration compared to digital forensic examiners-only. Individuals performing both duties also reported significantly lower scores on job satisfaction compared to investigators-only. Finally, individuals working both duties were significantly more likely to know someone who sought counseling as a result of work-related stress. The study’s mental health implications and future research suggestions are discussed.",33,3,215,226,Compassion fatigue; Feeling; Mental health; Legal psychology; Psychology; Psychological well-being; Job satisfaction; Child pornography; Law enforcement; Clinical psychology,,,,University of Alabama,https://link.springer.com/article/10.1007%2Fs11896-017-9248-7 https://link.springer.com/content/pdf/10.1007%2Fs11896-017-9248-7.pdf,http://dx.doi.org/10.1007/s11896-017-9248-7,,10.1007/s11896-017-9248-7,2772137463,,0,000-490-412-762-138; 007-790-059-029-953; 013-176-763-001-388; 013-568-618-083-770; 013-717-900-010-205; 016-714-762-385-310; 018-005-352-608-818; 021-201-295-792-01X; 023-205-079-263-974; 026-595-897-410-847; 026-918-579-601-799; 029-442-923-036-644; 041-010-815-625-113; 045-583-164-562-588; 047-353-646-775-446; 053-339-196-107-235; 055-046-286-108-710; 055-212-525-283-817; 059-562-542-068-452; 059-982-120-158-213; 060-169-748-750-953; 062-222-443-665-400; 067-144-932-123-187; 073-313-808-035-835; 077-205-567-824-784; 078-107-853-109-113; 078-385-199-956-202; 079-819-982-015-318; 080-161-175-307-872; 088-958-937-400-993; 100-436-172-024-424; 104-298-972-263-215; 111-901-632-410-562; 119-029-461-264-24X; 143-811-701-631-820; 157-454-151-474-60X; 165-774-156-145-795; 167-446-807-052-825; 197-860-668-008-411; 199-372-341-017-471,18,false,, 109-597-940-114-831,Prelim i - Editorial Board,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,40,,301382,301382,Editorial board,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00063-4,,10.1016/s2666-2817(22)00063-4,,,0,,0,true,,bronze 109-904-428-698-679,The forensic imagination: interdisciplinary approaches to tracing creativity in writers' born-digital archives,2019-08-11,2019,journal article,Archives and Manuscripts,01576895; 21646058,Australian Society of Archivists,United Kingdom,Paul Gooding; Jos Smith; Justine Mann,"In 2013, Matthew Kirschenbaum advocated for increased collaboration between digital archivists and digital humanities specialists to make the most out of born-digital archives. Since then, researchers and archivists have experimented with innovative interfaces for access to writer’s archives that emerge from individual research cultures and practices. Simultaneously, archives such as the British Archive for Contemporary Writing (BACW) at the University of East Anglia (UEA) are beginning to collect the work of authors who work in inventive digital ways. This article will therefore explore the following question: how might archivists, authors and researchers profitably collaborate to explore the nature of creativity in the born-digital archive, so that both digital preservation and digital scholarship take place? In doing so, the authors look to the complementary fields of genetic criticism and digital humanities to inform the development of archival tools as ‘hermeneutical instruments’. They will explore how such instruments might allow us to read horizontally across archival strata, building on an ‘esthetic of the possible’ to develop a ‘jouer avec les fonds’, supported through collaboration between researchers, archivists and writers. Finally, the authors consider how this approach challenges archival practices, and propose forms of collaboration that might address both archival practice and emerging forms of scholarship.",47,3,374,390,Creativity; Sociology; Visual arts; Work (electrical); Digital humanities; Born-digital; Scholarship; Digital preservation; Digital scholarship; Criticism,,,,,http://eprints.gla.ac.uk/184018/ https://www.tandfonline.com/doi/full/10.1080/01576895.2019.1608837 https://ueaeprints.uea.ac.uk/70967/ https://research-portal.uea.ac.uk/en/publications/the-forensic-imagination-interdisciplinary-approaches-to-tracing- https://core.ac.uk/download/200201245.pdf,http://dx.doi.org/10.1080/01576895.2019.1608837,,10.1080/01576895.2019.1608837,2954062211,,0,,5,true,cc0,green 110-131-476-217-052,Data Mining Technique to Data Collection and Analysis for Cyber Forensic,2020-01-30,2020,journal article,International Journal of Recent Technology and Engineering (IJRTE),22773878,Blue Eyes Intelligence Engineering and Sciences Engineering and Sciences Publication - BEIESP,,Prashant Khobragade*; Pranay Saraf; Preeti Thakre; Priya maidamwar,"In the world of Digital forensic the uncovered digital may contain vital information for digital data investigation for investigator. Digital data collected from the crime scene leads to find out the clue after performing analysis by the examiner. This process of data examination data collection and analysis plays important role in cyber world for the forensic investigator. The cybercrime is a part of computer forensics where the digital evidences are analyze by the investigator and to perform analysis special measurements and techniques are required in order to use this details that has to be accepted in court of law for law enforcement. The data collection of evidence is a key aspect for the investigator, such kind of digital data has to be collected from different sources at the crime scene and this process involves to collect each and every evidence of digital crime scene and later this gather data will be analyze by the experts to reach to the conclusion. In this paper the proposed method collected the data from the crime scene efficiently which includes log data, transactional data, physical drive data, and network data; later this collected data analyzed to find out the theft node in the network. In this paper FTK 4.0 digital forensic tool used to reduce plenty of time for data processing and later report will be produce that will be accepted tin the court of law. This paper also focuses the data collection method with in the network and reach to the faulty node and later this faulty node analyzed with all collected data for forensic analysis. For this standard algorithm used to analyze the performance of distinct features used for network attacks. Kmeans clustering methodology is used to create cluster of victim node and represent victim data in systematic manner for the ease of law enforcement.",8,5,2786,2789,Digital evidence; Digital forensics; Law enforcement; Computer science; Data collection; Crime scene; Digital data; Network forensics; Node (physics); Cybercrime; Process (computing); Data science; Computer security,,,,,,http://dx.doi.org/10.35940/ijrte.d8543.018520,,10.35940/ijrte.d8543.018520,,,0,,0,true,,gold 110-377-139-748-215,The case for Zero Trust Digital Forensics,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Christopher Neale; Ian Kennedy; Blaine Price; Yijun Yu; Bashar Nuseibeh,"It is imperative for all stakeholders that digital forensics investigations produce reliable results to ensure the field delivers a positive contribution to the pursuit of justice across the globe. Some aspects of these investigations are inevitably contingent on trust, however this is not always explicitly considered or critically evaluated. Erroneously treating features of the investigation as trusted can be enormously damaging to the overall reliability of an investigation's findings as well as the confidence that external stakeholders can have in it. As an example, digital crime scenes can be manipulated by tampering with the digital artefacts left on devices, yet recent studies have shown that efforts to detect occurrences of this are rare and argue that this leaves digital forensics investigations vulnerable to accusations of inaccuracy. In this paper a new approach to digital forensics is considered based on the concept of Zero Trust, an increasingly popular design in network security. Zero Trust describes the practitioner mindset and principles upon which the reliance on trust in network components is eliminated in favour of dynamic verification of network interactions. An initial Definition of Zero Trust Digital Forensics will be proposed and then a specific example considered showing how this strategy can be applied to digital forensic investigations to mitigate against the specific risk of evidence tampering. A definition of Zero Trust Digital Forensics is proposed, specifically that it is ‘a strategy adopted by investigators whereby each aspect of an investigation is assumed to be unreliable until verified’. A new principle will be introduced, namely the ‘multifaceted verification of digital artefacts’ that can be used by practitioners who wish to adopt a Zero Trust Digital Forensics strategy during their investigations. A qualitative review of existing artefact verification techniques is also conducted in order to briefly evaluate the viability of this approach based on current research efforts. • Trust influences the reliability of forensic investigations yet is rarely explicitly considered. • A new strategy for investigations is proposed influenced by Zero Trust principles. • A motivating example illustrates the need for such a strategy.",40,,301352,301352,Digital forensics; Mindset; Computer security; Computer science; Globe; Network forensics; Computer forensics; Digital evidence; Zero (linguistics); Field (mathematics); Internet privacy; Data science,,,,UK Research and Innovation; Engineering and Physical Sciences Research Council; Science Foundation Ireland,,http://dx.doi.org/10.1016/j.fsidi.2022.301352,,10.1016/j.fsidi.2022.301352,,,0,003-232-363-219-004; 007-832-595-971-443; 009-344-895-342-85X; 009-512-003-529-193; 016-145-301-135-450; 022-626-519-506-300; 045-783-901-971-215; 047-386-524-667-691; 048-250-488-210-056; 062-168-384-023-533; 078-598-867-814-365; 081-032-497-600-401; 131-807-250-432-699; 134-927-490-231-285; 166-999-959-693-14X,0,true,cc-by,hybrid 110-625-045-233-448,GUIDELINES FOR COLLECTING AND CENTRALIZING NETWORK DIGITAL EVIDENCES,,2011,journal article,International journal of new computer architectures and their applications,,,,Mohammed Abbas; Elfadil Sabeil Azizah Abdul Manaf,"Network forensic investigators have stated the significance of network digital evidences due to digital crimes science and depicted its ability to come up with rare solutions that limited to network forensic and meanwhile system (computer) forensic cannot. Normally, researchers and experts suggest and propose many different solutions such as Firewall's Logs, IDS/IPD Logs, Switches and Router's Logs and eventually incorporate more advanced systems like Honeywall Architecture to effectively help to investigate network digital evidences. Actually, Honeynet Architecture basically is built to simplify network forensic investigation operations through key features that help to collect and capture network inbound and outbound packets [1][2]. Honeynet Architecture is unique in terms of builtin and well configured tools and utilities which help to achieve the mission. A Honeynet is an architecture which its purpose is basically to build a highly controlled network that control and ABSTRACT",1,2,437,458,Architecture; World Wide Web; Network packet; Honeypot; Firewall (construction); Router; Key features; Computer security; Computer science; Digital library; Wireless,,,,,http://sdiwc.net/digital-library/guidelines-for-collecting-and-centralizing-network-digital-evidences.html,http://sdiwc.net/digital-library/guidelines-for-collecting-and-centralizing-network-digital-evidences.html,,,2149273170,,0,008-012-687-867-953; 035-117-517-526-478; 037-141-626-931-184; 063-984-859-415-066; 116-536-149-434-424; 119-993-734-113-560; 120-582-628-652-957; 125-156-551-161-614; 152-481-755-437-975; 185-003-308-382-926,0,false,, 111-488-239-742-003,Framework for Reliable Experimental Design (FRED):: A research framework to ensure the dependable interpretation of digital data for digital forensics,,2018,journal article,Computers & Security,01674048,Elsevier BV,United Kingdom,Graeme Horsman,"Abstract The establishment of fact forms the cornerstone of any forensic discipline, with digital analysis being no exception. Practitioners are under an obligation as expert witnesses to provide factual accounts of digital scenarios, which must be underpinned by robust knowledge and evidential findings. To achieve this level of reliability, investigatory research must be suitably planned, implemented and analysed in a way which instills confidence in the accuracy of any findings. This is particularly important as digital forensic organisations are now facing the impending requirement to have acquired ISO/IEC 17025 accreditation. This article proposes the Framework for Reliable Experimental Design (FRED) to support those engaged in the field of digital forensics research to contribute reliable, robust findings. FRED focuses on the underpinning procedures involved within undertaking the reverse engineering of digital data structures and the process of extracting and interpreting digital content in a reliable way. The proposed framework is designed to be a resource for those operating within the digital forensic field, both in industry and academia, to support and develop research best practice within the discipline.",73,,294,306,Forensic science; Conceptual framework; Data science; Digital data; Digital content; Digital evidence; Computer security; Computer science; Process (engineering); Resource (project management); Digital forensics,,,,,https://doi.org/10.1016/j.cose.2017.11.009 https://research.tees.ac.uk/en/publications/framework-for-reliable-experimental-design-fred-a-research-framew https://research.tees.ac.uk/ws/files/4355231/621551.pdf https://dblp.uni-trier.de/db/journals/compsec/compsec73.html#Horsman18 https://www.sciencedirect.com/science/article/pii/S0167404817302468 https://core.ac.uk/download/pdf/196166325.pdf,http://dx.doi.org/10.1016/j.cose.2017.11.009,,10.1016/j.cose.2017.11.009,2769542598,,0,002-625-978-577-247; 004-706-447-836-905; 007-790-059-029-953; 009-386-221-930-423; 011-946-587-391-596; 012-410-670-929-028; 019-620-931-459-002; 021-039-461-635-181; 032-697-093-668-898; 033-877-222-136-260; 035-672-281-328-899; 037-886-407-309-770; 038-668-970-194-854; 043-947-795-550-171; 045-243-807-828-458; 050-171-086-268-964; 050-513-243-638-138; 066-235-037-082-291; 066-403-963-486-412; 067-577-414-064-539; 067-844-385-207-96X; 074-014-335-505-388; 074-299-373-252-299; 075-128-417-091-483; 078-275-236-083-731; 081-896-209-272-043; 086-419-575-179-359; 090-894-834-543-459; 093-650-425-263-585; 095-691-114-276-825; 098-748-261-333-651; 101-436-770-235-826; 111-090-978-711-139; 118-838-969-146-870; 125-384-800-661-375; 127-053-349-240-432; 129-080-110-367-50X; 133-397-275-695-990; 133-828-777-357-301; 134-927-490-231-285; 137-755-137-054-864; 172-364-607-042-640; 174-414-868-068-131; 184-948-841-629-735,29,true,cc-by-nc-nd,green 112-744-755-472-229,Forensic Analysis using Text Clustering in the Age of Large Volume Data: A Review,,2019,journal article,International Journal of Advanced Computer Science and Applications,21565570; 2158107x,The Science and Information Organization,,Bandar Saleh Mouhammed ِAlmaslukh,"Exploring digital devices in order to generate digital evidence related to an incident being investigated is essential in modern digital investigation. The emergence of text clustering methods plays an important role in developing effective digital forensics techniques. However, the issue of increasing the number of text sources and the volume of digital devices seized for analysis has been raised significantly over the years. Many studies indicated that this issue should be resolved urgently. In this paper, a comprehensive review of digital forensic analysis using text-clustering methods is presented, investigating the challenges of large volume data on digital forensic techniques. Moreover, a meaningful classification and comparison of the text clustering methods that have been frequently used for forensic analysis are provided. The major challenges with solutions and future research directions are also highlighted to open the door for researchers in the area of digital forensics in the age of large volume data.",10,6,,,Volume (computing); Forensic science; Document clustering; Data science; Digital evidence; Computer science; Digital forensics,,,,,https://thesai.org/Publications/ViewPaper?Volume=10&Issue=6&Code=IJACSA&SerialNo=10 https://thesai.org/Downloads/Volume10No6/Paper_10-Forensic_Analysis_using_Text_Clustering.pdf https://repository.psau.edu.sa/xmlui/handle/123456789/92614,http://dx.doi.org/10.14569/ijacsa.2019.0100610,,10.14569/ijacsa.2019.0100610,2955593819,,0,,8,true,cc-by,gold 112-917-373-753-714,Editorial,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Bruce Nikkel,,40,,301388,301388,Psychology,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301388,,10.1016/j.fsidi.2022.301388,,,0,,0,true,,bronze 112-955-497-358-051,Advances in volatile memory forensics,,2017,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Bradley Schatz; Michael Cohen,,20,20,1,,Computer science; Multimedia; Volatile memory,,,,,https://www.infona.pl/resource/bwmeta1.element.elsevier-918babd7-b6fa-3df8-bb46-080074ccd166 https://dblp.uni-trier.de/db/journals/di/di20.html#SchatzC17 https://www.sciencedirect.com/science/article/pii/S1742287617300932#!,http://dx.doi.org/10.1016/j.diin.2017.02.008,,10.1016/j.diin.2017.02.008,2592622149,,0,,9,false,, 112-972-498-965-560,A Study on Digital Forensics in Hadoop,2016-11-01,2016,journal article,Indonesian Journal of Electrical Engineering and Computer Science,25024760; 25024752,Institute of Advanced Engineering and Science,,Sachin Arun Thanekar; K. Subrahmanyam; A. B. Bagwan,"Nowadays we all are surrounded by Big data. The term ‘Big Data’ itself indicates huge volume, high velocity, variety and veracity i.e. uncertainty of data which gave rise to new difficulties and challenges. Hadoop is a framework which can be used for tremendous data storage and faster processing. It is freely available, easy to use and implement. Big data forensic is one of the challenges of big data. For this it is very important to know the internal details of the Hadoop. Different files are generated by Hadoop during its process. Same can be used for forensics. In our paper our focus is on digital forensics and different files generated during different processes. We have given the short description on different files generated in Hadoop. With the help of an open source tool ‘Autopsy’ we demonstrated that how we can perform digital forensics using automated tool and thus big data forensics can be done efficiently.",4,2,473,478,Volume (computing); Variety (cybernetics); Forensic science; Computer data storage; Focus (computing); Computer science; Process (engineering); Big data; Database; Digital forensics,,,,,http://ijeecs.iaescore.com/index.php/IJEECS/article/view/5989 http://ijeecs.iaescore.com/index.php/IJEECS/article/download/5989/5324 https://www.iaescore.com/journals/index.php/IJEECS/article/view/5989/5324,http://dx.doi.org/10.11591/ijeecs.v4.i2.pp473-478,,10.11591/ijeecs.v4.i2.pp473-478,2528158907,,0,051-375-511-393-776; 053-351-390-495-712; 058-248-784-098-150; 061-033-869-892-660; 079-911-249-105-531; 099-006-406-150-578,5,false,, 113-110-277-602-106,Blind Detection of Copy-Move Forgery in Digital Audio Forensics,,2017,journal article,IEEE Access,21693536,Institute of Electrical and Electronics Engineers (IEEE),United States,Muhammad Imran; Zulfiqar Ali; Tahir Bakhsh; Sheeraz Akram,"Although copy-move forgery is one of the most common fabrication techniques, blind detection of such tampering in digital audio is mostly unexplored. Unlike active techniques, blind forgery detection is challenging, because it does not embed a watermark or signature in an audio that is unknown in most of the real-life scenarios. Therefore, forgery localization becomes more challenging, especially when using blind methods. In this paper, we propose a novel method for blind detection and localization of copy-move forgery. One of the most crucial steps in the proposed method is a voice activity detection (VAD) module for investigating audio recordings to detect and localize the forgery. The VAD module is equally vital for the development of the copy-move forgery database, wherein audio samples are generated by using the recordings of various types of microphones. We employ a chaotic theory to copy and move the text in generated forged recordings to ensure forgery localization at any place in a recording. The VAD module is responsible for the extraction of words in a forged audio, and these words are analyzed by applying a 1-D local binary pattern operator. This operator provides the patterns of extracted words in the form of histograms. The forged parts (copy and move text) have similar histograms. An accuracy of 96.59% is achieved, and the proposed method is deemed robust against noise.",5,,12843,12855,Sound recording and reproduction; Digital watermarking; Artificial intelligence; Watermark; Voice activity detection; Speech recognition; Computer vision; Computer science; Histogram; Digital audio; Noise (video),,,,"Deanship of Scientific Research of King Saud University, Riyadh Saudi Arabia through the Research Group",https://dblp.uni-trier.de/db/journals/access/access5.html#ImranABA17 http://repository.essex.ac.uk/27237/ https://ieeexplore.ieee.org/document/7954589 https://pure.ulster.ac.uk/en/publications/blind-detection-of-copy-move-forgery-in-digital-audio-forensics http://ieeexplore.ieee.org/document/7954589/ https://pure.ulster.ac.uk/ws/files/71153405/copy_move_IEEE_Access.pdf https://core.ac.uk/download/287023577.pdf,http://dx.doi.org/10.1109/access.2017.2717842,,10.1109/access.2017.2717842,2708787837,,0,011-907-186-505-503; 015-613-308-645-582; 019-009-556-571-126; 025-299-900-166-361; 039-699-825-820-730; 049-039-247-888-539; 049-043-113-191-420; 055-171-031-125-861; 059-541-479-175-841; 060-643-003-548-166; 070-488-592-807-757; 073-911-854-128-151; 077-652-355-257-145; 084-196-716-496-983; 084-249-107-645-29X; 084-301-106-066-11X; 087-700-976-402-858; 092-522-060-753-940; 095-989-630-474-029; 106-992-696-754-941; 111-643-990-347-875; 119-587-371-187-398; 122-421-736-680-491; 125-548-663-635-047; 138-031-180-838-106; 147-141-305-666-832; 165-272-617-006-553,27,true,"CC BY, CC BY-NC-ND",gold 113-231-146-599-024,A new anti-forensic scheme--hiding the single JPEG compression trace for digital image.,2014-12-01,2014,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Yanjun Cao; Tiegang Gao; Guorui Sheng; Li Fan; Lin Gao,"To prevent image forgeries, a number of forensic techniques for digital image have been developed that can detect an image's origin, trace its processing history, and can also locate the position of tampering. Especially, the statistical footprint left by JPEG compression operation can be a valuable source of information for the forensic analyst, and some image forensic algorithm have been raised based on the image statistics in the DCT domain. Recently, it has been shown that footprints can be removed by adding a suitable anti-forensic dithering signal to the image in the DCT domain, this results in invalid for some image forensic algorithms. In this paper, a novel anti-forensic algorithm is proposed, which is capable of concealing the quantization artifacts that left in the single JPEG compressed image. In the scheme, a chaos-based dither is added to an image's DCT coefficients to remove such artifacts. Effectiveness of both the scheme and the loss of image quality are evaluated through the experiments. The simulation results show that the proposed anti-forensic scheme can verify the reliability of the JPEG forensic tools.",60,1,197,205,Digital image processing; Artificial intelligence; JPEG; Quantization (image processing); Computer vision; Computer science; Digital image; Image quality; JPEG 2000; Lossless JPEG; Image processing,anti-forensic; chaotic signal; digital fingerprint; digital image forgery; forensic science; single JPEG compression,,,,https://dialnet.unirioja.es/servlet/articulo?codigo=5215319 https://www.onlinelibrary.wiley.com/doi/abs/10.1111/1556-4029.12618 https://www.ncbi.nlm.nih.gov/pubmed/25442510,http://dx.doi.org/10.1111/1556-4029.12618,25442510,10.1111/1556-4029.12618,2038618066,,0,001-689-344-329-133; 004-530-492-547-92X; 007-414-852-040-315; 031-876-583-652-183; 041-796-476-831-023; 051-035-217-903-949; 055-846-173-386-410; 074-602-449-941-680; 079-164-168-107-23X; 101-218-430-388-564; 108-082-852-052-555; 122-164-403-164-304; 135-262-782-091-897; 136-713-989-335-402; 147-457-693-761-284,7,false,, 113-520-825-550-67X,Towards a conceptual model for promoting digital forensics experiments,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Edson OliveiraJr; Avelino F. Zorzo; Charles V. Neu,,35,,301014,,Dissemination; Point (typography); Conceptual model (computer science); Data science; Technology acceptance model; Field (computer science); Computer science; Documentation; Digital forensics,,,,Coordenação de Aperfeiçoamento de Pessoal de Nível Superior - Brasil; CNPq/Brazil,https://www.sciencedirect.com/science/article/abs/pii/S2666281720301530 https://dblp.uni-trier.de/db/journals/di/di35.html#OliveiraJrZN20,http://dx.doi.org/10.1016/j.fsidi.2020.301014,,10.1016/j.fsidi.2020.301014,3081209775,,0,000-084-741-857-185; 007-429-717-105-19X; 008-383-267-426-943; 008-600-520-808-565; 008-614-895-812-373; 009-435-455-091-122; 015-013-726-939-074; 015-614-575-039-020; 016-429-081-361-740; 016-988-001-902-529; 018-613-548-124-881; 019-250-238-234-58X; 021-530-582-445-974; 022-526-129-975-007; 023-858-572-607-02X; 030-997-577-987-23X; 034-095-325-733-017; 036-384-272-299-395; 037-603-045-997-971; 039-803-460-489-738; 041-277-806-049-882; 041-729-962-176-108; 043-221-551-005-588; 045-201-107-411-584; 047-217-131-432-149; 049-239-383-175-345; 049-896-268-388-337; 053-631-785-808-409; 058-357-262-233-370; 059-473-744-320-279; 060-633-111-699-480; 061-797-799-578-085; 064-856-059-710-614; 065-459-442-784-779; 066-078-012-998-723; 068-157-220-071-365; 070-216-397-918-815; 070-462-022-251-464; 072-323-530-728-727; 072-589-489-300-62X; 079-098-061-141-718; 079-497-574-198-646; 080-597-729-976-304; 085-051-878-923-019; 086-037-854-579-503; 093-674-210-280-667; 095-469-031-905-553; 098-748-261-333-651; 099-731-539-502-890; 100-948-283-944-855; 109-493-312-883-393; 111-488-239-742-003; 115-111-392-439-540; 117-048-021-565-648; 121-566-747-020-190; 125-384-800-661-375; 125-795-481-248-589; 126-176-453-947-183; 128-883-744-695-145; 129-702-989-253-83X; 132-035-477-536-504; 132-761-794-941-171; 134-655-094-713-710; 134-927-490-231-285; 147-043-231-818-928; 155-008-633-941-159; 157-095-273-185-652; 159-883-904-840-562; 168-036-345-097-619; 178-585-263-369-996; 193-816-896-736-919; 199-315-486-905-516,4,false,, 113-648-579-935-189,Forensic examination of ink by high-performance thin layer chromatography--the United States Secret Service Digital Ink Library.,2010-12-22,2010,journal article,Journal of chromatography. A,18733778; 00219673,Elsevier,Netherlands,Cedric Neumann; Robert S. Ramotowski; Thibault Genessay,,1218,19,2793,2811,Inkwell; Chemistry; Standardization; Engineering drawing; Forensic examination; Digital ink; Software package; Service (systems architecture); Chromatography; Identification (information),,"Chromatography, High Pressure Liquid/methods; Chromatography, Thin Layer/methods; Forensic Sciences/methods; Ink; Law Enforcement; Libraries, Digital; United States",,,https://www.ncbi.nlm.nih.gov/pubmed/21196010 https://pubmed.ncbi.nlm.nih.gov/21196010/ https://www.sciencedirect.com/science/article/pii/S0021967310017644 https://europepmc.org/article/MED/21196010 http://www.sciencedirect.com/science/article/pii/S0021967310017644 https://core.ac.uk/display/18142190,http://dx.doi.org/10.1016/j.chroma.2010.12.070,21196010,10.1016/j.chroma.2010.12.070,2036574814,,0,002-546-588-243-967; 006-853-996-914-921; 012-808-161-025-151; 020-515-076-107-276; 020-525-329-123-805; 031-015-755-304-501; 035-381-032-883-605; 037-044-013-002-038; 037-230-642-037-742; 038-791-838-378-238; 040-412-131-632-449; 042-059-051-480-076; 043-303-849-400-205; 046-828-832-996-656; 054-313-127-228-341; 060-403-745-968-810; 064-004-753-681-93X; 065-482-943-221-929; 071-324-172-566-155; 086-565-009-861-48X; 088-481-935-108-416; 096-655-356-170-327; 106-205-185-453-973; 109-435-258-852-67X; 112-793-195-262-725; 116-741-352-315-570; 120-072-322-429-12X; 120-830-417-894-972; 123-799-804-157-434; 133-562-199-454-496; 137-423-367-754-515; 161-022-171-165-535,59,false,, 114-090-829-194-843,KES - Extended abstract digital forensics model with preservation and protection as umbrella principles,,2014,journal article,Procedia Computer Science,18770509,Elsevier BV,,Shahzad Saleem; Oliver Popov; Ibrahim Bagilli,"Abstract In this research, a literature review was conducted where twenty (n=20) frameworks and models highlighting preservation of the integrity of digital evidence and protection of basic human rights during digital forensic investigations were studied. The models not discussing the process at an abstract level were excluded. Therefore, thirteen (n=13) of the studied models were included in our analysis. The results indicated that published abstract models lack preserving the integrity of digital evidence and protecting the basic human rights as explicit overarching umbrella principles. To overcome this problem, we proposed an extension to Reith's abstract digital forensics model explicating preservation of integrity and protection of human rights as the two necessary umbrella principles.",35,,812,821,Human rights; Information system; Digital evidence; Computer security; Computer science; Process (engineering); Engineering ethics; Digital forensics,,,,,https://dblp.uni-trier.de/db/conf/kes/kes2014.html#SaleemPB14 https://core.ac.uk/display/82554968 http://www.diva-portal.org/smash/record.jsf?pid=diva2:773761 https://www.researchgate.net/profile/Ibrahim_Baggili/publication/265848150_Extended_abstract_digital_forensics_model_with_preservation_and_protection_as_umbrella_principles/links/541e2d720cf2218008d1dd10.pdf https://www.sciencedirect.com/science/article/abs/pii/S1877050914012113 https://www.sciencedirect.com/science/article/pii/S1877050914012113 https://core.ac.uk/download/pdf/82554968.pdf,http://dx.doi.org/10.1016/j.procs.2014.08.246,,10.1016/j.procs.2014.08.246,2080628430,,0,001-009-008-665-240; 001-135-038-170-705; 002-633-335-300-244; 009-701-742-236-493; 011-972-444-921-827; 017-840-378-634-021; 019-505-819-376-748; 019-698-064-288-240; 019-831-293-743-518; 020-944-423-224-895; 021-274-925-963-096; 021-850-998-857-676; 032-697-093-668-898; 035-223-520-491-228; 035-877-258-121-493; 038-668-970-194-854; 041-227-773-004-745; 043-557-221-344-121; 045-581-544-307-619; 062-325-585-829-185; 065-452-675-566-99X; 067-545-085-582-063; 076-578-517-786-850; 078-072-950-053-679; 080-145-245-150-605; 094-587-727-381-031; 097-723-876-253-714; 110-079-538-894-548; 111-741-773-111-021; 124-912-663-881-389; 132-355-634-397-986; 138-304-979-688-517; 145-002-823-706-838; 154-446-346-619-232; 159-094-605-033-945; 160-240-603-104-314; 178-883-713-153-793; 181-095-475-426-346; 184-948-841-629-735; 199-745-676-923-766,15,true,,gold 114-239-357-516-674,A Study of Mobile Forensic Tools Evaluation on Android-Based LINE Messenger,,2018,journal article,International Journal of Advanced Computer Science and Applications,21565570; 2158107x,The Science and Information Organization,," Riadi; Abdul Fadlil; Ammar Fauzan","The limitation of forensic tool and the mobile device’s operating system are two problems for researchers in mobile forensics field. Nevertheless, some kinds of forensic tools testing in several devices might be helpful in an investigation. Therefore, the evaluation of forensic tool is one gate to reach the goal of a digital forensics study. Mobile forensics as one of the digital forensics branch that focusing on data recovery process on mobile devices has some problems in the analytical ability because of the different features of forensic tools. In this research, the researchers present studies and techniques on tools ability and evaluated them based on digital evidence of LINE analysis. The experiment was combined VV methods and NIST standard forensic methods to produce a model of forensic tool evaluation steps. As the result of the experiment, Oxygen Forensic has 61.90% of index number and MOBILedit Forensic has the highest index number at 76.19% in messenger application analysis. This research has successfully assessed the performance of forensic tools.",9,10,,,Forensic science; Mobile device; Data science; Digital evidence; Computer science; Android (operating system); Mobile device forensics; Digital forensics,,,,,https://thesai.org/Publications/ViewPaper?Volume=9&Issue=10&Code=IJACSA&SerialNo=24 https://thesai.org/Downloads/Volume9No10/Paper_24-A_Study_of_Mobile_Forensic_Tools.pdf,http://dx.doi.org/10.14569/ijacsa.2018.091024,,10.14569/ijacsa.2018.091024,2900096525,,0,000-225-165-729-99X; 008-717-383-265-216; 021-039-461-635-181; 055-473-899-043-485; 075-128-417-091-483; 087-287-435-836-200; 089-695-854-791-989; 185-798-265-234-254,7,true,cc-by,gold 114-424-378-721-954,Digital image processing technology and its application in forensic sciences.,1975-04-01,1975,journal article,Journal of forensic sciences,00221198,Wiley-Blackwell,United States,RJ Blackwell; WA Crisci,"To the average semitechnical individual who, on the one hand, is subject to the whims of an aberrant computer that sends him credit card statements for an account unknown to him, or who is provoked by computer-produced sales letters in which his name is inserted at key points, digital computers are the degrading and impersonal taints of modern technology. On the other hand, to the astronaut in transit to the moon, the computer is his link with life. Between these two diverse extremes digital image processing has become a technical fact of life. Erratum to this paper appears in 20(4).",20,2,288,304,Digital image processing; Computer graphics (images); Pattern recognition (psychology); Key (cryptography); Subject (philosophy); Credit card; Technology utilization; Computer science; Multimedia; Image processing,,Analog-Digital Conversion; Bedding and Linens; Blood Stains; Computers; Criminology; Dermatoglyphics; Forensic Medicine; Fourier Analysis; Image Enhancement; Videotape Recording,,,https://www.astm.org/DIGITAL_LIBRARY/JOURNALS/FORENSIC/PAGES/JFS10276J.htm https://repository.exst.jaxa.jp/dspace/handle/a-is/442314 http://www.astm.org/doiLink.cgi?JFS10276J https://www.ncbi.nlm.nih.gov/pubmed/1123599 https://ntrs.nasa.gov/search.jsp?R=19760057384,http://dx.doi.org/10.1520/jfs10276j,1123599,10.1520/jfs10276j,1785880495,,0,,6,false,, 114-473-027-477-559,Distributed Network Forensics Framework: A Systematic Review,2015-06-18,2015,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,Gurpal Singh Chhabra; Prashant Kumar Singh,"Network forensics is a branch of digital forensics, which applies to network security. It is used to relate monitoring and analysis of the computer network traffic, that helps us in collecting information and digital evidence, for the protection of network that can use as firewall and IDS. Firewalls and IDS can’t always prevent and find out the unauthorized access within a network. This paper presents an extensive survey of several forensic frameworks. There is a demand of a system which not only detects the complex attack, but also it should be able to understand what had happened. Here it talks about the concept of the distributed network forensics. The concept of the Distributed network forensics is based on the distributed techniques, which are useful for providing an integrated platform for the automatic forensic evidence gathering and important data storage, valuable support and an attack attribution graph generation mechanism to depict hacking events.",119,19,31,35,Forensic science; Network security; Firewall (construction); Computer data storage; Data science; Digital evidence; Computer science; Network forensics; Digital forensics; Hacker,,,,,https://www.ijcaonline.org/archives/volume119/number19/21178-4201 https://research.ijcaonline.org/volume119/number19/pxc3904201.pdf http://ui.adsabs.harvard.edu/abs/2015IJCA..119s..31S/abstract,http://dx.doi.org/10.5120/21178-4201,,10.5120/21178-4201,2335966069,,0,004-706-447-836-905; 015-503-477-862-142; 018-352-322-450-825; 027-099-591-941-569; 027-265-141-482-204; 032-244-297-444-421; 035-829-068-594-103; 038-668-970-194-854; 042-268-262-351-304; 044-353-273-186-518; 073-744-995-689-459; 089-048-294-489-077; 128-489-282-993-184; 142-226-580-142-17X; 161-527-786-273-341,7,true,,green 114-642-612-579-69X,PERANAN ILMU DIGITAL FORENSIK TERHADAP PENYIDIKAN KASUS PERETASAN WEBSITE,2020-07-14,2020,journal article,Vol. 21 No 1 April 2020,24422274,Universitas Pasundan,,Synthiana Rachmie,"Digital forensic is part of forensic science being used for investigation and cases inquiry in terms of digital datafinding. This research focusedon understandingthe application of investigator’s expertise on digital forensic to support identification process of a case to obtain evidence in a relatively fast and precise time and to reveal the motive and mens rea behind the act of the offender. Conceptual approach was used in this research alongsidethe case approach. The findings showed that digital forensic science has been applied by investigators however it cannot be maximal for it also depends on what case the investigator is working on. In the case of website hacking, investigator used internet/network forensic through surveillance and collecting evidence as leads. It is suggested that every investigator should learn and master digital forensic science to support their expertise and other non-legal knowledge and it is vital to provide sufficientfacilities and infrastructures to obtain a comprehensive investigation.",,21,104,127,,,,,,http://dx.doi.org/10.23969/litigasi.v21i1.2388,http://dx.doi.org/10.23969/litigasi.v21i1.2388,,10.23969/litigasi.v21i1.2388,3049232542,,0,022-036-544-197-474; 052-054-657-975-487; 055-086-544-213-027; 075-591-424-638-445; 076-463-766-205-148; 086-018-338-372-932; 086-586-745-336-678; 104-993-530-236-37X; 113-002-819-576-830; 118-397-112-434-709; 119-753-128-756-504,0,true,cc-by,gold 114-976-379-033-024,Review of the accreditation of digital forensics in China,2018-07-03,2018,journal article,Forensic sciences research,24711411; 20961790,Informa UK Limited,England,Hong Guo; Junlei Hou,"As a result of the many developments in information technology, digital evidence plays an increasingly important role in criminal and civil litigation. Because digital evidence is necessary for litigation, the judicial system must be assured of its accuracy, reliability, and verifiability, which can be assured by accreditation. This paper focuses on a comparison of the evolution of the accreditation of digital forensics internationally and domestically, discusses the existing problems that such accreditation encounters, and proposes the corresponding solutions. Moreover, this paper discusses the future of digital forensic laboratory accreditation and its implementation.",3,3,194,201,Engineering management; Information technology; Engineering; China; Digital evidence; Civil litigation; Reliability (statistics); Accreditation; Digital forensics,Accreditation; digital forensics; forensic science; methodology; personnel training,,,National Key Research and Development Program of China; Shanghai Forensic Service Platform; Shanghai Key Laboratory of Forensic Medicine,https://pubmed.ncbi.nlm.nih.gov/30483669/ https://doaj.org/article/8f9b08b437904df595539a131ea9c9a5 https://www.tandfonline.com/doi/full/10.1080/20961790.2018.1503526 https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6201810 https://europepmc.org/article/MED/30483669,http://dx.doi.org/10.1080/20961790.2018.1503526,30483669,10.1080/20961790.2018.1503526,2895746766,PMC6201810,0,085-669-579-012-375,4,true,"CC BY, CC BY-NC",gold 116-095-229-079-29X,Australasian forensic science summit 2016: education and training towards 2030,2018-02-12,2018,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Colin Priddis; Nicholas Vandenberg,"Currently, there is no broad overarching framework that allows for a holistic approach to education and training in forensic science. There is no agreed mechanism to consolidate, guide and evaluate the development and delivery of education products (i.e. qualifications, standards, curriculum), for use in organizations which deliver forensic services. There is a clear role for academia to improve the quality of forensic science through collaboration in the design and delivery of industry-focussed education and training. In the future, greater integration and partnership are sought between academia and industry, with industry able to identify and articulate its long-term direction, priorities and the skill sets required by future forensic scientists, and academia moving towards a form of quality assurance (accreditation) for their courses. Given the skill set required for forensics in rapidly evolving disciplines such as the digital space, one may need to be careful mandating a degree requirement. H...",50,3,293,304,Quality assurance; Set (psychology); Political science; Space (commercial competition); Summit; Quality (business); Curriculum; Engineering ethics; Accreditation; General partnership,,,,,https://www.tandfonline.com/doi/full/10.1080/00450618.2017.1383571,http://dx.doi.org/10.1080/00450618.2017.1383571,,10.1080/00450618.2017.1383571,2793001743,,0,101-436-770-235-826; 156-888-007-396-899,1,false,, 116-380-317-189-74X,Digital forensics: Introducing the ‘Extract–Analyse’ model,,2010,journal article,Science & Justice,13550306,Elsevier BV,United Kingdom,T.R. Souvignet,,50,1,43,,Computer science; Multimedia; Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S1355030609002366 http://www.sciencedirect.com/science/article/pii/S1355030609002366,http://dx.doi.org/10.1016/j.scijus.2009.11.064,,10.1016/j.scijus.2009.11.064,2007096446,,0,,1,false,, 116-451-944-522-578,Estimation of the Frequency and Time of Human Exposure to Arsenic by Single Hair Analysis.,2022-09-11,2022,journal article,International journal of environmental research and public health,16604601; 16617827,Multidisciplinary Digital Publishing Institute (MDPI),Switzerland,Bing Li; Weicong Xu; Ruxin Luo; Shaojie Zhuo; Xueyan Guo; Kuan Cheng; Keming Yun; Dong Ma,"Arsenic (As) and its compounds are widely used in many applications. Long-term exposure to As can cause acute and chronic poisoning. In severe cases, it can lead to adverse effects, such as gene mutation, cell cancer and fetal malformation. The objective of this study was to accurately estimate As exposure frequency and time. Quantitative analysis of As in single hairs obtained from APL (acute promyelocytic leukemia) patients treated with As2O3 was performed by LA-ICP-MS. An informative As concentration distribution profile of single hair was applied to estimate the As exposure frequency and time. As exposure frequency was estimated according to the number of As concentration peaks. As exposure time was estimated according to the hair growth length in combination with the hair growth rate. The validation results demonstrate that this method was more efficient than the traditional method; compared with the traditional method, which provides estimates in months, our model shortened the As exposure time estimate to the range of a few days, which considerably improved the inference accuracy. Therefore, these results can be used for forensic toxicology studies, environmental exposure monitoring, etc.",19,18,11429,11429,Acute promyelocytic leukemia; Arsenic; Prenatal exposure; Toxicology; Medicine; Biology; Chemistry; Pregnancy; Offspring; Genetics; Gene; Retinoic acid; Organic chemistry,LA-ICP-MS; arsenic; exposure time; frequency; hair growth rate; single hair,"Arsenic/analysis; Arsenicals/adverse effects; Hair/chemistry; Hair Analysis; Humans; Leukemia, Promyelocytic, Acute/chemically induced",Arsenicals; Arsenic,"the National Key Projects (2020YFC0832801); General Program of National Natural Science Foundation of China (81671868); Ministry of Finance, PR China (GY2019G-3); the Science and Technology Commission of Shanghai Municipality (14DZ2270800, 16DZ2290900)",,http://dx.doi.org/10.3390/ijerph191811429,36141702,10.3390/ijerph191811429,,PMC9517363,0,002-522-486-003-923; 015-863-468-971-581; 024-606-430-789-572; 028-212-407-670-366; 030-274-925-702-757; 034-155-959-201-938; 037-769-595-615-78X; 041-363-606-878-572; 049-497-057-284-070; 062-601-299-913-405; 065-113-613-204-540; 076-478-429-879-792; 077-367-217-398-916; 083-101-012-967-360; 085-218-003-728-909; 096-110-100-864-202; 129-818-497-301-801; 131-818-285-442-946; 139-739-295-827-028,0,true,cc-by,gold 116-473-356-479-419,"The phone reveals your motion: Digital traces of walking, driving and other movements on iPhones",,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Jan Peter van Zandwijk; Abdul Boztas,,37,,301170,,Motion (physics); Human–computer interaction; Cache; Reliability (computer networking); Phone; Everyday life; Movement (music); Differential analysis; Drop tests; Computer science,,,,,https://www.sciencedirect.com/science/article/abs/pii/S2666281721000780 https://doi.org/10.1016/j.fsidi.2021.301170 https://dblp.uni-trier.de/db/journals/di/di37.html#ZandwijkB21,http://dx.doi.org/10.1016/j.fsidi.2021.301170,,10.1016/j.fsidi.2021.301170,3163998125,,0,039-158-280-114-980,1,false,, 116-888-787-000-339,"Review of ""Digital image forensics: There is more to a picture than meets the eye"" by Husrev Taha Sencar and Nasir Memon (Editors)",,2013,journal article,Journal of Pathology Informatics,21533539,Elsevier BV,,Bruce Levy,,4,1,17,,,,,,,,http://dx.doi.org/10.4103/2153-3539.114208,,10.4103/2153-3539.114208,,,0,,0,true,"CC BY, CC BY-NC-ND",gold 117-065-920-586-287,A recovery method of deleted record for SQLite database,2011-07-24,2011,journal article,Personal and Ubiquitous Computing,16174909; 16174917,Springer Science and Business Media LLC,Germany,Sang-Jun Jeon; Jewan Bang; Keun-Duck Byun; Sangjin Lee,"SQLite is a small-sized database engine largely used in embedded devices and local application software. The availability of portable devices, such as smartphones, has been extended over the recent years and has contributed to growing adaptation of SQLite. This implies a high likelihood of digital evidences acquired during forensic investigations to include SQLite database files. Where intentional deletion of sensitive data can be made by a suspect, forensic investigators need to recover deleted records in SQLite at the best possible. This study analyzes data management rules used by SQLite and the structure of deleted data in the system and in turn suggests a recovery tool of deleted data. Further, the study examines major SQLite suited software as it validates feasible possibility of deleted data recovery.",16,6,707,715,Application software; Data management; Database engine; Recovery method; Computer science; Data recovery; Database; Adaptation (computer science),,,,,https://doi.org/10.1007/s00779-011-0428-7 https://koreauniv.pure.elsevier.com/en/publications/a-recovery-method-of-deleted-record-for-sqlite-database https://link.springer.com/article/10.1007%2Fs00779-011-0428-7 https://dblp.uni-trier.de/db/journals/puc/puc16.html#JeonBBL12 https://dl.acm.org/doi/10.1007/s00779-011-0428-7 https://dx.doi.org/10.1007/s00779-011-0428-7 https://dl.acm.org/citation.cfm?id=2425017.2425078 https://link.springer.com/article/10.1007/s00779-011-0428-7/fulltext.html http://dx.doi.org/10.1007/s00779-011-0428-7,http://dx.doi.org/10.1007/s00779-011-0428-7,,10.1007/s00779-011-0428-7,2047240059,,5,005-594-976-962-141; 171-083-956-573-469,53,false,, 117-070-059-884-741,Mobile Forensics: Repeatable and Non-Repeatable Technical Assessments.,2022-09-19,2022,journal article,"Sensors (Basel, Switzerland)",14248220; 14243210,Multidisciplinary Digital Publishing Institute (MDPI),Switzerland,Raffaele Cuomo; Davide D'Agostino; Mario Ianulardo,"This paper presents several scenarios where digital evidence can be collected from mobile devices, their legal value keeping untouched. The paper describes a robust methodology for mobile forensics developed through on-field experiences directly gained by the authors over the last 10 years and many real court cases. The results show that mobile forensics, digital analysis of smartphone Android or iOS can be obtained in two ways: on the one hand, data extraction must follow the best practice of the repeatability procedure; on the other hand, the extraction of the data must follow the best practice of the non-repeatability procedure. The laboratory study of the two methods for extracting digital data from mobile phones, for use as evidence in court trials, has shown that the same evidence can be obtained even when the procedure of unavailability of file mining activities has been adopted. Indeed, thanks to laboratory tests, the existence of multiple files frequently and continuously subjected to changes generated by the presence of several hashes found at forensic extractions conducted in very short moments of time (sometimes not exceeding 15 min) has been proven. If, on the other hand, the examination of a device is entrusted to a judicial police officer in order to conduct a forensic analysis to acquire data produced and managed by the user (such as images, audio, video, documents, SMS, MMS, chat conversations, address book content, etc.) we have sufficient grounds to believe that such examination can be organized according to the system of repeatable technical assessments.",22,18,7096,7096,Unavailability; Computer science; Digital forensics; Android (operating system); Mobile device; Digital evidence; Computer security; Multimedia; World Wide Web; Engineering; Reliability engineering; Operating system,computer forensics; cybercrime; digital analysis; digital evidence; forensic extraction; mobile forensics; repeatability; unrepeatability,"Cell Phone; Computers, Handheld; Forensic Medicine; Forensic Sciences; Smartphone",,,,http://dx.doi.org/10.3390/s22187096,36146443,10.3390/s22187096,,PMC9505885,0,,0,true,cc-by,gold 117-095-420-741-153,On Integrating Mobile Applications into the Digital Forensic Investigative Process,,2013,journal article,International Journal of Advanced Computer Science and Applications,2158107x; 21565570,The Science and Information Organization,,April Tanner; Soniael Duncan,"What if a tool existed that allowed digital forensic investigators to create their own apps that would assist them with the evidence identification and collection process at crime scenes? First responders are responsible for ensuring that digital evidence is examined in such a way that the integrity of the evidence is not jeopardized. Furthermore, they play a pivotal part in preserving evidence during the collection of evidence at the crime scene and transport to the laboratory. This paper proposes the development of a mobile application that can be developed for or created by a first responder to assist in the identification, acquisition, and preservation of digital evidence at a crime scene. Keywords—mobile device forensics; digital forensics; forensic process, forensic models; MIT App Inventor I. INTRODUCTION Digital Forensics involves the identification, preservation, collection, examination, and analysis of digital devices. These devices include, but are not limited to, digital cameras, flash drives, computers, internal and external memory drives, mobile devices, etc. Some mobile devices that can be examined include graphic tablets, cell phones, smart phones, CDs, DVDs, and MP3s. Digital evidence has to be collected under certain parameters as to maintain the integrity of the investigation. This process is referred to as a forensic process. While there is not a concrete set of rules for the forensic process there are models that have been proposed to aid in trying to eliminate damage and contamination that can occur at crime scenes. This paper identifies the types of damage and contamination that can occur at crime scenes when inexperienced first responders arrive at the scene; in addition, we discuss the models that address the preservation and acquisition of evidence at crime scenes, and also explore possible solutions to aid first responders in utilizing techniques to preserve digital evidence at the scene of the crime. In this paper, we propose the development and implementation of a mobile application that first responders can create and use as a guide when identifying, preserving, collecting, and securing evidence. As a result, this application would be useful in assisting first responders during the acquisition process of a digital forensics investigation.",4,8,,,Forensic science; Crime scene; Mobile device; Data science; Digital evidence; Computer security; Computer science; Network forensics; Computer forensics; Mobile device forensics; Identification (information); Digital forensics,,,,,https://thesai.org/Downloads/Volume4No8/Paper_9-On_Integrating_Mobile_Applications_into_the_Digital_Forensic.pdf https://thesai.org/Publications/ViewPaper?Volume=4&Issue=8&Code=IJACSA&SerialNo=9,http://dx.doi.org/10.14569/ijacsa.2013.040809,,10.14569/ijacsa.2013.040809,2145109049,,0,100-246-306-965-821; 171-464-767-472-377,1,true,cc-by,hybrid 117-319-780-113-791,Teaching computer forensics course: challenges and opportunities,2017-06-01,2017,journal article,Journal of Computing Sciences in Colleges,19374763,,,Yana Kortsarts,"Computer forensics, still a relatively new discipline in computer security, focuses on finding digital evidence after a computer security incident has occurred. Computer forensics is the scientific examination and analysis of data held on, or retrieved from, computer storage media in such a way that the information can be used as evidence in a court of law. Computer evidence is often transparently created by the operating system without the knowledge of the computer user. The information may be hidden from view. To find it, special forensic software tools and techniques are required. Technology is expanding at a fast rate, and along with the increased use of computers, the Internet, and digital devices comes an increase in digital crime. With the increased use of computers to commit crimes, a need has rapidly developed for forensic experts to extract useful information from computer evidence. Computer forensics is a fast-growing field with high long-term projected demand for trained professionals.",32,6,208,209,The Internet; World Wide Web; Forensic science; Computer literacy; Data science; Digital evidence; Computer science; Network forensics; Information and Computer Science; Computer forensics; Digital forensics,,,,,https://dl.acm.org/citation.cfm?id=3069693,https://dl.acm.org/citation.cfm?id=3069693,,,2727309882,,0,074-246-041-325-050; 085-214-277-668-01X,0,false,, 117-594-679-776-482,A Proposed Model of Digital Forensic on Cloud Computing Security Infrastructure,2018-07-30,2018,journal article,International Journal of Innovation in Enterprise System,25803050,Telkom University,,Mohammad Hafiz Hersyah,"Over the past decades, practitioners and researchers have made remarkable achievements in digital forensic. The abilities to conquer major technical obstacles are bestowing practitioners greater access to digital evidence. Sophisticated forensic techniques and tools are being developed to assist forensic acquisition and extraction of volatile data, inspection of remote repositories system and analysis of network traffic. Computer forensic is a comprehensive work that based on several attributes that are : objectivity, relevance and legitimacy to compose a system model that projected to be an electronic evidence forensic system. Latest studies show that the rapid growing of cloud computing facilities usage that has enable various improvements as part of the innovation process at organisations. Information systems are in frequently exposed to various types of threats which able to trigger different types of bad consequences as more and more information stored, problems arise especially about security information technology risk aspects.; Keywords—computer forensic, cloud computing, electronic evidence forensic system, security, information technology risk, information system",2,02,18,23,System model; Information system; Cloud computing security; IT risk; Data science; Digital evidence; Computer science; Cloud computing; Digital forensics; Relevance (information retrieval),,,,,https://www.neliti.com/publications/349400/a-proposed-model-of-digital-forensic-on-cloud-computing-security-infrastructure https://ijies.sie.telkomuniversity.ac.id/index.php/IJIES/article/download/21/19 https://core.ac.uk/download/pdf/295356391.pdf,http://dx.doi.org/10.25124/ijies.v2i02.21,,10.25124/ijies.v2i02.21,2912999517,,0,035-448-415-847-226; 190-025-622-260-327,0,true,,gold 117-936-577-258-550,Microsoft Teams desktop application forensic investigations utilizing IndexedDB storage.,2022-02-18,2022,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Furkan Paligu; Cihan Varol,"While the COVID-19 virus remolded the routines of the establishments, remote collaboration and distant communication gained more popularity. As the way electronic communications are handled changes drastically, new applications and storage mechanisms are introduced. Microsoft Teams is an application offered within the scope of Microsoft Office 365 that offers services for hosting virtual meetings, team communication, and comprehensive team resource management. It is prevalently used by organizations and indicates a great potential to be a source of digital forensic investigations. This paper scrutinizes the artifacts created by Microsoft Teams in IndexedDB persistent storage. IndexedDB is a fast-growing client-side storage technology that is relatively new as a source for digital forensic investigations. A single-case pretest-posttest quasi experiment was conducted to produce artifacts in Microsoft Teams IndexedDB storage. The artifacts were extracted without user credentials indicating security flaws in the application. Extracted artifacts were processed based on signature patterns and evaluated for their significance. Traditional database queries were utilized to link and present the information clustered according to their relevancy. A time-frame analysis was constructed to display information in a suitable format for investigators. The results indicate that Microsoft Teams IndexedDB storage artifacts contain significant potential for digital investigations with extraction of complete contents of private chat messages, voice mails, and team extensions with efficient time-frame analysis.",67,4,1513,1533,Computer science; Digital forensics; Scope (computer science); Frame (networking); Popularity; World Wide Web; Multimedia,IndexedDB; digital forensics; forensic science; persistent storage,"COVID-19; Communication; Databases, Factual; Humans",,,,http://dx.doi.org/10.1111/1556-4029.15014,35181904,10.1111/1556-4029.15014,,,0,001-160-306-268-480; 005-036-485-971-872; 006-907-440-803-311; 008-941-013-941-439; 009-566-017-412-168; 025-040-569-787-586; 026-772-653-961-583; 027-592-045-264-483; 038-357-353-722-844; 050-731-682-062-789; 056-121-902-105-278; 056-697-625-039-269; 062-442-987-781-615; 065-733-460-470-158; 067-776-205-897-755; 071-379-846-921-028; 083-652-308-029-585; 092-324-051-377-544; 102-200-700-211-728; 105-367-465-319-555; 111-807-959-284-78X; 113-663-344-870-638; 142-912-709-320-468; 145-427-921-901-913; 157-850-271-146-234,0,false,, 118-103-890-724-159,Pypette: A Platform for the Evaluation of Live Digital Forensics,2012-10-01,2012,journal article,International Journal of Digital Crime and Forensics,19416210; 19416229,IGI Global,United States,Brett Lempereur; Madjid Merabti; Qi Shi,"Live digital forensics presents unique challenges with respect to maintaining forensic soundness, but also offers the ability to examine information that is unavailable to quiescent analysis. Any perturbation of a live operating system by a forensic examiner will have far-reaching effects on the state of the system being analysed. Numerous approaches to live digital forensic evidence acquisition have been proposed in the literature, but relatively little attention has been paid to the problem of identifying how the effects of these approaches, and their improvements over other techniques, can be evaluated and quantified. In this paper, the authors present Pypette, a novel platform enabling the automated, repeatable analysis of live digital forensic acquisition techniques.",4,4,31,46,Computer security; Soundness; Computer science; Computer forensics; Digital forensics,,,,,https://www.igi-global.com/article/pypette-platform-evaluation-live-digital/74804 https://doi.org/10.4018/jdcf.2012100103 http://doi.org/10.4018/jdcf.2012100103 https://dblp.uni-trier.de/db/journals/ijdcf/ijdcf4.html#LempereurMS12,http://dx.doi.org/10.4018/jdcf.2012100103,,10.4018/jdcf.2012100103,2009967747,,0,002-495-833-326-831; 004-441-167-148-170; 005-296-771-590-748; 010-240-301-659-307; 035-448-415-847-226; 035-467-233-982-594; 040-911-574-660-701; 042-880-741-738-793; 050-513-243-638-138; 054-507-171-824-189; 089-048-294-489-077; 093-448-702-012-591; 097-567-011-227-46X; 099-520-470-483-918; 106-885-306-836-498; 120-462-880-448-150; 142-816-347-811-541,2,false,, 118-444-471-106-597,KOMPARATIVNA ANALIZA OPEN-SOURCE ALATA ZA DIGITALNU FORENZIKU MOBILNIH UREĐAJA,2021-11-07,2021,journal article,Zbornik radova Fakulteta tehničkih nauka u Novom Sadu,25605925; 0350428x,Faculty of Technical Sciences,,Bojan Trifković,"The paper deals with the presentation of open-source tools for digital forensics of mobile devices, with a part dedicated to digital forensics itself as a technological discipline. The paper describes how to use certain tools, as well as their advantages and disadvantages.",36,11,1910,1913,Mobile device; Presentation; Computer science; Multimedia; Digital forensics,,,,,http://ftn.uns.ac.rs/ojs/index.php/zbornik/article/view/1831,http://dx.doi.org/10.24867/15be14trifkovic,,10.24867/15be14trifkovic,3217518061,,0,,0,true,,bronze 118-589-466-619-969,Signature File Analysis Using The National Institute Standard Technology Method Base on Digital Forensic Concepts,2020-09-30,2020,journal article,Jurnal Informatika Universitas Pamulang,26224615; 25411004,Universitas Pamulang,,Randi Rizal; Ruuhwan Ruuhwan; Septian Chandra,"The number of crimes committed by utilizing advances in information technology such as information leakage, embezzlement of money in banks, credit card fraud, pornography, terrorism, drug trafficking and many more are definitely related to the name digital data. File signatures or magic numbers are one of the forensic science techniques that assist in processing this digital data. The method used in this research is the National Institute Standards Technology method to analyze the authenticity of digital data and the method of proof to obtain valid evidence during the identification process of data or file content. This research is presented in the form of an analysis of the use of signature files in investigations to determine the type of file in the case of leaking company information xyz, the research stage uses evidence handling procedures in the laboratory. Contributions made after conducting a series of case investigations using signature files have been successfully carried out using the Access Data FTK Imager application version 4.2.0 and WinHex version 18.6. Signature files can be used for case investigations in identifying and verifying file types so that files that have been modified can be restored and can be read by the operating system by checking file types through hexadecimal values in the header file (file prefix) that show the characteristics of each type file so that the file type can be found and the file can be read by the operating system.",5,3,364,370,Hexadecimal; Digital data; Information leakage; Digital evidence; Computer science; Header; Database; Identification (information); Digital forensics; File format,,,,,http://openjournal.unpam.ac.id/index.php/informatika/article/download/6073/pdf http://openjournal.unpam.ac.id/index.php/informatika/article/view/6073 https://core.ac.uk/download/337610059.pdf,http://dx.doi.org/10.32493/informatika.v5i3.6073,,10.32493/informatika.v5i3.6073,3094746511,,0,005-383-648-053-571; 013-731-482-888-787; 029-748-683-221-796; 058-734-389-352-474; 079-499-568-978-91X; 138-109-881-604-975,0,true,cc-by-nc,gold 118-838-969-146-870,Taxonomy of Challenges for Digital Forensics.,2015-07-14,2015,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Nickson M. Karie; Hein S. Venter,"Since its inception, over a decade ago, the field of digital forensics has faced numerous challenges. Despite different researchers and digital forensic practitioners having studied and analysed various known digital forensic challenges, as of 2013, there still exists a need for a formal classification of these challenges. This article therefore reviews existing research literature and highlights the various challenges that digital forensics has faced for the last 10 years. In conducting this research study, however, it was difficult for the authors to review all the existing research literature in the digital forensic domain; hence, sampling and randomization techniques were employed to facilitate the review of the gathered literature. Taxonomy of the various challenges is subsequently proposed in this paper based on our review of the literature. The taxonomy classifies the large number of digital forensic challenges into four well-defined and easily understood categories. The proposed taxonomy can be useful, for example, in future developments of automated digital forensic tools by explicitly describing processes and procedures that focus on addressing specific challenges identified in this paper. However, it should also be noted that the purpose of this paper was not to propose any solutions to the individual challenges that digital forensics face, but to serve as a survey of the state of the art of the research area.",60,4,885,893,Engineering; Domain (software engineering); Data science; Randomization techniques; Poison control; Research literature; Field (computer science); Computer security; State (computer science); Digital forensics; Taxonomy (general),digital forensic challenges; digital forensics; forensic sciences; formal classification of challenges; taxonomy,,,,https://repository.up.ac.za/bitstream/2263/51104/1/Karie_Taxonomy_2015.pdf https://repository.up.ac.za/handle/2263/51104 https://dialnet.unirioja.es/servlet/articulo?codigo=5312745 https://www.ncbi.nlm.nih.gov/pubmed/26175261 https://onlinelibrary.wiley.com/doi/10.1111/1556-4029.12809 https://europepmc.org/article/MED/26175261 https://pubmed.ncbi.nlm.nih.gov/26175261/,http://dx.doi.org/10.1111/1556-4029.12809,26175261,10.1111/1556-4029.12809,2097392047,,0,004-110-423-124-981; 005-069-037-045-980; 005-102-962-333-180; 009-671-935-335-418; 016-363-794-426-365; 021-495-249-615-203; 021-850-998-857-676; 033-877-222-136-260; 036-132-248-316-123; 040-524-943-701-266; 044-026-347-309-827; 051-288-268-472-187; 058-723-704-218-926; 063-195-309-093-275; 067-927-462-113-654; 074-543-232-543-385; 076-870-357-267-514; 077-532-025-251-756; 084-559-361-318-175; 089-048-294-489-077; 098-748-261-333-651; 115-531-623-920-069; 130-217-725-914-477; 134-927-490-231-285; 179-703-555-795-891,38,true,,green 118-968-004-680-589,The Internet of Things: Challenges and Considerations for Cybercrime Investigations and Digital Forensics,,2020,journal article,International Journal of Digital Crime and Forensics,19416210; 19416229,IGI Global,United States,Aine MacDermott; Thar Baker; Paul Buck; Farkhund Iqbal; Qi Shi,"The Internet of Things (IoT) represents the seamless merging of the real and digital world, with new devices created that store and pass around data. Processing large quantities of IoT data will proportionately increase workloads of data centres, leaving providers facing new security, capacity and analytics challenges. Handling this data conveniently is a critical challenge, as the overall application performance is highly dependent on the properties of the data management service. This paper explores the challenges posed by cybercrime investigations and digital forensics concerning the shifting landscape of crime – the IoT and the evident investigative complexity – moving to the Internet of Anything (IoA)/Internet of Everything (IoE) era. IoT forensics requires a multi-faceted approach where evidence may be collected from a variety of sources such as sensor devices, communication devices, fridges, cars and drones, to smart swarms and intelligent buildings.",12,1,1,13,The Internet; Variety (cybernetics); Data management; Cybercrime; Service (systems architecture); Computer security; Computer science; Drone; Analytics; Digital forensics,,,,,https://researchonline.ljmu.ac.uk/id/eprint/9496/ https://dblp.uni-trier.de/db/journals/ijdcf/ijdcf12.html#MacDermottBBIS20 https://jglobal.jst.go.jp/en/detail?JGLOBAL_ID=201902221890881455 https://www.igi-global.com/article/the-internet-of-things-challenges-and-considerations-for-cybercrime-investigations-and-digital-forensics/240648 https://core.ac.uk/download/pdf/237431131.pdf,http://dx.doi.org/10.4018/ijdcf.2020010101,,10.4018/ijdcf.2020010101,2981336747,,0,004-916-495-289-390; 005-630-640-664-939; 010-196-658-878-056; 015-264-924-343-905; 017-325-802-595-724; 017-840-378-634-021; 023-858-572-607-02X; 025-319-861-345-580; 027-265-141-482-204; 029-748-683-221-796; 038-668-970-194-854; 039-999-270-718-277; 040-132-585-260-276; 041-350-452-684-86X; 046-357-391-782-442; 047-125-525-662-686; 047-492-292-707-760; 051-738-543-964-887; 063-101-076-395-60X; 083-312-117-071-763; 111-488-239-742-003; 112-181-239-331-730; 131-373-334-471-817; 133-397-275-695-990; 134-927-490-231-285; 145-062-913-009-934; 162-110-149-751-921,6,true,,green 118-998-556-606-739,The Impact of Digital Evidence in Forensic Laboratories,,2021,journal article,Forensic Science International: Synergy,2589871x,Elsevier BV,,Tracy Walraven,,3,,100178,,Engineering; Forensic science; Data science; Digital evidence,,,,,https://api.elsevier.com/content/article/PII:S2589871X21000486?httpAccept=text/xml,http://dx.doi.org/10.1016/j.fsisyn.2021.100178,,10.1016/j.fsisyn.2021.100178,3208116366,,0,,0,true,"CC BY, CC BY-NC-ND",gold 119-051-858-123-067,A Study on Maritime Digital Forensic with Necessity,,2008,journal article,The Journal of the Korea institute of electronic communication sciences,19758170,,,Gyu-An Lee,"Marine accidents show various causes and effects in Korea where 3 sides of the country are surrounded by the ocean. Every year, 600 to 700 marine accidents occur mostly by small fishing boats. There are repeated accidents which involve crashes of coastal ships with fishing boats, which produce casualties and massive environmental hazard and the need for underwater search for shipwrecks. From the beginning of 21st century, the decrease of large ships with large number of crews led to the emergence of digitalvessels and the digital data storage of the installed equipments on the vessels, marine digital forensic - the extraction and analysis of the stored digital data within digital vessels - became necessary. This article is intended to suggest marine digital forensics as a solution of collecting evidence for discovering the causes, liabilities and compensations of marine accidents.",3,4,204,209,Engineering; Environmental hazard; Digital data; Digital Data Storage; Digital evidence; Fishing; Forensic engineering; Digital forensics,,,,,http://www.koreascience.or.kr/article/ArticleFullRecord.jsp?cn=KCTSAD_2008_v3n4_204,http://www.koreascience.or.kr/article/ArticleFullRecord.jsp?cn=KCTSAD_2008_v3n4_204,,,2400191225,,0,,1,false,, 119-224-389-163-914,Forensic analysis of open-source XMPP/Jabber multi-client instant messaging apps on Android smartphones,2021-03-06,2021,journal article,SN Applied Sciences,25233963; 25233971,Springer Science and Business Media LLC,,Alex Akinbi; Ehizojie Ojie,"In the quest for a panacea to ensure digital privacy, many users have switched to using decentralized open-source Extensible Messaging and Presence Protocol multi-client instant messaging (IM) apps for secure end-to-end communication. In this paper, we present a forensic analysis of the artefacts generated on Android smartphones by Conversations and Xabber apps. We identified databases maintained by each app and external Secure Digital card directories that store local copies of user metadata. We analysed each app’s storage locations for forensic artefacts and how they can be used in a forensic investigation. The results in this paper show a detailed analysis of forensic files of interest which can be correlated to identify the local user’s multiple IM accounts and contact list, contents of messages exchanged with contacts, deleted files, time, and dates in the order of their occurrence. The contributions of this research include a comprehensive description of artefacts, which are of forensic interest, for each app analysed.",3,4,1,14,World Wide Web; Instant messaging; Contact list; Open source; Computer science; Android (operating system); Protocol (object-oriented programming); Metadata,,,,,https://link.springer.com/article/10.1007/s42452-021-04431-9 https://researchonline.ljmu.ac.uk/id/eprint/14572/ https://link.springer.com/content/pdf/10.1007/s42452-021-04431-9.pdf,http://dx.doi.org/10.1007/s42452-021-04431-9,,10.1007/s42452-021-04431-9,3134729744,,0,003-504-554-245-316; 015-910-979-561-313; 036-213-488-430-19X; 067-663-230-406-996; 077-859-446-810-741; 082-814-492-264-296; 094-409-598-145-865; 103-738-494-539-60X; 111-484-206-251-752; 125-552-808-845-523; 166-183-210-534-575; 166-547-932-138-819; 181-684-050-889-439; 198-820-820-012-184,3,true,cc-by,gold 119-367-876-749-558,Digital photography & imaging,,2003,journal article,Forensic Science International,03790738; 18726283,Elsevier BV,Netherlands,,,136,,24,31,Photography; Digital imaging; Digital photography; Computer graphics (images); Computer science; Remote sensing; Art; Computer vision; Digital image; Geography; Visual arts; Image processing; Image (mathematics),,,,,,http://dx.doi.org/10.1016/s0379-0738(03)90007-7,,10.1016/s0379-0738(03)90007-7,,,0,,0,false,, 119-855-179-161-858,Prelim iii - Contents List,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,38,,301279,301279,Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00197-9,,10.1016/s2666-2817(21)00197-9,,,0,,0,true,,bronze 119-857-067-496-767,"The Process and Noticed Problems of Testing and Identifying the Contents of Digital Videocassette by ""Time code Method""",,2010,journal article,Image Technology,,,,Ma Yong,"This paper discoursed on the application range of the method for testing and identifying the contents of Digital Videocassette by ""Time code Method "",its process and equipment used.In the same time the noticed problems in this process were specified.",,,,,Code (cryptography); Engineering drawing; Computer science; Identification (information); Real-time computing; Process (computing),,,,,http://en.cnki.com.cn/Article_en/CJFDTOTAL-YIXI201002013.htm,http://en.cnki.com.cn/Article_en/CJFDTOTAL-YIXI201002013.htm,,,2383714544,,0,,0,false,, 120-153-540-432-778,Development of a nanoplate-based digital PCR assay for species identification with mixture deconvolution,,2022,journal article,Forensic Science International: Genetics Supplement Series,18751768,Elsevier BV,,Mirna Ghemrawi; Bruce McCord,,,,,,,,,,,,http://dx.doi.org/10.1016/j.fsigss.2022.10.032,,10.1016/j.fsigss.2022.10.032,,,0,043-622-776-825-867; 066-098-853-762-609,0,false,, 120-484-561-241-15X,Anti-Forensics for Unsharp Masking Sharpening in Digital Images,2013-07-01,2013,journal article,International Journal of Digital Crime and Forensics,19416210; 19416229,IGI Global,United States,Lu Laijie; Yang Gaobo; Xia Ming,"As a retouching tool, image sharpening can be applied as the final step to hide those possible forgery operations in an image. Unsharp masking USM is a popular sharpening method supported by most image editing software such as Adobe Photoshop. Several passive forensics methods have been presented for the detection of USM Sharpening. In this paper, an anti-forensic scheme for USM Sharpening is proposed to invalidate the existing forensic algorithms. It removes the overshoot artifacts in image edges and abrupt change in histogram ends. The effectiveness of the proposed method is proved by the experimental results on a large image database with various parameter settings. Comparisons are made among the unsharpened images, the sharpened images and the anti-forensic dithered image. Both the detection ability and image quality are used for its performance evaluation.",5,3,53,65,Masking (art); Artificial intelligence; Graphics software; Sharpening; Computer vision; Computer science; Digital image; Histogram; Image quality; Dither; Unsharp masking,,,,,https://dblp.uni-trier.de/db/journals/ijdcf/ijdcf5.html#LuYX13 https://www.igi-global.com/article/anti-forensics-for-unsharp-masking-sharpening-in-digital-images/84136 https://dl.acm.org/doi/10.4018/jdcf.2013070104,http://dx.doi.org/10.4018/jdcf.2013070104,,10.4018/jdcf.2013070104,1985705604,,0,004-530-492-547-92X; 007-398-225-185-040; 024-148-241-973-367; 025-410-507-609-210; 031-876-583-652-183; 036-263-541-955-848; 041-796-476-831-023; 045-496-560-764-477; 055-256-082-961-475; 067-303-718-151-959; 076-527-439-347-165; 104-279-390-845-094; 106-908-142-273-164; 112-054-275-475-385; 122-164-403-164-304; 129-237-823-312-771; 152-785-842-665-362; 164-594-449-456-63X; 164-669-954-972-735,17,false,, 120-485-736-127-389,Generative Steganography Based on Long Readable Text Generation,,2022,journal article,IEEE Transactions on Computational Social Systems,2329924x; 23737476,Institute of Electrical and Electronics Engineers (IEEE),,Yi Cao; Zhili Zhou; Chinmay Chakraborty; Meimin Wang; Q. M. Jonathan Wu; Xingming Sun; Keping Yu,,,,1,11,,,,,National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; Japan Society for the Promotion of Science JSPS through Grants-in-Aid for Scientific Research KAKENHI; Japan Society for the Promotion of Science JSPS through Grants-in-Aid for Scientific Research KAKENHI; Jiangsu Basic Research Programs-Natural Science Foundation; Jiangsu Basic Research Programs-Natural Science Foundation; Priority Academic Program Development of Jiangsu Higher Education Institutions PAPD Fund; Collaborative Innovation Center of Atmospheric Environment and Equipment Technology CICAEET Fund China; China Scholarship Council,,http://dx.doi.org/10.1109/tcss.2022.3174013,,10.1109/tcss.2022.3174013,,,0,,1,false,, 120-503-453-870-160,Strengthening trust: Integration of digital investigation and forensic science,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Eoghan Casey,,33,,301000,,Engineering; Forensic science; Engineering ethics,,,,,https://dblp.uni-trier.de/db/journals/di/di33.html#Casey20b https://www.sciencedirect.com/science/article/pii/S2666281720302481,http://dx.doi.org/10.1016/j.fsidi.2020.301000,,10.1016/j.fsidi.2020.301000,3038126843,,0,,0,false,, 120-656-428-748-152,Do Identities Matter,2017-06-14,2017,journal article,Policing: A Journal of Policy and Practice,17524512; 17524520,Oxford University Press (OUP),United Kingdom,Eoghan Casey; David-Olivier Jaquet-Chiffelle,"It is difficult to overstate the importance of identity in the digital age, as well as the importance of digitized information for identity. In order to advance security, liberty, and privacy in modern society, it is crucial to understand the nuances of what identity means and how it is used and abused. This article defines identity, covering both physical and virtual entities, which is relevant in diverse contexts such as forensic science, cybersecurity, and national security. This article concentrates on the relevance of identity in forensic science, and provides illustrative examples. Approaches and challenges to evaluating and expressing confidence in identity-related conclusions are discussed. Privacy issues are considered along with the rising risks of identity usurpation and impersonation. Relationships between identification of physical and virtual entities are addressed, including the weaknesses and strengths of digital information alone, and the benefits of combining multiple forensic disciplines when assessing identity. This article concludes with a consideration of the benefits for forensic science specifically, and society generally, to take a pluridisciplinary approach to establishing identity",13,1,21,34,Sociology,,,,,https://academic.oup.com/policing/article-abstract/13/1/21/3867790 https://core.ac.uk/download/226982935.pdf,http://dx.doi.org/10.1093/police/pax034,,10.1093/police/pax034,2626804237,,0,010-929-901-654-438; 015-238-949-406-002; 028-349-074-103-810; 031-131-546-286-261; 049-660-094-541-280; 050-214-108-891-19X; 058-717-000-287-105; 062-121-021-285-333; 063-092-987-169-601; 075-823-430-938-532; 094-183-954-379-088; 101-436-770-235-826; 108-836-532-254-826; 117-555-147-368-574; 123-573-244-607-342; 142-527-962-979-521; 153-848-506-615-800; 161-682-969-891-054; 170-590-713-057-056,6,true,, 120-936-178-540-100,Digital forensics investigation jurisprudence: issues of admissibility of digital evidence,2020-07-31,2020,journal article,"Journal of Forensic, Legal & Investigative Sciences",2473733x,Herald Scholarly Open Access,,Abel Yeboah-Ofori; Akoto Derick Brown,"Digital Forensics investigations represent the science and legal process of investigating cybercrimes and digital media or objects to gather evidence. The digital evidence must prove that it has been used to commit a crime or used to gain unauthorized access. Digital Forensics investigations jurisprudence is the theory and philosophy of the study of law and the principles upon which a law is based. For digital evidence to appear at court and be legally admissible, the evidence must be authentic, accurate, complete, and convincing to the jury. Presenting digital forensic evidence at court has proved to be challenging, due to factors such as inadequate chain of custody, not maintaining legal procedures and inadequate evidential integrity. Following legal procedures in evidence gathering at a digital crime scene is critical for admissibility and prosecution. However, inadequate evidence gathering and maintaining accuracy, authenticity, completeness has prevented many cases to be inadmissible at court. This paper aims to discuss digital forensics investigations jurisprudence and the issues of authentic, accurate, complete, and convincing evidence leading to inadmissibility at court. To achieve the applicability of the study, we highlight the legal and technical factors required to harmonize these issues and how it could be addressed. This paper does not follow any forensic investigations process. Rather, it discusses how digital evidence could be admissible irrespective of the process implemented. The observations and outcomes of these legal criteria will contribute to the improvement of the evolving nature of digital evidence gathering phases.",6,1,1,8,Chain of custody; Internet privacy; Crime scene; Digital media; Jury; Legal process; Digital evidence; Computer science; Jurisprudence; Digital forensics,,,,,https://www.scilit.net/article/e17394e85b9e94a3191647c7d867a22e https://repository.uwl.ac.uk/id/eprint/8012/,http://dx.doi.org/10.24966/flis-733x/100045,,10.24966/flis-733x/100045,3080215576,,0,,3,true,cc-by,gold 121-668-843-429-348,Problem Based Learning in Digital Forensics,2014-07-28,2014,journal article,Innovation in Teaching and Learning in Information and Computer Sciences,14737507,Informa UK Limited,United Kingdom,Alastair Irons; Paula Thomas,AbstractThe purpose of this paper is to compare and contrast the efforts of two universities to address the issue of providing computer forensics students with the opportunity to get involved in the practical aspects of forensic search and seizure procedures. The paper discusses the approaches undertaken by the University of Sunderland and the University of South Wales (Glamorgan) to give the students the opportunity to process a case from the crime scene through to the court room. In order to do this both institutions adopted a problem based learning (PBL) approach – to reflect real-world solutions and encourage students to work in groups to seek further knowledge and understanding of the various processes and procedures – in particular the steps around search and seizure of digital evidence from a crime scene. The PBL activities at Sunderland and Glamorgan were designed in order to help the students understand the processes of digital crime scene analysis and search and seizure procedures and to give th...,,,1,10,Mathematics education; Crime scene; Pedagogy; Order (business); Problem-based learning; Digital evidence; Computer science; Process (engineering); Computer forensics; Search and seizure; Digital forensics,,,,,https://www.tandfonline.com/doi/full/10.11120/ital.2014.00013 https://core.ac.uk/display/74367909 https://core.ac.uk/download/74367909.pdf,http://dx.doi.org/10.11120/ital.2014.00013,,10.11120/ital.2014.00013,2542008930,,0,005-733-361-126-371; 007-790-059-029-953; 014-261-775-435-338; 042-429-973-776-901; 046-474-638-122-984; 052-361-056-422-596; 066-198-497-514-876; 070-048-250-044-834,1,true,cc-by-nc-nd,green 121-931-608-998-802,Identification of User Ownership in Digital Forensic using Data Mining Technique,2012-07-28,2012,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,KM Kumar; Sanjeev Sofat; Naveen Aggarwal; Shreyans K. Jain,"As existing technology used by criminal rapidly changes and growing, digital forensics is also growing and important fields of research for current intelligence, law enforcement and military organizations today. As huge information is stored in digital form, the need and ability to analyze and process this information for relevant evidence has grown in complexity. During criminal activities crime committed use digital devices, forensic examiners have to adopt practical frameworks and methods to recover data for analysis which can comprise as evidence. Data Preparation/ Generation, Data warehousing and Data Mining, are the three essential features involved in the investigation process. The purpose of data mining technique is to find the valuable relationships between data items. This paper proposes an approach for preparation, generation, storing and analyzing of data, retrieved from digital devices which pose as evidence in forensic analysis. Attribute classification model has been presented to categorized user files. The data mining tools has been used to identify user ownership and validating the reliability of the pre-processed data. This work proposes a practical framework for digital forensics on hard drives.",50,4,1,5,Data mining; Data warehouse; Forensic science; Reliability (computer networking); Work (electrical); Data preparation; Law enforcement; Computer science; Process (engineering); Identification (information); Digital forensics,,,,,https://ui.adsabs.harvard.edu/abs/2012IJCA...50d...1K/abstract https://www.ijcaonline.org/archives/volume50/number4/7756-0818 https://research.ijcaonline.org/volume50/number4/pxc3880818.pdf,http://dx.doi.org/10.5120/7756-0818,,10.5120/7756-0818,2099922782,,0,003-448-142-212-67X; 003-868-023-351-977; 009-101-513-978-03X; 037-927-986-476-095; 062-202-545-220-180; 083-366-581-383-158; 094-999-990-049-790; 096-459-953-942-294; 115-547-184-477-216; 125-658-973-713-722; 128-983-879-520-615; 132-355-634-397-986; 136-606-982-080-327,5,true,,green 121-970-164-141-593,Forensic investigation of Google Meet for memory and browser artifacts,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Farkhund Iqbal; Zainab Khalid; Andrew Marrington; Babar Shah; Patrick C.K. Hung,,43,,301448,301448,Computer science; Digital forensics; World Wide Web; Artifact (error); Software; Multimedia,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301448,,10.1016/j.fsidi.2022.301448,,,0,002-449-146-256-491; 019-803-008-636-572; 047-325-648-776-516; 112-955-497-358-051; 125-905-149-274-050; 177-638-047-045-946,0,false,, 122-561-889-583-881,A Study on Digital Forensic Tools and Process,,2008,journal article,The Police Science Journal,19760205,The Institute of Police Science,,Heesung Tak,,3,1,173,198,Authentication (law); Digital evidence; Computer science; Process (engineering); Multimedia; Digital forensics,,,,,https://www.kci.go.kr/kciportal/ci/sereArticleSearch/ciSereArtiView.kci?sereArticleSearchBean.artiId=ART001410284,http://dx.doi.org/10.16961/polips.2008.3.1.173,,10.16961/polips.2008.3.1.173,2907466340,,0,,0,true,cc-by-nc,gold 123-067-775-038-87X,Privacy Impacts of Data Encryption on the Efficiency of Digital Forensics Technology,,2013,journal article,International Journal of Advanced Computer Science and Applications,2158107x; 21565570,The Science and Information Organization,,Adedayo M. Balogun; Shao Ying Zhu,"Owing to a number of reasons, the deployment of encryption solutions are beginning to be ubiquitous at both organizational and individual levels. The most emphasized reason is the necessity to ensure confidentiality of privileged information. Unfortunately, it is also popular as cyber-criminals' escape route from the grasp of digital forensic investigations. The direct encryption of data or indirect encryption of storage devices, more often than not, prevents access to such information contained therein. This consequently leaves the forensics investigation team, and subsequently the prosecution, little or no evidence to work with, in sixty percent of such cases. However, it is unthinkable to jeopardize the successes brought by encryption technology to information security, in favour of digital forensics technology. This paper examines what data encryption contributes to information security, and then highlights its contributions to digital forensics of disk drives. The paper also discusses the available ways and tools, in digital forensics, to get around the problems constituted by encryption. A particular attention is paid to the Truecrypt encryption solution to illustrate ideas being discussed. It then compares encryption's contributions in both realms, to justify the need for introduction of new technologies to forensically defeat data encryption as the only solution, whilst maintaining the privacy goal of users.",4,5,,,Software deployment; Forensic science; Encryption; Work (electrical); Cryptography; Computer security; Computer science; Information security; Confidentiality; Digital forensics,,,,,https://thesai.org/Publications/ViewPaper?Volume=4&Issue=5&Code=IJACSA&SerialNo=6 https://dblp.uni-trier.de/db/journals/corr/corr1312.html#BalogunZ13 https://thesai.org/Downloads/Volume4No5/Paper_6-Privacy_Impacts_of_Data_Encryption_on_the_Efficiency_of_Digital_Forensics_Technology.pdf http://ui.adsabs.harvard.edu/abs/2013arXiv1312.3183B/abstract,http://dx.doi.org/10.14569/ijacsa.2013.040506,,10.14569/ijacsa.2013.040506,2962922800,,0,002-144-887-718-545; 005-102-962-333-180; 010-882-535-434-404; 017-335-677-993-203; 025-743-892-862-313; 025-832-466-975-926; 039-253-046-125-791; 048-314-987-416-85X; 050-513-243-638-138; 058-205-117-706-853; 060-808-935-547-406; 080-117-008-231-77X; 133-839-073-755-612; 134-927-490-231-285; 145-616-913-856-289; 186-019-966-947-987,8,true,cc-by,hybrid 123-275-701-676-787,Are mobile device examinations practiced like ‘forensics’?,2015-11-16,2015,journal article,Digital Evidence and Electronic Signature Law Review,20548508; 17564611,School of Advanced Study,Spain,Gary C. Kessler,"Gary C. Kessler considers the issue of mobile device forensics and the relationship between digital forensics and other forensic sciences, and compares mobile device forensics to the broader field of digital forensics. Index words: Cell phone forensics, computer forensics, digital forensics, mobile device forensics",12,0,3,9,Mobile device; Computer security; Computer science; Network forensics; Computer forensics; Mobile device forensics; Digital forensics,,,,,https://journals.sas.ac.uk/deeslr/article/download/2237/2170 https://commons.erau.edu/cgi/viewcontent.cgi?article=1127&context=publication https://journals.sas.ac.uk/deeslr/article/view/2237 https://commons.erau.edu/publication/119/ https://works.bepress.com/gary_kessler/50/,http://dx.doi.org/10.14296/deeslr.v12i0.2237,,10.14296/deeslr.v12i0.2237,2206488084,,0,,6,true,cc-by-nc-nd,gold 123-591-979-675-820,OpenForensics: a digital forensics GPU pattern matching approach for the 21st century,,2018,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Ethan Bayne; Robert Ian Ferguson; Adam T. Sampson,"Abstract Pattern matching is a crucial component employed in many digital forensic (DF) analysis techniques, such as file-carving. The capacity of storage available on modern consumer devices has increased substantially in the past century, making pattern matching approaches of current generation DF tools increasingly ineffective in performing timely analyses on data seized in a DF investigation. As pattern matching is a trivally parallelisable problem, general purpose programming on graphic processing units (GPGPU) is a natural fit for this problem. This paper presents a pattern matching framework – OpenForensics – that demonstrates substantial performance improvements from the use of modern parallelisable algorithms and graphic processing units (GPUs) to search for patterns within forensic images and local storage devices.",24,,S29,S37,Data mining; General purpose; Current generation; Computer science; Component (UML); General-purpose computing on graphics processing units; Pattern matching; Digital forensics,,,,NVIDIA Corporation,https://doi.org/10.1016/j.diin.2018.01.005 https://www.sciencedirect.com/science/article/pii/S1742287618300379 https://core.ac.uk/display/153400622 https://dblp.uni-trier.de/db/journals/di/di24.html#BayneFS18 https://rke.abertay.ac.uk/en/publications/openforensics-a-digital-forensics-gpu-pattern-matching-approach-f https://core.ac.uk/download/153400622.pdf,http://dx.doi.org/10.1016/j.diin.2018.01.005,,10.1016/j.diin.2018.01.005,2789491237,,0,008-653-605-343-591; 012-089-942-653-099; 023-341-419-324-638; 023-539-140-993-037; 033-877-222-136-260; 042-423-526-530-806; 043-093-846-816-675; 047-756-135-201-412; 050-513-243-638-138; 067-108-699-595-293; 072-072-328-028-440; 079-731-827-037-297; 098-748-261-333-651; 126-916-335-288-384; 134-927-490-231-285,5,true,cc-by-nc-nd,hybrid 124-095-935-355-212,НАПРЯМИ РОЗВИТКУ СТРУКТУРИ І ЗМІСТУ КРИМІНАЛІСТИЧНОЇ ТЕХНІКИ В УКРАЇНІ,2020-02-03,2020,journal article,Криміналістичний вісник,19924437,State Scientific Research Forensic Centre of the Ministry of Internal Affairs of Ukraine,,Р. Л. Степанюк; С. І. Перлін,"The purpose of the article is to outline topical scientific tasks to determine the directions of improvement of the structure, as well as the further development of forensic technology, taking into account the achievements of leading countries, especially the European Union and the USA. In the course of the research, the reasons for defining the notion of forensic techniques used by domestic and foreign scientists were generalized, and their own definition was proposed. The components of forensic science (forensic techniques, forensic tactics, forensic methods) were distinguished. The necessity of development of forensic technology is substantiated. The expediency of further attempts to defend the legal nature of forensic technology as a section of forensic science has been proved. Proposals, considering the multidisciplinary natural and technical nature and taking into account the processes of globalization and mutual integration, in order to improve its structure, based on the experience of other countries, in particular the USA, Germany, whose domestic criminology was modeled on a similar model, have been made. The expediency of launching new sections of forensic technology, such as forensic micrology, forensic explosives, forensic weapons, forensic phonoscopy, forensic odorology, material traces of the DNA presence, narcotic drugs research, examination of computer equipment, digital media and software, basing on the results of thorough theoretical research to develop scientific foundations and applied recommendations for the development of weave these sections, was proved. The validity of the obtained results and conclusions is ensured by general scientific and special methods of research, in particular: systematic and structural essence of investigated categories and legal phenomena is determined; the current provisions on their completeness, compliance with the achievements of modern legal sciences were analysed trough logical and argumentative approaches; Comparative legal analyses summarizes law enforcement practices and legal provisions, in particular of the US, Germany; a historical and legal methods were used during retrospective analysis of the development of forensic technology as a component of forensic science; dogmatic method contributed to the deepening and specifying of the conceptual and categorical apparatus of research;  modeling method made it possible to formulate conclusions, as well as to improve the structure of forensic technology, including the launch of its new sections.Keywords: forensics; forensic technique; structure; content; technical forensic tools.",32,2,6,14,Forensic science; Digital media; Political science; Structure (mathematical logic); Globalization; Multidisciplinary approach; Law enforcement; Argumentative; European union; Engineering ethics,,,,,https://visnyk.dndekc.mvs.gov.ua/index.php/visnuk/article/download/75/50,http://dx.doi.org/10.37025/1992-4437/2019-32-2-6,,10.37025/1992-4437/2019-32-2-6,3005774824,,0,,0,true,cc-by-nc-nd,hybrid 124-255-859-306-442,An investigation into Unmanned Aerial System (UAS) forensics: Data extraction & analysis,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Greg Thornton; Pooneh Bagheri Zadeh,"Recent developments of drone technologies have shown a surge of commercial sales of drone devices, which have found use in many industries. However, the technology has been misused to commit crimes such as drug trafficking, robberies, and terror attacks. The digital forensics industry must match the speed of development with forensic tools and techniques. However, it has been identified that there is a lack of an agreed framework for the extraction and analysis of drone devices and a lack of support in commercial digital forensics tools available. In this research, an investigation into the extraction tools available for drone devices and analysis techniques has been performed to identify best practices for handling drone devices in a forensically sound manner. A new framework to perform a full forensic analysis of small to medium sized commercial drone devices and their controllers has been proposed to give investigators a plan of action to perform forensic analysis on these devices. The proposed framework overcomes some limitations of other drone forensics investigation frameworks presented in the literature. • Digital Forensics investigation Framework. • Drone Forensics Investigation. • Drone Data Analysis.",41,,301379,301379,Drone; Digital forensics; Computer science; Commit; Computer security,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301379,,10.1016/j.fsidi.2022.301379,,,0,003-504-554-245-316; 008-667-688-301-190; 010-084-169-561-57X; 011-755-498-862-139; 013-832-431-848-470; 028-638-405-790-741; 042-467-831-044-091; 046-314-745-466-915; 072-183-867-595-593; 083-401-248-269-053; 089-695-854-791-989,0,true,,hybrid 124-293-099-616-313,Forensic Profiling,2020-03-23,2020,journal article,International Journal for Electronic Crime Investigation,26166003; 25223429,Lahore Garrison University,,Fatima Fatima Fatima,"This review paper brings out technical and legal association between profiling and forensic science. It emphasizes on trace evidences used as valuable information in perspective of forensic science and criminal justice system. The aim of forensic profiling is to interpret and investigate with reasoning purposes. It explains available forms of data, data processing methods and technologies, and obstacles to data treatment. Proceeding with reconstruction process that formulates a possible hypothesis of profile, different forms of forensic profiling with judicial perspective are discussed. Other factors such as crime prepetition, crime series, and tactical, operational and strategic analysis etc. that can help in developing of profiles are also argued. It distinguishes the profiles significance into new technologies of DNA databases, digital image forensics, 3D and CCTV surveillance cameras, forensic drug profiling and intelligence based expertise centers. Other fields related to security such as detection, risk analysis and surveillance are discussed in profiling perspective",4,2,12,12,Profiling (computer programming); Offender profiling; Data science; Computer science; Forensic science; Crime scene; Crime analysis; Criminal investigation; DNA profiling; Criminal justice; Digital forensics; Computer security; Data mining; Visualization; Psychology; Criminology; Geography; Biology; DNA; Genetics; Archaeology; Operating system,,,,,,http://dx.doi.org/10.54692/ijeci.2020.040256,,10.54692/ijeci.2020.040256,,,0,,0,true,,bronze 124-980-593-548-795,Experimental Analysis of Web Browser Sessions Using Live Forensics Method,2018-10-01,2018,journal article,International Journal of Electrical and Computer Engineering (IJECE),20888708,Institute of Advanced Engineering and Science,Indonesia,Rusydi Umar; Anton Yudhana; Muhammad Nur Faiz,"In today's digital era almost every aspect of life requires the internet, one way to access the internet is through a web browser. For security reasons, one developed is private mode. Unfortunately, some users using this feature do it for cybercrime. The use of this feature is to minimize the discovery of digital evidence. The standard investigative techniques of NIST need to be developed to uncover an ever-varied cybercrime. Live Forensics is an investigative development model for obtaining evidence of computer usage. This research provides a solution in forensic investigation effectively and efficiently by using live forensics. This paper proposes a framework for web browser analysis. Live Forensics allows investigators to obtain data from RAM that contains computer usage sessions.",8,5,2951,2958,The Internet; World Wide Web; Forensic science; Cybercrime; Digital evidence; Web browser; Computer science; Mode (computer interface); Feature (computer vision),,,,,http://ijece.iaescore.com/index.php/IJECE/article/download/9434/10980 http://ijece.iaescore.com/index.php/IJECE/article/view/9434 https://core.ac.uk/download/329119529.pdf,http://dx.doi.org/10.11591/ijece.v8i5.pp2951-2958,,10.11591/ijece.v8i5.pp2951-2958,2790078431,,0,001-160-306-268-480; 004-872-169-627-620; 006-382-928-763-481; 020-774-682-563-067; 030-618-337-874-09X; 039-774-603-243-832; 055-473-899-043-485; 115-195-915-997-770; 131-861-074-437-518; 160-285-544-578-948,9,true,cc-by-nc,hybrid 125-020-771-045-081,Application of quality in use model to assess the user experience of open source digital forensics tools,,2020,journal article,International Journal of Electronic Security and Digital Forensics,1751911x; 17519128,Inderscience Publishers,United Kingdom,Manar Abu Talib; Reem Alnanih; Adel Khelifi,"Open source digital forensics tools are playing an important role for forensics investigations. So, there is a need to assess these tools to ensure they meet users' needs. The existing literature does not satisfy the requirements of assessing their quality-in-use. This paper assesses three most used digital forensics tools, namely autopsy, DFF, and DART using five quality-in use characteristics, namely, effectiveness, productivity, efficiency, error safety, and cognitive load. The results demonstrated that Autopsy, DFF, and DART performances are similar in terms of efficiency and productivity. DDF outperformed the other two in effectiveness. Autopsy was the best in terms of error safety, and DART had the highest cognitive load. The relevant community may consider these findings in selecting solutions to perform its duties. The future researches can involve more studies to encompass additional aspects of software quality, to compare open and closed source digital forensics programs and to enhance testing efforts",12,1,43,76,Software quality; User experience design; Data science; Quality (business); Open source software; Open source; Computer science; Cognitive load; Digital forensics,,,,,https://www.inderscienceonline.com/doi/abs/10.1504/IJESDF.2020.103870 https://dblp.uni-trier.de/db/journals/ijesdf/ijesdf12.html#TalibAK20,http://dx.doi.org/10.1504/ijesdf.2020.10025165,,10.1504/ijesdf.2020.10025165,2989154068,,0,,0,true,,bronze 125-082-012-062-802,The use of self-organising maps for anomalous behaviour detection in a digital investigation.,2006-07-27,2006,journal article,Forensic science international,03790738; 18726283,Elsevier Ireland Ltd,Netherlands,Bennie Fei; Jan H. P. Eloff; Martin S. Olivier; Hein S. Venter,"The dramatic increase in crime relating to the Internet and computers has caused a growing need for digital forensics. Digital forensic tools have been developed to assist investigators in conducting a proper investigation into digital crimes. In general, the bulk of the digital forensic tools available on the market permit investigators to analyse data that has been gathered from a computer system. However, current state-of-the-art digital forensic tools simply cannot handle large volumes of data in an efficient manner. With the advent of the Internet, many employees have been given access to new and more interesting possibilities via their desktop. Consequently, excessive Internet usage for non-job purposes and even blatant misuse of the Internet have become a problem in many organisations. Since storage media are steadily growing in size, the process of analysing multiple computer systems during a digital investigation can easily consume an enormous amount of time. Identifying a single suspicious computer from a set of candidates can therefore reduce human processing time and monetary costs involved in gathering evidence. The focus of this paper is to demonstrate how, in a digital investigation, digital forensic tools and the self-organising map (SOM)--an unsupervised neural network model--can aid investigators to determine anomalous behaviours (or activities) among employees (or computer systems) in a far more efficient manner. By analysing the different SOMs (one for each computer system), anomalous behaviours are identified and investigators are assisted to conduct the analysis more efficiently. The paper will demonstrate how the easy visualisation of the SOM enhances the ability of the investigators to interpret and explore the data generated by digital forensic tools so as to determine anomalous behaviours.",162,1,33,37,The Internet; Set (psychology); Data science; Self organising maps; Visualization; Computer security; Focus (computing); Computer science; Process (engineering); Artificial neural network; Digital forensics,,"Behavior; Crime; Forensic Sciences/methods; Humans; Internet; Neural Networks, Computer; Workplace",,,https://www.sciencedirect.com/science/article/pii/S037907380600404X https://www.sciencedirect.com/science/article/pii/S037907380600404X#! https://pubmed.ncbi.nlm.nih.gov/16876359/ https://www.ncbi.nlm.nih.gov/pubmed/16876359 https://www.researchgate.net/profile/Hs_Venter/publication/6910918_The_use_of_self-organising_maps_for_anomalous_behaviour_detection_in_a_digital_investigation/links/00463521dd0135c42b000000.pdf https://dialnet.unirioja.es/servlet/articulo?codigo=2102571 https://repository.up.ac.za/handle/2263/1006,http://dx.doi.org/10.1016/j.forsciint.2006.06.046,16876359,10.1016/j.forsciint.2006.06.046,2017543213,,0,013-887-768-477-01X; 032-760-465-037-173; 052-665-370-203-554; 079-070-981-899-105; 111-741-773-111-021; 154-522-328-889-556; 167-285-758-504-367; 182-962-922-039-081,41,true,,green 125-324-097-221-268,The suitability of visual taphonomic methods for digital photographs: An experimental approach with pig carcasses in a tropical climate.,2017-12-06,2017,journal article,Science & justice : journal of the Forensic Science Society,13550306,Forensic Science Society,United Kingdom,Agathe Ribéreau-Gayon; Carolyn Rando; Ruth M. Morgan; David O. Carter,"In the context of increased scrutiny of the methods in forensic sciences, it is essential to ensure that the approaches used in forensic taphonomy to measure decomposition and estimate the postmortem interval are underpinned by robust evidence-based data. Digital photographs are an important source of documentation in forensic taphonomic investigations but the suitability of the current approaches for photographs, rather than real-time remains, is poorly studied which can undermine accurate forensic conclusions. The present study aimed to investigate the suitability of 2D colour digital photographs for evaluating decomposition of exposed human analogues (Sus scrofa domesticus) in a tropical savanna environment (Hawaii), using two published scoring methods; Megyesi et al., 2005 and Keough et al., 2017. It was found that there were significant differences between the real-time and photograph decomposition scores when the Megyesi et al. method was used. However, the Keough et al. method applied to photographs reflected real-time decomposition more closely and thus appears more suitable to evaluate pig decomposition from 2D photographs. The findings indicate that the type of scoring method used has a significant impact on the ability to accurately evaluate the decomposition of exposed pig carcasses from photographs. It was further identified that photographic taphonomic analysis can reach high inter-observer reproducibility. These novel findings are of significant importance for the forensic sciences as they highlight the potential for high quality photograph coverage to provide useful complementary information for the forensic taphonomic investigation. New recommendations to develop robust transparent approaches adapted to photographs in forensic taphonomy are suggested based on these findings.",58,3,167,176,Taphonomy; Geography; Tropical climate; Context (language use); Scoring methods; Cartography,Decomposition; Digital images; Post-mortem interval; Reliability; Total Body Score; Visual evaluation,"Animals; Image Processing, Computer-Assisted; Models, Animal; Photography; Postmortem Changes; Reproducibility of Results; Swine; Tropical Climate",,Engineering and Physical Sciences Research Council; Engineering and Physical Sciences Research Council,http://discovery.ucl.ac.uk/10040609/ https://discovery.ucl.ac.uk/id/eprint/10040609/ https://pubmed.ncbi.nlm.nih.gov/29685298/ https://www.sciencedirect.com/science/article/pii/S1355030617301442 https://www.ncbi.nlm.nih.gov/pubmed/29685298,http://dx.doi.org/10.1016/j.scijus.2017.12.001,29685298,10.1016/j.scijus.2017.12.001,2771695305,,0,001-410-610-424-731; 002-016-709-240-466; 004-440-866-497-092; 006-365-141-523-025; 007-089-929-338-296; 008-295-582-213-358; 010-027-358-400-846; 011-227-621-249-278; 016-226-881-583-341; 017-674-281-299-107; 018-785-259-997-409; 022-876-962-772-402; 022-894-191-597-851; 023-564-617-852-683; 023-927-506-240-406; 024-036-001-517-286; 024-141-422-761-011; 024-229-130-825-833; 025-675-597-860-030; 030-864-173-536-484; 031-056-855-501-837; 031-575-367-650-782; 032-306-447-977-364; 038-257-840-765-069; 038-720-580-401-884; 040-782-831-462-91X; 042-647-990-322-261; 046-197-518-264-379; 046-814-294-409-153; 047-561-448-319-788; 048-618-179-642-077; 050-259-223-962-642; 053-763-978-958-862; 055-462-063-246-801; 062-482-446-933-299; 063-516-058-431-990; 064-150-433-766-075; 068-400-548-495-505; 075-098-322-022-325; 081-885-868-435-72X; 085-752-621-661-983; 087-665-815-874-693; 089-835-189-854-821; 091-869-121-741-107; 096-234-515-823-060; 098-804-301-113-543; 101-703-665-637-077; 101-898-536-025-026; 104-046-250-181-284; 105-296-351-308-14X; 107-351-331-211-836; 114-016-223-304-555; 118-181-454-531-696; 123-901-121-087-914; 125-004-011-373-736; 137-919-087-527-018; 141-737-661-209-418; 145-432-838-481-707,11,true,cc-by,hybrid 125-429-401-452-724,A survey of machine learning applications in digital forensics,2021-04-08,2021,journal article,Trends in Computer Science and Information Technology,26413086,Peertechz Publications Private Limited,,Hilmand Khan; Sarmad Hanif; Bakht Muhammad,"We address the role of machine learning in digital forensics in this paper, in order to have a better understanding of where machine learning stand in today’s cyber security domain when it comes to collecting digital evidence. We started by talking about Digital Forensics and its past. Then, to illustrate the fields of digital forensics where machine learning methods have been used to date, we recommend a brief literature review. The aim of this paper is to promote machine learning applications in digital forensics. We went through different applications of machine learning in different areas and analysed how machine learning can potentially be used in other areas by considering its current applications and we believe that the ideas presented here will provide promising directions in the pursuit of more powerful and successful digital forensics tools.",6,1,020,024,Machine learning; Artificial intelligence; Domain (software engineering); Digital evidence; Computer science; Digital forensics,,,,,https://www.peertechzpublications.com/articles/TCSIT-6-134.php https://www.peertechzpublications.com/articles/TCSIT-6-134.pdf,http://dx.doi.org/10.17352/tcsit.000034,,10.17352/tcsit.000034,3157681744,,0,006-296-899-452-535; 012-446-212-270-670; 015-084-347-434-584; 015-434-377-944-478; 029-539-345-954-419; 032-810-296-055-161; 034-183-561-604-364; 036-720-465-389-565; 041-561-245-686-942; 059-151-526-215-807; 062-421-316-909-478; 089-932-159-207-310; 093-668-583-258-461; 115-547-184-477-216; 131-948-799-258-180; 139-610-896-512-796; 153-826-237-509-69X; 170-516-749-420-456; 184-428-240-098-87X,0,true,cc-by-nc,hybrid 125-552-808-845-523,Forensic artefacts left by Pidgin Messenger 2.0,,2007,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Wouter S. Van Dongen,,4,3,138,145,Unix; World Wide Web; Swap (computer programming); Pidgin; Instant messaging; Instant messenger; Internet chat; Left behind; Computer science,,,,,https://dblp.uni-trier.de/db/journals/di/di4.html#Dongen07a https://www.sciencedirect.com/science/article/pii/S1742287608000030 https://dl.acm.org/doi/10.1016/j.diin.2008.01.002,http://dx.doi.org/10.1016/j.diin.2008.01.002,,10.1016/j.diin.2008.01.002,2033838148,,0,008-294-239-585-619; 053-516-207-442-042; 064-315-291-643-901; 081-659-813-223-484; 141-731-219-026-654,18,false,, 125-682-509-275-554,IoT Device Forensics and Data Reduction,,2018,journal article,IEEE Access,21693536,Institute of Electrical and Electronics Engineers (IEEE),United States,Darren Quick; Kim-Kwang Raymond Choo,"The growth in the prevalence of the plethora of digital devices has resulted in growing volumes of disparate data, with potential relevance to criminal and civil investigations. With the increase in data volume, there is an opportunity to build greater case-related knowledge and discover evidence, with implications at all stages of the digital forensic analysis process. The growth in digital devices will potentially further contribute to the growth in big digital forensic data, with a need for practitioners to consider a wider range of data and devices that may be relevant to an investigation. A process of data reduction by selective imaging and quick analysis, coupled with automated data extraction, gives potential to undertake the analysis of the growing volume of data in a timely manner. In this paper, we outline a process of bulk digital forensic data analysis including disparate device data. We research the process with a research data corpus and apply our process to real-world data. The challenges of the growing volume of devices and data will require forensic practitioners to expand their ability to undertake research into newly developed data structures, and be able to explain this to the court, judge, jury, and investigators.",6,,47566,47574,The Internet; Forensic science; Data structure; Disparate system; Data science; Jury; Electronic mail; Computer science; Process (engineering); Digital forensics; Relevance (information retrieval),,,,Cloud Technology Endowed Professorship,https://doi.org/10.1109/ACCESS.2018.2867466 https://ieeexplore.ieee.org/document/8449277/ https://dblp.uni-trier.de/db/journals/access/access6.html#QuickC18,http://dx.doi.org/10.1109/access.2018.2867466,,10.1109/access.2018.2867466,2889226801,,0,003-135-959-594-644; 009-040-429-083-368; 010-388-991-543-520; 010-985-077-415-59X; 011-211-518-312-834; 042-767-661-429-064; 054-888-023-799-702; 083-322-626-930-350; 137-574-018-964-352; 163-330-758-807-944; 198-820-820-012-184,33,true,"CC BY, CC BY-NC-ND",gold 125-939-677-745-616,Digital forensics as a service,,2015,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,H.M.A. van Beek; E.J. van Eijk; R.B. van Baar; M. Ugen; J.N.C. Bodde; A.J. Siemelink,"The big data era has a high impact on forensic data analysis. Work is done in speeding up the processing of large amounts of data and enriching this processing with new techniques. Doing forensics calls for specific design considerations, since the processed data is incredibly sensitive. In this paper we explore the impact of forensic drivers and major design principles like security, privacy and transparency on the design and implementation of a centralized digital forensics service.",15,,20,38,Work (electrical); Transparency (behavior); Design elements and principles; Service (systems architecture); Computer security; Computer science; Network forensics; Computer forensics; Big data; Digital forensics,,,,,https://doi.org/10.1016/j.diin.2015.07.004 https://dl.acm.org/doi/10.1016/j.diin.2015.07.004 https://core.ac.uk/display/81195448 https://www.sciencedirect.com/science/article/abs/pii/S1742287615000857 https://www.sciencedirect.com/science/article/pii/S1742287615000857 https://core.ac.uk/download/pdf/81195448.pdf,http://dx.doi.org/10.1016/j.diin.2015.07.004,,10.1016/j.diin.2015.07.004,1446195290,,0,000-360-120-513-679; 003-926-917-446-708; 007-598-060-754-474; 007-648-632-822-878; 010-985-077-415-59X; 013-193-256-548-818; 015-868-814-003-691; 020-936-498-613-334; 024-735-069-822-749; 026-774-296-742-022; 033-241-817-699-448; 033-877-222-136-260; 039-490-429-585-065; 045-702-359-549-884; 050-044-034-502-956; 051-645-938-939-51X; 056-715-378-869-201; 061-033-869-892-660; 062-325-585-829-185; 063-278-462-775-305; 064-380-336-432-376; 076-536-068-980-117; 079-070-981-899-105; 086-091-202-010-191; 087-535-177-904-679; 092-655-509-442-333; 097-567-011-227-46X; 098-892-902-051-803; 131-516-331-360-906; 134-927-490-231-285; 137-292-579-653-532; 150-165-602-099-023; 150-821-707-731-403; 158-369-352-218-573; 160-737-306-581-249; 163-330-758-807-944; 166-178-398-716-39X; 181-095-475-426-346; 199-172-967-270-034; 199-745-676-923-766,51,true,cc-by-nc-nd,hybrid 126-395-583-514-685,Editorial: This little laptop went to the black market,,2006,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Eoghan Casey,,3,3,107,108,Advertising; Black market; Laptop; Computer science; Telecommunications,,,,,https://dblp.uni-trier.de/db/journals/di/di3.html#Casey06c https://www.sciencedirect.com/science/article/pii/S1742287606000934 https://doi.org/10.1016/j.diin.2006.08.002,http://dx.doi.org/10.1016/j.diin.2006.08.002,,10.1016/j.diin.2006.08.002,2052966644,,0,,0,false,, 126-996-381-341-302,Analysis of Steganographic on Digital Evidence using General Computer Forensic Investigation Model Framework,,2020,journal article,International Journal of Advanced Computer Science and Applications,21565570; 2158107x,The Science and Information Organization,,Muh. Hajar Akbar; null Sunardi; Riadi,"Steganography is one of the anti-forensic techniques used by criminals to hide information in other messages which can cause problems in the investigation process and difficulties in obtaining original information evidence on the digital crime. Digital forensic analysts are required ability to find and extract the messages that have been inserted by using proper tools. The purpose of this research is to analyze the hidden digital evidence using steganography techniques. This research uses the static forensics method by applying five stages in the Generic Forensics Investigation Model framework, namely pre-process, acquisition & preservation, analysis, presentation, and post-process as well as extracting files that have been infiltrated based on case scenarios involving digital crime. The tools used are FTK Imager, Autopsy, WinHex, Hiderman, and StegSpy. The results on the steganographic file insertion experiment of 20 files indicate that StegSpy and Hiderman are effective on the steganographic analysis of digital evidence. StegSpy can detect the presence of secret messages with 85% success rate. The extraction process using Hiderman for 18 files with containing steganographic messages had 100% successful.",11,11,,,Steganography; Forensic science; Information retrieval; Digital evidence; Computer science; Process (engineering); Digital forensics,,,,,https://thesai.org/Downloads/Volume11No11/Paper_41-Analysis_of_Steganographic_on_Digital_Evidence.pdf https://thesai.org/Publications/ViewPaper?Volume=11&Issue=11&Code=IJACSA&SerialNo=41,http://dx.doi.org/10.14569/ijacsa.2020.0111141,,10.14569/ijacsa.2020.0111141,3113162624,,0,,0,true,cc-by,gold 127-009-983-015-920,Comprehensive study of digital forensics branches and tools,2018-12-12,2018,journal article,The International Journal of Forensic Computer Science,18099807; 19807333,ABEAT - Associacao Brasileira de Especialistas em Alta Tecnologia,,Prachi Zinge; Madhumita Chatterjee,,13,1,22,28,Data science; Computer science; Digital forensics,,,,,http://dx.doi.org/10.5769/j201801002,http://dx.doi.org/10.5769/j201801002,,10.5769/j201801002,2912077796,,0,,0,false,, 127-022-487-575-183,Digital Video Forgeries Detection Based On Prediction Error,,2008,journal article,Information Security and Communications Privacy,,,,Yang Xu,"In this paper the technique for detecting traces of tampering in digital video is studied under with no digital watermark or signature embedded in.In the lignt of the characteristics of the video itself,the widely used MPEG video sequence is specifically analyzed the find periodic perturbations of the tampered prediction error is identified. The presence of periodic perturbations can be used as an evidence of insertion or deletion tampering.",,,,,Signature (logic); Digital watermarking; Artificial intelligence; Mean squared prediction error; Digital video; Periodic perturbation; Video sequence; Computer vision; Computer security; Computer science,,,,,http://en.cnki.com.cn/Article_en/CJFDTOTAL-TXBM200812074.htm,http://en.cnki.com.cn/Article_en/CJFDTOTAL-TXBM200812074.htm,,,2360702424,,0,,2,false,, 127-027-322-002-654,HGA: Hierarchical Feature Extraction With Graph and Attention Mechanism for Linguistic Steganalysis,,2022,journal article,IEEE Signal Processing Letters,10709908; 15582361,Institute of Electrical and Electronics Engineers (IEEE),United States,Zhangjie Fu; Qi Yu; Fan Wang; Changhao Ding,"Linguistic steganalysis is an important topic in the field of information security and signal processing. In recent years, linguistic steganalysis have mainly utilized deep learning techniques and make great success. But suffer from the following major disadvantages. From the perspective of model structure, current methods only extract coarse features of the text, without focusing on the fine-grained representations. In terms of application, most of the studies only focus on single hidden scene and ignore the more realistic mixed hidden scenes which are more complex and realistic. These weaknesses limit the performance and the application of linguistic steganalysis in reality. In this paper, we propose a novel linguistic steganalysis method to overcome these weaknesses. This proposed method can extract distinguished text representation which fuses hierarchical features and perform excellently in sophisticated conditions. Firstly, we adapt gated graph neural networks as the coarse graph updater to update node representations on the graph level. Then we design a fine graph updater composed of the graph attention mechanism to focus on the highlighted nodes on the node-level. Moreover, we extract the most notable feature on the dimension-level of node by the graph channel attention module. Finally, the readout function is designed to fuse the hierarchical features and make the classification. The experimental results show that our method achieves the best results compared with the previous methods in both single hidden scene and mixed hidden scenes, which prove the effectiveness of the proposed method.",29,,1734,1738,Steganalysis; Computer science; Graph; Artificial intelligence; Feature extraction; Focus (optics); Pattern recognition (psychology); Node (physics); Natural language processing; Data mining,,,,National Key R&D Program of China; National Natural Science Foundation of China; National Natural Science Foundation of China; Jiangsu Basic Research Programs–Natural Science Foundation; Collaborative Innovation Center of Atmospheric Environment and Equipment Technology,,http://dx.doi.org/10.1109/lsp.2022.3194844,,10.1109/lsp.2022.3194844,,,0,006-226-063-672-219; 010-881-186-573-195; 011-331-216-034-599; 013-982-697-944-340; 018-193-483-515-989; 019-865-688-107-968; 024-556-976-517-808; 046-157-441-978-317; 059-783-343-108-940; 061-065-523-494-469; 061-656-453-317-540; 066-810-084-927-507; 067-480-120-151-011; 067-980-880-214-610; 068-984-373-113-043; 069-585-566-320-733; 072-122-833-427-306; 077-933-671-553-828; 081-427-001-573-355; 084-260-386-043-570; 086-823-378-252-910; 093-229-793-148-784; 128-667-751-863-307; 143-678-006-810-130,0,false,, 127-081-646-124-84X,CERTAIN ASPECTS OF AUTOMATIZATION OF FORMING THE FORENSIC EXAMINATION CONCLUSION PROCESS,,2021,journal article,Law Journal of Donbass,25234269,Donetsk State University of Internal Affairs,,Vasyl Kovalov,"Active introduction of digital technologies in all spheres of life is one of the main directions of state development as a whole and separate sphere of activity. The issue of using information technologies and systems during forensic examination is the subject of scientific research of many domestic and foreign scientists, but this sphere remains relevant. The introduction of digital technologies in forensic activities is one of the priority areas for the forensic science development at the present stage and has significant development potential. One of the areas of optimization and improvement of forensic activity is the development of methods to automate the formation of forensic experts and unify the description of the research process, identified features, justification and formulation of forensic conclusions, which requires legislative consolidation and regulation, analysis and definition of the subject area and development requirements and algorithms for the operation of the system interface. Unification and standardization of the content of forensic experts' opinions requires the development of common standards and an information system adopted by all subjects of forensic expertise, and meets the needs of practice. The development of an information system for forming an expert opinion and automatically forming an expert opinion will allow formalizing and unifying the description of research and results of forensic examinations, optimizing the time of forensic experts and potentially reducing the number of logical, typographical and technical errors, and simplifying quality control of forensic examinations. The proposed system will not only automate the technical work of registration of research results carried out during forensic examinations, but will also contain research algorithms, which will be stored in the form of data on already conducted research of similar objects (list and sequence of operations, identified features and their parameters).",74,1,114,121,Computer science; Standardization; Process (computing); Forensic science; Unification; Subject (documents); Data science; Forensic examination,,,,,,http://dx.doi.org/10.32366/2523-4269-2021-74-1-114-121,,10.32366/2523-4269-2021-74-1-114-121,,,0,,0,true,,gold 128-306-516-043-751,Prelim i - Editorial Board,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,41,,301410,301410,Editorial board,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00091-9,,10.1016/s2666-2817(22)00091-9,,,0,,0,true,,bronze 128-315-885-884-18X,ASIST - Integrating digital forensics into born-digital workflows: The BitCurator project,,2012,journal article,Proceedings of the American Society for Information Science and Technology,00447870,Wiley,,Martin Gengenbach; Alexandra Chassanoff; Porter Olsen,"There is a growing body of work investigating the needs and desires of collecting institutions as they adapt to the acquisition of born-digital materials. The incorporation of digital forensics tools and techniques into digital curation workflows offers great promise for addressing the complexities bound up in ingesting and preserving digital objects at multiple levels of representation. This poster presents preliminary results from ongoing research conducted as part of the BitCurator project, a two-year grant funded initiative to build, test, and analyze systems and software for incorporating digital forensics methods into collecting institutions' workflows. The project arose out of a perceived need in the library, archives, and museum (LAM) communities for better documentation, interfaces, and functionality in processing born-digital archival materials.",49,1,1,4,Engineering; World Wide Web; Work (electrical); Workflow; Digital curation; Born-digital; Software; Documentation; Digital forensics,,,,,https://dblp.uni-trier.de/db/conf/asist/asist2012.html#GengenbachCO12 https://asistdl.onlinelibrary.wiley.com/doi/pdf/10.1002/meet.14504901343 https://asistdl.onlinelibrary.wiley.com/doi/abs/10.1002/meet.14504901343 http://onlinelibrary.wiley.com/doi/10.1002/meet.14504901343/abstract https://onlinelibrary.wiley.com/doi/abs/10.1002/meet.14504901343,http://dx.doi.org/10.1002/meet.14504901343,,10.1002/meet.14504901343,2114988520,,0,022-250-300-795-993; 037-647-066-964-858; 067-629-806-155-212; 074-028-601-448-433; 081-235-060-337-938,0,true,,bronze 129-060-946-634-518,An extended digital forensic readiness and maturity model,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Felix Bankole; Ayankunle Taiwo; Ivan Claims,"Digital forensics readiness (DFR) is an important part of the growing forensic domain. Research on DFR has been given little attention, while available DFR models have focused on theoretical investigations with inadequate input from practicing information security experts in the industry. Using feedback from practicing forensic experts in the industry and academia, this research investigates the structure required to implement and manage digital forensic readiness (DFR) within an enterprise. The research extended the DFR Commonalities framework (DFRCF) and utilised the structure to design a digital forensic maturity assessment model (DFMM) that will enable organisations to assess their forensic readiness and security incident responses. A combination of qualitative and research design approaches was utilised to perform a comparative analysis of various DFR frameworks. A top-down design approach was utilised in developing the DFMM model which was validated with forensic practitioners and academics through semi-structured interviews. The structure extracted from DFR frameworks was practical since most participants agreed with the structure of the extended DFRCF and the matrix of the maturity model. Overall, key changes were introduced to enhance both the extended DFRCF and the DFMM. The study was limited to participants who have a forensic footprint and are knowledgeable about DFR. This paper thereby provides practitioners, academics and organisations with access to a non-propriety DFMM maturity model. • Extending the digital forensics readiness commonalities framework. • Proposing digital forensics maturity model. • Extended digital forensic readiness and maturity model for COVID19 pandemic and beyond.",40,,301348,301348,Digital forensics; Capability Maturity Model; Maturity (psychological); Computer science; Data science; Knowledge management; Engineering; Process management; Computer security; Psychology; Software; Developmental psychology; Programming language,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301348,,10.1016/j.fsidi.2022.301348,,,0,001-261-260-701-260; 003-803-598-122-748; 004-706-447-836-905; 014-359-308-542-324; 016-533-769-215-821; 032-460-061-944-952; 033-128-301-658-595; 040-277-700-312-914; 041-266-949-737-670; 041-805-592-234-965; 057-247-653-161-438; 079-042-778-256-448; 079-924-320-756-189; 088-273-808-364-904; 091-664-230-499-576; 095-691-114-276-825; 102-734-676-905-303; 106-108-913-089-037; 114-796-071-425-023; 127-364-049-570-112; 145-627-679-536-968; 166-895-487-744-941; 167-751-222-897-487,0,true,,bronze 129-239-691-545-678,Xbox Forensics,2007-06-22,2007,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Paul K. Burke; Philip Craiger,,1,4,275,282,Computer science; Computer security,,,,,,http://dx.doi.org/10.1080/15567280701417991,,10.1080/15567280701417991,,,0,027-835-655-333-208,5,false,, 129-356-514-852-901,Digital Forensic Issues in Civil Proceedings,,2014,journal article,Journal of Civil & Legal Sciences,21690170,OMICS Publishing Group,,Greg Gogolin; James H. Jones,"Digital Forensics is an emerging field that has quickly become a key source of evidence in criminal and civil cases. While digital forensics has been challenging to incorporate into both criminal and civil cases, the environment of civil cases does not have the structure of the law enforcement processes to serve as a framework from which to conduct digital forensic examinations. Further, there is often a lack of understanding of digital forensic capabilities and evidence, which has the potential to influence legal judgments and misconstrue outcomes.",3,1,1,3,Sociology; Law; Criminal law; Forensic nursing; Law enforcement; Intellectual property; Computer forensics; Conflict of laws; Jurisprudence; Digital forensics,,,,,https://www.omicsonline.org/peer-reviewed/digital-forensic-issues-in-civil-proceedingsp-23638.html https://www.omicsonline.org/open-access/digital-forensic-issues-in-civil-proceedings-2169-0170.1000110.php?aid=23638,http://dx.doi.org/10.4172/2169-0170.1000110,,10.4172/2169-0170.1000110,2106572033,,0,005-646-077-565-566; 009-358-080-914-72X; 050-721-573-791-625; 073-847-291-567-156; 076-470-845-108-034; 082-061-692-717-698; 085-858-927-316-897; 094-549-705-844-333; 110-291-798-326-65X; 140-906-156-416-318; 192-869-837-381-364,2,false,, 129-360-320-775-188,Gap Analysis: Judicial Experience and Perception of Electronic Evidence,,2006,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Michael Losavio; Julia Adams; Marc Rogers,"ABSTRACT A gap exists where digital forensics bridges computer science and judicial process. Whatever the results of digital forensics analysis, the analyst must be prepared to present and defend that analysis in court. A survey of state general jurisdiction judges found that most had little or no electronic evidence tendered in their cases, those that did saw few challenges to that electronic evidence and most expected to see the use of such evidence increase in the coming years. But most judges had little or minimal training in handling electronic evidence and most desired moderate or extensive training in this area. This gap in experience and training with digital forensics must be addressed to maintain the legitimacy and effectiveness of the discipline.",1,1,13,17,Perception; General jurisdiction; Gap analysis; Computer security; Public relations; Process (engineering); Legitimacy; Computer forensics; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/jdfp/jdfp1.html#LosavioAR06 https://www.tandfonline.com/doi/full/10.1080/15567280500541462,http://dx.doi.org/10.1080/15567280500541462,,10.1080/15567280500541462,2082222870,,0,,18,false,, 129-484-812-268-822,Forensics acquisition – Analysis and circumvention of samsung secure boot enforced common criteria mode,,2018,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Gunnar Alendal; Geir Olav Dyrkolbotn; Stefan Axelsson,"The acquisition of data from mobile phones have been a mainstay of criminal digital forensics for a number of years now. However, this forensic acquisition is getting more and more difficult with t ...",24,,S60,S67,Common Criteria; Computer security; Computer science; Mode (computer interface); Digital forensics,,,,Research Council of Norway programme IKTPLUSS,https://ntnuopen.ntnu.no/ntnu-xmlui/handle/11250/2585527 https://fhs.brage.unit.no/fhs-xmlui/handle/11250/2723051 http://hh.diva-portal.org/smash/record.jsf?pid=diva2:1199082 http://www.diva-portal.org/smash/record.jsf?pid=diva2:1199082 https://doi.org/10.1016/j.diin.2018.01.008 https://www.sciencedirect.com/science/article/pii/S1742287618300409 https://dblp.uni-trier.de/db/journals/di/di24.html#AlendalDA18 https://brage.bibsys.no/xmlui/handle/11250/2585527,http://dx.doi.org/10.1016/j.diin.2018.01.008,,10.1016/j.diin.2018.01.008,2792498006,,0,040-799-619-199-49X; 062-509-355-401-577; 072-245-054-212-971; 089-115-596-397-298; 092-198-110-549-592; 111-484-206-251-752; 134-927-490-231-285; 168-702-622-633-224; 180-995-852-357-612,10,true,cc-by-nc-nd,hybrid 129-508-826-592-168,Visual Object Tracking Based on Adaptive Background-Awareness and Spatial Constraint,2022-06-29,2022,journal article,Mathematical Problems in Engineering,15635147; 1024123x; 10267077,Hindawi Limited,Egypt,Keqi Fan; Qianqian Yu; Yiyang Wang; Deng Chen; Yuhui Zheng,"The correlation filter method is effective in visual tracking tasks, whereas it suffers from the boundary effect and filter degradation in complex situations, which can result in suboptimal performance. Aiming at the solving above problem, this study proposes an object tracking method with a discriminant correlation filter, which combines an adaptive background perception and a spatial dynamic constraint. In this method, an adaptive background-awareness strategy is used to filter the background information trained by the interference filter to improve the discriminability between the object and the background. In addition, the spatial regularization term is introduced, and the dynamic change of the real filter and the predefined spatial constraint template is used to optimize filter learning to enhance the spatial information capture ability of the filter model. Experiments on the OTB100, VOT2018, and TrackingNet standard datasets demonstrate that our method achieves favorable accuracy and success rates. Compared with the current popular correlation filter methods, the proposed method can still maintain stable tracking performance with a scene scale variation, complex background, motion blur, and fast motion.",2022,,1,11,Artificial intelligence; Computer vision; Computer science; Filter (signal processing); Adaptive filter; Kernel adaptive filter; Video tracking; Constraint (computer-aided design); Eye tracking; Spatial filter; Tracking (education); Object (grammar); Pattern recognition (psychology),,,,Zhejiang Provincial Science and Technology Program in China; Zhejiang Provincial Science and Technology Program in China; Zhejiang Provincial Science and Technology Program in China; Zhejiang Provincial Science and Technology Program in China; Zhejiang Provincial Science and Technology Program in China; Zhejiang Provincial Science and Technology Program in China; Zhejiang Provincial Science and Technology Program in China,,http://dx.doi.org/10.1155/2022/6062283,,10.1155/2022/6062283,,,0,000-568-694-378-624; 000-941-819-103-222; 002-140-227-338-020; 003-532-678-017-874; 004-075-446-271-043; 008-898-717-380-560; 012-225-431-707-546; 012-231-098-593-063; 020-270-503-155-959; 025-112-431-982-303; 026-876-078-323-433; 030-160-171-033-909; 031-363-970-453-113; 035-263-145-036-771; 037-171-857-000-659; 044-882-969-009-943; 055-006-112-952-253; 057-646-093-503-708; 066-810-719-172-735; 073-376-574-462-030; 077-739-003-456-580; 079-599-023-979-777; 082-940-914-821-96X; 083-724-630-996-266; 090-292-539-525-938; 109-752-500-472-675; 124-411-545-803-229; 131-546-469-964-566; 175-774-870-500-953,0,true,cc-by,gold 129-687-902-280-497,"Bodies of science and law: forensic DNA profiling, biological bodies, and biopower.",2012-02-21,2012,journal article,Journal of law and society,0263323x,Wiley-Blackwell,United Kingdom,Victor Toom,"How is jurisdiction transferred from an individual's biological body to agents of power such as the police, public prosecutors, and the judiciary, and what happens to these biological bodies when transformed from private into public objects? These questions are examined by analysing bodies situated at the intersection of science and law. More specifically, the transformation of ‘private bodies’ into ‘public bodies’ is analysed by going into the details of forensic DNA profiling in the Dutch jurisdiction. It will be argued that various ‘forensic genetic practices’ enact different forensic genetic bodies'. These enacted forensic genetic bodies are connected with various infringements of civil rights, which become articulated in exploring these forensic genetic bodies’‘normative registers’.",39,1,150,166,Situated; Profiling (information science); Political science; Law; Jurisdiction; Historical Article; Biological body; Forensic dna; Civil rights; Biopower,,"DNA/economics; DNA Fingerprinting/economics; Forensic Genetics/economics; Forensic Sciences/economics; History, 20th Century; History, 21st Century; Human Rights Abuses/economics; Judicial Role/history; Jurisprudence/history",DNA,,https://papers.ssrn.com/sol3/Delivery.cfm/j_1467-6478_2012_00575_x_wml.pdf?abstractid=2009205&mirid=3 https://onlinelibrary.wiley.com/doi/full/10.1111/j.1467-6478.2012.00575.x https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2009205 https://www.ncbi.nlm.nih.gov/pubmed/22530250 https://europepmc.org/article/MED/22530250 https://pubmed.ncbi.nlm.nih.gov/22530250/ http://nrl.northumbria.ac.uk/5339/ https://core.ac.uk/display/9987119 https://core.ac.uk/download/9987119.pdf,http://dx.doi.org/10.1111/j.1467-6478.2012.00575.x,22530250,10.1111/j.1467-6478.2012.00575.x,2115016088,,0,,28,true,,green 131-118-636-696-570,Review,2018-11-30,2018,journal article,International Journal of Engineering & Technology,2227524x,Science Publishing Corporation,,Gopinath Muruti; Siti Hawa Mokhtar; Fiza Abdul Rahim; Zul-Azri Ibrahim; Abbas M. Al-Ghaili,"Forensics is a vital point for law enforcement, civil litigators, and different experts who manage complex advanced examinations. Digital forensics has assumed a noteworthy part in a portion of the biggest criminal and civil investigations. However, the ascent in the prevalence of big data as a better approach for unraveling the challenges exhibited by huge, complex data due to the progression of innovations such as the Internet, Internet of Things (IoT), and Cloud Computing. These challenges have contributed to data deluge and forensics tool limitations in the digital forensics investigation. In this paper, a number of challenges faced by the digital forensics investigator in a big data environment are discussed. The identified challenges could significantly contribute to a more efficient digital forensics process in the big data environment. ",7,4.35,866,866,Big data; Digital forensics; Law enforcement; Computer science; Cloud computing; Digital evidence; Internet of Things; Data science; Process (computing); The Internet; Computer security; Point (geometry); Internet privacy; World Wide Web; Political science; Data mining; Law; Geometry; Mathematics; Operating system,,,,,,http://dx.doi.org/10.14419/ijet.v7i4.35.26271,,10.14419/ijet.v7i4.35.26271,,,0,,0,true,cc-by,green 131-789-340-932-05X,Trusted computing and the digital crime scene,2014-01-28,2014,journal article,Digital Evidence and Electronic Signature Law Review,20548508; 17564611,School of Advanced Study,Spain,Yianna Danidou; Burkhard Schafer,"Yianna Danidou and Burkhard Schafer provide an analysis of the future of digital forensics in an environment where control is increasingly taken away from PC users and remotely managed by trusted third parties, typically to improve internet security by considering Trusted Computing to illustrate some of the possible legal issues that arise.",8,0,,,Internet privacy; Direct Anonymous Attestation; Crime scene; Trusted Network Connect; Internet security; Control (management); Trusted Computing; Computer security; Computer science; Digital forensics,,,,,https://sas-space.sas.ac.uk/5412/ https://journals.sas.ac.uk/deeslr/article/view/1960 http://www.research.ed.ac.uk/portal/files/13519397/Schafer_Trusted_Computing.pdf https://www.research.ed.ac.uk/portal/files/13519397/Schafer_Trusted_Computing.pdf https://core.ac.uk/download/28968734.pdf,http://dx.doi.org/10.14296/deeslr.v8i0.1960,,10.14296/deeslr.v8i0.1960,2066768986,,0,,0,true,cc-by-nc-nd,hybrid 131-796-930-292-035,A triage framework for digital forensics,,2015,journal article,Computer Fraud & Security,13613723,Mark Allen Group,United Kingdom,Muhammad Shamraiz Bashir; Muhammad Naeem Ahmed Khan,"A sharp increase in malware and cyber-attacks has been observed in recent years. Analysing cyber-attacks on the affected digital devices falls under the purview of digital forensics. The Internet is the main source of cyber and malware attacks, which sometimes result in serious damage to the digital assets. The motive behind digital crimes varies – such as online banking fraud, information stealing, denial of services, security breaches, deceptive output of running programs and data distortion. Digital forensics analysts use a variety of tools for data acquisition, evidence analysis and presentation of malicious activities. This leads to device diversity posing serious challenges for investigators. For this reason, some attack scenarios have to be examined repeatedly, which entails tremendous effort on the part of the examiners when analysing the evidence. To counter this problem, Muhammad Shamraiz Bashir and Muhammad Naeem Ahmed Khan at the Shaheed Zulfikar Ali Bhutto Institute of Science and Technology, Islamabad, Pakistan propose a novel triage framework for digital forensics.",2015,3,8,18,Internet privacy; The Internet; Variety (cybernetics); Bhutto; Triage; Denial; Computer security; Computer science; Malware; Computer forensics; Digital forensics,,,,,https://www.sciencedirect.com/science/article/abs/pii/S136137231530018X,http://dx.doi.org/10.1016/s1361-3723(15)30018-x,,10.1016/s1361-3723(15)30018-x,2030555322,,0,002-633-789-384-681; 003-871-070-011-964; 017-071-408-718-290; 020-626-957-505-364; 026-024-733-636-162; 030-351-009-711-953; 032-372-560-487-047; 035-269-627-388-435; 037-483-791-552-006; 040-105-187-457-272; 040-483-292-320-671; 042-251-875-510-426; 052-209-716-598-874; 062-325-585-829-185; 087-690-831-820-163; 093-448-702-012-591; 105-002-898-852-695; 127-286-301-080-684; 132-606-863-800-090,6,false,, 132-698-173-062-570,Problem based learning in digital forensics,2016-03-21,2016,journal article,Higher Education Pedagogies,23752696,Informa UK Limited,United Kingdom,Alastair Irons; Paula Thomas,AbstractThe purpose of this paper is to compare and contrast the efforts of two universities to address the issue of providing computer forensics students with the opportunity to get involved in the practical aspects of forensic search and seizure procedures. The paper discusses the approaches undertaken by the University of Sunderland and the University of South Wales (Glamorgan) to give the students the opportunity to process a case from the crime scene through to the court room. In order to do this both institutions adopted a problem-based learning (PBL) approach – to reflect real-world solutions and encourage students to work in groups to seek further knowledge and understanding of the various processes and procedures – in particular the steps around search and seizure of digital evidence from a crime scene. The PBL activities at Sunderland and Glamorgan were designed in order to help the students understand the processes of digital crime scene analysis and search and seizure procedures and to give th...,1,1,95,105,Likert scale; Engineering; Mathematics education; Crime scene; Information system; Problem-based learning; Digital evidence; Computer security; Computer forensics; Search and seizure; Digital forensics,,,,,https://sure.sunderland.ac.uk/5059/1/04082014a.pdf https://tandfonline.com/doi/pdf/10.1080/23752696.2015.1134200 http://eprints.glos.ac.uk/4289/ https://eric.ed.gov/?id=EJ1147563 https://www.tandfonline.com/doi/full/10.1080/23752696.2015.1134200 https://sure.sunderland.ac.uk/6133/ https://www.tandfonline.com/doi/ref/10.1080/23752696.2015.1134200 https://core.ac.uk/display/76979856 https://core.ac.uk/download/74368705.pdf,http://dx.doi.org/10.1080/23752696.2015.1134200,,10.1080/23752696.2015.1134200,2157169106,,0,005-733-361-126-371; 007-790-059-029-953; 014-261-775-435-338; 046-474-638-122-984; 052-361-056-422-596; 066-198-497-514-876; 070-048-250-044-834; 087-300-425-406-630,5,true,"CC BY, CC BY-NC",gold 132-793-320-759-892,Advantages of Computer Generated Evidence: Forensic Animation in Indian Judiciary System,,2014,journal article,Indian Journal of Forensic Medicine & Toxicology,09739122; 09739130,Diva Enterprises Private Limited,India,Anurag Sahu; Nitin Singh Mandla; Gaikwad Yogesh,"Judiciary animation or Forensic animation or legal animation is computer based perform of turning professional reports, detailed information of witness, police investigator and forensic experts into 3D animated recreation of scene of crime. Since 1985 Forensic animation has been used in foreign nation's judiciary system till now with new advance technologies. Gradually judiciary animation is becoming increasingly legal animation, which is used as visual tool to help jurors and other viewers understand the facts of crime without using long verbal information about the case and create lasting visual impression that is retained in juror's memories longer than a verbal presentation. This paper describes range of animation evidence which are mostly presented in courtroom using digital media and how computer generated animation is valuable to our judiciary system.",8,1,136,139,Digital media; Presentation; Witness; Digital evidence; Visual tool; Computer based; Social science; Computer science; Multimedia; Animation; Computer animation,,,,,http://www.indianjournals.com/ijor.aspx?target=ijor:ijfmt&volume=8&issue=1&article=029 http://www.i-scholar.in/index.php/ijfmt/article/view/52355,http://dx.doi.org/10.5958/j.0973-9130.8.1.029,,10.5958/j.0973-9130.8.1.029,2006644075,,0,,1,false,, 133-401-132-549-688,Prelim iii - Contents List,,2020,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,33,,301047,301047,Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(20)30336-x,,10.1016/s2666-2817(20)30336-x,,,0,,0,false,, 133-532-326-238-319,CURRENT EVIDENCE ON BIOINFORMATICS ROLE AND DIGITAL FORENSICS THAT CONTRIBUTE TO FORENSIC SCIENCE: UPCOMING THREAT,2022-04-22,2022,journal article,JURNAL RISET RUMPUN MATEMATIKA DAN ILMU PENGETAHUAN ALAM,28289390; 28289382,Politeknik Pratama Purwokerto,,Rosyid Al Hakim; Esa Putri; Hexa Hidayah; Agung Pangestu; Sri Riani,"Forensics has become an essential part of the disclosure of criminal evidence. A bioinformatics approach in the form of DNA forensics and digital forensics can be a good combination in disclosing digital-based criminal evidence. This study explains how the role of bioinformatics through the digital approach can be a means of forming new approaches in integration with digital forensics, called cyber-bioinformatics. Despite many hopes and challenges ahead, it does not rule out the possibility of criminal cases related to the privacy of human genomic data, so it proposes a new hypothesis, “cyber-bioinformatics.” The role of cyber-bioinformatics is very central in this regard.",1,1,25,32,,,,,,,http://dx.doi.org/10.55606/jurrimipa.v1i1.157,,10.55606/jurrimipa.v1i1.157,,,0,,0,false,, 133-565-485-341-330,Developing an undergraduate course in digital forensics,2006-12-01,2006,journal article,Journal of Computing Sciences in Colleges,19374763,,,Warren Harrison,"This tutorial will introduce participants to the field of digital forensics, and provide guidance in the development of a course that introduces students from a variety of backgrounds to the principles involved in digital investigations. The course is targeted at upper division undergraduates, but may also be suitable for graduate students.",22,2,7,8,Variety (cybernetics); Mathematics education; Course (navigation); Computer science; Multimedia; Digital forensics,,,,,https://www.ccsc.org/northwest/2006/ppt/forensicstutorialHARRISON.pdf,https://www.ccsc.org/northwest/2006/ppt/forensicstutorialHARRISON.pdf,,,1530604494,,0,026-595-961-209-188,1,false,, 133-793-757-735-03X,Digital forensic investigation challenges based on cloud computing characteristics,2018-10-07,2018,journal article,International Journal of Engineering & Technology,2227524x,Science Publishing Corporation,,Ganthan Narayana Samy; Nurazean Maarop; Mohd Shahidan Abdullah; Sundresan Perum; Sameer Hasan Albakri; Bharanidharan Shanmugam; Premylla Jeremiah,"One of the most popular computing technologies is cloud computing. There are many benefits in adopting cloud computing such as high-performance, flexibility and availability ondemand, more focused on the business objective and low-cost. However, the characteristics of the cloud computing environment have created many difficulties and challenges for digital forensic investigation processes. Therefore, this paper focuses on the digital forensic investigation challenges based on cloud computing characteristics.",7,4.15,7,,Data science; Flexibility (engineering); Digital forensic investigation; Computer science; Cloud computing,,,,,http://eprints.utm.my/id/eprint/86633/ https://core.ac.uk/download/334606705.pdf,http://dx.doi.org/10.14419/ijet.v7i4.15.21361,,10.14419/ijet.v7i4.15.21361,2941775230,,0,,1,true,,bronze 134-264-047-754-183,The Role of “Digital Forensic Photography”- In the Indian Criminal Justice System,2021-05-01,2021,journal article,Journal of emerging technologies and innovative research,23495162,,,Rakesh Mia; Vijay R. Panchal; Yukta Guglot,"Photography is one of the most critical factors in any crime scene solving cases. Crime Scene photography or forensic photography is an important role depending on the crime scene as well as its a photo in the criminal justice system as a scene of crime evidence. In the 21st century all over the world, all respective forensic science authorities used high-resolution camera, lens and modern instrumentation technology to capture crime scene occur photos. Evidence collection and preservation using digital forensic photography is a crucial aspect of a future legal proceeding. In this paper, we summarize the modern aspects of digital forensic photography in the Indian criminal justice system",8,5,,,Criminal justice; Photography; Visual arts; Crime scene; Forensic photography; Legal proceeding; Critical factors; Evidence collection; Digital forensics; History,,,,,https://www.jetir.org/view?paper=JETIR2105285 https://www.jetir.org/papers/JETIR2105285.pdf,https://www.jetir.org/view?paper=JETIR2105285,,,3160362477,,0,,1,false,, 134-271-291-397-152,Digital Forensic Technology of Solaris,,2012,journal article,Advanced Materials Research,16628985,"Trans Tech Publications, Ltd.",,Fei Zhao; Jing Sheng Zhang; Zhong Xia Wang,"The UFS file system of Solaris is not supported undelete operation, so it is a difficult thing to digital forensic. This paper based on the UFS documents of 10 Solaris’ the log file system and the physical structure of UFS file system’s storage, putting forward the method of digital forensic for it. In cases of actual digital forensic for Solaris 10, it can restore the required documents, so this method has good effect",601,,342,346,Unix file types; File system; Physical structure; Computer science; Database; Digital forensics,,,,,https://www.scientific.net/AMR.601.342,http://dx.doi.org/10.4028/www.scientific.net/amr.601.342,,10.4028/www.scientific.net/amr.601.342,2019721255,,0,,0,false,, 134-927-490-231-285,Digital forensics research: The next 10 years,,2010,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Simson L. Garfinkel,"Today's Golden Age of computer forensics is quickly coming to an end. Without a clear strategy for enabling research efforts that build upon one another, forensic research will fall behind the market, tools will become increasingly obsolete, and law enforcement, military and other users of computer forensics products will be unable to rely on the results of forensic analysis. This article summarizes current forensic research directions and argues that to move forward the community needs to adopt standardized, modular approaches for data representation and forensic processing.",7,,S64,S73,Modular design; External Data Representation; Business intelligence; Digital forensic process; Law enforcement; Process improvement; Computer security; Computer science; Computer forensics; Digital forensics,,,,,https://www.sciencedirect.com/science/article/abs/pii/S1742287610000368 https://dl.acm.org/doi/10.1016/j.diin.2010.05.009 https://www.mendeley.com/catalogue/2b03c6be-97eb-3edd-af51-64e0d0cebdf2/ https://www.mendeley.com/catalogue/digital-forensics-research-next-10-years-1/ http://doi.org/10.1016/j.diin.2010.05.009 https://connections-qj.org/article/digital-forensics-research-next-10-years https://www.sciencedirect.com/science/article/pii/S1742287610000368 http://www.dtic.mil/dtic/tr/fulltext/u2/a549288.pdf https://core.ac.uk/display/36736412 https://doi.org/10.1016/j.diin.2010.05.009 https://dblp.uni-trier.de/db/journals/di/di7.html#Garfinkel10,http://dx.doi.org/10.1016/j.diin.2010.05.009,,10.1016/j.diin.2010.05.009,2156350103,,0,000-032-440-496-457; 004-652-388-189-304; 010-905-780-802-927; 015-486-820-528-730; 017-335-677-993-203; 017-840-378-634-021; 019-801-416-690-173; 022-723-185-375-121; 025-832-466-975-926; 027-265-141-482-204; 033-877-222-136-260; 035-223-520-491-228; 036-132-248-316-123; 043-093-846-816-675; 044-745-644-550-204; 048-141-687-795-752; 050-513-243-638-138; 051-165-387-606-715; 061-549-181-856-861; 072-227-350-074-455; 074-910-286-678-826; 081-458-407-971-603; 097-567-011-227-46X; 098-945-991-157-04X; 101-055-750-233-541; 110-744-808-081-983; 125-384-800-661-375; 128-940-875-499-986; 130-919-597-852-457; 135-493-984-382-498; 152-771-716-159-330,495,true,cc-by-nc-nd,hybrid 134-957-252-728-269,A Practical Approach for Digital Forensic Triage,,2015,journal article,Applied Mechanics and Materials,16627482,"Trans Tech Publications, Ltd.",,Jianguo Jiang; Bo Yang; Sen Lin; Ming Xing Zhang; Kun Ying Liu,"In order to uncover truths to serve justice, case-related data collected from a digital investigation requires substantial resources to analyze, especially in time-critical situations. At present, however, digital forensics has not evolved to meet this ever-increasing demand. Digital forensic triage is a promising solution, as it is designed to maximize the use of resources according to a system of priorities, and hence the efficiency and effectiveness of forensic examinations can be increased. Nevertheless, the lack of concrete methods limits efforts to implement triage. This paper presents a practical approach that is designed to build a prioritizing solution. In this work a new process model is derived based on the presented approach, and it is particularly suited to scenarios where forensic examiners do not have enough time and resources to conduct a full examination and analysis. An example is described to demonstrate how this approach can be used to meet the requirements of network forensic investigations.",742,,437,444,Risk analysis (engineering); Engineering; Work (electrical); Justice (ethics); Triage; Computer security; Process (engineering); Digital forensics,,,,,https://www.scientific.net/AMM.742.437 https://zh.scientific.net/AMM.742.437.pdf,http://dx.doi.org/10.4028/www.scientific.net/amm.742.437,,10.4028/www.scientific.net/amm.742.437,2075057275,,0,000-750-047-594-348; 003-982-227-180-136; 019-698-064-288-240; 029-025-221-262-260; 029-938-776-068-353; 032-697-093-668-898; 038-668-970-194-854; 047-630-600-014-492; 065-452-675-566-99X; 087-262-232-954-302; 090-752-043-508-733; 091-619-263-117-914; 122-880-373-616-302; 125-384-800-661-375; 131-516-331-360-906; 132-355-634-397-986; 184-948-841-629-735; 199-745-676-923-766,2,false,, 135-390-336-471-060,A systematic literature review of blockchain-based Internet of Things (IoT) forensic investigation process models,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Alex Akinbi; Áine MacDermott; Aras M. Ismael,"Digital forensic examiners and stakeholders face increasing challenges during the investigation of Internet of Things (IoT) environments due to the heterogeneous nature of the IoT infrastructure. These challenges include guaranteeing the integrity of forensic evidence collected and stored during the investigation process. Similarly, they also encounter challenges in ensuring the transparency of the investigation process which includes the chain-of-custody and evidence chain. In recent years, some blockchain-based secure evidence models have been proposed especially for IoT forensic investigations. These proof-of-concept models apply the inherent properties of blockchain to secure the evidence chain of custody, maintain privacy, integrity, provenance, traceability, and verification of evidence collected and stored during the investigation process. Although there have been few prototypes to demonstrate the practical implementation of some of these proposed models, there is a lack of descriptive review of these blockchain-based IoT forensic models. In this paper, we report a comprehensive Systematic Literature Review (SLR) of the latest blockchain-based IoT forensic investigation process models. Particularly, we systematically review how blockchain is being used to securely improve the forensic investigation process and discuss the efficiency of these proposed models. Finally, the paper highlights challenges, open issues, and future research directions of blockchain technology in the field of IoT forensic investigations. • Systematic Literature Review (SLR) of the latest blockchain-based IoT forensic investigation process models. • Discussion on the application of blockchain to securely improve IoT forensic investigation process. • Discussion on the efficiency of blockchain-based IoT forensic investigation process models. • Open issues and future directions of blockchain application to IoT forensics.",42-43,,301470,301470,Blockchain; Computer science; Traceability; Process (computing); Internet of Things; Digital forensics; Transparency (behavior); Computer security; Data science; Digital evidence; Software engineering; Operating system,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301470,,10.1016/j.fsidi.2022.301470,,,0,001-149-895-789-825; 002-020-246-447-998; 002-349-071-628-669; 005-203-277-885-748; 008-206-683-143-283; 018-541-770-775-407; 019-387-003-305-336; 025-890-361-760-369; 034-940-557-037-083; 035-859-793-614-223; 039-999-270-718-277; 045-280-196-260-041; 049-790-206-917-63X; 073-992-358-439-88X; 079-858-593-881-513; 083-366-430-872-667; 088-553-642-323-93X; 089-419-432-581-673; 096-091-715-269-337; 097-939-114-561-254; 098-379-364-753-287; 103-681-534-784-390; 147-779-345-237-955; 154-393-793-915-985; 173-952-459-161-812,0,true,,hybrid 135-404-754-742-569,US2022-Print-Ad,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,42,,301426,301426,Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00107-x,,10.1016/s2666-2817(22)00107-x,,,0,,0,false,, 135-646-933-254-458,HANDWRITING EXPERTISE IN THE FORENSIC SCIENCE CENTRE OF LITHUANIA: PRESENT ACTIONS AND FUTURE VISION,2022-08-09,2022,journal article,Criminalistics and Forensics,01302655,Kyiv Scientific Research Institute of Forensic Expertise,,Rasa Tamošiūnaitė,"Recently, the number of expert investi gations in handwriting evidence at the Lithuanian Forensic Examination Centre (LTEC) has significantly decreased. The decrease has been observed for several years already.; ; The present article analyses possible reasons for the decrease in the number of expert investigations in handwriting in LT EC and the importance of such investigation in the context of judicial research, court proceeding, and criminal investigations.; ; Also, the article deals with the use of electronic signatures and associated security problems in the digital environment.; ; Key words: handwriting examination, signature, digital signature, digitized sig-; nature, informativeness of signatures.",,67,365,371,Handwriting; Lithuanian; Context (archaeology); Forensic examination; Forensic science; Digital signature; Signature (topology); Computer science; Criminal investigation; Computer security; Data science; Psychology; Artificial intelligence; Engineering; Criminology; History; Linguistics; Forensic engineering; Mathematics; Hash function; Philosophy; Geometry; Archaeology,,,,,,http://dx.doi.org/10.33994/kndise.2022.67.37,,10.33994/kndise.2022.67.37,,,0,,0,true,,gold 135-921-410-921-315,Consideration of Issues for Parallel Digital Forensics of RAID Systems,2009-09-09,2009,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Vincent Urias; Curtis Hash; Lorie M. Liebrock,"ABSTRACT Digital forensics analysts are being pushed beyond their current capabilities by the need to analyze increasingly larger storage devices (multiple terabytes) and RAID storage systems. To handle these emerging challenges, forensic analysis will soon need to leverage parallel and distributed computing. The digital forensics investigation process, from imaging to analysis, presents unique challenges in the context of RAID storage systems, where reconstruction becomes a substantial concern. In this article, we report issues related to parallel imaging, reconstruction, and analysis of RAID systems as a foundation for parallel digital forensics.",2,4,196,208,RAID; Leverage (statistics); Terabyte; Context (language use); Parallel imaging; Computer security; Computer science; Process (engineering); Digital forensics,,,,,https://dx.doi.org/10.1080/15567280903140953 https://www.tandfonline.com/doi/full/10.1080/15567280903140953 https://dblp.uni-trier.de/db/journals/jdfp/jdfp2.html#UriasHL08 http://dx.doi.org/10.1080/15567280903140953 https://doi.org/10.1080/15567280903140953 http://dblp.uni-trier.de/db/journals/jdfp/jdfp2.html#UriasHL08,http://dx.doi.org/10.1080/15567280903140953,,10.1080/15567280903140953,2032739611,,0,006-456-033-462-695; 018-935-409-998-142; 022-455-280-454-911; 053-660-599-217-640; 062-627-125-575-413; 065-210-303-569-91X; 069-142-686-443-428; 072-072-328-028-440; 085-343-554-667-033; 097-567-011-227-46X; 113-683-336-577-480; 140-476-339-009-689; 178-883-713-153-793,4,false,, 136-400-281-116-450,Blockchain in Big Data Security for Intelligent Transportation With 6G,,2022,journal article,IEEE Transactions on Intelligent Transportation Systems,15249050; 15580016,Institute of Electrical and Electronics Engineers (IEEE),United States,Zhili Zhou; Meimin Wang; Jingwang Huang; Shengliang Lin; Zhihan Lv,,23,7,9736,9746,,,,,"National Key Research and Development Program of China; National Natural Science Foundation of China; Priority Academic Program Development of Jiangsu Higher Education Institutions (PAPD) Fund; Collaborative Innovation Center of Atmospheric Environment and Equipment Technology (CICAEET) Fund, China; National Natural Science Foundation of China; Key Research and Development Plan-Major Scientific and Technological Innovation Projects of Shan Dong Province",,http://dx.doi.org/10.1109/tits.2021.3107011,,10.1109/tits.2021.3107011,,,0,000-011-491-611-440; 000-485-788-343-744; 016-570-710-853-004; 017-545-329-534-639; 018-100-712-291-478; 021-356-321-827-56X; 021-366-140-005-38X; 023-628-555-025-470; 024-157-397-156-077; 027-096-043-528-331; 029-398-614-412-735; 032-681-151-128-894; 033-626-869-265-446; 033-806-179-572-332; 042-007-790-969-735; 042-062-310-431-592; 044-505-693-910-904; 045-311-173-303-183; 045-968-687-151-048; 048-020-457-650-67X; 050-225-205-577-083; 061-439-638-833-25X; 061-909-337-739-060; 063-248-380-987-446; 065-380-115-215-243; 066-311-471-847-244; 071-176-890-544-418; 078-153-154-866-171; 085-379-313-234-901; 086-959-383-959-374; 089-073-066-008-897; 089-683-685-882-012; 092-596-905-671-376; 101-105-320-099-082; 111-893-720-044-323; 112-913-230-973-033; 114-889-854-098-295; 120-418-036-914-955; 121-225-796-399-648; 122-682-468-170-924; 124-555-210-006-28X; 138-423-145-544-850; 152-934-938-742-066,1,false,, 136-636-673-450-889,Uma Ferramenta Computacional Forense para Verificação de Autenticidade de Assinaturas Manuscritas Através de Processamento Digital de Imagens e Redes Neurais Artificiais,,2014,journal article,"Brazilian Journal of Forensic Sciences, Medical Law and Bioethics",2237261x,"Brazilian Journal of Forensic Sciences, Medical Law and Bioethics",,D. P. Franco,,3,4,303,318,,,,,,,http://dx.doi.org/10.17063/bjfs3-4-y2014303,,10.17063/bjfs3-4-y2014303,,,0,,0,true,cc-by,gold 136-921-865-701-702,A review study on blockchain-based IoT security and forensics,2021-09-01,2021,journal article,Multimedia Tools and Applications,13807501; 15737721,Springer Netherlands,Netherlands,Randa Kamal; Ezz El-Din Hemdan; Nawal El-Fishway,"The term Internet of Things (IoT) represents all communicating countless heterogeneous devices to share data and resources via the internet. The speedy advance of IoT devices proposes limitless benefits, but it also brings new challenges regarding security and forensics. Likewise, IoT devices can generate a massive amount of data that desires integrity and security during its handling and processing in an efficient way. IoT devices and data can be vulnerable to various types of cyber-crimes at each IoT layer. For combating these cyber-crimes in IoT infrastructure, IoT forensic term has shown up. The IoT forensic is the process of performing digital forensic investigation in the IoT environment in a forensically sound and timely fashion manner. Sundry challenges face the IoT forensics that requires urgent solutions and mitigation methods; digital evidence needs to be collected, preserved, analyzed, processed, and reported in a trusted manner to be acceptable for presenting in the court of law. Preserving the evidence unchanged or tampered with is the most critical challenge in digital forensics. Authentication is another challenge facing digital forensics; who is allowed to deal with the evidence? One of the most recent solutions for supporting IoT forensics is the use of Blockchain. Using Blockchain in digital forensics guarantees data integrity, immutability, scalability, and security. Therefore, this paper presents a comprehensive review of IoT security and forensics with the integration with Blockchain technology. It begins by providing an inclusive discussion of IoT security, as well as the need for IoT forensics, and the concepts of Blockchain. Then, a review of Blockchain-based IoT security and forensics issues is presented. Finally, a discussion of open research directions is provided.",,,1,32,The Internet; Authentication; Open research; Digital evidence; Data integrity; Computer security; Computer science; Process (engineering); Scalability; Digital forensics,,,,,https://link.springer.com/article/10.1007%2Fs11042-021-11350-9,https://link.springer.com/article/10.1007%2Fs11042-021-11350-9,,,3197657744,,0,001-255-393-025-47X; 002-020-246-447-998; 002-833-179-413-429; 004-137-132-720-257; 004-615-796-313-121; 005-012-690-926-011; 005-224-642-777-474; 006-307-345-966-439; 006-318-177-787-16X; 007-320-554-486-362; 007-633-216-828-494; 008-807-158-661-924; 010-978-011-367-884; 011-965-831-977-868; 012-418-911-164-537; 014-448-058-704-128; 015-973-222-946-009; 017-562-642-083-445; 017-843-938-494-981; 020-587-089-761-077; 020-898-202-535-134; 021-134-599-167-021; 021-703-134-019-886; 022-048-109-808-996; 022-763-404-461-908; 023-465-371-433-193; 024-910-782-556-015; 025-259-885-861-617; 026-334-089-671-023; 026-698-451-512-277; 029-489-501-199-089; 029-610-096-288-863; 029-892-989-646-160; 030-824-319-524-202; 030-997-038-769-92X; 031-012-491-963-576; 031-398-229-671-548; 031-941-891-090-264; 032-191-634-122-495; 032-480-663-490-749; 033-434-879-329-689; 034-177-354-328-802; 034-940-557-037-083; 035-731-194-139-501; 038-002-080-319-757; 039-420-403-957-058; 040-143-785-791-905; 041-694-566-692-090; 042-935-076-531-009; 043-396-872-320-567; 043-990-897-373-907; 045-545-290-957-356; 047-193-826-883-209; 048-759-356-661-308; 050-241-071-432-208; 050-391-026-832-281; 051-662-461-185-849; 051-785-078-933-787; 053-142-074-890-154; 053-173-166-061-419; 054-079-583-763-10X; 054-147-266-467-026; 055-498-537-115-235; 055-811-656-615-740; 056-948-667-641-374; 058-028-339-076-776; 058-183-025-760-225; 058-216-449-390-342; 059-257-554-844-104; 060-577-614-625-105; 062-239-752-997-805; 062-600-341-536-072; 063-350-974-331-285; 063-365-805-979-031; 064-065-630-353-572; 065-654-832-541-493; 066-129-449-973-964; 066-976-962-367-399; 068-502-312-271-078; 069-808-303-777-278; 072-541-155-917-90X; 074-407-533-215-290; 076-688-332-542-46X; 077-858-823-212-989; 078-076-784-684-405; 081-677-124-683-871; 082-403-932-515-639; 082-655-762-381-068; 083-366-430-872-667; 083-888-956-568-609; 087-864-339-137-909; 088-553-642-323-93X; 088-815-757-467-332; 089-419-984-563-123; 090-277-922-829-920; 090-746-449-797-220; 092-827-935-965-207; 093-586-085-641-725; 094-132-495-303-526; 097-939-114-561-254; 098-495-821-664-529; 098-955-808-363-478; 099-532-580-533-443; 102-224-315-391-490; 102-673-073-835-039; 104-120-419-034-347; 105-453-220-486-612; 106-443-463-834-498; 108-114-708-601-04X; 109-244-833-901-828; 111-834-007-975-130; 118-734-946-098-646; 118-985-625-047-182; 131-447-324-046-074; 131-581-925-248-197; 134-170-516-223-565; 135-366-444-347-040; 147-906-708-243-924; 153-430-890-325-227; 159-237-651-629-403; 160-518-804-288-395; 163-498-042-271-565; 165-911-959-289-387; 166-294-209-773-802; 167-729-551-082-27X; 173-254-366-740-139; 183-678-779-320-097; 184-229-080-509-446,1,false,, 137-320-816-794-079,A Forensic Audit of the Tor Browser Bundle,,2019,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Matt Muir; Petra Leimich; William J Buchanan,"Abstract The increasing use of encrypted data within file storage and in network communications leaves investigators with many challenges. One of the most challenging is the Tor protocol, as its main focus is to protect the privacy of the user, in both its local footprint within a host and over a network connection. The Tor browser, though, can leave behind digital artefacts which can be used by an investigator. This paper outlines an experimental methodology and provides results for evidence trails which can be used within real-life investigations.",29,,118,128,Footprint; Encryption; Host (network); Audit; Bundle; Network connection; Computer security; Focus (computing); Computer science; Protocol (object-oriented programming),,,,,https://www.sciencedirect.com/science/article/abs/pii/S1742287619300829 https://doi.org/10.1016/j.diin.2019.03.009 https://dblp.uni-trier.de/db/journals/corr/corr1907.html#abs-1907-10279 https://arxiv.org/pdf/1907.10279.pdf https://arxiv.org/abs/1907.10279 https://core.ac.uk/download/195354109.pdf,http://dx.doi.org/10.1016/j.diin.2019.03.009,,10.1016/j.diin.2019.03.009,2935234850,,0,020-774-682-563-067; 025-319-861-345-580; 062-433-321-011-994; 098-833-276-904-716; 127-411-064-172-146; 133-479-985-342-849; 140-202-585-278-528; 183-699-905-653-662,12,true,,green 137-471-096-969-114,Prelim iii - Contents List,,2020,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,35,,301100,301100,Information retrieval; Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(20)30402-9,,10.1016/s2666-2817(20)30402-9,,,0,,0,true,,bronze 138-082-694-174-263,Digital Forensics Analysis for Data Theft,2015-12-02,2015,journal article,The International Journal of Forensic Computer Science,18099807; 19807333,ABEAT - Associacao Brasileira de Especialistas em Alta Tecnologia,,P.S. Lokhande; B.B. Meshram,,10,1,29,51,,,,,,,http://dx.doi.org/10.5769/j201501004,,10.5769/j201501004,,,0,,1,false,, 139-924-660-355-079,"Digital Forensics AI: Evaluating, Standardizing and Optimizing Digital Evidence Mining Techniques",2022-05-12,2022,journal article,KI - Künstliche Intelligenz,09331875; 16101987,Springer Science and Business Media LLC,,Abiodun A. Solanke; Maria Angela Biasiotti,"AbstractThe impact of AI on numerous sectors of our society and its successes over the years indicate that it can assist in resolving a variety of complex digital forensics investigative problems. Forensics analysis can make use of machine learning models’ pattern detection and recognition capabilities to uncover hidden evidence in digital artifacts that would have been missed if conducted manually. Numerous works have proposed ways for applying AI to digital forensics; nevertheless, scepticism regarding the opacity of AI has impeded the domain’s adequate formalization and standardization. We present three critical instruments necessary for the development of sound machine-driven digital forensics methodologies in this paper. We cover various methods for evaluating, standardizing, and optimizing techniques applicable to artificial intelligence models used in digital forensics. Additionally, we describe several applications of these instruments in digital forensics, emphasizing their strengths and weaknesses that may be critical to the methods’ admissibility in a judicial process.",,,,,Digital forensics; Computer science; Standardization; Process (computing); Computer forensics; Digital evidence; Strengths and weaknesses; Data science; Domain (mathematical analysis); Variety (cybernetics); Artificial intelligence,,,,Alma Mater Studiorum - Università  di Bologna,,http://dx.doi.org/10.1007/s13218-022-00763-9,,10.1007/s13218-022-00763-9,,,0,000-452-908-115-500; 003-137-879-936-770; 003-360-732-233-044; 005-465-138-684-882; 006-110-132-701-331; 006-915-702-173-584; 007-017-884-126-763; 007-123-902-810-016; 007-514-616-400-882; 008-758-179-867-86X; 009-803-691-567-926; 010-591-271-586-999; 010-963-610-208-920; 011-869-845-196-579; 011-973-615-168-206; 013-193-200-485-010; 017-866-764-672-013; 018-339-128-070-611; 021-122-712-929-959; 021-152-929-670-076; 021-495-249-615-203; 021-709-633-408-146; 021-716-208-836-655; 022-001-306-594-001; 022-890-782-823-074; 023-113-470-652-173; 024-470-739-770-394; 025-218-336-182-063; 025-949-648-968-582; 026-637-070-870-880; 026-706-598-228-85X; 026-716-755-237-573; 027-879-891-266-259; 029-011-000-053-812; 030-025-798-038-613; 030-244-355-954-065; 033-225-943-167-901; 036-112-898-081-145; 036-384-272-299-395; 038-851-975-868-307; 040-024-171-977-455; 041-131-516-156-274; 041-351-456-338-328; 042-975-716-732-789; 045-287-244-826-938; 045-591-020-022-945; 048-011-673-789-33X; 048-689-227-588-57X; 048-802-610-388-273; 054-208-541-333-61X; 055-284-632-827-86X; 056-966-379-476-801; 058-717-000-287-105; 059-149-073-001-124; 059-878-189-173-964; 063-034-594-210-284; 064-549-392-650-90X; 065-574-846-834-06X; 067-253-447-599-854; 069-812-790-278-688; 071-925-887-884-193; 072-231-013-731-09X; 072-900-763-568-602; 073-427-478-125-189; 074-182-263-979-316; 075-431-891-877-59X; 075-859-615-742-549; 076-668-645-822-018; 077-902-632-083-884; 080-245-103-101-902; 083-012-787-425-351; 085-332-269-532-11X; 086-653-920-850-621; 088-142-137-151-413; 094-159-592-916-885; 095-263-442-186-414; 096-185-757-909-037; 096-838-446-149-582; 098-340-878-853-594; 098-669-156-394-924; 099-538-623-020-689; 101-549-415-202-81X; 102-940-527-584-734; 103-760-328-285-801; 106-604-221-665-323; 106-820-019-891-26X; 107-362-112-311-662; 108-877-455-100-938; 110-366-692-800-871; 112-744-755-472-229; 113-460-781-457-18X; 113-743-452-135-075; 117-555-147-368-574; 119-357-929-624-478; 120-806-014-141-917; 129-758-715-381-618; 131-559-179-609-745; 137-320-213-389-496; 139-320-230-645-968; 142-790-196-752-819; 143-176-456-443-067; 146-785-925-828-561; 154-735-209-819-28X; 156-905-641-435-682; 162-183-378-458-523; 168-213-788-701-998; 172-928-027-348-61X; 176-679-069-400-341; 176-882-505-758-504; 182-614-300-667-701,1,true,,hybrid 140-116-071-067-896,Digital Image Processing—An Emerging Technology,,1986,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,John F. O'Callaghan,"(1986). Digital Image Processing—An Emerging Technology. Australian Journal of Forensic Sciences: Vol. 18, No. 3-4, pp. 111-114.",18,3-4,111,114,Digital image processing; Emerging technologies; Computer science; Digital image; Multimedia,,,,,https://www.tandfonline.com/doi/abs/10.1080/00450618609411200,http://dx.doi.org/10.1080/00450618609411200,,10.1080/00450618609411200,2390035005,,0,,0,false,, 140-176-426-122-829,Prelim iii - Contents List,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,40,,301368,301368,World Wide Web; Geography; Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00040-3,,10.1016/s2666-2817(22)00040-3,,,0,,0,true,,bronze 140-351-114-011-236,Digital Forensics Compute Cluster: A High Speed Distributed Computing Capability for Digital Forensics,,,journal article,"World Academy of Science, Engineering and Technology, International Journal of Computer, Electrical, Automation, Control and Information Engineering",,,,Daniel Gonzales; Zev Winkelman; Trung Tran; Ricardo Sanchez; Dulani Woods; John S. Hollywood,,11,8,960,967,Computer cluster; Computer network; Computer security; Computer science; Spark (mathematics); Cloud computing; Digital forensics,,,,,https://zenodo.org/record/1131996 https://waset.org/Publication/digital-forensics-compute-cluster-a-high-speed-distributed-computing-capability-for-digital-forensics-/10007817 http://scholar.waset.org/1307-6892/10007817 https://publications.waset.org/10007817/digital-forensics-compute-cluster-a-high-speed-distributed-computing-capability-for-digital-forensics http://waset.org/Publication/digital-forensics-compute-cluster-a-high-speed-distributed-computing-capability-for-digital-forensics-/10007817,http://dx.doi.org/10.5281/zenodo.1131996,,10.5281/zenodo.1131996,2624255989,,0,171-936-658-301-686,0,false,, 140-632-665-807-653,GreenForensics: Deep hybrid edge-cloud detection and forensics system for battery-performance-balance conscious devices,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Mohit Sewak; Sanjay K. Sahay; Hemant Rathore,,43,,301445,301445,Computer science; Robustness (evolution); Deep learning; Cloud computing; Inference; Artificial intelligence; Machine learning; Real-time computing; Data mining; Computer engineering,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301445,,10.1016/j.fsidi.2022.301445,,,0,009-645-845-385-033; 039-051-052-503-239; 050-479-181-817-555; 076-117-960-804-37X; 109-126-066-519-89X; 152-886-339-041-555,0,false,, 140-930-491-847-027,A Novel Forensic Readiness Framework Applicable to the Drone Forensics Field.,2022-02-28,2022,journal article,Computational intelligence and neuroscience,16875273; 16875265,Hindawi Publishing Corporation,Egypt,Fahad Mazaed Alotaibi; Arafat Al-Dhaqm; Yasser D Al-Otaibi,"The Drone Forensics (DRFs) field is a branch of digital forensics, which involves the identification, capture, preservation, reconstruction, analysis, and documentation of drone incidents. Several models have been proposed in the literature for the DRF field, which generally discusses DRF from a reactive forensic perspective; however, the proactive forensic perspective is missing. Therefore, this paper proposes a novel forensic readiness framework called Drone Forensics Readiness Framework (DRFRF) using the design science method. It consists of two stages: (i) proactive forensic stage and (ii) reactive forensic stage. It considers centralized logging of all events of all the applicants within the drone device in preparation for an examination. It will speed up gathering data when an investigation is needed, permitting the forensic investigators to handle the examination and analysis directly. Additionally, digital forensics analysts can increase the possible use of digital evidence while decreasing the charge of performing forensic readiness. Thus, both the time and cost required to perform forensic readiness could be saved. The completeness, logicalness, and usefulness of DRFRF were compared to those of other models already existing in the DRF domain. The results showed the novelty and efficiency of DRFRF and its applicability to the situations before and after drone incidents.",2022,,8002963,13,Drone; Digital forensics; Computer science; Crime scene; Field (mathematics); Computer forensics; Data science; Identification (biology); Forensic science; Computer security; Documentation; Perspective (graphical),,Forensic Sciences/methods; Unmanned Aerial Devices,,Ministry of Education,,http://dx.doi.org/10.1155/2022/8002963,35265114,10.1155/2022/8002963,,PMC8901304,0,001-888-175-704-116; 008-667-688-301-190; 010-084-169-561-57X; 010-992-143-070-67X; 013-086-940-357-037; 013-718-596-619-888; 020-810-000-409-691; 025-484-846-284-184; 034-643-583-457-718; 042-354-079-994-804; 042-467-831-044-091; 045-742-323-849-793; 048-014-163-114-221; 049-482-656-997-863; 051-970-323-275-12X; 059-025-029-154-030; 064-421-137-320-740; 072-183-867-595-593; 076-163-168-300-60X; 078-730-781-174-18X; 079-391-976-487-576; 081-927-021-508-682; 082-411-807-694-99X; 089-691-112-427-434; 090-055-896-921-710; 101-999-935-205-318; 102-058-634-554-487; 106-493-355-516-535; 113-529-751-754-389; 114-264-712-796-928; 123-623-736-184-422; 138-232-752-906-225; 145-157-030-537-719; 176-972-878-781-87X,2,true,cc-by,gold 141-030-616-901-297,Corporate forensics class design with open source tools and live CDS,2007-04-01,2007,journal article,Journal of Computing Sciences in Colleges,19374763,,,Ed Crowley,"While Corporate and Law Enforcement (LE) Forensics share a common process; they differ in important ways including context, scope, outcomes, and tools. Since most forensic texts are created from a LE perspective, designing a corporate forensic class can be a challenge. In this paper, we discuss how incorporating Open Source Tools and LiveCDs into our Corporate Forensics Class helped us meet this challenge.; ; To place our solution in context, the paper first presents an overview of digital forensics. It follows that with a presentation of corporate forensic concepts. Then, it presents our corporate forensics class along with specific corporate forensic activities that it incorporates. The paper concludes with a brief discussion of open source tools and LiveCDs utilized in class.",22,4,170,176,World Wide Web; Forensic science; Class (computer programming); Data science; Presentation; Context (language use); Law enforcement; Scope (project management); Computer science; Process (engineering); Computer forensics; Digital forensics,,,,,http://dl.acm.org/ft_gateway.cfm?id=1229667&type=pdf,http://dl.acm.org/ft_gateway.cfm?id=1229667&type=pdf,,,102182383,,0,076-886-813-545-044,2,false,, 141-400-075-412-153,Introducing digitalization in forensic and economic expertise,,2022,journal article,Obshchestvo i ekonomika,02073676,The Russian Academy of Sciences,,Arina Belyaeva,"The purpose of the study is to identify factors that affect the quality of forensic economic examination and to consider the ways to neutralize those using digital technologies. The subject of the study is the application of digital technologies to the work of an expert economist. The research methods were the analysis of scientific literature and judicial practice of Russian and foreign researchers, analysis of websites of expert institutions, comparison of expert activities, data aggregation, classification of types and methods of forensic economic examination, description of the expert&apos;s activities. The article presents the types and objects of forensic economic examinations in accordance with current regulatory legal acts.; The developments in forensic economic examinations are considered. The potential for introducing modern end-to-end digital technologies into the work of expert economists is analyzed and seven components of technological progress in the field identified. The factors influencing the quality of the forensic economic examination are identified. The measures to minimize and neutralize the threats to expert activity in the context of digitalization are proposed.",,9,115,115,,,,,,,http://dx.doi.org/10.31857/s020736760021867-2,,10.31857/s020736760021867-2,,,0,,0,false,, 141-486-773-849-993,"Erratum to ""What is open-access publishing and what it means for the forensic enterprise"" [Forensic Sci. Int.: Synergy (2019) 290-293].",2020-04-10,2020,journal article,Forensic science international. Synergy,2589871x,Elsevier BV,Netherlands,Max M. Houck; Graeme Horsman; Georgina Sauzier; Mubarak A. Bidmos,[This corrects the article DOI: 10.1016/j.fsisyn.2019.06.045.].,2,,708,,Engineering; Forensic science; Library science; Open access publishing,,,,,https://www.ncbi.nlm.nih.gov/pubmed/33385153 https://www.sciencedirect.com/science/article/pii/S2589871X20300346,http://dx.doi.org/10.1016/j.fsisyn.2020.04.002,33385153,10.1016/j.fsisyn.2020.04.002,3015495934,PMC7770436,0,,1,true,"CC BY, CC BY-NC-ND",gold 142-482-498-545-140,Prelim i - Editorial Board,,2022,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,,,42,,301433,,,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00114-7,,10.1016/s2666-2817(22)00114-7,,,0,,0,false,, 142-682-709-033-759,Stitcher: Correlating digital forensic evidence on internet-of-things devices,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Yee Ching Tok; Chundong Wang; Sudipta Chattopadhyay,"Abstract The increasing adoption of Internet-of-Things (IoT) devices present new challenges to digital forensic investigators and law enforcement agencies when investigation into cybercrime on these new platforms are required. However, there has been no formal study to document actual challenges faced by investigators and whether existing tools help them in their work. Prior issues such as the correlation and consistency problem in digital forensic evidence have also become a pressing concern in light of numerous evidence sources from IoT devices. Motivated by these observations, we conduct a user study with 39 digital forensic investigators from both public and private sectors to document the challenges they faced in traditional and IoT digital forensics. We also created a tool, Stitcher , that addresses the technical challenges faced by investigators when handling IoT digital forensics investigation. We simulated an IoT crime that mimics sophisticated cybercriminals and invited our user study participants to utilize Stitcher to investigate the crime. The efficacy of Stitcher is confirmed by our study results where 96.2% of users indicated that Stitcher assisted them in handling the crime, and 61.5% of users who used Stitcher with its full features solved the crime completely.",35,,301071,,Internet privacy; Private sector; Work (electrical); Cybercrime; Law enforcement; Consistency problem; Computer science; Internet of Things; Digital forensics,,,,Ministry of Education - Singapore,https://www.sciencedirect.com/science/article/abs/pii/S2666281720303681 http://dblp.uni-trier.de/db/journals/corr/corr2003.html#abs-2003-07242 http://www.sciencedirect.com/science/article/pii/S2666281720303681 https://doi.org/10.1016/j.fsidi.2020.301071 https://dblp.uni-trier.de/db/journals/corr/corr2003.html#abs-2003-07242,http://dx.doi.org/10.1016/j.fsidi.2020.301071,,10.1016/j.fsidi.2020.301071,3093759093,,0,001-507-239-208-313; 019-360-393-097-72X; 019-831-293-743-518; 022-056-178-362-107; 035-031-257-128-045; 037-435-312-083-42X; 044-046-807-728-773; 073-194-524-558-213; 097-939-114-561-254; 098-748-261-333-651; 142-388-561-082-054; 150-249-549-372-358; 162-374-469-230-059; 173-034-553-635-460; 177-638-047-045-946,2,true,,green 142-790-196-752-819,Accrediting digital forensics: what are the choices?,,2018,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Peter Sommer,"Abstract There are three apparent competing routes to providing re-assurance about the quality of digital forensics work: accredit the individual expert, accredit the laboratory and its processes, let the courts test via its procedures. The strengths and weaknesses of each are discussed against the variety of activities within “forensic science”. The particular problems of digital forensics, including its complexity and rate of change, are reviewed. It is argued that formal standards may not always be practical or value for money compared with advisory good practice guides.",25,,116,120,Variety (cybernetics); Work (electrical); Test (assessment); Quality (business); Value for money; Good practice; Computer science; Engineering ethics; Strengths and weaknesses; Digital forensics,,,,,https://core.ac.uk/display/158373139 https://www.open-access.bcu.ac.uk/6008/ https://dblp.uni-trier.de/db/journals/di/di25.html#Sommer18 https://www.sciencedirect.com/science/article/pii/S1742287618301701 https://core.ac.uk/download/158373139.pdf,http://dx.doi.org/10.1016/j.diin.2018.04.004,,10.1016/j.diin.2018.04.004,2800365291,,0,,24,true,,green 143-408-563-865-265,What does a digital forensics opinion look like? A comparative study of digital forensics and forensic science reporting practices.,2021-07-01,2021,journal article,Science & justice : journal of the Forensic Science Society,18764452; 13550306,Forensic Science Society,United Kingdom,Nina Sunde,"Abstract This study explores digital forensics (DF) reporting practices and compares the results with other forensic science disciplines. Forty reports were obtained from a quasi-experiment involving DF examiners, and a quantitative content analysis was performed to determine which conclusion types they applied and which content they included with relevance to the credibility of the reported results. A qualitative analysis was performed to examine the certainty expressions used in the conclusions. The results were compared to a study of eight forensic science disciplines performed by Bali et al. [24,26]. The results show that the DF examiners tend to present their conclusions either as Categorical conclusion or Strength of support (SoS) conclusion types and that they address source, activity, and offence level issues in their conclusions. The content analysis indicates deficiencies in DF reporting practices, and several of the challenges seem to be shared with other FS disciplines. The analysis of certainty expressions showed that a plethora of expressions was used, and that they lacked reference to an established framework. The results indicate that more research on DF evaluation and reporting practices is necessary and justifies a need for enhanced focus on quality control and peer review within the DF discipline.",61,5,586,596,Psychology; Relevance (law); Content analysis; Opinion evidence; Quality (business); Credibility; Categorical variable; Certainty; Applied psychology; Digital forensics,Certainty expressions; Conclusion types; Digital Forensics; Forensic Science; Opinion evidence; Reporting practices,Forensic Medicine; Forensic Sciences/methods; Humans; Peer Review; Quality Control,,,https://www.sciencedirect.com/science/article/pii/S1355030621000939 https://www.ncbi.nlm.nih.gov/pubmed/34482939,http://dx.doi.org/10.1016/j.scijus.2021.06.010,34482939,10.1016/j.scijus.2021.06.010,3174820259,,0,002-288-892-034-343; 003-168-641-529-165; 004-652-388-189-304; 005-715-450-998-72X; 010-963-610-208-920; 018-182-926-340-45X; 019-407-699-112-721; 023-848-663-068-771; 024-303-555-608-167; 030-178-593-043-926; 058-717-000-287-105; 060-255-062-097-751; 064-549-392-650-90X; 064-814-734-852-283; 067-505-834-517-458; 071-616-341-516-576; 073-790-480-897-758; 079-233-866-287-529; 083-486-398-213-608; 091-694-294-283-771; 092-283-444-951-14X; 099-377-733-522-116; 101-549-415-202-81X; 103-636-086-365-041; 129-505-938-088-958; 136-503-503-059-765; 138-369-427-159-841; 141-366-693-391-357; 142-790-196-752-819; 153-185-768-708-340; 173-145-269-859-717; 182-670-398-460-931; 189-064-913-996-787,3,true,cc-by-nc-nd,hybrid 143-467-824-641-527,Windows registry harnesser for incident response and digital forensic analysis,2018-12-18,2018,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Avinash Singh; Hein S. Venter; Adeyemi Richard Ikuesan,"The extraction of digital evidence from storage media is a growing concern in digital forensics, due to the time and space complexity in acquiring, preserving and analysing digital evidence. Micros...",52,3,337,353,Information retrieval; Windows Registry; Digital evidence; Incident response; Digital forensic investigation; Computer science; Digital forensics,,,,,https://repository.up.ac.za/handle/2263/68290 https://www.tandfonline.com/doi/full/10.1080/00450618.2018.1551421,http://dx.doi.org/10.1080/00450618.2018.1551421,,10.1080/00450618.2018.1551421,2904398394,,0,001-960-134-177-077; 010-400-879-519-423; 040-393-580-637-973; 043-112-794-493-421; 046-527-367-793-765; 052-859-404-222-610; 055-416-156-661-003; 059-176-636-138-196; 071-953-659-705-163; 074-030-202-389-635; 080-585-092-668-778; 091-011-436-489-252; 118-347-856-286-336; 139-495-561-188-858,10,false,, 143-632-629-699-535,Forensic Photography: A Review,2015-09-12,2015,journal article,International Journal of Forensic Science & Pathology,2332287x,SciDoc Publishers LLC,,Martin Y; Kumar Ms,"Forensic Odontology requires the use of photography for either evidential or investigative purposes. Smith in 1970 said the photographer is expected to produce “something which will convey to the eye of the viewer an accurate reproduction of the scene as it would appear if the viewer actually saw the scene”. If the depictions are precise, the photographs will play a vital role and will be readily accepted as evidence.; It is the assumption of dentists that only their counterparts who have specialised in forensic dentistry can contribute to the field. This misconception is an important reason for the limited contribution by dentists to the field of forensic science. This paper aims at explaining the role of a dental practitioner towards forensic photography, and how he/she could play a pivotal contribution towards forensic evidence",3,9,169,171,Photography; Forensic science; Art; Visual arts; Forensic photography,,,,,https://zenodo.org/record/48094 https://www.airitilibrary.com/Publication/alDetailedMesh?DocID=P20151015002-201509-201510150010-201510150010-169-171 https://core.ac.uk/download/pdf/144765296.pdf,http://dx.doi.org/10.19070/2332-287x-1500041,,10.19070/2332-287x-1500041,2310040519,,0,,0,true,cc-by,gold 143-664-346-231-12X,Prelim i - Editorial Board,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,38,,301291,301291,Editorial board,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00209-2,,10.1016/s2666-2817(21)00209-2,,,0,,0,true,,bronze 143-959-640-326-451,On the importance of standardising the process of generating digital forensic reports,,2019,journal article,Forensic Science International: Reports,26659107,Elsevier BV,,Nickson M. Karie; Victor R. Kebande; Hein S. Venter; Kim-Kwang Raymond Choo,"Abstract The ISO/IEC 27043:2015 international standard provides new standardised guidelines for common investigation processes across various investigation scenarios that mostly involve digital evidence. The reporting process is one of the many investigative processes described in the ISO/IEC 27043:2015 standard, but the manner in which the reporting process is presented does not constitute or cover the specificity of the presentation of the entire processes covered in the standard. In this paper, we posit the importance of having the report generation process covering details obtained from all other classes of the digital investigation processes in a standardised format, as well as the need to standardise the process of generating digital forensic reports. Such a standardised process can facilitate future automation and text analytics, sharing of reports and knowledge across jurisdictions, etc. We also identify a number of key factors, such as the use of Blockchain, which should be added to the ISO/IEC 27043 international standard in order to support a standardised digital forensic report generation process.",1,,100008,,Automation; Data science; Presentation; International standard; Cover (telecommunications); Digital evidence; Key factors; Computer science; Process (engineering); Digital forensics,,,,,https://www.sciencedirect.com/science/article/pii/S2665910719300088 http://www.sciencedirect.com/science/article/pii/S2665910719300088,http://dx.doi.org/10.1016/j.fsir.2019.100008,,10.1016/j.fsir.2019.100008,2955554509,,0,018-552-581-098-658; 018-948-094-812-86X; 021-211-533-310-16X; 023-709-114-205-69X; 025-178-552-649-015; 043-684-451-827-921; 048-378-315-463-912; 052-271-430-459-075; 068-811-221-768-926; 079-858-593-881-513; 081-746-298-679-238; 096-766-423-420-018; 101-147-258-831-898; 102-734-676-905-303; 128-603-018-655-844; 138-518-998-385-929; 184-948-841-629-735,30,true,"CC BY, CC BY-NC-ND",gold 144-810-374-988-487,Corrigendum to “Decrypting password-based encrypted backup data for Huawei smartphones” [Digital Investigation 28 (2019) 200890],,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Myungseo Park; Giyoon Kim; Younjai Park; Insoo Lee; Jongsung Kim,,39,,301179,,Password; Encryption; Backup; Computer network; Computer science,,,,,https://api.elsevier.com/content/article/PII:S2666281721000871?httpAccept=text/xml,http://dx.doi.org/10.1016/j.fsidi.2021.301179,,10.1016/j.fsidi.2021.301179,3168574520,,0,,0,false,, 145-157-030-537-719,KES - Drone Forensic Analysis Using Relational Flight Data: A Case Study of DJI Spark and Mavic Air,,2021,journal article,Procedia Computer Science,18770509,Elsevier BV,,Chi-Cheng Yang; Hsuan Chuang; Da-Yu Kao,"Abstract Drones have been misused through many reported cases across various fields. The easy accessibility of drone capabilities has led to an increasing need for forensic analysis from the crime scenes and the related devices. Law Enforcement Agencies (LEAs) and digital forensic investigators have paid much attention to drone forensics. The authors present an insight into drone forensics, recuperate flight data, and help investigators establish ownership. This paper presents the identification and individualization of digital data from the flight artifacts and the associated mobile devices to aid the forensic analysis of two popular drone systems: the DJI Spark and Mavic Air.",192,,1359,1368,Crime scene; Mobile device; Data science; Digital data; Law enforcement; SPARK (programming language); Computer science; Drone; Identification (information); Digital forensics,,,,,http://www.sciencedirect.com/science/article/pii/S1877050921016288 https://dblp.uni-trier.de/db/conf/kes/kes2021.html#YangCK21 https://www.sciencedirect.com/science/article/pii/S1877050921016288 https://trid.trb.org/view/1884094,http://dx.doi.org/10.1016/j.procs.2021.08.139,,10.1016/j.procs.2021.08.139,3201670115,,0,007-407-280-461-732; 029-610-148-239-706; 033-096-629-217-984,2,true,cc-by-nc-nd,gold 145-865-181-252-320,Tropical Cyclone Intensity Estimation Using Multidimensional Convolutional Neural Network From Multichannel Satellite Imagery,,2022,journal article,IEEE Geoscience and Remote Sensing Letters,1545598x; 15580571,Institute of Electrical and Electronics Engineers (IEEE),United States,Wei Tian; Xinxin Zhou; Wei Huang; Yonghong Zhang; Pengfei Zhang; Shifeng Hao,,19,,1,5,Tropical cyclone; Remote sensing; Satellite; Convolutional neural network; Computer science; Channel (broadcasting); Intensity (physics); Satellite imagery; Artificial intelligence; Meteorology; Environmental science; Geology,,,,National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; Innovation Team of “Six Talent Peaks” in Jiangsu Province,,http://dx.doi.org/10.1109/lgrs.2021.3134007,,10.1109/lgrs.2021.3134007,,,0,,0,false,, 146-021-806-272-345,A road map for digital forensics research: a novel approach for establishing the design science research process in digital forensics,,2019,journal article,International Journal of Electronic Security and Digital Forensics,1751911x; 17519128,Inderscience Publishers,United Kingdom,Reza Montasari; Victoria Carpenter; Richard Hill,"Compared to other well-established scientific fields computer forensics (CF) is still evolving as a new scientific field. CF lacks standardisation in various aspects including process models, datasets, procedures, techniques, and formal research methodologies. Consequently, progress in the establishment of CF as a scientific field has been hindered. Therefore, this paper aims to address one of such issues concerning the lack of standardisation, namely the absence of formal research methods in CF. Our study adds to the body of knowledge by filling the gap that there does not currently exist a well-established research methodology in CF. To this end, we borrow a well-established research methodology from the domain of IS, namely Peffers et al.'s (2006), adapt and extend it and make it relevant to research studies in CF. Our study sets a precedent for other researchers to identify, adapt, extend and apply other well-established research methods to studies in CF.",11,2,194,224,Domain (software engineering); Information system; Body of knowledge; Road map; Data science; Design science research; Computer science; Process (engineering); Computer forensics; Digital forensics,,,,,http://cronfa.swan.ac.uk/Record/cronfa54931 https://doi.org/10.1504/IJESDF.2019.098784 https://pure.hud.ac.uk/en/publications/a-road-map-for-digital-forensics-research-a-novel-approach-for-es https://www.inderscienceonline.com/doi/abs/10.1504/IJESDF.2019.098784 https://ray.yorksj.ac.uk/id/eprint/3051/ https://cronfa.swan.ac.uk/Record/cronfa54931 https://dblp.uni-trier.de/db/journals/ijesdf/ijesdf11.html#MontasariCH19 https://core.ac.uk/download/237461123.pdf,http://dx.doi.org/10.1504/ijesdf.2019.098784,,10.1504/ijesdf.2019.098784,2886461126,,0,,3,true,,green 146-159-881-844-536,Prelim iii - Contents List,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,41,,301412,301412,Computer science; Information retrieval,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00093-2,,10.1016/s2666-2817(22)00093-2,,,0,,0,true,,bronze 146-351-183-180-613,Analysis of Digital Forensic Evidence on Email Delivery Crime,2017-02-25,2017,journal article,Applied Science and Technology,25794086,,,Evans Fuad; null Hasanuddin; Ardi Nugraha,"Digital forensics is the application of science and computer technology to carry out the examination and analysis of electronic evidence and digital evidence in its association with crime. Technically, tech crimes can be divided into off-line crime, semi on-line crime, and cyber crime. Each has its own characteristics, but the main difference between them is the connectedness of public information network (internet). One of the example is defamation via e-mail, to solve these cases the need for an information that can give clues and needed some software for acquisitions or analysis of the evidence in order to get a trace or information that can be used as evidence and accountable in the court. software used is FTK (forensic toolkit), Autopsy, USBwrite Blocker, Hashcalc.",1,1,53,58,Internet privacy; The Internet; Engineering; Social connectedness; Trace (semiology); Software; Digital evidence; Computer technology; Computer forensics; Digital forensics,,,,,https://www.estech.org/index.php/IJSAT/article/view/10 http://www.estech.org/index.php/IJSAT/article/download/10/pdf_1,https://www.estech.org/index.php/IJSAT/article/view/10,,,2625026711,,0,,0,false,, 146-490-747-235-967,Future issues in forensic computing and an introduction to ENSFI,,2004,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Eric Freyssinet; Zeno Geradts,,1,2,112,113,Data science; Forensic computing; Computer science,,,,,http://www.sciencedirect.com/science/article/pii/S1742287604000362 https://doi.org/10.1016/j.diin.2004.04.008 https://www.sciencedirect.com/science/article/pii/S1742287604000362 https://dblp.uni-trier.de/db/journals/di/di1.html#FreyssinetG04,http://dx.doi.org/10.1016/j.diin.2004.04.008,,10.1016/j.diin.2004.04.008,2036446165,,0,,0,false,, 146-651-722-674-271,Digital Forensic and Distributed Evidence,2022-07-26,2022,journal article,Advances in Multidisciplinary and scientific Research Journal Publication,24888699,Creative Research Publishers,,Emmanuel Kpakpo Brown,"Digital Forensics investigation is the science and legal process of investigating computer/cybercrimes and digital media or objects to gather evidence. This new and fast evolving field encompasses computer forensics, network forensics, mobile forensics, cloud computing forensics, and IoT forensics; and for this reason have digital evidence distributed widely when the need arises for crime prosecution. Digital evidence must be authentic, accurate, complete, and convincing to the jury for legal admissibility at the court of law. In many instances due to the distributed nature of digital forensic evidence and the legal procedures to be adhered to in evidence gathering at a digital crime scene, presenting at the law courts have proven to be challenging and in some instances inadmissible. Following legal procedures in evidence gathering at a digital crime scene is critical for admissibility and prosecution. This paper aims to discuss digital forensics investigations jurisprudence in relation to distributed digital evidence. For the study to be relevant to policy and practice, forensic tools and frameworks, legal and ethical obligations, and digital evidence handling and admissibility are highlighted. This paper does not follow any forensic investigations process; but rather discusses the need for development and implementation of unique frameworks that could be utilised to gather distributed digital evidence required for admissibility in court. Keywords - Digital forensics investigations; Digital evidence; Jurisprudence BOOK Chapter ǀ Research Nexus in IT, Law, Cyber Security & Forensics. Open Access. Distributed Free Citation: Emmanuel Kpakpo Brown (2022): Digital Forensic and Distributed Evidence Book Chapter Series on Research Nexus in IT, Law, Cyber Security & Forensics. Pp 357-362 www.isteams.net/ITlawbookchapter2022. dx.doi.org/10.22624/AIMS/CRP-BK3-P57",1,1,357,362,Digital evidence; Digital forensics; Computer forensics; Nexus (standard); Computer science; Computer security; Network forensics; Process (computing); Jurisprudence; Data science; Law; Internet privacy; Political science; Embedded system; Operating system,,,,,,http://dx.doi.org/10.22624/aims/crp-bk3-p57,,10.22624/aims/crp-bk3-p57,,,0,,0,true,,bronze 146-950-696-881-567,High-Capacity Steganography Using Object Addition-Based Cover Enhancement for Secure Communication in Networks,2022-03-01,2022,journal article,IEEE Transactions on Network Science and Engineering,23274697; 2334329x,Institute of Electrical and Electronics Engineers (IEEE),United States,Ruohan Meng; Qi Cui; Zhili Zhou; Zhetao Li; Q. M. Jonathan Wu; Xingming Sun,,9,2,848,862,,,,,National Key Research and Development Program of China; National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; Jiangsu Basic Research Programs Natural Science Foundation; Jiangsu Basic Research Programs Natural Science Foundation; Priority Academic Program Development of Jiangsu Higher Education Institutions; Collaborative Innovation Center of Atmospheric Environment and Equipment Technology; Postgraduate Research & Practice Innovation Program of Jiangsu Province; Research Startup Foundation of NUIST,,http://dx.doi.org/10.1109/tnse.2021.3137829,,10.1109/tnse.2021.3137829,,,0,,0,false,, 147-434-307-975-304,Mobile Digital Forensics Framework for Smartphone User Analysis,2022-01-20,2022,journal article,Webology,1735188x,NeuroQuantology Journal,"Iran, Islamic Republic of",Sang Young Lee,"Blockchain-based digital forensics technology is an efficient way to prevent forgery/modulation of evidence including collecting and analyzing evidential data using the technology in compliance with smartphone forensics procedures after a smartphone is seized. Moreover, the use of large-capacity storage devices and various digital devices have become a realistic solution for its development of IT in situations where the existing digital forensics analysis methods are regarded as limitations. This paper analyzed user’s status on smartphone application and implemented a smartphone user analysis framework that may extract significant digital evidence in a digital forensic way based on a blockchain perspective. In this paper researched a system that may provide important information to digital forensic analysts through these frameworks. It is expected that the proposed system will be expanded by much more structured data and online unstructured data such as SNS reports.",19,1,4335,4351,Digital forensics; Computer science; Digital evidence; Perspective (graphical); Network forensics; Computer security; Mobile device; Computer forensics; Smartphone application; World Wide Web; Multimedia; Data science,,,,,,http://dx.doi.org/10.14704/web/v19i1/web19285,,10.14704/web/v19i1/web19285,,,0,,0,true,cc-by-nc-nd,gold 147-988-605-182-606,Basic aspects concerning the evidence aquisition in digital forensic analysis,2015-07-10,2015,journal article,Forum Criminalistic / Forensic Science Forum,18442641,European Association of Scientific Research,,Cezara Craciunescu,,8,17 (1/2015),,,Digital evidence; Digital forensics; Forensic science; Computer science; Psychology; Data science; Computer security; History; Archaeology,,,,,,http://dx.doi.org/10.18283/forum.viii.17.12015.315,,10.18283/forum.viii.17.12015.315,,,0,,0,false,, 148-456-164-437-392,Analyzing Cyber Trends in Online Financial Frauds using digital Forensics Techniques,2020-07-30,2020,journal article,International Journal of Innovative Technology and Exploring Engineering,22783075,Blue Eyes Intelligence Engineering and Sciences Engineering and Sciences Publication - BEIESP,,Simran Koul*; Yash Raj; Simriti Koul,"Online financial frauds are one of the leading issues in the fields of digital forensics and cyber-security today. Various online firms have been employing several methodologies for the prevention of finance-related malpractices. This domain of criminal activity is becoming increasingly common in the present cyberspace. In this paper, we will try to implement an online financial fraud investigation using the digital forensics tool: Autopsy. A few existing cyber-security techniques for the investigation of such crimes, namely the Formal Concept Analysis and Confirmatory Factor Analysis; have been analyzed and reviewed. These techniques are primarily based on mathematical cyber-security concepts. Henceforth, it has been tried to find out whether the investigation of similar crimes can be done satisfactorily using the readily-accessible digital forensics tool: Autopsy. Also, it has been explored whether the aforementioned cyber-security techniques can be embedded along with the digital forensics tool to achieve the best results, through training a bot to automatically perform accurate investigations of such crimes. Thus, it has been tried to automate the process of online financial fraud investigation.",9,9,446,451,Cyberspace; Digital forensics; Computer forensics; Computer science; Cyber crime; Computer security; Process (computing); Domain (mathematical analysis); Cybercrime; Data science,,,,,,http://dx.doi.org/10.35940/ijitee.i7185.079920,,10.35940/ijitee.i7185.079920,,,0,,0,true,,gold 148-500-781-775-122,PeekaTorrent: Leveraging P2P hash values for digital forensics,,2016,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Sebastian Neuner; Martin Schmiedecker; Edgar Weippl,"Abstract Sub-file hashing and hash-based carving are increasingly popular methods in digital forensics to detect files on hard drives that are incomplete or have been partially overwritten/modified. While these techniques have been shown to be usable in practice and can be implemented efficiently, they face the problem that a-priori specific “target files” need to be available and at hand. While it is always feasible and, in fact, trivial to create case-specific sub-file hash collections, we propose the creation of case-independent sub-file hash databases. For facilitating hash databases which can be publicly shared among investigators, we propose the usage of data from peer-to-peer file sharing networks such as BitTorrent. Most of the file sharing networks in use today rely on large quantities of hash values for integrity checking and chunk identification, and can be leveraged for digital forensics. In this paper we show how these hash values can be of use for identifying possibly vast amounts of data and thus present a feasible solution to cope with the ever-increasing case sizes in digital forensics today. While the methodology used is independent of the used file sharing protocol, we harvested information from the BitTorrent network. In total we collected and analyzed more than 3.2 billion hash values from 2.3 million torrent files, and discuss to what extent they can be used to identify otherwise unknown file fragments and data remnants. Using open-source tools like bulk_extractor and hashdb, these hash values can be directly used to enhance the effectiveness of sub-file hashing at scale.",18,,S149,S156,Hash chain; Double hashing; Hash list; SHA-2; Merkle tree; Hash tree; Torrent file; Computer science; Database; Hash function,,,,Austrian Research Promotion Agency (FFG),https://cyberleninka.org/article/n/865439 https://cyberleninka.org/article/n/865439.pdf https://www.sciencedirect.com/science/article/pii/S1742287616300445 https://doi.org/10.1016/j.diin.2016.04.011 https://core.ac.uk/display/82223047 https://core.ac.uk/download/pdf/82223047.pdf,http://dx.doi.org/10.1016/j.diin.2016.04.011,,10.1016/j.diin.2016.04.011,2525607610,,0,007-455-522-527-690; 010-985-077-415-59X; 017-790-269-405-50X; 018-304-870-600-752; 019-175-479-295-992; 020-102-151-624-738; 026-564-773-645-052; 029-159-400-662-132; 036-884-542-282-034; 047-630-600-014-492; 054-182-695-649-382; 061-317-181-338-930; 066-764-363-673-55X; 085-138-340-371-322; 085-214-277-668-01X; 099-309-660-717-953; 102-692-377-462-124; 122-880-373-616-302; 128-940-875-499-986; 130-750-724-951-650; 131-516-331-360-906; 134-927-490-231-285; 167-681-711-973-339; 168-211-791-741-422; 177-654-940-586-315,2,true,cc-by-nc-nd,hybrid 148-617-284-942-187,Decision-theoretic file carving,,2017,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Pavel Gladyshev; Joshua I. James,,22,,46,61,Decision problem; World Wide Web; Completeness (order theory); JPEG; Information retrieval; File carving; Carving; Resource constraints; Computer science; Digital forensics; Reduction (complexity),,,,,https://doi.org/10.1016/j.diin.2017.08.001 https://dblp.uni-trier.de/db/journals/di/di22.html#GladyshevJ17 http://www.sciencedirect.com/science/article/pii/S1742287617301329 https://www.sciencedirect.com/science/article/abs/pii/S1742287617301329,http://dx.doi.org/10.1016/j.diin.2017.08.001,,10.1016/j.diin.2017.08.001,2746531026,,0,003-982-227-180-136; 004-652-388-189-304; 005-831-171-574-471; 015-537-933-151-383; 018-304-870-600-752; 023-341-419-324-638; 041-055-817-137-745; 043-093-846-816-675; 082-440-435-702-102; 087-950-081-760-226; 090-752-043-508-733; 092-237-744-940-330; 094-295-279-676-447; 114-862-246-585-217; 122-474-821-859-110; 126-591-597-706-715; 145-062-913-009-934; 162-485-003-594-995,11,false,, 148-776-638-573-859,Research on Correlation of Digital Audio and Recording Device,,2009,journal article,Computer Engineering,10003428,,,Yang Xu,"This paper proposes a method for detecting the digital audio through its characteristics without any digital watermark or signature embedded in.It gets the incidental background noise characteristics of the sample audio by wavelet de-noising,and compares it with the background noise of other audio to detect whether it is tampered by another piece of audio recorded by another type of device,which provides the evidence for judicial authentication.",,,,,Background noise; Speech coding; Signature (logic); Digital watermarking; Speech recognition; Computer science; Wavelet; Anti-aliasing; Digital audio,,,,,http://en.cnki.com.cn/Article_en/CJFDTOTAL-JSJC200919077.htm,http://en.cnki.com.cn/Article_en/CJFDTOTAL-JSJC200919077.htm,,,2354464979,,0,,1,false,, 148-968-873-601-051,IMPORTANCE OF NETWORK DEVICES AND THEIR SECURE CONFIGURATIONS AT DIGITAL FORENSICS,2013-07-30,2013,journal article,Engineering Sciences,1308 7231,,,Fatih Ertam; Turker Tuncer; Engin Avci,"Network forensics is the capture, recording, and analysis of network events in order to discover the source of security attacks or other problem incidents. Network forensics is a sub-branch of digital forensics. Network device forensics is also a sub-branch of network digital forensics. Forensic IT applications and examination of suspicious users` personal computers to be copied to all of the data alone is not sufficient for the determination of guilt or innocence. Users before the event and during the event is logged on the network traffic to be carried out is important. These records are necessary to preserve the security measures on the network devices, the devices required by the user on the network can not use, the internet user`s IP address and MAC address of the output to be significant, the user attempts to disrupt the functioning of the network is very important in minimizing. Users, network devices must not interfere with the records. In this study, as well as to facilitate network forensics investigations on network devices to improve network security configuration settings to be discussed.",8,3,171,181,The Internet; Engineering; Network Access Control; Networking hardware; Network security; MAC address; Computer security; Network forensics; Event (computing); Digital forensics,,,,,http://www.newwsa.com/makale_detay_ozet_bilgiler.asp?d=1&makale_detay_id=3273&makale_upload_id=11563&islem_turu=0 http://dergipark.ulakbim.gov.tr/nwsaeng/article/view/5000066813/5000062187,http://www.newwsa.com/makale_detay_ozet_bilgiler.asp?d=1&makale_detay_id=3273&makale_upload_id=11563&islem_turu=0,,,2333416154,,0,,0,false,, 149-440-914-154-448,Prelim i - Editorial Board,,2020,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,33,,301045,301045,Editorial board,,,,,,http://dx.doi.org/10.1016/s2666-2817(20)30334-6,,10.1016/s2666-2817(20)30334-6,,,0,,0,false,, 149-758-552-549-038,Cloud-Based Framework for Performing Digital Forensic Investigations,2022-07-04,2022,journal article,International Journal of Wireless Information Networks,10689605; 15728129,Springer Science and Business Media LLC,United States,Vijay Prakash; Alex Williams; Lalit Garg; Pradip Barik; Rajesh Kumar Dhanaraj,"Cloud computing has created paradigm transitions from traditional computing. Acquisition rates increase with benefits such as lower costs and better utilization of resources. However, these benefits are accompanied by some of the challenges of computer forensics practice. The complexity of the Cloud computing, its key features, and its implementation all present several challenges for computer forensic researchers. In this paper, two surveys have been conducted to collect Cloud computing/forensic recommendations. The impact assessment (survey 1) has been conducted to determine the nature and extent of the impact of Cloud computing on computer forensics. A total of 104 Cloud Computing-based or computer forensics-based responses have been collected. Based on the impact assessment results, a Cloud-based framework has been proposed to assist in the fight against global digital crime, especially those committed within the cloud environment, bringing it with the challenges of law enforcement and digital forensic professionals. The proposed framework contains a set of guidelines and a cloud-based forensics model. In addition, the proposed framework will assist in the investigation. It is thought that criminals use the complexity of the cloud to hide strong and obvious evidence away from investigators and thus avoid prosecution and sentencing. In addition, this study identifies limitations and research gaps in existing solutions. The framework has been then validated with an online survey (survey 2) focused on 20 cloud computing or computer forensics experts. The result of study 1 confirms the impact of cloud computing on computer forensics. Further, it indicates that environmental factors and structures such as distributed storage, high recruitment, and virtualization have posed various challenges to the digital forensics process. In addition, the result concludes that the proposed framework addresses many of the issues and challenges discussed at a particular level of efficiency and effectiveness.",,,,,Cloud computing; Digital forensics; Computer science; Digital evidence; Computer forensics; Law enforcement; Computer security; Data science; Network forensics; Cybercrime; Cloud computing security,,,,,,http://dx.doi.org/10.1007/s10776-022-00560-z,,10.1007/s10776-022-00560-z,,,0,000-566-000-503-971; 001-582-154-824-328; 001-893-584-671-77X; 002-288-358-355-198; 003-642-671-730-64X; 004-942-595-617-530; 008-308-597-135-954; 008-589-433-282-265; 009-945-925-742-082; 011-367-436-492-537; 011-972-444-921-827; 013-568-618-083-770; 014-127-277-237-390; 015-654-094-120-991; 016-550-890-218-383; 018-176-630-610-077; 018-948-094-812-86X; 019-698-064-288-240; 021-014-524-429-705; 023-858-572-607-02X; 024-462-843-796-80X; 025-019-480-061-555; 026-926-997-253-117; 028-290-062-141-840; 029-200-392-412-396; 032-176-657-149-732; 034-872-896-955-434; 037-320-586-379-973; 047-386-524-667-691; 047-748-955-171-36X; 053-731-227-547-943; 060-971-363-644-947; 061-414-916-530-216; 062-486-998-356-491; 071-644-146-903-042; 075-895-669-363-649; 076-889-170-335-628; 077-532-025-251-756; 091-381-973-315-491; 091-420-789-124-328; 091-540-399-535-662; 095-691-114-276-825; 095-804-279-876-042; 098-748-261-333-651; 116-288-436-546-314; 118-838-969-146-870; 131-923-136-263-017; 134-927-490-231-285; 136-798-153-498-59X; 139-894-097-165-561; 144-124-797-675-052; 147-175-496-906-928; 148-732-709-522-772; 154-014-516-026-896,0,false,, 149-934-631-443-119,A mathematical approach to NAND flash-memory descrambling and decoding,,2015,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Jan Peter van Zandwijk,,12,,41,52,Error detection and correction; NAND gate; Code (cryptography); Parallel computing; Scrambling; Cyclic code; Flash (photography); Computer science; BCH code; Decoding methods; Computer hardware,,,,,https://www.sciencedirect.com/science/article/abs/pii/S1742287615000043 http://www.sciencedirect.com/science/article/pii/S1742287615000043 https://dblp.uni-trier.de/db/journals/di/di12.html#Zandwijk15,http://dx.doi.org/10.1016/j.diin.2015.01.003,,10.1016/j.diin.2015.01.003,2078023065,,0,007-918-160-435-809; 023-114-150-053-694; 033-027-137-279-186; 074-933-143-629-826; 075-638-759-979-271; 086-288-023-774-224; 117-022-631-068-897; 140-792-335-288-478,11,false,, 150-681-841-306-967,Digital forensics: you can run but you can't hide: conference tutorial,2015-04-01,2015,journal article,Journal of Computing Sciences in Colleges,19374763,,,Bilal Shebaro,"Digital crimes, such as identity theft, child pornography, denial of service attacks, insider threats, phishing, and other cyber-crimes are now a fact of life. As computers and digital devices are becoming a valuable resource of evidence in many physical and digital crimes, proper handling of forensic investigations become a key in fighting back against such crimes. Therefore, understanding digital forensics and how digital forensic investigations should be carried out is an essential process to learn by IT and other law enforcement personnel in every organization, as they will eventually deal with cyber-crimes. Such learning essentials are necessary for detection and prevention of crime and in any dispute where evidence is stored digitally. This tutorial will explain and discuss the major phases of digital investigation; the practice of gathering digital evidence (Acquisition), examining data and extracting evidence (Analysis), and documenting evidence and key information (Reporting). In addition, it will include a hands-on and practical exercise on how digital investigation is carried; mainly focusing on the practice of memory forensics, as it is the most fruitful and interesting part of digital forensics. By learning how to capture computer memory and profile its contents, the audience will gain an invaluable resource on how to examine data and extract evidence from tested machines, and in our case, machines infected with malware. Tools used in digital investigations need to be forensically sound so they can obtain reliable data as evidence. This tutorial will explain how a tool can qualify to be forensically sound and will discuss some of the forensic tools offered in BackTrack and CAINE as an example of forensics-based operating systems. In addition, we will apply our digital investigation and memory forensics on the SANS Investigative Forensic Toolkit (SIFT), mainly using the Volatility framework. SIFT, written by an international team of forensics experts, is a free toolkit that matches any modern forensic tool suite with cutting-edge open-source tools. All of our tool examinations and experiments will be performed on virtual machines. This tutorial will provide an overview of digital forensics and give the audience a taste of how digital investigations run. Therefore, the intended audience for this tutorial is people curious to know about the digital forensics process. Even though this tutorial serves as an overview of the digital forensics science, it can also serve as a good start for faculty interested in integrating such topic in their Computer Security classes or as its own Digital Forensics course.",30,4,46,46,Forensic science; Data science; Memory forensics; Law enforcement; Digital evidence; Computer science; Identity theft; Malware; Resource (project management); Phishing; Digital forensics,,,,,http://dl.acm.org/citation.cfm?id=2752628.2752637,http://dl.acm.org/citation.cfm?id=2752628.2752637,,,2992792080,,0,,0,false,, 150-957-964-090-611,Digital Forensics Formats: Seeking a Digital Preservation Storage Container Format for Web Archiving,2012-10-23,2012,journal article,International Journal of Digital Curation,17468256,Edinburgh University Library,,Yunhyong Kim; Seamus Ross,"In this paper we discuss archival storage container formats from the point of view of digital curation and preservation, an aspect of preservation overlooked by most other studies. Considering established approaches to data management as our jumping off point, we selected seven container format attributes that are core to the long term accessibility of digital materials. We have labeled these core preservation attributes. These attributes are then used as evaluation criteria to compare storage container formats belonging to five common categories: formats for archiving selected content (e.g. tar, WARC), disk image formats that capture data for recovery or installation (partimage, dd raw image), these two types combined with a selected compression algorithm (e.g. tar+gzip), formats that combine packing and compression (e.g. 7-zip), and forensic file formats for data analysis in criminal investigations (e.g. aff – Advanced Forensic File format). We present a general discussion of the storage container format landscape in terms of the attributes we discuss, and make a direct comparison between the three most promising archival formats: tar, WARC, and aff. We conclude by suggesting the next steps to take the research forward and to validate the observations we have made.",7,2,21,39,Container (abstract data type); Digital curation; Web archiving; Digital preservation; Computer science; Image file formats; Database; Data compression; Digital forensics; File format,,,,,http://www.ijdc.net/index.php/ijdc/article/download/217/286 https://dblp.uni-trier.de/db/journals/ijdc/ijdc7.html#KimR12 http://eprints.gla.ac.uk/79800/ http://www.ijdc.net/index.php/ijdc/article/view/217 http://eprints.gla.ac.uk/79800/1/79800.pdf https://doaj.org/article/dc9449a8a7b6440785206318421de124 https://core.ac.uk/display/16458809 https://core.ac.uk/download/pdf/296152550.pdf,http://dx.doi.org/10.2218/ijdc.v7i2.227,,10.2218/ijdc.v7i2.227,2062133553,,0,017-215-239-686-426; 024-216-399-693-64X; 024-775-073-655-919; 025-421-213-608-128; 051-457-536-845-758; 056-211-020-434-992; 126-176-453-947-183; 133-053-709-996-16X; 152-008-550-136-841; 168-394-204-709-730,3,true,cc-by,gold 151-680-718-283-212,Prelim iii - Contents List,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,37,,301259,301259,Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00173-6,,10.1016/s2666-2817(21)00173-6,,,0,,0,true,,bronze 152-334-928-197-034,Reliability assessment of digital forensic tools,,2010,journal article,Forensic Science and Technology,,,,Yang Yong-chuan,"In this paper,bases on analysis of existing tools evaluation methods,the writer offers a system for reliability assessment of digital forensic tools,the basic recognition,qualitative examination and operating procedures were included.",,,,,Reliability engineering; Operating procedures; Evaluation methods; Computer science; Reliability (statistics); Digital forensics,,,,,http://en.cnki.com.cn/Article_en/CJFDTOTAL-XSJS201002008.htm,http://en.cnki.com.cn/Article_en/CJFDTOTAL-XSJS201002008.htm,,,2383069320,,0,,0,false,, 153-185-768-708-340,Structuring the Evaluation of Location-Related Mobile Device Evidence,,2020,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Eoghan Casey; David-Olivier Jaquet-Chiffelle; Hannes Spichiger; Elénore Ryser; Thomas Souvignet,"Abstract Location-related mobile device evidence is increasingly used to address forensic questions in criminal investigations. Evaluating this form of evidence, and expressing evaluative conclusions in this forensic discipline, are challenging because of the broad range of technological subtleties that can interact with circumstantial features of cases in complex ways. These challenges make this type of digital evidence prone to misinterpretations by both forensic practitioners and legal decision-makers. To mitigate the risk of misleading digital forensic findings, it is crucial to follow a structured approach to evaluation of location-related mobile device evidence. This work presents an evaluation framework widely used in forensic science that employs scientific reasoning within a logical Bayesian framework to clearly distinguish between, on the one hand, what has been observed (i.e., what data are available) and, on the other hand, how those data shed light on uncertain target propositions. This paper provides case examples to illustrate the advantages and difficulties of applying this approach to location-based mobile device evidence. This work helps digital forensic practitioners follow the principles of balanced evaluation and convey location-related mobile device evidence in a way that allows decision-makers to properly understand the relative strength of, and limitations in, digital forensic results.",32,,300928,,Criminal investigation; Mobile device; Data science; Structuring; Digital evidence; Scientific reasoning; Bayesian framework; Computer science; Circumstantial evidence; Digital forensics,,,,,https://serval.unil.ch/en/notice/serval:BIB_99D09A242835 https://www.sciencedirect.com/science/article/pii/S2666281720300238,http://dx.doi.org/10.1016/j.fsidi.2020.300928,,10.1016/j.fsidi.2020.300928,3029496844,,0,001-872-507-889-182; 006-106-790-585-940; 008-321-492-596-021; 009-512-003-529-193; 015-238-949-406-002; 019-831-293-743-518; 020-932-340-092-358; 024-131-573-638-521; 024-793-920-484-727; 025-273-020-668-018; 026-943-588-349-358; 027-669-021-337-265; 035-457-870-364-976; 036-017-937-159-609; 040-997-734-554-028; 050-296-813-523-597; 068-721-919-773-533; 069-906-125-551-995; 070-427-732-319-159; 075-518-198-327-92X; 082-676-890-491-344; 085-370-444-410-812; 099-407-105-258-080; 113-310-395-905-331; 123-400-070-960-457; 170-831-892-006-047; 172-357-540-521-552; 175-578-826-231-866; 181-826-022-794-521,3,true,cc-by-nc-nd,hybrid 153-356-989-694-986,Age estimation of bloodstains using smartphones and digital image analysis.,2013-10-09,2013,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Phuvadol Thanakiatkrai; Alisa Yaodam; Thitika Kitpipit,,233,1,288,297,Computer graphics (images); Repeatability; Artificial intelligence; Random forest; Color analysis; Digital image analysis; Temporal information; Age estimation; Computer vision; Computer science; Digital image; Magenta,Color analysis; Digital image analysis; Forensic science; Hemoglobin; Random Forests,"Algorithms; Anticoagulants; Blood Stains; Color; Computers, Handheld; Female; Forensic Medicine/methods; Humans; Humidity; Image Processing, Computer-Assisted; Light; Linear Models; Male; Photography/methods; Temperature; Time Factors; Young Adult",Anticoagulants,Faculty of Science Research,https://pubmed.ncbi.nlm.nih.gov/24314532/ https://www.ncbi.nlm.nih.gov/pubmed/24314532 https://www.sciencedirect.com/science/article/pii/S0379073813004453 https://kb2tmp.psu.ac.th/psukb/handle/2016/12421 https://kb.psu.ac.th/psukb/handle/2016/12421 https://kb2tmp.psu.ac.th/psukb/bitstream/2016/12421/1/418230.pdf https://europepmc.org/article/MED/24314532 https://kb.psu.ac.th/psukb/bitstream/2016/12421/1/418230.pdf,http://dx.doi.org/10.1016/j.forsciint.2013.09.027,24314532,10.1016/j.forsciint.2013.09.027,2004856468,,2,003-839-741-905-679; 004-124-304-674-11X; 004-571-414-356-82X; 008-350-591-022-421; 015-281-839-954-183; 017-916-969-747-069; 018-745-037-664-557; 019-056-692-525-257; 024-760-886-491-550; 027-523-063-562-40X; 031-579-359-400-896; 033-502-451-706-764; 037-041-375-222-704; 051-197-194-328-866; 053-140-560-778-652; 054-725-084-268-175; 070-253-956-007-229; 070-887-969-186-70X; 093-371-253-322-929; 105-611-383-047-770; 120-499-728-540-357; 123-498-859-171-509; 149-918-501-755-309,39,false,, 154-014-621-704-361,Survey on Passive Forensics Techniques for Digital Images,,2014,journal article,Journal of Jilin University,,,,Chen Yuanyua,"To ensure the authenticity and information safety of the image content,application areas of passive forensics techniques are stated. The ideas and main steps of some typical algorithms for digital image source device detection,splicing detection,copy-paste detection,blur detection and JPEG( Joint Photographic Experts Group) compression detection have been analyzed. The algorithm performance and feasibility have been briefly evaluated,and the future technical route and development direction of passive forensics techniques are prospected.",,,,,Engineering; Artificial intelligence; JPEG; Image content; Copy paste; Application areas; Computer vision; Digital image,,,,,http://en.cnki.com.cn/Article_en/CJFDTotal-CCYD201406021.htm,http://en.cnki.com.cn/Article_en/CJFDTotal-CCYD201406021.htm,,,2350742329,,0,,0,false,, 154-076-720-609-283,Analysis of Digital Forensic Tools,2020-06-01,2020,journal article,Journal of Computational and Theoretical Nanoscience,15461955; 15461963,American Scientific Publishers,United States,Shaweta Sachdeva; B. L. Raina; Avinash Sharma,"This paper aims to analyze different tools for Forensic Data Analysis comes under the branch of Digital Forensics. Forensic data analysis is done with digital techniques. Digital forensics becomes more important in law enforcement, due to the large use of computers and mobile devices.; The pattern recognition system most appropriately fits into the Analysis Phase of the Digital Forensics. Pattern Recognition involves two processes. One Process is an analysis and the second process is recognition. The result of the analysis is taken out of the attributes from the patterns; to be recognized i.e., a pattern of different faces and fingerprints. These attributes are then utilized for the further process in the analysis phase which provides attention on various techniques of pattern recognition that are applied to digital forensic examinations and is proposed to; develop different forensic tools to collect evidence that would be helpful to solve specific types of crimes. This evidence further helps the examiner in the analysis phase of the digital forensic process by identifying the applicable data.",17,6,2459,2467,Data science; Digital forensics,,,,,https://www.ingentaconnect.com/content/asp/jctn/2020/00000017/00000006/art00007 https://ui.adsabs.harvard.edu/abs/2020JCTN...17.2459S/abstract,http://dx.doi.org/10.1166/jctn.2020.8916,,10.1166/jctn.2020.8916,3094127989,,0,005-974-814-807-485; 037-105-622-240-257; 064-531-736-566-934; 091-619-263-117-914,2,false,, 154-517-106-328-503,An automated timeline reconstruction approach for digital forensic investigations,,2012,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Christopher Hargreaves; Jonathan Patterson,"Existing work on digital forensics timeline generation focuses on extracting times from a disk image into a timeline. Such an approach can produce several million ‘low-level’ events (e.g. a file modification or a Registry key update) for a single disk. This paper proposes a technique that can automatically reconstruct high-level events (e.g. connection of a USB stick) from this set of low-level events. The paper describes a framework that extracts low-level events to a SQLite backing store which is automatically analysed for patterns. The provenance of any high-level events is also preserved, meaning that from a high-level event it is possible to determine the low-level events that caused its inference, and from those, the raw data that caused the low-level event to be initially created can also be viewed. The paper also shows how such high-level events can be visualised using existing tools.",9,,S69,S79,Timestamp; Automation; Data mining; Set (abstract data type); Event reconstruction; Visualization; Computer science; Timeline; Event (computing); Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/di/di9.html#HargreavesP12 http://dspace.lib.cranfield.ac.uk/bitstream/1826/8103/1/DFRWS_2012_RC5c.pdf https://www.sciencedirect.com/science/article/pii/S174228761200031X https://www.sciencedirect.com/science/article/abs/pii/S174228761200031X https://dspace.lib.cranfield.ac.uk/handle/1826/8103 https://core.ac.uk/display/19542424 https://dspace.lib.cranfield.ac.uk/bitstream/1826/8103/1/DFRWS_2012_RC5c.pdf,http://dx.doi.org/10.1016/j.diin.2012.05.006,,10.1016/j.diin.2012.05.006,2009229022,,0,000-537-535-465-34X; 012-649-691-693-493; 024-503-401-931-849; 054-507-171-824-189; 060-650-561-577-338; 064-170-716-528-26X; 087-690-831-820-163; 162-201-727-094-331; 177-965-894-694-179,95,true,cc-by-nc-nd,hybrid 154-678-828-225-351,A digital forensics class for students with visual impairments,2009-05-01,2009,journal article,Journal of Computing Sciences in Colleges,19374763,,,Sean J. Geoghegan; Lis D. Geoghegan; Stephanie D. Smith,"The increased use of digital data in all aspects of society, leads to the increased use of digital data as evidence in criminal and civil proceedings. Collection of digital evidence must be performed by individuals with the skills to acquire, preserve, and present digital evidence. Because the tasks are performed almost entirely using computer software, recent advances in adaptive technology increases the viability of digital forensics as a career choice for individuals with visual impairments. This paper describes a digital forensics summer class designed to provide students with visual impairments an opportunity to experience some of the tools and techniques used in the digital forensics profession. Additionally, observations were made regarding the accessibility of the digital forensics tools when used in conjunction with adaptive software and assistive technology. The observations were used to identify potential improvements to the forensics tools to increase the accessibility to users with visual impairments.",24,5,77,84,Forensic science; Class (computer programming); Digital evidence; Computer science; Multimedia; Digital forensics,,,,,https://dl.acm.org/doi/10.5555/1516595.1516611,https://dl.acm.org/doi/10.5555/1516595.1516611,,,2472649202,,0,090-253-323-978-91X,0,false,, 154-729-674-764-578,Integrating Digital Forensics Techniques into Curatorial Tasks: A Case Study,2014-09-09,2014,journal article,International Journal of Digital Curation,17468256,Edinburgh University Library,,Sam Meister; Alexandra Chassanoff,"In this paper, we investigate how digital forensics tools can support digital curation tasks around the acquisition, processing, management and analysis of born-digital materials. Using a real world born-digital collection as our use case, we describe how BitCurator, a digital forensics open source software environment, supports fundamental curatorial activities such as secure data transfer, assurance of authenticity and integrity, and the identification and elimination of private and/or sensitive information. We also introduce a workflow diagram that articulates the processing steps for institutions processing born-digital materials. Finally, we review possibilities for further integration, development and use of digital forensic tools.",9,2,6,16,World Wide Web; Information sensitivity; Workflow; Data science; Digital curation; Open source software; Computer science; Data transmission; Identification (information); Digital forensics,,,,,https://www.mendeley.com/catalogue/32be5481-980d-35c2-b198-fca72f89ff55/ http://www.ijdc.net/index.php/ijdc/article/download/9.2.6/364 https://doaj.org/article/a444a368c1f54b6085aa5e20b1e23253 https://core.ac.uk/display/91790644 https://dx.doi.org/10.2218/ijdc.v9i2.325 http://www.ijdc.net/index.php/ijdc/article/view/9.2.6 https://core.ac.uk/download/pdf/162675816.pdf,http://dx.doi.org/10.2218/ijdc.v9i2.325,,10.2218/ijdc.v9i2.325,2058634680,,0,,2,true,cc-by,gold 154-828-872-537-636,Application of Digital Techniques in Forensic Biomechanical Analysis of Craniocerebral Injury,,2010,journal article,Chinese Journal of Forensic Sciences,16712072,,,Zheng Jian,"craniocerebral injury Identification is important and tough in forensic medicine practice.There are some deficiencies in traditional biomechanical analysis, such as obsolete methods and ambiguous data.Virtual autopsy and finite element analysis, which are based on imaging examination techniques, show many advantages including noninvasive imaging, sufficient detail and nicety mechanical data.So the introduction of these digital techniques might improve the objectivity of evidence documentation and promote the development of forensic science.",,,,,Engineering; Medical physics; Noninvasive imaging; Imaging technique; Craniocerebral injury; Documentation; Forensic engineering,,,,,https://en.cnki.com.cn/Article_en/CJFDTOTAL-SFJD201005021.htm,https://en.cnki.com.cn/Article_en/CJFDTOTAL-SFJD201005021.htm,,,2388880102,,0,,0,false,, 154-969-846-205-442,Features of digitally captured signatures vs. pen and paper signatures: Similar or completely different?,2020-11-13,2020,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,J. Heckeroth; E. Kupferschmid; Tomasz Dziedzic; Nikolaos Kalantzis; B. Geistová Čakovská; C. Fernandes; M.J. Branco; K. Axelsson Spjuth; A. Kerkhoff; P. Vaccarone; J. Zimmer; P. Schmidt,,318,,110587,,Character (computing); Signature (logic); Artificial intelligence; Stylus; Pattern recognition; Point (typography); Handwriting; Computer science; Relevance (information retrieval),Digitally captured signatures; Forensic handwriting examination; Pen and paper signatures; Signature pads; Technical artefacts,,,Internal Security Fund - Police,http://www.ncbi.nlm.nih.gov/pubmed/33248328 https://pubmed.ncbi.nlm.nih.gov/33248328/ https://www.sciencedirect.com/science/article/abs/pii/S0379073820304497 https://www.ncbi.nlm.nih.gov/pubmed/33248328,http://dx.doi.org/10.1016/j.forsciint.2020.110587,33248328,10.1016/j.forsciint.2020.110587,3104223594,,0,004-672-920-527-014; 007-873-110-816-527; 018-960-538-999-613; 022-035-953-658-767; 022-810-587-732-756; 026-375-393-797-158; 040-561-742-066-019; 044-127-760-412-61X; 045-340-926-105-046; 056-040-549-476-902; 064-327-070-430-812; 066-099-667-247-931; 075-274-241-896-039; 086-263-494-065-386; 092-350-787-278-548; 093-114-798-472-858; 094-445-319-298-665; 144-581-932-469-416; 148-649-177-562-492; 150-325-162-873-23X; 171-014-350-310-26X,4,false,, 155-250-068-040-504,Evaluation and Use the Forensic Financial and Economic Expertise's Results of Operations with Digital Assets,2022-05-09,2022,journal article,Courier of Kutafin Moscow State Law University (MSAL)),27826163; 23115998,Kutafin Moscow State Law University,,S. M. Kolotov,"The article considers the problem of assessment and use of the results of forensic financial and economic examination of transactions with digital assets, including those created using blockchain technology. The problems of assessing the competence of the forensic expert, as well as the peculiarities of assessing the expert opinion of the forensic financial and economic examination of transactions with digital assets created using blockchain technology were determined. The issue of suitability of objects used by the forensic expert in the course of these examinations is considered.",,2,143,149,Forensic accounting; Competence (human resources); Expert opinion; Forensic science; Digital forensics; Forensic examination; Blockchain; Computer science; Computer security; Finance; Business; Risk analysis (engineering),,,,,,http://dx.doi.org/10.17803/2311-5998.2022.90.2.143-149,,10.17803/2311-5998.2022.90.2.143-149,,,0,,0,true,,hybrid 155-327-699-210-875,Elements of a forensic intelligence model,2014-07-18,2014,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Alastair Ross,"Intelligence began as a military tool and has been in practice for centuries. Relatively speaking, forensic intelligence is in its infancy as the focus of forensic science has traditionally been the courts and the resolution of crime. The focus for forensic intelligence is crime prevention, crime disruption and a reduced fear of crime and there is an emphasis on quick results. The usual chronic backlogs that haunt forensic science prevent quick results and so the default position is courts and crime resolution. However, in a number of jurisdictions in Australia, the introduction of at-scene or on-submission triaging and the digital capture, transmission and comparison of fingerprints is leading to a marked reduction in turnaround times for forensic science results; particularly those that are effective sources of intelligence. Aspects of forensic science service delivery such as organisational structure and culture, IT capability, the relationship between police and scientists and interim reporting need t...",47,1,8,15,Forensic science; Psychology; Organizational structure; Crime prevention; Interim; Fear of crime; Forensic intelligence; Service delivery framework; Criminology,,,,,https://www.tandfonline.com/doi/full/10.1080/00450618.2014.916753,http://dx.doi.org/10.1080/00450618.2014.916753,,10.1080/00450618.2014.916753,1965203120,,0,,25,false,, 155-874-936-366-797,Analysis of Time Records on Digital forensics,2015-04-01,2015,journal article,Indian Journal of Science and Technology,09745645; 09746846,Indian Society for Education and Environment,India,Sungjin Lee; Sunghyuck Hong,"Time analysis is important for digital forensic area, and Windows 7/8 are common to be used. However, there is not much research on time analysis for Windows 7 and 8. Time analysis is a critical proof for accusing criminal. There are various time zones, and time records on Windows operating system are not clear to understand which means RTC time or local time. Therefore, time analysis on Windows operating system must be firmed and documented for investigating forensic crime. We contribute to analysis time records whenever files are generated or modified by users, so we expect that our research will be able to make ambiguous time records clear for investigating digital forensics.",8,S7,365,372,Computer security; Computer science; Component (UML); Microsoft Windows; Digital forensics,,,,,https://www.indjst.org/index.php/indjst/article/view/70420/55111 https://indjst.org/articles/analysis-of-time-records-on-digital-forensics,http://dx.doi.org/10.17485/ijst/2015/v8is7/70420,,10.17485/ijst/2015/v8is7/70420,1833896173,,0,007-790-059-029-953; 013-331-920-213-649; 015-660-699-824-554; 040-533-091-712-76X; 046-505-599-865-150; 053-376-195-646-045; 073-353-835-723-47X; 085-214-277-668-01X; 125-473-815-302-935; 144-838-089-175-246; 167-592-705-831-583; 172-966-955-729-869; 185-583-187-622-076,2,true,,gold 156-753-375-839-827,Review of: Forensic Mental Health Evaluations in the Digital Age: A Practitioner’s Guide to Using Internet‐Based Data,2020-07-21,2020,journal article,Journal of Forensic Sciences,00221198; 15564029,Wiley,United States,Scott A. Bresler,,65,5,1799,1799,Mental health; Forensic science; Psychology; Internet based; Medical education,,,,,https://onlinelibrary.wiley.com/doi/10.1111/1556-4029.14509,http://dx.doi.org/10.1111/1556-4029.14509,,10.1111/1556-4029.14509,3043985155,,0,,1,false,, 158-179-001-553-217,The use of magnetic susceptibility as a forensic search tool.,2014-11-11,2014,journal article,Forensic science international,18726283; 03790738,Elsevier Ireland Ltd,Netherlands,Jamie K. Pringle; Matteo Giubertoni; Nigel J. Cassidy; Kristopher D. Wisniewski; J.D. Hansen; Neil Linford; Rebecca M. Daniels,"There are various techniques available for forensic search teams to employ to successfully detect a buried object. Near-surface geophysical search methods have been dominated by ground penetrating radar but recently other techniques, such as electrical resistivity, have become more common. This paper discusses magnetic susceptibility as a simple surface search tool illustrated by various research studies. These suggest magnetic susceptibility to be a relatively low cost, quick and effective tool, compared to other geophysical methods, to determine disturbed ground above buried objects and burnt surface remains in a variety of soil types. Further research should collect datasets over objects of known burial ages for comparison purposes and used in forensic search cases to validate the technique.",246,,31,42,Data mining; Archaeology; Magnetic susceptibility; Forensic geophysics; Research studies; Computer science; Ground-penetrating radar,Forensic geophysics; Forensic science; Magnetic susceptibility; Search,,,,https://research.birmingham.ac.uk/portal/en/publications/the-use-of-magnetic-susceptibility-as-a-forensic-search-tool(f7718127-d468-4080-9eb8-f2ee06a50c5c).html https://www.ncbi.nlm.nih.gov/pubmed/25460105 https://www.sciencedirect.com/science/article/pii/S0379073814004666 http://www.sciencedirect.com/science/article/pii/S0379073814004666 https://core.ac.uk/download/43759122.pdf,http://dx.doi.org/10.1016/j.forsciint.2014.10.046,25460105,10.1016/j.forsciint.2014.10.046,1980316416,,0,000-422-643-415-761; 001-188-259-509-476; 006-440-151-778-918; 014-259-743-471-120; 014-344-145-235-140; 014-622-835-623-244; 015-752-825-631-744; 016-225-015-230-107; 016-521-532-109-07X; 022-238-389-280-58X; 022-773-258-001-418; 023-777-344-613-386; 024-918-154-473-098; 028-104-501-335-486; 028-205-528-233-343; 029-465-542-853-335; 032-250-039-083-484; 034-074-033-466-807; 036-479-078-599-759; 037-047-287-363-432; 044-009-349-352-189; 044-982-455-699-201; 047-714-037-395-895; 048-254-765-810-067; 052-741-543-275-460; 052-774-794-831-40X; 058-218-872-596-371; 059-719-266-572-849; 062-543-632-421-402; 067-882-624-748-50X; 069-136-157-078-890; 071-760-774-554-494; 072-154-679-222-332; 077-012-808-308-721; 077-940-536-854-244; 078-641-585-834-844; 080-409-342-398-158; 081-831-895-556-590; 085-699-138-274-035; 088-475-666-056-708; 089-050-910-781-745; 089-181-628-380-331; 094-477-065-314-261; 095-092-945-564-858; 096-927-679-630-996; 101-646-278-703-494; 104-379-057-063-150; 106-409-425-482-437; 106-619-341-791-430; 108-659-265-850-409; 109-238-249-157-146; 121-252-355-738-61X; 121-733-766-706-978; 132-982-288-075-986; 136-414-131-200-849; 140-080-125-024-807; 141-192-817-947-20X; 142-029-541-235-901; 144-757-406-946-370; 146-500-211-477-200; 150-214-683-035-037; 160-473-288-826-727; 161-319-884-786-259; 162-720-643-751-597; 162-906-352-842-814; 169-285-065-757-76X; 171-955-271-378-164; 174-563-155-770-560; 184-133-846-404-204,18,true,,green 158-226-982-585-038,Innovative Techniques of Digital Crime Investigation,2016-12-01,2016,journal article,Journal of Engineering Education Transformations,09715843,,,Shrinivas D. Desai; Prashant Narayankar,"Computer forensics is a new and fast growing form of investigative technique in which forensic specialist use modern forensic software tools, to solve digital crime cases. Choosing appropriate forensic tool for solving real-time digital crime cases is most expected graduate attribute, for those who have opted ""Computer forensic"" as an elective course. In this paper we present pedagogy for developing skill of choosing most appropriate software tool for analyzing and investigating digital crime cases. Assignment activities are designed to develop competencies such as i) Ability to identify, select and apply forensic tool to solve image, audio and video doctored cases. ii) Ability to evaluate the suitability and limitations of the tool used to solve problem. To solve image forensic cases, a tool having feature of error level analysis and meta data analysis is found to be more appropriate, while for solving audio doctored cases, tool having feature of frequency response analysis as well as difference calculator is found to be most appropriate. In case of video doctored crimes, tools having feature of noise analysis, level sweep, clone detection, and magnification is found to be most appropriate. Assessment of outcome is carried out by recording attainment of Graduate Attribute (GA), Competency (CA) and Performance Indicators (PI). Skill of identifying, choosing and applying appropriate forensic tool to solve digital crime cases is observed among student.",30,,,,Machine learning; Performance indicator; Artificial intelligence; Calculator; Software; Digital evidence; Computer security; Computer science; Computer forensics; Feature (computer vision); Metadata; Noise (video),,,,,http://ischolar.info/index.php/JEETRIT/article/view/139929 http://www.journaleet.org/index.php/jeet/article/download/111605/78225,http://ischolar.info/index.php/JEETRIT/article/view/139929,,,2730592809,,0,,0,false,, 159-094-605-033-945,Mobile Phone Forensics Tool Testing: A Database Driven Approach.,,2007,journal article,International Journal of Digital Evidence,,,,Ibrahim Baggili; Richard Mislan; Marcus K. Rogers,"The Daubert process used in the admissibility of evidence contains major guidelines applied in assessing forensic procedures, two of which are testing and error rates. The Digital Forensic Science (DFS) community is growing and the error rates for the forensic tools need to be continuously re-evaluated as the technology changes. This becomes more difficult in the case of mobile phone forensics, because they are proprietary. This paper discusses a database driven approach that could be used to store data about the mobile phone evidence acquisition testing process. This data can then be used to calculate tool error rates, which can be published and used to validate or invalidate the mobile phone acquisition tools.",6,,,,GSM services; Mobile station; Mobile phone; Computer science; Process (engineering); Network forensics; Mobile technology; Mobile device forensics; Database; Digital forensics,,,,,https://www.utica.edu/academic/institutes/ecii/publications/articles/1C33DF76-D8D3-EFF5-47AE3681FD948D68.pdf https://digitalcommons.newhaven.edu/electricalcomputerengineering-facpubs/27/ https://dblp.uni-trier.de/db/journals/ijde/ijde6.html#BaggiliMR07,https://digitalcommons.newhaven.edu/electricalcomputerengineering-facpubs/27/,,,8407447,,0,007-648-632-822-878; 109-435-258-852-67X; 179-503-171-644-756; 192-810-463-153-431,22,false,, 159-399-684-784-145,Audio enhancement and application of digital filters for speech intelligibility in forensic digital analysis expert work (Computer Forensics),2020-09-25,2020,journal article,International Journal of Emerging Trends in Engineering Research,23473983,The World Academy of Research in Science and Engineering,,,,8,9,6045,6050,Digital forensics; Computer science; Intelligibility (philosophy); Computer forensics; Digital filter; Speech recognition; Digital audio; Forensic science; Multimedia,,,,,,http://dx.doi.org/10.30534/ijeter/2020/186892020,,10.30534/ijeter/2020/186892020,,,0,,0,true,,bronze 159-477-048-665-066,Defining Event Reconstruction of Digital Crime Scenes,,2004,journal article,Journal of Forensic Sciences,00221198,ASTM International,United States,Brian D. Carrier; Eugene H. Spafford,,49,6,1,8,,,,,,,http://dx.doi.org/10.1520/jfs2004127,,10.1520/jfs2004127,,,0,,38,false,, 161-425-249-830-942,An Enhanced Digital Forensic Model for Internet of Things Forensic,2018-01-22,2018,journal article,"World Academy of Science, Engineering and Technology, International Journal of Computer and Information Engineering",,,,Tina Wu; Andrew Martin,,5,1,,,World Wide Web; Forensic science; Computer science; Internet of Things; Digital forensics,,,,,https://waset.org/abstracts/76982,https://waset.org/abstracts/76982,,,2797483384,,0,,0,false,, 161-459-094-708-744,Судебно-почерковедческое исследование по цифровым фотографическим копиям документов,2020-07-28,2020,journal article,Theory and Practice of Forensic Science,25877275; 18192785,Russian Federal Centre of Forensic Science of the Ministry of Justice (RFCFS),,М. В. Жижина,"The study is a part of the research of the Russian Federal Centre of Forensic Science of the Ministry of Justice of the Russian Federation. It is the initial stage in the development of methodological recommendations for conducting forensic handwriting examinations of images of handwritten objects in digital photocopies of documents. The author has analyzed the current procedural legislation and judicial practice on the use of digital photocopies of documents in proof, as well as the modern expert practice of handwriting studies concerning the images of handwriting realizations presented in such copies. The analysis has shown that these forensic handwriting studies are being quite actively conducted in both judicial and extrajudicial examinations; however, they acquire the procedural status of evidence in the case. Though, the object remains outside the scope of expert methodological support and a comprehensive systematic review in the theoretical aspect. The author considers this practice unacceptable. The article reviews a complex of issues related to determining the properties and attributes of images – handwriting objects presented in photocopies of documents, their qualitative characteristics, and other factors essential for conducting forensic handwriting examinations and formulating relevant conclusions.",15,2,70,80,Psychology; Justice (ethics); Legislation; Handwriting; Scope (project management); Russian federation; Object (philosophy); Christian ministry; Engineering ethics,,,,,https://www.tipse.ru/jour/article/view/600/526 https://www.tipse.ru/jour/article/viewFile/600/526 https://core.ac.uk/download/pdf/327695803.pdf,http://dx.doi.org/10.30764/1819-2785-2020-2-70-80,,10.30764/1819-2785-2020-2-70-80,3046064097,,0,004-862-460-595-194; 122-942-253-099-778,1,true,cc-by,gold 161-682-090-897-914,A Conceptual Framework to Improve Cyber Forensic Administration in Industry 5.0: Qualitative Study Approach,2022-02-03,2022,journal article,Forensic Sciences,26736756,MDPI AG,,Amr Adel,"As organizations strive to be compliant in a digitally evolving world, they need to ensure that they are forensically ready. Digital forensic readiness ensures compliance in legal, regulatory, functional, and operational structures. A literature review revealed a gap in detailed and comprehensive guidance on how such readiness ought to be accomplished. This is as a result of unfamiliar concepts and terms that revolve around digital forensic readiness. This research paper highlights and elaborates on a framework that can be achieved from research within focus groups. The insights drawn from the focus groups are used to critically assess the issues affecting practitioners in achieving complete digital forensic readiness.",2,1,111,129,Digital forensics; Conceptual framework; Focus (optics); Focus group; Engineering ethics; Knowledge management; Qualitative research; Computer science; Digital evidence; Process management; Data science; Engineering; Computer security; Business; Sociology; Social science; Physics; Marketing; Optics,,,,,,http://dx.doi.org/10.3390/forensicsci2010009,,10.3390/forensicsci2010009,,,0,002-449-146-256-491; 002-625-978-577-247; 006-435-365-660-88X; 006-912-721-410-174; 011-850-758-874-52X; 014-494-420-328-995; 014-700-420-212-76X; 015-264-924-343-905; 024-894-908-869-686; 028-249-665-354-840; 033-394-274-571-989; 055-036-284-492-537; 064-138-810-036-202; 077-598-249-628-673; 077-958-224-288-437; 096-777-977-622-731; 098-748-261-333-651; 106-108-913-089-037; 107-469-336-935-773; 111-488-239-742-003; 163-530-964-806-770; 194-646-821-795-161,1,true,cc-by,gold 161-740-710-649-894,Значение трудов Джованни Морелли для развития криминалистических идентификационных и диагностических исследований произведений изобразительного искусства,2021-11-04,2021,journal article,Theory and Practice of Forensic Science,25877275; 18192785,Russian Federal Centre of Forensic Science of the Ministry of Justice (RFCFS),,Shamil N. Khaziev,"The 19 th -century Italian art critic Giovanni Morelli contributed significantly to the theory and practice of attribution of paintings by prominent Renaissance masters. His methods, based on the profound knowledge of human anatomy and the analysis of artists’ professional skills, influenced not only the history of visual arts but also the development of forensic science, forensic medicine, the theory of psychoanalysis, and the practice of psychotherapy. The article provides the analysis of Giovanni Morelli’s scientific heritage for the identification and attribution of the works of fine art and for solving forensic tasks requiring the investigation of human skills and habits. Morelli’s methods and the capabilities of a comprehensive forensic study of artistic and cultural values with the involvement of the appropriate instrumental base and specialized knowledge in the field of art history, forensic traceology, and materials science, as well as digital technologies, can significantly increase the reliability of the results of attribution activities of museums, art scientists, experts of world auction houses and amateur collectors.",16,3,105,115,Italian Renaissance; Attribution; Sociology; Visual arts; Painting; Amateur; Forensic study; Cultural values; Specialized knowledge; Fine art,,,,,https://www.tipse.ru/jour/article/view/688 https://www.tipse.ru/jour/article/download/688/601,http://dx.doi.org/10.30764/1819-2785-2021-3-105-115,,10.30764/1819-2785-2021-3-105-115,3213420669,,0,000-721-588-518-37X; 029-641-532-463-501; 032-435-917-860-920; 033-079-170-512-343; 043-711-303-849-847; 048-733-975-016-329; 059-557-506-491-53X,0,true,cc-by,gold 161-786-953-020-998,Android forensics,,2014,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,M. Kaart; S. Laraghy,,11,3,234,248,Timestamp; Time zone; Android forensics; Android device; Computer science; Daylight saving time; Android (operating system); Clock skew; Mobile device forensics; Real-time computing,,,,,https://www.sciencedirect.com/science/article/abs/pii/S1742287614000449 https://doi.org/10.1016/j.diin.2014.05.001,http://dx.doi.org/10.1016/j.diin.2014.05.001,,10.1016/j.diin.2014.05.001,2060998013,,0,003-504-554-245-316; 007-066-403-548-609; 010-088-513-928-018; 023-767-546-806-478; 029-159-400-662-132; 030-674-871-669-121; 046-505-599-865-150; 058-631-300-195-90X; 062-185-276-692-750; 065-459-442-784-779; 066-214-056-369-914; 085-214-277-668-01X; 088-938-096-763-07X; 092-043-845-339-506; 095-409-130-263-862; 098-520-592-151-771; 160-001-504-152-793,14,false,, 162-068-661-602-611,A project to improve awareness for cyber security in smart textile applications,2020-04-01,2020,journal article,IOP Conference Series: Materials Science and Engineering,17578981; 1757899x,IOP Publishing,,Manuela Bräuning; Tobias Scheible; Martin Rieger; Holger Morgenstern; Désirée Göbel; Nele Schäfer,"The textile and clothing industry is facing structural changes and will enter into the interdisciplinary market of Smart Textiles. This market has a high market potential, but there is also plenty new challenges. That is why our project systematically investigates the integration and IT security of electronic communication systems in textile products. The main objectives are the scientific investigation of the area of IT security of smart textile products, the transfer of existing security concepts as well as the development of secur innovative prototypes. Based on the knowledge gained, guidelines for further action are deduced and courses for the textile and clothing industry will be created, ensuring an intensive multidisciplinary and cross- industry know-how transfer. This challenge is to be solved by an interdisciplinary team of scientists and companies from the fields of textile and clothing as well as information technology.",827,1,012050,,Information technology; Engineering; Textile; Multidisciplinary approach; Clothing industry; Market potential; Electronic communication; Computer security; Clothing,,,,,https://iopscience.iop.org/article/10.1088/1757-899X/827/1/012050/pdf http://ui.adsabs.harvard.edu/abs/2020MS&E..827a2050B/abstract https://iopscience.iop.org/article/10.1088/1757-899X/827/1/012050,http://dx.doi.org/10.1088/1757-899x/827/1/012050,,10.1088/1757-899x/827/1/012050,3034570569,,0,,0,true,,gold 162-226-718-103-313,Visualizing Digital Forensic Datasets: A Proof of Concept,2017-02-01,2017,journal article,Journal of forensic sciences,15564029; 00221198,Wiley-Blackwell,United States,Christopher Tassone; Ben Martini; Kim-Kwang Raymond Choo,"Digital forensic visualization is an understudied area despite its potential to achieve significant improvements in the efficiency of an investigation, criminal or civil. In this study, a three-stage forensic data storage and visualization life cycle is presented. The first stage is the decoding of data, which involves preparing both structured and unstructured data for storage. In the storage stage, data are stored within our proposed database schema designed for ensuring data integrity and speed of storage and retrieval. The final stage is the visualization of stored data in a manner that facilitates user interaction. These functionalities are implemented in a proof of concept to demonstrate the utility of the proposed life cycle. The proof of concept demonstrates the utility of the proposed approach for the storage and visualization of digital forensic data.",62,5,1197,1204,Proof of concept; World Wide Web; Computer data storage; Information retrieval; Unstructured data; Database schema; Data integrity; Visualization; Computer science; Mobile device forensics; Digital forensics,"MSAB XRY ; digital forensics; forensic science; forensic visualization; geographic map plots; mobile device forensics; treemap; word cloud",,,,https://onlinelibrary.wiley.com/doi/full/10.1111/1556-4029.13431 https://www.ncbi.nlm.nih.gov/pubmed/28144943 http://europepmc.org/abstract/MED/28144943 http://onlinelibrary.wiley.com/doi/10.1111/1556-4029.13431/full https://dialnet.unirioja.es/servlet/articulo?codigo=6108040,http://dx.doi.org/10.1111/1556-4029.13431,28144943,10.1111/1556-4029.13431,2586033114,,0,000-360-120-513-679; 005-594-976-962-141; 009-885-874-541-907; 011-051-740-313-213; 018-447-058-666-847; 024-735-069-822-749; 033-877-222-136-260; 042-767-661-429-064; 047-221-550-114-462; 056-715-378-869-201; 065-671-045-136-370; 077-537-743-482-973; 079-070-981-899-105; 084-871-301-547-140; 096-289-210-165-616; 106-885-306-836-498; 113-462-435-754-981; 123-707-719-752-131; 149-749-567-387-540; 163-330-758-807-944,18,false,, 162-831-197-622-390,"Condición .txtual, crítica .txtual y edición .txtual hispánicas",2018-12-03,2018,journal article,Revista de Humanidades Digitales,25311786,UNED - Universidad Nacional de Educacion a Distancia,,Bénédicte Vauthier,"El impacto de las nuevas tecnologias sobre el proceso de escritura no es nada nuevo. Esta revolucion digital se tradujo primero por la aparicion de nuevos formatos de textos y el desarrollo de una teoria literaria ad hoc. En el ambito angloamericano, esta revolucion llevo a los filologos y a las instituciones patrimoniales a reflexionar sobre la necesidad de desarrollar formatos de estudio, de edicion y de conservacion perenne de estos nuevos formatos de textos digitales. ?A que se debe el atraso que en estas mismas areas se observa en Europa? ?Por que se puede afirmar que la digital forensicsy la media archaeology(Kirschenbaum) no son disciplinas trasnacionales? En esta contribucion, se hace balance del impacto de la .Txtual Conditionen Europa y en el area angloamericana, y se contrasta estas conclusiones con las respuestas que tres escritores emblematicos de la ‘nueva narrativa espanola’ han dado a una encuesta sobre las ‘formas de gestionar y de conservar archivos digitales’.",2,2,77,97,,,,,,http://revistas.uned.es/index.php/RHD/article/download/22198/18514 http://revistas.uned.es/index.php/RHD/article/view/22198 https://dialnet.unirioja.es/servlet/articulo?codigo=6700082 https://core.ac.uk/download/222976460.pdf,http://dx.doi.org/10.5944/rhd.vol.2.2018.22198,,10.5944/rhd.vol.2.2018.22198,2903406945,,0,,0,true,cc-by-nc,gold 163-156-517-224-448,DNAxs/DNAStatistX: Development and validation of a software suite for the data management and probabilistic interpretation of DNA profiles.,2019-06-21,2019,journal article,Forensic science international. Genetics,18780326; 18724973,Elsevier Ireland Ltd,Netherlands,Corina C.G. Benschop; Jerry Hoogenboom; Pauline Hovers; Martin Slagter; Dennis Kruise; Raymond Parag; Kristy Steensma; Klaas Slooten; Jord H. A. Nagel; Patrick Dieltjes; Vincent van Marion; Heidi van Paassen; Jeroen de Jong; Christophe Creeten; Titia Sijen; Alexander L.J. Kneppers,,42,,81,89,Data mining; Data management; Software; Downstream (software development); Software suite; Computer science; Source code; Probabilistic logic; Expert system; Robustness (computer science),DNA expert system; DNA profile interpretation; DNAStatistX; DNAxs; EuroForMix; Likelihood ratio; Probabilistic genotyping,"Algorithms; DNA Fingerprinting; DNA, Mitochondrial/genetics; Data Management; Datasets as Topic; Genotyping Techniques; High-Throughput Nucleotide Sequencing; Humans; Likelihood Functions; Microsatellite Repeats; Software; Software Design; Statistics as Topic","DNA, Mitochondrial",European Union’s Internal Security Fund,https://research.vu.nl/en/publications/dnaxsdnastatistx-development-and-validation-of-a-software-suite-f https://pubmed.ncbi.nlm.nih.gov/31254947/ https://www.sciencedirect.com/science/article/pii/S1872497319302285 https://www.ncbi.nlm.nih.gov/pubmed/31254947 https://www.narcis.nl/publication/RecordID/oai%3Aresearch.vu.nl%3Apublications%2F9f099735-11ea-445a-980d-5e11ec8ca63a https://europepmc.org/article/MED/31254947,http://dx.doi.org/10.1016/j.fsigen.2019.06.015,31254947,10.1016/j.fsigen.2019.06.015,2950059767,,0,000-331-126-892-419; 000-367-862-743-854; 000-807-923-278-885; 007-661-641-021-761; 012-495-931-084-875; 012-752-579-118-355; 020-426-667-384-975; 021-659-108-310-965; 022-168-727-215-983; 026-695-014-915-760; 028-022-241-611-499; 030-589-929-593-97X; 038-365-817-082-559; 045-591-017-176-062; 048-309-580-761-284; 050-623-878-710-241; 051-397-991-100-318; 052-788-271-593-585; 053-747-182-052-539; 068-331-084-959-845; 081-120-201-834-138; 127-186-686-029-151,29,false,, 163-853-761-819-084,Anti-forensics,,2016,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Kevin J. Conlan; Ibrahim Baggili; Frank Breitinger,"Anti-forensic tools, techniques and methods are becoming a formidable obstacle for the digital forensic community. Thus, new research initiatives and strategies must be formulated to address this growing problem. In this work we first collect and categorize 308 anti-digital forensic tools to survey the field. We then devise an extended anti-forensic taxonomy to the one proposed by Rogers (2006) in order to create a more comprehensive taxonomy and facilitate linguistic standardization. Our work also takes into consideration anti-forensic activity which utilizes tools that were not originally designed for anti-forensic purposes, but can still be used with malicious intent. This category was labeled as Possible indications of anti-forensic activity, as certain software, scenarios, and digital artifacts could indicate anti-forensic activity on a system. We also publicly share our data sets, which includes categorical data on 308 collected anti-forensic tools, as well as 2780 unique hash values related to the installation files of 191 publicly available anti-forensic tools. As part of our analysis, the collected hash set was ran against the National Institute of Standards and Technology's 2016 National Software Reference Library, and only 423 matches were found out of the 2780 hashes. Our findings indicate a need for future endeavors in creating and maintaining exhaustive anti-forensic hash data sets.",18,,S66,S75,Digital artifact; World Wide Web; Set (abstract data type); Standardization; Data science; National Software Reference Library; Field (computer science); Computer science; Computer forensics; Digital forensics; Hash function,,,,,https://digitalcommons.newhaven.edu/cgi/viewcontent.cgi?article=1054&context=electricalcomputerengineering-facpubs https://www.sciencedirect.com/science/article/pii/S1742287616300378 https://core.ac.uk/display/82295331 https://digitalcommons.newhaven.edu/electricalcomputerengineering-facpubs/54/ https://www.sciencedirect.com/science/article/abs/pii/S1742287616300378 https://dl.acm.org/citation.cfm?id=2988605 https://core.ac.uk/download/pdf/82295331.pdf,http://dx.doi.org/10.1016/j.diin.2016.04.006,,10.1016/j.diin.2016.04.006,2508545160,,0,005-102-962-333-180; 014-403-336-708-18X; 018-483-378-650-703; 021-850-208-884-128; 026-201-331-634-716; 035-853-217-426-112; 045-294-718-031-754; 045-935-396-341-342; 049-693-826-680-544; 058-559-419-151-003; 060-051-915-220-236; 064-665-774-871-511; 067-508-826-235-446; 078-598-867-814-365; 081-032-497-600-401; 103-103-595-689-579; 135-717-892-795-412; 144-786-887-819-307; 173-147-024-044-113,43,true,cc-by-nc-nd,hybrid 163-940-179-223-192,Appointment of comprehensive forensic examinations in case of the study of digital traces in the investigation of economic crimes,,2022,journal article,Полицейская деятельность,24540692,"Aurora Group, s.r.o",,Dmitrii Olegovich Buinov,"; Due to the ongoing digitalization of the economy, the study of digital traces in the framework of forensic examinations in criminal cases in the field of economic activity is one of the most relevant topics in forensic expert science. The purpose of this study is to identify and analyze the features of the production of complex forensic economic and computer–technical expertise in the study of digital traces, to determine the limits of competence of an expert economist in the expert study of digital traces. Within the framework of the study, the author set the following tasks: to analyze the types of crimes in the field of economics and the ways of their commission for the possibility of the formation of digital traces during the implementation of these offenses, to determine the types of digital traces characteristic of crimes in the field of economic activity, to determine the appropriateness of the appointment of comprehensive examinations, to analyze an example of expert practice for the use of special economic knowledge and special knowledge in the field of forensic computer-technical expertise.The author came to the conclusion that the appointment of a comprehensive forensic computer-technical and economic expertise is unnecessary in most cases, since the simultaneous joint participation of an expert economist and an expert in the field of IT technologies in writing an opinion and formulating a general conclusion is not necessary in most cases when investigating crimes in the field of economic activity. As a rule, the participation of a specialist in the field of IT technologies is sufficient to withdraw computer information from the carrier and then provide this information to an expert economist for research. At the same time, an expert economist is able to work independently with software products and computer files, for the study of which there is enough well-known knowledge.; ",,4,20,28,Digital forensics; Field (mathematics); Forensic science; Competence (human resources); Commission; Expert opinion; Computer forensics; Set (abstract data type); Forensic examination; Expert system; Computer science; Economic crime; Data science; Engineering; Law; Computer security; Psychology; Political science; Artificial intelligence; Forensic engineering; Medicine; Social psychology; Mathematics; Intensive care medicine; Veterinary medicine; Pure mathematics; Programming language,,,,,,http://dx.doi.org/10.7256/2454-0692.2022.4.38601,,10.7256/2454-0692.2022.4.38601,,,0,,0,true,,gold 164-597-335-671-319,Managing Expectations,2008-12-09,2008,journal article,Journal of Digital Forensic Practice,15567281; 15567346,Informa UK Limited,United States,Mark Pollitt,,2,3,157,158,,,,,,http://dl.acm.org/citation.cfm?id=1480858.1480865,http://dx.doi.org/10.1080/15567280802409574,,10.1080/15567280802409574,2913161960,,0,,0,false,, 164-742-648-681-014,On the added value of forensic science and grand innovation challenges for the forensic community.,2013-10-08,2013,journal article,Science & justice : journal of the Forensic Science Society,13550306,Forensic Science Society,United Kingdom,Arian C. van Asten,"In this paper the insights and results are presented of a long term and ongoing improvement effort within the Netherlands Forensic Institute (NFI) to establish a valuable innovation programme. From the overall perspective of the role and use of forensic science in the criminal justice system, the concepts of Forensic Information Value Added (FIVA) and Forensic Information Value Efficiency (FIVE) are introduced. From these concepts the key factors determining the added value of forensic investigations are discussed; Evidential Value, Relevance, Quality, Speed and Cost. By unravelling the added value of forensic science and combining this with the future needs and scientific and technological developments, six forensic grand challenges are introduced: i) Molecular Photo-fitting; ii) chemical imaging, profiling and age estimation of finger marks; iii) Advancing Forensic Medicine; iv) Objective Forensic Evaluation; v) the Digital Forensic Service Centre and vi) Real time In-Situ Chemical Identification. Finally, models for forensic innovation are presented that could lead to major international breakthroughs on all these six themes within a five year time span. This could cause a step change in the added value of forensic science and would make forensic investigative methods even more valuable than they already are today.",54,2,170,179,Criminal justice; Engineering; Forensic science; Profiling (information science); Data science; Grand Challenges; Information value; Age estimation; Forensic engineering; Added value; Digital forensics,Delivery time reduction; Forensic Information Value Added; Forensic Information Value Efficiency; Forensic relevance; Grand challenges; Innovation,Costs and Cost Analysis; Forensic Sciences; Humans; Organizational Innovation; Professional Competence; Quality Control; Quality Improvement,,,https://www.narcis.nl/publication/RecordID/oai%3Adare.uva.nl%3Apublications%2F535e2de6-9911-48f0-b451-ca8d9ee9906f https://dare.uva.nl/record/1/429709 http://www.ncbi.nlm.nih.gov/pubmed/24630329 https://pubmed.ncbi.nlm.nih.gov/24630329/ https://core.ac.uk/display/85825774 https://www.sciencedirect.com/science/article/pii/S1355030613000889 https://europepmc.org/article/MED/24630329,http://dx.doi.org/10.1016/j.scijus.2013.09.003,24630329,10.1016/j.scijus.2013.09.003,2142330520,,0,001-051-449-240-212; 002-732-953-331-797; 005-715-450-998-72X; 008-946-274-895-306; 016-812-263-065-83X; 020-481-596-798-039; 020-867-396-119-347; 026-943-588-349-358; 036-189-930-199-369; 036-917-228-989-101; 037-041-375-222-704; 041-386-226-263-017; 044-517-921-297-223; 048-528-516-789-637; 052-196-700-042-097; 067-938-325-014-282; 078-144-022-647-386; 086-814-865-572-503; 087-323-702-228-150; 091-784-043-911-55X; 096-868-875-422-935; 105-299-327-516-938; 138-121-265-417-959; 144-139-280-049-333; 147-889-962-784-564; 149-834-969-136-521; 173-145-269-859-717; 175-300-396-264-476; 193-236-480-355-230,24,false,, 164-788-241-444-459,When is a line of inquiry 'reasonable'? - a focus on digital devices,2022-03-18,2022,journal article,Australian Journal of Forensic Sciences,00450618; 1834562x,Informa UK Limited,United Kingdom,Graeme Horsman,,,,1,12,Focus (optics); Line (geometry); Computer science; Digital forensics; Data science; Psychology,,,,,,http://dx.doi.org/10.1080/00450618.2022.2048691,,10.1080/00450618.2022.2048691,,,0,,0,false,, 165-638-803-131-183,Unboxing the digital forensic investigation process.,2022-01-20,2022,journal article,Science & justice : journal of the Forensic Science Society,18764452; 13550306,Forensic Science Society,United Kingdom,Graeme Horsman; Nina Sunde,"As digital forensics continues to play an important role in criminal investigations, its investigative work must be underpinned with well-defined and robust methodologies. Over the last 20 years, a substantial body of research has been produced to define and codify the digital forensic investigation process and the stages/sub-processes involved. Whilst current digital forensic investigation process models provide a solid foundation, it is argued that existing attempts often only focus on those physical tasks, which a practitioner must carry out at any given stage of an examination, omitting to identify those core thought processes, decisions and behaviours that form part of effective investigative practices. This work presents the Digital Forensic Workflow Model (DFWM), a novel approach to the structuring and definition of the procedures and tasks involved in the digital forensic investigation process starting from the initial 'Review of Client Requirements & Planning' stage, right through to the 'Evaluation of Deployed Workflow' stage. The DFWM contributes to the digital forensic management toolbox, where it enables the identification and management of risk and supports error mitigation at each stage of the workflow. The paper demonstrates how the DFWM functions as a framework for unboxing the digital forensic investigation process based on the investigative strategy of the particular case, providing a detailed structure and depiction of the physical and investigative tasks and decisions. From a research perspective, DFWM is a descriptive starting point, and future empirical studies may expand and provide further detail to the various physical and cognitive tasks and associated risks during the DF workflow.",62,2,171,180,Workflow; Digital forensics; Computer science; Toolbox; Process (computing); Structuring; Computer forensics; Digital evidence; Identification (biology); Data science,Digital forensics process; Investigative decision-making; Risk; Task analysis,Forensic Medicine; Humans; Workflow,,,,http://dx.doi.org/10.1016/j.scijus.2022.01.002,35277231,10.1016/j.scijus.2022.01.002,,,0,001-334-079-265-518; 003-232-363-219-004; 004-934-589-759-348; 005-232-046-693-557; 005-997-056-658-776; 006-435-365-660-88X; 010-061-391-662-193; 010-963-610-208-920; 020-944-423-224-895; 021-862-840-020-92X; 022-013-057-077-326; 026-774-296-742-022; 035-233-982-194-067; 046-143-775-958-052; 049-347-540-283-189; 058-052-081-943-595; 062-168-384-023-533; 065-332-103-727-835; 074-706-219-689-754; 075-529-701-912-32X; 092-765-349-680-750; 094-142-794-127-63X; 124-114-990-459-947; 143-408-563-865-265; 149-526-118-910-836; 162-110-149-751-921; 163-376-020-626-884; 190-343-104-111-19X,1,true,cc-by-nc-nd,hybrid 166-314-098-559-795,MACHINE LEARNING FORENSICS:A NEW BRANCH OF DIGITAL FORENSICS,2017-08-30,2017,journal article,International Journal of Advanced Research in Computer Science,09765697,IJARCS International Journal of Advanced Research in Computer Science,,Parag H. Rughani; Prerak Bhatt,"The objective of this research is to understand how machine learning can be used in digital crime and its forensic importance, setting up an environment to train artificial neural networks and investigate as well as analyze them to find artefacts that can be helpful in forensic investigation.",8,8,217,222,Machine learning; Artificial intelligence; Computer science; Artificial neural network; Computer forensics; Digital forensics,,,,,http://www.ijarcs.info/index.php/Ijarcs/article/download/4613/4155 http://ijarcs.info/index.php/Ijarcs/article/view/4613,http://dx.doi.org/10.26483/ijarcs.v8i8.4613,,10.26483/ijarcs.v8i8.4613,2765947859,,0,,10,true,cc-by,hybrid 166-800-654-194-357,Contents List,,2016,journal article,Digital Investigation,17422876; 1873202x,Elsevier BV,Netherlands,,,18,,iii,iii,Computer science; World Wide Web; Computer security,,,,,https://core.ac.uk/download/pdf/82035161.pdf,http://dx.doi.org/10.1016/s1742-2876(16)30067-6,,10.1016/s1742-2876(16)30067-6,,,0,,0,true,cc-by-nc-nd,hybrid 167-876-096-099-503,Digital image recovery technology and its application in forensic science,,2003,journal article,Forensic Science and Technology,,,,Liao Xiang,"Objective To introduce the digital image processing technology to forensic application.Method Computer image processing technology including filter,geometrical algorithms were used.Results Information and characters were recovered from hidden,fragmentary,unclear and illegible image.Conclusion Digital image processing technology is of much prospect in forensic application.",,,,,Digital image processing; Filter (signal processing); Artificial intelligence; Automatic image annotation; Image analysis; Computer image; Computer vision; Computer science; Digital image,,,,,http://en.cnki.com.cn/Article_en/CJFDTOTAL-XSJS200303008.htm,http://en.cnki.com.cn/Article_en/CJFDTOTAL-XSJS200303008.htm,,,2383908369,,0,,0,false,, 168-059-072-881-871,An Approach for Estimating Forensic Data Provenance of an Object in the Cloud Environment using One Dimensional Successive Bisection Method,2016-04-15,2016,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,Victor R. Kebande; Nickson M. Karie,"The decline in traditional forensics and the emergence of cloud forensics has made it hard for digital forensic investigators to conduct digital investigations due to inadaptability of the cloud to digital forensic processes. Additionally, data that resides in the cloud is normally scattered across constantly changing data centers, hosts and virtual instances are easily destroyed as they are created. On the same note it is not easy to seize physical devices where a particular crime has occurred and locating the origin of an object in the cloud can be a challenge when we do not know where the actual data resides. Data provenance provides a solution whereby one can trace data based on the tag as it keeps changing directions in the cloud. However, if the distance between two particular tagged data is taken into account then the source and destination of an object can be located easily which can then enable digital forensic investigators to locate the physical devices. The problem that this paper is addressing is that, there is no easy way of locating data provenance in the cloud environment without estimating the distance between tagged data that moves in the cloud. Based on this, the authors have proposed a mechanism for locating the provenance of an object using successive bisection method. Similar test have been carried using different intervals in an experiment and the results are very promising. General Terms Digital Forensics, provenance, cloud.",140,1,34,39,Forensic science; Bisection method; Information retrieval; Data science; Provenance; Cloud forensics; Computer science; Object (computer science); TRACE (psycholinguistics); Cloud computing; Digital forensics,,,,,https://www.ijcaonline.org/archives/volume140/number1/24562-2016909211 https://www.ijcaonline.org/research/volume140/number1/kebande-2016-ijca-909211.pdf,http://dx.doi.org/10.5120/ijca2016909211,,10.5120/ijca2016909211,2340968873,,0,007-355-906-471-544; 011-024-396-292-56X; 012-447-467-503-151; 023-709-114-205-69X; 032-182-801-166-90X; 044-373-289-676-771; 052-152-063-024-042; 056-150-947-987-596; 070-124-235-657-650; 071-184-460-604-724; 093-335-524-097-076; 111-987-302-074-551; 136-798-153-498-59X; 174-186-817-525-708,0,true,,bronze 168-211-791-741-422,Rapid forensic imaging of large disks with sifting collectors,,2015,journal article,Digital Investigation,17422876,Elsevier BV,Netherlands,Jonathan Grier; Golden G. Richard,"We present a new approach to digital forensic evidence acquisition and disk imaging called sifting collectors that images only those regions of a disk with expected forensic value. Sifting collectors produce a sector-by-sector, bit-identical AFF v3 image of selected disk regions that can be mounted and is fully compatible with existing forensic tools and methods. In our test cases, they have achieved an acceleration of >3× while collecting >95% of the evidence, and in some cases we have observed acceleration of up to 13×. Sifting collectors challenge many conventional notions about forensic acquisition and may help tame the volume challenge by enabling examiners to rapidly acquire and easily store large disks without sacrificing the many benefits of imaging.",14,,S34,S44,Volume (computing); Test case; Artificial intelligence; Forensic imaging; Computer vision; Computer science; Simulation; Digital forensics,,,,DARPA,https://core.ac.uk/display/82217507 https://doi.org/10.1016/j.diin.2015.05.006 https://www.sciencedirect.com/science/article/pii/S1742287615000511 https://www.sciencedirect.com/science/article/abs/pii/S1742287615000511 https://dl.acm.org/doi/abs/10.1016/j.diin.2015.05.006 https://dblp.uni-trier.de/db/journals/di/di14.html#GrierR15 http://doi.org/10.1016/j.diin.2015.05.006 https://core.ac.uk/download/pdf/82217507.pdf,http://dx.doi.org/10.1016/j.diin.2015.05.006,,10.1016/j.diin.2015.05.006,1457813705,,0,002-495-833-326-831; 003-982-227-180-136; 005-102-962-333-180; 007-455-522-527-690; 016-731-888-079-073; 023-341-419-324-638; 031-909-553-637-650; 046-527-367-793-765; 054-507-171-824-189; 079-070-981-899-105; 085-214-277-668-01X; 087-950-081-760-226; 089-625-495-454-45X; 090-752-043-508-733; 093-463-263-257-356; 094-933-978-324-364; 097-567-011-227-46X; 117-239-595-156-183; 126-591-597-706-715; 128-940-875-499-986; 131-400-804-637-537; 131-516-331-360-906; 134-927-490-231-285; 142-884-607-464-932; 186-993-770-394-232,19,true,cc-by-nc-nd,hybrid 168-245-076-589-180,Contemporaneous notes for digital forensic examinations,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Graeme Horsman,,37,,301173,,Work (electrical); Data science; Process (engineering); Digital forensics; History,,,,,https://www.sciencedirect.com/science/article/pii/S2666281721000810 https://dblp.uni-trier.de/db/journals/di/di37.html#Horsman21,http://dx.doi.org/10.1016/j.fsidi.2021.301173,,10.1016/j.fsidi.2021.301173,3162273119,,0,004-026-832-392-918; 005-232-046-693-557; 007-067-502-103-925; 007-868-297-443-532; 010-061-391-662-193; 010-963-610-208-920; 031-499-165-456-98X; 038-668-970-194-854; 071-908-933-643-362; 082-589-789-111-858; 099-377-733-522-116; 102-243-142-344-71X; 111-488-239-742-003; 135-251-586-815-292; 173-034-553-635-460,1,false,, 169-019-682-180-36X,Prelim iii - Contents List,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,39,,301323,301323,Information retrieval; Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00249-3,,10.1016/s2666-2817(21)00249-3,,,0,,0,true,,bronze 169-037-688-817-615,Prelim iii - Contents List,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,43,,301468,301468,Computer science; Information retrieval,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00149-4,,10.1016/s2666-2817(22)00149-4,,,0,,0,false,, 169-416-347-273-381,Detection of Metasploit Attacks Using RAM Forensic on Proprietary Operating Systems,2020-05-22,2020,journal article,"Kinetik: Game Technology, Information System, Computer Network, Computing, Electronics, and Control",25032267; 25032259,Universitas Muhammadiyah Malang,,Danar Cahyo Prakoso; Riadi; Yudi Prayudi,"Information technology has become an essential thing in the digital era as it is today. With the support of computer networks, information technology is used as a medium for exchanging data and information. Much information is confidential. Therefore, security is also essential. Metasploit is one of the frameworks commonly used by penetration testers to audit or test the security of a computer system legally, but it does not rule out the possibility that Metasploit can also be used for crime. For this reason, it is necessary to carry out a digital forensic process to uncover these crimes. In this study, a simulation of attacks on Windows 10 will be carried out with Metasploit. Then the digital forensics process uses live forensics techniques on computer RAM, where the computer RAM contains information about the processes running on the computer. The live forensic technique is important because information on RAM will be lost if the computer is off. This research will use FTK Imager, Dumpit, and Magnet RAM Capture as the RAM acquisition tool and Volatility as the analysis tool. The results of the research have successfully shown that the live forensics technique in RAM is able to obtain digital evidence in the form of an attacker's IP, evidence of exploits/Trojans, processes running on RAM, operating system profiles used and the location of the exploits/Trojan when executed by the victim.",5,2,155,160,Operating system; Information technology; Exploit; Trojan; Digital forensic process; Digital evidence; Computer science; Confidentiality; Digital forensics; Process (computing),,,,,https://kinetik.umm.ac.id/index.php/kinetik/article/view/1037 https://kinetik.umm.ac.id/index.php/kinetik/article/download/1037/pdf https://core.ac.uk/download/pdf/326780305.pdf,http://dx.doi.org/10.22219/kinetik.v5i2.1037,,10.22219/kinetik.v5i2.1037,3027882824,,0,007-204-348-441-229; 008-441-081-714-181; 008-656-244-710-010; 017-662-176-550-891; 033-624-790-871-700; 036-409-985-618-198; 039-398-086-365-500; 043-703-546-622-938; 049-150-093-915-025; 055-473-899-043-485; 058-884-035-549-345; 101-819-655-568-965; 120-177-024-117-719; 121-266-887-418-366; 123-693-711-254-942; 131-861-074-437-518; 150-042-119-479-43X,0,true,cc-by-nc-sa,gold 170-178-683-706-89X,Digital Forensics- A Technological Revolution in Forensic Sciences,,2011,journal article,Journal of Indian Academy of Forensic Medicine,09710973,,,Pankaj Gupta; Jaspal Singh; Anterpreet Kaur Arora; Shashi Mahajan,"Computer Forensics World is a growing community of professionals involved in the digital forensics industry. It is an open resource, free for all to access and to use. Digital investigations and crime regularly cross international and language borders today. Open database connectivity technology is now providing access to a wide range of database technologies, such as neural networks and pattern recognition databases, which are being used to analyze shoe prints and tool marks. These new computer-aided analysis tools can link and chart case information, allowing the investigator to question the data and pose scenarios as well as suggest and follow possible investigative paths. As a result, connections that often took weeks or months to come to light are revealed in a fraction of the time. Forensics is just beginning to get looked at, but the problems are cost and government is slow to adopt new technology. In this paper we discussed about the kingdom of Digital Forensics and Computer Forensic World. The study consists of Computer Forensic World, Digital Forensics (MEK, AFF, and Keyword Search etc.), and the Future Forensics Labs.",33,2,166,170,Open Database Connectivity; Engineering; Government; Pattern recognition (psychology); Data science; Technological revolution; Tool marks; Social science; Resource (project management); Computer forensics; Digital forensics,,,,,http://www.indianjournals.com/ijor.aspx?target=ijor:jiafm&volume=33&issue=2&article=018,http://www.indianjournals.com/ijor.aspx?target=ijor:jiafm&volume=33&issue=2&article=018,,,2266720764,,0,,2,false,, 170-961-216-449-905,10-13-DFRWS-Baltimore-2023 (2),,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,42,,301422,301422,Environmental science; Gerontology; Medicine,,,,,,http://dx.doi.org/10.1016/s2666-2817(22)00103-2,,10.1016/s2666-2817(22)00103-2,,,0,,0,false,, 171-177-825-236-988,Computer forensics on Android devices,2016-06-01,2016,journal article,Revista Ingenio,2389864x; 2011642x,Universidad Francisco de Paula Santander,,Dewar Rico Bautista; Johan Smith Rueda Rueda," ; En este artículo se estudian los principales conceptos de la informática forense. Qué es la informática forense, cuáles son sus objetivos y sus principios. También se mencionan algunas técnicas anti-forenses, el manejo de la evidencia digital, los modelos forenses y la legislación colombiana relacionada con la evidencia digital. Se hace énfasis en las buenas prácticas para la realización de un análisis forense.  ; ",9,1,21,34,Operating system; Computer science; Computer forensics; Android (operating system),,,,,https://doaj.org/article/31e4dee6b9fa403fa7a45bd05de4562c https://core.ac.uk/download/322563884.pdf,http://dx.doi.org/10.22463/2011642x.2063,,10.22463/2011642x.2063,3195445183,,0,013-331-920-213-649; 019-698-064-288-240; 030-674-871-669-121; 042-653-566-399-199; 061-733-902-008-548; 087-868-527-983-406; 109-279-350-025-229; 118-722-872-870-470; 179-503-171-644-756; 186-737-030-900-301,0,true,cc-by-nc,gold 171-814-664-802-879,Forensic spectral imagin,,2004,journal article,Forensic Science and Technology,,,,Gwang Gui-qiang,"Hyperspectral imaging combines spectroscopy and digital imaging technology.By the use of an imaging spectrometer,hyperspectral imaging captures a serial of images of reflective light or fluorescent light from examined object, and forms a data set of spectral image which contains intensity and spectral information of the object.This imaging method can be used to reveal pattern details and to identify material component in forensic science.",,,,,Digital imaging; Artificial intelligence; Imaging spectroscopy; Hyperspectral imaging; Imaging spectrometer; Computer vision; Spectral imaging; Computer science; Data set; Chemical imaging; Full spectral imaging,,,,,https://en.cnki.com.cn/Article_en/CJFDTOTAL-XSJS200401001.htm,https://en.cnki.com.cn/Article_en/CJFDTOTAL-XSJS200401001.htm,,,2348087335,,0,,0,false,, 171-959-362-512-494,Development of National Digital Evidence Metadata,2019-09-06,2019,journal article,Jurnal Online Informatika,25279165; 25281682,Sunan Gunung Djati State Islamic University of Bandung,,Bambang Sugiantoro,"The industrial era 4.0 has caused tremendous disruption in many sectors of life. The rapid development of information and communication technology has made the global industrial world undergo a revolution. The act of cyber-crime in Indonesia that utilizes computer equipment, mobile phones are increasingly increasing. The information in a file whose contents are explained about files is called metadata. The evidence items for cyber cases are divided into two types, namely physical evidence, and digital evidence. Physical evidence and digital evidence have different characteristics, the concept will very likely cause problems when applied to digital evidence. The management of national digital evidence that is associated with continued metadata is mostly carried out by researchers. Considering the importance of national digital evidence management solutions in the cyber-crime investigation process the research focused on identifying and modeling correlations with the digital image metadata security approach. Correlation analysis reads metadata characteristics, namely document files, sounds and digital evidence correlation analysis using standard file maker parameters, size, file type and time combined with digital image metadata. nationally designed the highest level of security is needed. Security-enhancing solutions can be encrypted against digital image metadata (EXIF). Read EXIF Metadata in the original digital image based on the EXIF 2.3 Standard ID Tag, then encrypt and insert it into the last line. The description process will return EXIF decryption results in the header image. This can secure EXIF Metadata information without changing the image quality",4,1,24,27,Encryption; Information retrieval; Digital evidence; Computer science; Digital image; Header; Line (text file); Information and Communications Technology; Metadata; File format,,,,,http://join.if.uinsgd.ac.id/index.php/join/article/download/292/118 http://join.if.uinsgd.ac.id/index.php/join/article/view/292 https://core.ac.uk/download/pdf/295600543.pdf,http://dx.doi.org/10.15575/join.v4i1.292,,10.15575/join.v4i1.292,2970970599,,0,,0,true,cc-by-nc-nd,gold 173-242-189-728-551,Sample Preparation For Pesticide Analysis in A Forensic Toxicology Laboratory: A Review,2018-05-07,2018,journal article,Journal of Forensic Sciences and Digital Investigation,,Northern California Open Access Publications,,,,,,27,45,Toxicology; Forensic science; Forensic toxicology; Pesticide; Sample (material); Laboratory safety; Environmental science; Biology; Medicine; Veterinary medicine; Ecology; Chemistry; Chromatography; Nuclear medicine,,,,,,http://dx.doi.org/10.29199/fsdi.101016,,10.29199/fsdi.101016,,,0,,1,true,cc-by,hybrid 174-313-292-435-556,Observer error in assessing age-related morphology using digital photographs of the pubic symphyseal face,2022-03-30,2022,journal article,Canadian Society of Forensic Science Journal,00085030; 23321660,Informa UK Limited,United Kingdom,Salina Hisham; Khairul Anuar Zainun; Mohamad Azaini Ibrahim,,,,1,8,Pubic symphysis; Observer (physics); Face (sociological concept); Computer science; Orthodontics; Computer vision; Artificial intelligence; Computer graphics (images),,,,,,http://dx.doi.org/10.1080/00085030.2022.2053279,,10.1080/00085030.2022.2053279,,,0,001-557-599-360-509; 006-494-545-061-833; 008-752-732-173-293; 009-845-474-782-158; 017-100-267-798-61X; 023-171-611-202-631; 023-292-608-737-943; 033-462-022-644-071; 036-847-781-618-700; 037-518-113-779-735; 042-398-206-118-511; 044-567-283-633-258; 047-399-737-199-281; 051-371-548-501-568; 054-671-033-337-934; 054-886-985-097-163; 061-585-349-211-126; 083-748-852-097-852; 087-309-291-494-399; 092-280-548-958-043; 094-787-557-320-290; 101-615-257-640-867; 109-742-354-366-065; 114-856-789-464-963; 120-935-109-547-46X,0,false,, 175-273-946-966-114,Twenty Second Annual DFRWS Conference,,2022,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,,,42,,301430,,,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301430,,10.1016/j.fsidi.2022.301430,,,0,,0,false,, 175-630-039-571-779,Digital Forensic Signal Instant Messages Services in Case of Cyberbullying using Digital Forensic Research Workshop Method,2022-10-20,2022,journal article,International Journal of Computer Applications,09758887,Foundation of Computer Science,,Aji Gelar Prayogo; Imam Riadi,,184,32,21,29,,,,,,,http://dx.doi.org/10.5120/ijca2022922393,,10.5120/ijca2022922393,,,0,,0,false,, 176-304-954-831-493,Application of multiple criteria decision making in the selection of digital forensics software,,2016,journal article,Vojnotehnicki glasnik,00428469,Centre for Evaluation in Education and Science (CEON/CEES),,Dejan Stanivukovic; Dragan Randjelovic,"Nowadays there is almost no criminal offense in the investigation of which digital evidence does not play a key role. Constant increase of the capacity of media that store digital data leads to continuous increase of the time necessary to identify and copy (acquire) digital evidence. Selection of appropriate digital forensics software is gaining in importance. Selection of adequate software includes a previous comparative analysis of two or more digital forensics software tools and an optimization process. The objective of the comparative analysis of these software tools is to determine and compare each of their realistic and comparable performances. Optimization aims to determine which of digital forensics software tools has better performances. This paper shows one of possible variants of selecting digital forensics software, using the latest scientific achievements in support of decision making based on the analytic hierarchy process (AHP) method and the Expert Choice computer program.",64,4,1083,1101,Software engineering; Data mining; Key (cryptography); Computer program; Software; Digital data; Digital evidence; Computer science; Process (engineering); Digital forensics; Analytic hierarchy process,,,,,https://scindeks-clanci.ceon.rs/data/pdf/0042-8469/2016/0042-84691604083S.pdf https://scindeks.ceon.rs/Article.aspx?artid=0042-84691604083S https://cyberleninka.ru/article/n/application-of-multiple-criteria-decision-making-in-the-selection-of-digital-forensics-software,http://dx.doi.org/10.5937/vojtehg64-8938,,10.5937/vojtehg64-8938,2516568482,,0,,0,true,cc-by,gold 176-605-425-739-746,The Hierarchy of Case Priority (HiCaP):- A proposed method for case prioritisation in digital forensic laboratories,,2022,journal article,Science & Justice,13550306; 18764452,Elsevier BV,United Kingdom,Graeme Horsman,"The need for digital forensic science (DFS) services has grown due to widespread and consistent engagement with technology by members of society. Whilst digital evidence often plays an important role in many inquiries, available investigative resources have failed to keep pace with such demand for them. As a result, the use case prioritisation models for backlog/workload management are of increasing importance to ensure the effective deployment of laboratory resources. This work focuses on the concept of ​​case prioritisation in a digital forensic laboratory setting, following the submission of exhibits for examination, where this workflow is described. The challenges of case management and prioritisation in laboratories are discussed, with both ‘case acceptance’ and ‘case prioritisation’ procedures explained. Finally, the ‘Hierarchy of Case Priority’ (HiCaP) - a transparent, risk-based approach for the prioritisation of cases for examination, is proposed and described using examples.",62,5,594,601,Workflow; Hierarchy; Software deployment; Workload; Pace; Computer science; Risk analysis (engineering); Digital forensics; Work (physics); Computer security; Process management; Engineering; Business; Software engineering; Mechanical engineering; Geodesy; Database; Economics; Market economy; Geography; Operating system,,,,,,http://dx.doi.org/10.1016/j.scijus.2022.08.008,,10.1016/j.scijus.2022.08.008,,,0,000-360-120-513-679; 003-232-363-219-004; 031-655-872-268-787; 039-464-927-660-188; 040-567-901-099-238; 079-273-634-331-435; 083-937-536-208-584; 094-142-794-127-63X; 108-884-210-316-066; 126-591-597-706-715; 184-069-302-229-82X; 190-343-104-111-19X,0,true,,hybrid 176-777-857-831-803,CYBER FORENSIC TOOLS AND ITS APPLICATION IN THE INVESTIGATION OF DIGITAL CRIMES: PREVENTIVE MEASURES WITH CASE STUDIES,2022-02-01,2022,journal article,INTERNATIONAL JOURNAL OF SCIENTIFIC RESEARCH,,World Wide Journals,,Yerriswamy K; G. S. Venumadhava,"Forensics, the science of using physical evidence to crack crime, has taken on a new avatar. The cyber forensic process is also advancing in new; ways. Digital forensics is the science of identifying, extracting, analyzing, and presenting the digital evidence that has been stored in digital; devices. Various digital tools and techniques are being used to achieve this. Here, the new cyber sleuths step in, armed with cyber forensics tools.; According to Section 65 of the Indian IT Act, a person who intentionally conceals or destroys or alters or intentionally or knowingly causes another; to conceal, destroy or alter any computer source code used for a computer, computer program, computer system, or network. To primary objective; of this study is to nd the role of Cyber Forensic Tools in Cyber investigation. It is better to sue security programmers by the body corporate to; control information on sites. Strict statutory laws need to be passed by the legislatures keeping in mind the interest of citizens. Working on this; paper helped me understand the primary aim of the cyber lab in solving the cases by analyzing the evidence given to them. Using cyber forensic; tools allows us to extract the data from the targeted devices, which plays a signicant role in detecting and collecting information regarding; cybercrimes.",,,71,73,Computer forensics; Digital evidence; Digital forensics; Computer science; Cyber crime; Computer security; Process (computing); Hacker; Data science; World Wide Web; The Internet; Operating system,,,,,,http://dx.doi.org/10.36106/ijsr/9633529,,10.36106/ijsr/9633529,,,0,007-362-065-583-626; 009-671-935-335-418; 014-065-195-857-333; 015-264-924-343-905; 021-563-550-669-43X; 023-252-810-319-853; 030-269-579-295-629; 032-810-109-985-524; 040-097-713-526-921; 042-972-111-603-681; 044-688-819-027-098; 046-527-367-793-765; 047-221-550-114-462; 055-590-023-850-939; 092-733-362-703-818; 095-437-078-101-003; 097-291-912-559-74X; 114-586-389-130-502; 133-332-986-537-019; 151-978-817-476-177; 192-212-429-382-054,0,false,, 177-354-170-361-835,UML-based process model for mobile cloud forensic application framework - a preliminary study,,2020,journal article,International Journal of Electronic Security and Digital Forensics,1751911x; 17519128,Inderscience Publishers,United Kingdom,Puneet Sharma; Deepak Arora; T. Sakthivel,"The mobile cloud forensics has received a great deal of attention within the digital forensics community. Collecting potential evidence from the mobile cloud by applying forensically sound methods faces severe setback due to technological advancements. The latest forensic investigation tools and methods are inevitable to cope up with the increasing criminal activities on the mobile cloud platform. Thus, a forensically sound process is essential to develop critical methods for mobile cloud forensic investigators. This preliminary study presents a mobile cloud forensic process framework with the help of UML diagrams that primarily consists of identification, collection and preservation, examination and analysis, and evidence correlation and presentation phases. The proposed mobile cloud forensic process introduces the evidence correlation phase between the mobile and cloud. The proposed methods improve the evidence traceability in the cloud by determining the evidence related to the malicious activity of the suspected device in an efficient manner.",12,3,262,278,Unified Modeling Language; Traceability; Data science; Mobile cloud; Use case; Computer science; Process (engineering); Identification (information); Cloud computing; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/ijesdf/ijesdf12.html#SharmaAS20 https://www.inderscienceonline.com/doi/full/10.1504/IJESDF.2020.10029568 https://www.inderscienceonline.com/doi/abs/10.1504/IJESDF.2020.108296,http://dx.doi.org/10.1504/ijesdf.2020.10029568,,10.1504/ijesdf.2020.10029568,3026464122,,0,,0,false,, 177-544-338-589-33X,The Watermark Based Anti-counterfeiting Information System for Forensic Digital Imaging,,2011,journal article,Chinese Journal of Forensic Sciences,16712072,,,LU Hong-tao,"There are some disputes on digital imaging as evidence.This article proposes and establishes an anti-counterfeiting information system for forensic digital imaging based on watermarking techniques.The system,which can ensure the evidence effectiveness of digital images,consists of encrypting and anti-counterfeiting subsystem,information management subsystem and verification subsystem for encrypting information.",,,,,Digital imaging; Engineering; Information management; Encryption; Digital watermarking; Watermark; Information system; Computer security; Digital image,,,,,http://en.cnki.com.cn/Article_en/CJFDTotal-SFJD201105020.htm,http://en.cnki.com.cn/Article_en/CJFDTotal-SFJD201105020.htm,,,2354053463,,0,,0,false,, 177-886-630-508-584,Accrediting a Digital Evidence Laboratory,,2019,journal article,Forensic Science International: Synergy,2589871x,Elsevier BV,,Tracy Walraven,,1,,S7,,Engineering; Digital evidence; Medical education,,,,,https://api.elsevier.com/content/article/PII:S2589871X19301056?httpAccept=text/xml,http://dx.doi.org/10.1016/j.fsisyn.2019.06.022,,10.1016/j.fsisyn.2019.06.022,2969145815,,0,,0,true,"CC BY, CC BY-NC-ND",gold 178-861-239-354-75X,Distance Learning in Forensic Nursing: The Lived Educational Experience,2018-04-17,2018,journal article,Journal of Forensic Sciences and Digital Investigation,26377136,Northern California Open Access Publications,,,,,,18,26,Forensic nursing; Forensic science; Psychology; Nursing; Medical education; Medicine; Geography; Archaeology,,,,,,http://dx.doi.org/10.29199/2637-7136/fsdi-101015,,10.29199/2637-7136/fsdi-101015,,,0,,0,true,cc-by,gold 178-883-713-153-793,Defining Digital Forensic Examination and Analysis Tool Using Abstraction Layers.,,2003,journal article,International Journal of Digital Evidence,,,,Brian D. Carrier,"This paper uses the theory of abstraction layers to describe the purpose and goals of digital forensic analysis tools. Using abstraction layers, we identify where tools can introduce errors and provide requirements that the tools must follow. Categories of forensic analysis types are also defined based on the abstraction layers. Abstraction layers are not a new concept, but their usage in digital forensic analysis is not well documented. What does it mean to be a Digital Forensic Analysis Tool? How do we categorize the different types of analysis tools? For example, an investigator can view the files and directories of a suspect system by using either specialized forensic software or by using the operating system (OS) of an analysis system and viewing the files by mounting the drive. Both methods allow the investigator to view evidence in allocated files, but only the specialized forensic software allows him to easily view unallocated files. Additional tools are required if he is relying on the OS. Clearly both allow the investigator to find evidence and therefore should be considered forensic tools, but it is unclear how we should compare and categorize them. The high-level process of digital forensics includes the acquisition of data from a source, analysis of the data and extraction of evidence, and preservation and presentation of the evidence. Previous work has been done on the theory and requirements of data acquisition [7] and the preservation of evidence [4]. This paper addresses the tools that are used for the analysis of data and extraction of evidence. This paper examines the nature of tools in digital forensics and proposes definitions and requirements. Current digital forensic tools produce results that have been successfully used in prosecutions, but lack designs that were created with forensic science needs. They provide the investigator with access to evidence, but typically do not provide access to methods for verifying that the evidence is reliable. This is necessary when approaching digital forensics from a scientific point of view and could be a legal requirement in the future. The core concept of this paper is the basic notion of abstraction layers. Abstraction layers exist in all forms of digital data and therefore in the tools used to analyze them. The idea of using tools for layers of abstraction is not new, but a discussion of the definitions, properties, and error types of abstraction layers when used with digital",1,,,,Software engineering; World Wide Web; Abstraction layer; Data acquisition; Data analysis; Software; Digital data; Computer science; Process (engineering); Abstraction (linguistics); Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/ijde/ijde1.html#Carrier03 https://www.utica.edu/academic/institutes/ecii/publications/articles/A04C3F91-AFBB-FC13-4A2E0F13203BA980.pdf,https://dblp.uni-trier.de/db/journals/ijde/ijde1.html#Carrier03,,,2116666322,,0,018-182-926-340-45X; 041-030-338-346-880; 072-245-054-212-971; 188-762-236-378-448,168,false,, 179-322-950-074-016,Prelim i - Editorial Board,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,36,,301143,301143,Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00041-x,,10.1016/s2666-2817(21)00041-x,,,0,,0,false,, 179-650-385-564-815,FORENSIC EVIDENCE: SCIENCE AND THE CRIMINAL LAW,2020-07-09,2020,journal article,"Facta Universitatis, Series: Law and Politics",24061786; 14505517,University of Nis,,Filip Mirić,"The Book Forensic Evidence: Science and the Criminal Law is intended to serve as an introductionand guide to the appreciation and understanding of the significant historical, contemporary, and future relationship between the world of the forensic sciences and the criminal justice system. This book is not intended to be a close study of forensic science, nor was it ever conceived as becoming one. It is devoted to a study of the judicial response to uses of forensic science in all phases of criminal procedure. The audience to which this study is directed are those intimately or potentially involved in that relationship: police, forensic scientists, prosecutors, defense lawyers, and professors and students- future lawyers.",18,1,053,054,Criminal justice; Forensic science; Criminal law; Philology; Feminism; Eastern european; Criminal procedure; Criminology,,,,,http://casopisi.junis.ni.ac.rs/index.php/FULawPol/article/download/6462/3641 https://www.ceeol.com/search/article-detail?id=884968 http://casopisi.junis.ni.ac.rs/index.php/FULawPol/article/view/6462/3641 https://core.ac.uk/download/pdf/327104965.pdf,http://dx.doi.org/10.22190/fulp2001053m,,10.22190/fulp2001053m,3048266913,,0,,0,true,,gold 179-683-412-689-404,Second Annual DFRWS APAC Conference,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,43,,301462,301462,Political science,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301462,,10.1016/j.fsidi.2022.301462,,,0,,0,false,, 179-768-158-884-687,BeatClass: A Sustainable ECG Classification System in IoT-Based eHealth,2022-05-15,2022,journal article,IEEE Internet of Things Journal,23274662; 23722541,Institute of Electrical and Electronics Engineers (IEEE),United States,Le Sun; Yilin Wang; Zhiguo Qu; Neal N. Xiong,,9,10,7178,7195,,,,,National Natural Science Foundation of China; Priority Academic Program Development,,http://dx.doi.org/10.1109/jiot.2021.3108792,,10.1109/jiot.2021.3108792,,,0,000-099-369-206-782; 000-300-029-616-517; 003-036-167-472-899; 004-328-157-921-129; 005-834-508-447-755; 005-969-590-439-807; 006-720-431-080-617; 007-938-231-874-71X; 008-548-466-272-724; 008-845-774-303-685; 013-830-938-681-770; 014-430-146-200-135; 015-871-394-747-842; 017-041-772-309-963; 018-152-293-983-502; 019-626-708-661-862; 021-116-237-608-310; 021-270-808-127-891; 022-797-858-011-915; 023-979-812-700-057; 024-237-994-854-746; 025-716-961-802-207; 026-193-038-313-22X; 029-425-452-049-996; 031-824-904-893-988; 034-297-493-798-528; 035-797-753-090-129; 036-230-871-730-894; 037-749-870-845-291; 039-032-160-233-455; 043-252-925-112-751; 048-075-250-484-879; 048-589-423-925-74X; 051-123-575-499-851; 051-691-464-234-311; 055-436-967-663-668; 057-179-637-180-282; 063-496-550-304-162; 070-222-741-649-089; 082-932-537-054-872; 084-305-564-542-847; 086-396-555-703-986; 088-955-369-233-66X; 098-051-089-135-038; 099-300-786-330-833; 117-500-513-151-386; 118-236-461-472-212; 132-856-699-721-658; 136-104-577-044-031; 144-189-203-158-371; 162-919-031-232-954; 164-900-611-021-857; 186-755-774-542-817,17,false,, 180-619-899-068-026,COMPUTED TOMOGRAPHY AND COMPUTED RADIOGRAPHY OF LATE BRONZE AGE CREMATION URNS FROM DENMARK: AN INTERDISCIPLINARY ATTEMPT TO DEVELOP METHODS APPLIED IN BIOARCHAEOLOGICAL CREMATION RESEARCH*,2011-08-28,2011,journal article,Archaeometry,0003813x; 14754754,Wiley,United Kingdom,Lise Harvig; Niels Lynnerup; J. Amsgaard Ebsen,"��������� � �� ���������� To improve the methods used to study prehistoric cremation rituals, cremation urns from the Danish Late Bronze Age were examined using computed tomography and computed radiography (digital X-ray). During micro-excavation, the digital images were used as a registration tool. Our results suggest that osteological ageing and sexing are more accurate when combining CT images with excavated remains. Digital volume rendering further enables a compromised estimation of the original cremation weight. Micro-excavation is clearly a primary cause of bone fragmentation. Cremated remains affected by lower cremation intensity show markedly poorer preservation and recovery than do white calcined fragments. Thus postexcavation estimations of cremation intensity are systematically biased.",54,2,369,387,Bronze Age; Computed radiography; Archaeology; Prehistory; Computed tomography; History,,,,,https://static-curis.ku.dk/portal/files/37457171/Harvig_archaeometry_2012.pdf http://curis.ku.dk/ws/files/37457171/Harvig_archaeometry_2012.pdf http://retsmedicin.ku.dk/english/research/forensic_pathology/staff/?pure=files%2F37457171%2FHarvig_archaeometry_2012.pdf https://onlinelibrary.wiley.com/doi/full/10.1111/j.1475-4754.2011.00629.x https://core.ac.uk/download/269211598.pdf,http://dx.doi.org/10.1111/j.1475-4754.2011.00629.x,,10.1111/j.1475-4754.2011.00629.x,2154638793,,0,003-762-242-242-994; 004-731-420-616-018; 009-743-519-353-123; 010-207-795-450-268; 010-681-601-345-047; 012-606-933-614-373; 018-282-814-364-332; 019-007-485-814-653; 020-804-370-887-497; 034-023-785-659-310; 042-999-823-500-189; 043-269-018-407-75X; 052-917-483-909-949; 057-779-764-980-361; 057-920-136-457-537; 058-354-409-719-014; 068-064-977-117-131; 070-801-761-808-127; 073-386-998-433-371; 086-124-296-778-342; 091-713-474-917-090; 095-462-511-338-955; 106-516-610-291-062; 112-643-270-882-753; 114-131-068-694-71X; 115-020-930-907-281; 115-584-487-927-993; 119-479-016-801-56X; 120-097-046-502-167; 121-426-793-026-88X; 128-245-737-254-441; 128-428-399-632-332; 131-113-372-423-997; 131-423-877-503-312; 131-461-026-958-295; 135-665-381-242-152; 138-835-446-734-026; 139-518-667-107-402; 141-507-627-740-80X; 161-560-911-523-309; 166-368-854-255-695; 173-897-052-615-887; 176-809-740-403-147; 195-390-520-650-516,38,true,,green 181-046-082-158-36X,Digital Forensics Triage Classification Model using Hybrid Learning Approaches,2022-05-01,2022,journal article,International Journal of Innovative Research in Computer Science & Technology,23475552,Innovative Research Publication,,Mohmed Afridhi L; Palanivel K,"The Internet and the accessibility of gadgets with connectivity have resulted in the global spread of cyber threats and cybercrime, posing significant hurdles for digital forensics. Consequently, the volume of information that may need to be investigated is growing, necessitating the development of new forensic technologies and methods. Those now in use are, in fact, old-fashioned, as they are more focused on complete device extraction for case-relevant device identification. A practical approach, a Digital Forensics Triage, tries to quickly collect facts and give essential insight into this circumstance, which could be described as data-rich but information-poor. In time- sensitive scenarios, digital forensics triage approaches can prioritize some electronic gadgets over others based on their significance to the criminal case. The Digital Forensic Laboratories (DFS) make it easier to identify essential gadgets in criminal proceedings when time, significant accumulations, and the accused's confidentiality are critical considerations. Consequently, digital forensics and machine learning techniques allow for the rapid classification of appropriate gadgets despite dipping the quantity of information that has to be adequately studied. This study presents a digital forensic model that may be utilized to build a robotic digital device categorization tool employed in real- world criminal investigations.",,,29,39,Digital forensics; Computer science; Cybercrime; Computer forensics; Triage; Identification (biology); Confidentiality; Computer security; The Internet; Categorization; Digital evidence; Data science; Criminal investigation; World Wide Web,,,,,,http://dx.doi.org/10.55524/ijircst.2022.10.3.7,,10.55524/ijircst.2022.10.3.7,,,0,,0,true,,gold 181-079-576-381-773,Prelim i - Editorial Board,,2020,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,34,,301066,301066,Editorial board; Library science; Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(20)30363-2,,10.1016/s2666-2817(20)30363-2,,,0,,0,true,,bronze 181-124-870-191-436,A live digital forensics approach for quantum mechanical computers,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Dayton Closser; Elias Bou-Harb,"In this paper, an exploration of reversing quantum computer gates is addressed as an avenue for collecting forensic evidence from a quantum computer. To date, little forensic research exists on quantum computing systems in general, and practically no experiments exist in the live recovery context. This work discusses the means for live forensics of quantum computers via both a look at current research on the matter, and through a demonstration of live data collection. The results are a combination of analysis conducted on real quantum systems to produce a quantum forensic methodology. Furthermore, this work will highlight the viability of live forensics, and largely refute Overill's assertion that it is not possible to perform live forensics on quantum systems. We believe that this work represents a very strong step towards revolutionizing the entire field of quantum forensics.",40,,301341,301341,Computer science; Assertion; Quantum computer; Quantum; Digital forensics; Computer forensics; Context (archaeology); Field (mathematics); Computer security,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301341,,10.1016/j.fsidi.2022.301341,,,0,150-168-831-836-262,0,true,,hybrid 181-649-072-258-458,Defining principles for preserving privacy in digital forensic examinations,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Graeme Horsman,"As digital devices play an increasing role in criminal investigations, where in some cases the data they contain may describe events where few other sources of information exist, there is an increasing concern regarding potential privacy invasion caused by their examination. ICO, 2020, the Information Commissioner's Office called for the greater evaluation and scrutiny of data extraction and examination processes deployed by investigating authorities with regard to smartphone data. In doing so, a light was shone on the wider issues and balancing act of maintaining data privacy whilst still allowing for an effective investigation to be conducted by law enforcement. This article proposes a set of ten Privacy-Preserving Data Processing Principles (PPDPP) for consideration by those conducting the digital forensic extraction and examination of data from a digital device. These principles define conduct that is indicative of privacy-preserving, where it is encouraged that those undertaking device investigations demonstrate evidence of adherence to the spirit of them. • The challenges of maintaining privacy whilst conducting a digital investigation are discussed. • The balancing act of carrying out effective investigations Vs. limiting intrusion is explored. • 10 Privacy-Preserving Data Processing Principles (PPDPP) for digital forensic examinations are offered.",40,,301350,301350,Scrutiny; Limiting; Computer science; Internet privacy; Law enforcement; Computer security; Digital forensics; Intrusion; Information privacy; Data extraction; Digital evidence; Privacy policy; Digital data; Enforcement; Law; Political science; Engineering; Data transmission; Mechanical engineering; Computer network; Geochemistry; MEDLINE; Geology,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301350,,10.1016/j.fsidi.2022.301350,,,0,006-138-917-123-177; 010-963-610-208-920; 016-526-859-340-786; 032-451-540-235-796; 045-581-544-307-619; 053-514-971-073-351; 061-269-967-405-492; 062-137-637-964-947; 102-243-142-344-71X; 114-090-829-194-843,1,true,,bronze 181-950-026-482-857,Forensic Odontology – A review and update,,2010,journal article,Medico-Legal Update,0971720x,,,Harini Chitta; B. V. Thimma Reddy; Rajasekhar Nutalapati; K. Vinay Kumar Reddy; Nallan Chaitanya,"The science dealing with establishing identity of a person by teeth is popularly known as Forensic Odontology or Forensic Dentistry. It is the specialty with the goal of investigating psychological, physical, chemical and biological phenomena that can reach human beings, comprehending aspects of human identification; criminal, civil, labor and administrative forensic investigation; forensic tanatology; legal documents; forensic traumatology; image examinations; saliva analysis; and other aspects involving a multidisciplinary team. Sustained education and demand over the past half-century has rendered forensic odontology a valuable component of forensic investigations in many countries. Forensic odontology has made great strides in the last decade, ranging from two-to three-dimensional digital analysis of bite marks to extracting DNA from teeth for the purpose of identification. Forensic odontologists are routinely consulted for assistance in legal and criminal problems. This is an attempt to give an update and a comprehensive review of the science.",10,1,31,35,Identification (biology); Engineering; Forensic science; Forensic dentistry; Saliva analysis; Digital analysis; Forensic odontology; Multidisciplinary team; Veterinary medicine; Questioned document examination; Engineering ethics,,,,,http://www.indianjournals.com/ijor.aspx?target=ijor:mlu&volume=10&issue=1&article=012,http://www.indianjournals.com/ijor.aspx?target=ijor:mlu&volume=10&issue=1&article=012,,,1501491632,,0,,0,false,, 182-757-173-672-636,Smart Digital Forensic Readiness Model for Shadow IoT Devices,2022-01-12,2022,journal article,Applied Sciences,20763417,MDPI AG,,Funmilola Ikeolu Fagbola; Hein S. Venter,"Internet of Things (IoT) is the network of physical objects for communication and data sharing. However, these devices can become shadow IoT devices when they connect to an existing network without the knowledge of the organization’s Information Technology team. More often than not, when shadow devices connect to a network, their inherent vulnerabilities are easily exploited by an adversary and all traces are removed after the attack or criminal activity. Hence, shadow connections pose a challenge for both security and forensic investigations. In this respect, a forensic readiness model for shadow device-inclusive networks is sorely needed for the purposes of forensic evidence gathering and preparedness, should a security or privacy breach occur. However, the hidden nature of shadow IoT devices does not facilitate the effective adoption of the most conventional digital and IoT forensic methods for capturing and preserving potential forensic evidence that might emanate from shadow devices in a network. Therefore, this paper aims to develop a conceptual model for smart digital forensic readiness of organizations with shadow IoT devices. This model will serve as a prototype for IoT device identification, IoT device monitoring, as well as digital potential evidence capturing and preservation for forensic readiness.",12,2,730,730,Shadow (psychology); Digital forensics; Computer science; Computer security; Internet of Things; Digital evidence; Identification (biology); Adversary; Network forensics; Data science,,,,,,http://dx.doi.org/10.3390/app12020730,,10.3390/app12020730,,,0,007-394-596-774-68X; 008-782-115-725-766; 010-056-989-204-596; 016-526-859-340-786; 018-203-874-457-567; 025-484-846-284-184; 030-049-554-857-766; 030-467-408-846-630; 033-988-523-544-139; 034-940-557-037-083; 045-098-715-794-977; 069-321-740-091-392; 071-286-450-911-218; 098-597-156-681-069; 099-237-242-218-916; 114-116-684-871-032; 144-332-771-355-17X; 166-496-298-791-206,5,true,cc-by,gold 182-962-693-791-500,A generalized approach to automotive forensics,,2021,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Kevin Klaus Gomez Buquerin; Christopher Corbett; Hans-Joachim Hof,"Abstract In the past years, software became an essential topic in modern vehicles, e.g., with the rise of more and more complex driver assistance systems. The advent of automated driving will drive this trend even further. Today, accident investigation, as well as warranty claim analysis, need to take into consideration an analysis of the rapidly increasing proportion of software and security based implementations as part of modern vehicles, the so-called digital forensics. This paper evaluates the general feasibility of digital forensics on a state-of-the-art vehicle. To do so, we analyzed current digital forensics techniques on a state-of-the-art vehicle to constitute gaps in the automotive forensics process used on in-vehicle systems. We present a general process for automotive forensics to close existing gaps and implemented it on a state-of-the-art vehicle in an in-vehicle device manipulation scenario. The implementation uses the on-board diagnostics interface, the diagnostics over internet protocol, as well as the unified diagnostic services for communication. Our implementation requires automotive Ethernet at the diagnostic interface. Our research shows future directions for efficient automotive forensic as well as the exemplary feasibility of automotive forensic analysis on state-of-the-art vehicles without the need for additional in-vehicle components such as intrusion detection systems or event data recorders.",36,,301111,,Interface (computing); Systems engineering; Implementation; Software; Intrusion detection system; Computer science; Process (engineering); Automotive industry; Digital forensics; Advanced driver assistance systems,,,,,https://www.sciencedirect.com/science/article/pii/S2666281721000056 https://dfrws.org/wp-content/uploads/2021/08/2021_EU_paper-a_generalized_approach_to_automotive_forensics.pdf https://dfrws.org/presentation/a-generalized-approach-to-automotive-forensics/,http://dx.doi.org/10.1016/j.fsidi.2021.301111,,10.1016/j.fsidi.2021.301111,3138203095,,0,004-902-840-417-30X; 005-899-402-239-840; 024-846-790-183-200; 056-136-854-556-542; 058-156-586-882-704; 061-579-640-433-241; 098-748-261-333-651; 101-524-637-170-787; 112-810-718-627-378; 113-275-562-703-091; 124-724-491-020-815; 131-190-659-305-284; 133-680-557-338-223; 154-726-837-554-003; 158-761-508-726-627; 164-237-361-721-835; 176-677-801-635-928; 180-201-633-247-977; 196-559-417-455-648,2,true,cc-by-nc-nd,hybrid 183-680-361-426-436,A Secure Information Transmission Protocol for Healthcare Cyber Based on Quantum Image Expansion and Grover Search Algorithm,,2022,journal article,IEEE Transactions on Network Science and Engineering,23274697; 2334329x,Institute of Electrical and Electronics Engineers (IEEE),,Zhiguo Qu; Hanrong Sun,,,,1,13,,,,,"National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; National Natural Science Foundation of China; Natural Science Foundation of Jiangsu Province; Sichuan Youth Science and Technique Foundation; Open Foundation of State key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications",,http://dx.doi.org/10.1109/tnse.2022.3187861,,10.1109/tnse.2022.3187861,,,0,,0,false,, 184-069-302-229-82X,Methods and Tools of Digital Triage in Forensic Context: Survey and Future Directions,2017-03-28,2017,journal article,Symmetry,20738994,MDPI AG,Switzerland,Vacius Jusas; Darius Birvinskas; Elvar Gahramanov,"Digital triage is the first investigative step of the forensic examination. The digital triage comes in two forms, live triage and post-mortem triage. The primary goal of the live triage is a rapid extraction of an intelligence from the potential sources. The live triage raises legitimate concerns. The post-mortem triage is conducted in the laboratory and its main goal is ranking of the seized devices for the possible existence of the relevant evidence. The digital triage has the potential to quickly identify items that are likely to contain the evidential data. Therefore, it is a solution to the problem of case backlogs. However, existing methods and tools of the digital triage have limitations, especially, in the forensic context. Nevertheless, we have no better solution for the time being. In this paper, we critically review published research works and the proposed solutions for digital triage. The review is divided into four sections as follows: live triage, post-mortem triage, mobile device triage, and triage tools. We conclude that many challenges are awaiting for the developers in creating methods and tools of digital triage in order to keep pace with the development of new technologies.",9,4,49,,Mobile device; Ranking; Emerging technologies; Data science; Triage; Pace; Context (language use); Forensic examination; Computer security; Computer science; Digital forensics,,,,,https://dblp.uni-trier.de/db/journals/symmetry/symmetry9.html#JusasBG17 https://doi.org/10.3390/sym9040049 https://www.mdpi.com/2073-8994/9/4/49 https://www.mdpi.com/2073-8994/9/4/49/pdf https://core.ac.uk/download/80047889.pdf,http://dx.doi.org/10.3390/sym9040049,,10.3390/sym9040049,2604064983,,0,000-750-047-594-348; 003-982-227-180-136; 004-962-084-085-761; 005-169-707-018-083; 009-885-874-541-907; 010-985-077-415-59X; 011-006-176-487-462; 012-089-942-653-099; 014-514-641-367-15X; 016-731-888-079-073; 016-873-099-383-893; 018-447-058-666-847; 025-290-159-757-335; 027-658-395-615-692; 030-351-009-711-953; 031-522-316-310-252; 032-451-540-235-796; 034-008-964-356-002; 042-409-013-562-238; 042-767-661-429-064; 047-630-600-014-492; 049-896-268-388-337; 056-715-378-869-201; 058-052-081-943-595; 061-869-577-104-546; 066-078-012-998-723; 066-235-037-082-291; 075-148-096-695-582; 076-020-683-409-265; 078-995-601-408-182; 081-447-017-308-327; 087-950-081-760-226; 089-115-596-397-298; 089-212-328-523-934; 090-752-043-508-733; 092-237-744-940-330; 094-295-279-676-447; 096-685-107-801-738; 109-749-496-799-933; 125-939-677-745-616; 126-591-597-706-715; 128-940-875-499-986; 130-778-270-601-465; 131-516-331-360-906; 131-796-930-292-035; 136-224-445-947-796; 142-884-607-464-932; 150-305-598-712-279; 155-063-496-030-974; 155-226-042-989-551; 166-178-398-716-39X; 168-211-791-741-422; 170-238-670-627-975,17,true,cc-by,gold 185-115-006-609-917,A Survey on Blockchain Based Digital Forensics Framework,2022-04-30,2022,journal article,International Journal for Research in Applied Science and Engineering Technology,23219653,International Journal for Research in Applied Science and Engineering Technology (IJRASET),,H S Shrunga; Ashwini M; Deepthi U; Spandana R; Rakesh K R,"Abstract: Blockchain is the best suited technology that well satisfies the purpose and needs of security and integrity of evidences or proof collected by the police department as digital forensics across the country. This paper potray a blockchain based digital forensics framework as the proposed system, enabling privacy preservation and proof of existence. The proposed system is achieved by using SHA algorithm, AES encryption technique (Rijndael) and blockchain methodology. SHA algorithm mainly consists of SHA functions which are a group of hashing algorithms used for hashing the input of variable size. The AES encryption technique makes the uploaded forensic data to be encrypted and the data storage very secure. This project comes out as the best application that the defence department can use. The nature of the blockchain being decentralized, establishes privacy and tamper-proof. It also easily detects any wrong happenings or modifications and alerts the concerned authority. The forensic investigation framework establishes authenticity, security, traceability, privacy, immutability and becomes a trustworthy system for the defence department.",10,4,2542,2549,Blockchain; Computer science; Computer security; Encryption; Immutability; Traceability; Digital forensics; Hash function,,,,,,http://dx.doi.org/10.22214/ijraset.2022.41841,,10.22214/ijraset.2022.41841,,,0,,0,true,,gold 185-144-478-278-792,A forensic analysis of rclone and rclone's prospects for digital forensic investigations of cloud storage,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Frank Breitinger; Xiaolu Zhang; Darren Quick,"Organizations and end users are moving their data into the cloud and trust Cloud Storage Providers (CSP) such as pCloud, Dropbox, or Backblaze. Given their popularity, it is likely that forensic examiners encounter one or more online storage types that they will have to acquire and analyze during an investigation. To access cloud storage, CSPs provide web-interfaces, proprietary software solutions (e.g., Dropbox client for Windows) as well as APIs allowing third-party access. One of these third-party applications is rclone which is an open-source tool to access many common CSPs through a command line interface. In this article, we look at rclone from two perspectives: First, we perform a forensic analysis on rclone and discuss aspects such as password recovery of the configuration file, encryption, and JA3 fingerprints. Second, we discuss rclone as a prospect to be a forensic tool which includes its read-only mount feature and sample cases. Under the circumstances tested, rclone is suitable for forensic practitioners as it is open-source, documented, and includes some essential functionality frequently needed but practitioners need to be aware of the caveats.",43,,301443,301443,Digital forensics; Cloud computing; Computer science; Cloud storage; Computer security; World Wide Web; Password; Popularity; Encryption; Digital evidence; Internet privacy; Operating system; Psychology; Social psychology,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301443,,10.1016/j.fsidi.2022.301443,,,0,000-132-422-881-51X; 002-768-711-065-857; 015-654-094-120-991; 023-338-081-058-709; 030-658-837-957-277; 050-304-428-383-118; 051-785-078-933-787; 058-631-300-195-90X; 163-330-758-807-944; 166-120-573-052-868,0,true,,hybrid 185-892-083-398-013,Digital Forensics: Where Are We?,2020-09-21,2020,journal article,International Journal of Forensic Research,27672972,Opast Group LLC,,,"Digital Foensics is a branch of Forensic Sciences that involves the recovery of materials in digital devices, e.g. computers, mobile phones and storage devices. Fast and continuous advances in digital techniques and devices are happening. On the other hand, the forensic tools to track these technologies are short lagged. This mini-review discusses the issue and its consequences and recommendations for covering the gap between the two.",1,1,,,Digital forensics; Mobile device; Computer science; Digital evidence; Computer forensics; Computer security; Data science,,,,,,http://dx.doi.org/10.33140/ijfr.01.01.10,,10.33140/ijfr.01.01.10,,,0,,1,true,,bronze 186-735-621-892-13X,Character Encoding in Forensic Examination of Digital Evidence,,2008,journal article,Chinese Journal of Forensic Sciences,16712072,,,Jin Bo,"Based on analysis of character encoding methods,and encoding and decoding principles,a strategy for searching keywords in digital documents was established.The application of the method was illustrated by a practical case.",,,,,Artificial intelligence; Encoding (semiotics); Natural language processing; Digital data; Digital evidence; Speech recognition; Forensic examination; Character encoding; Computer science; Decoding methods,,,,,http://en.cnki.com.cn/Article_en/CJFDTOTAL-SFJD200806021.htm,http://en.cnki.com.cn/Article_en/CJFDTOTAL-SFJD200806021.htm,,,2380109317,,0,,0,false,, 186-940-557-741-427,Forensics chain for evidence preservation system: An evidence preservation forensics framework for internet of things‐based smart city security using blockchain,2022-05-20,2022,journal article,Concurrency and Computation: Practice and Experience,15320626; 15320634,Wiley,United States,Randa Kamal; Ezz El‐Din Hemdan; Nawal El‐Fishway,"In recent times, the new revolution of IoT facilitates communication and information sharing among people in different domains like a smart city. This revolution came with a risk of cyber-attacks that target devices and shared data. The digital evidence resulting from the digital forensics process applied to IoT devices must be kept safe for later analysis. Preserving digital evidence on a centralized server raises the risk of a single point of failure. Evidence preserving on cloud servers raises the tampering risk with the evidence or even sharing them with malicious third parties. Therefore, this paper presents a novel framework called Forensics Chain for Evidence Preservation System for IoT-based smart city security. The proposed framework aims to integrate blockchain with digital forensics to overcome the problems faced by forensic investigators; single point of failure and/or evidence modifications and enhance the security of preserving digital evidence via applying blockchain. Applying blockchain guarantees the immutability and data integrity of the preserved evidence. Furthermore, preserving the digital evidence among the forensic participant nodes eliminates the possibility of the single-point failure of a centralized storage server. The results provided a Proof of Concept for forensic evidence preservation based on blockchain and evaluated its performance.",34,21,,,Blockchain; Internet of Things; Network forensics; Computer security; Computer science; The Internet; Internet privacy; Digital forensics; World Wide Web,,,,,,http://dx.doi.org/10.1002/cpe.7062,,10.1002/cpe.7062,,,0,010-284-227-477-250; 012-199-054-127-602; 014-448-058-704-128; 015-973-222-946-009; 017-843-938-494-981; 026-698-451-512-277; 029-610-096-288-863; 032-169-069-596-979; 041-749-004-943-703; 044-247-442-262-35X; 050-244-001-533-04X; 054-079-583-763-10X; 055-498-537-115-235; 082-403-932-515-639; 083-888-956-568-609; 089-419-984-563-123; 101-258-932-366-249; 131-581-925-248-197; 132-746-973-839-652; 132-810-780-767-932; 154-393-793-915-985,0,false,, 187-733-044-298-76X,What is Digital Forensics?,2022-05-12,2022,journal article,ITNOW,17465702; 17465710,Oxford University Press (OUP),United Kingdom,Shahrzad Zargari,"Abstract; The definition of digital forensics is the process of uncovering and interpreting electronic data for use in a court of law, writes Shahrzad Zargari, Senior Lecturer and Course Leader in Cybersecurity with Forensics, after recently hosting the BCS webinar, Digital Forensics 101.",64,2,46,47,Digital forensics; Computer forensics; Computer security; Computer science; Network forensics; Process (computing); Digital evidence,,,,,,http://dx.doi.org/10.1093/itnow/bwac055,,10.1093/itnow/bwac055,,,0,,0,false,, 187-947-933-345-849,Disposable Virtual Machines and Challenges to Digital Forensics Investigation,,2021,journal article,International Journal of Advanced Computer Science and Applications,21565570; 2158107x,The Science and Information Organization,,Ahmad Alisher; Mohammed Yousuf Uddin; Mohammad Mazhar Afzal,"Digital forensics field faces new challenges with emerging technologies. Virtualization is one of the significant challenges in the field of digital forensics. Virtual Machines (VM) have many advantages either it be an optimum utilization of hardware resources or cost saving for organizations. Traditional forensics’ tools are not competent enough to analyze the virtual machines as they only support for physical machines, to overcome this challenge Virtual Machine Introspection technologies were developed to perform forensic investigation of virtual machines. Until now, we were dealing with persistent virtual machines; these are created once and used many times. We have extreme version of virtual machine and that is disposable virtual machine. However, the disposable virtual machine once created and are used one time, it vanish from the system without leaving behind any significant traces or artifacts for digital investigator. The purpose of this paper is to discuss various disposable virtualization technologies available and challenges posed by them on the digital forensics investigation process and provided some future directions to overcome these challenges.",12,2,,,Emerging technologies; Virtual machine; Virtual machine introspection; Qubes; Field (computer science); Computer science; Process (engineering); Multimedia; Virtualization; Digital forensics,,,,,https://thesai.org/Downloads/Volume12No2/Paper_99-Disposable_Virtual_Machines_and_Challenges.pdf https://thesai.org/Publications/ViewPaper?Volume=12&Issue=2&Code=IJACSA&SerialNo=99 https://repository.psau.edu.sa/xmlui/handle/123456789/1561178,http://dx.doi.org/10.14569/ijacsa.2021.0120299,,10.14569/ijacsa.2021.0120299,3134892529,,0,003-480-534-241-322; 019-698-064-288-240; 029-069-214-346-997; 052-337-723-472-520; 073-129-712-116-200; 074-022-824-976-957; 086-161-291-588-657; 132-593-656-855-005; 133-397-275-695-990,0,true,cc-by,gold 189-547-854-321-849,Vision: An empirical framework for examiners to accessing password-protected resources for on-the-scene digital investigations,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Jewan Bang; Jungheum Park; Sangjin Lee,"It is increasingly becoming difficult to acquire meaningful information in the field of digital forensics through the traditional approach owing to advances in information security and anti-forensics techniques. To counteract anonymous services such as data in remote areas without authentication information, data encryption, device locks, and cryptocurrencies, it is important to acquire key information through live forensics at search and seizure sites. Thus, it is necessary to establish a response system that explores and processes credential information on site and extracts meaningful information based on the processed information. To this end, this study proposes a new digital forensics framework for application at search and seizure sites. The proposed framework is designed to allow expansion in the form of additional functions on account of a module type development for the system even when new services and digital devices appear in the future. We then explain its applicability through case studies of actual digital investigations. • This work proposes a framework for live system forensics at search and seizure sites. • Procedures and techniques to accessing password-protected resources are explored. • A tool is designed and implemented based on the proposed framework. • Three actual cases are described for demonstrating the proposal's usefulness.",40,,301376,301376,Computer science; Digital forensics; Credential; Password; Digital evidence; Computer security; Authentication (law); Key (lock); Encryption; Password cracking; Field (mathematics); World Wide Web,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301376,,10.1016/j.fsidi.2022.301376,,,0,010-985-077-415-59X; 037-711-093-033-550; 041-277-806-049-882; 042-793-944-798-15X; 063-084-969-285-764; 140-344-223-660-774,0,true,,bronze 189-979-945-502-249,An Enhanced Blockchain-Based IoT Digital Forensics Architecture Using Fuzzy Hash,,2021,journal article,IEEE Access,21693536,Institute of Electrical and Electronics Engineers (IEEE),United States,Wael A. Mahrous; Mahmoud Farouk; Saad M. Darwish,"Due to businesses’ growing use of IoT services in their day-to-day operations and the increased use of smart devices, digital forensic investigations involving such systems will need increasingly sophisticated digital evidence collection and processing. The majority of IoT systems are composed of disparate software and hardware components, which may pose security and privacy concerns. Recently, blockchain technology was presented as one of the options for achieving IoT security via the use of an immutable ledger, a decentralized architecture, and strong cryptographic primitives. Integrating blockchain platforms with IoT-based applications, on the other hand, poses a number of difficulties owing to the trustworthiness, integrity, and real-time responsiveness of IoT data. However, certain IoT devices may be incompatible with existing blockchain-based IoT forensic methods for additional digital evidence processing owing to their usage of conventional hash. A critical feature of cryptographic hash functions is that even if just one bit of the input is altered, the output acts pseudo-randomly, making it impossible to identify identical files. However, in the field of computer forensics, it is essential to locate comparable files (e.g., various versions of a file); therefore, we need a hash function that preserves similarity. It is getting more difficult to establish how forensic investigators might utilize traces from such devices. To effectively deal with IoT digital forensics applications, this article presents an improved blockchain-based IoT digital forensics architecture that uses the fuzzy hash to construct the Blockchain’s Merkle tree in addition to the conventional hash for authentication. Fuzzy hashing enables the identification of potentially damning documents that might otherwise remain undiscovered using conventional hashing techniques. By comparing blocks/files to all nodes in the blockchain network using fuzzy hash similarity, the digital forensics investigator will be able to verify their authenticity. To support the proof of concept, we simulated the suggested model.",9,,151327,151336,Cryptographic primitive; Authentication; Merkle tree; Digital evidence; Computer security; Computer science; Computer forensics; Cryptographic hash function; Digital forensics; Hash function,,,,,https://dblp.uni-trier.de/db/journals/access/access9.html#MahrousFD21 https://ieeexplore.ieee.org/document/9606922,http://dx.doi.org/10.1109/access.2021.3126715,,10.1109/access.2021.3126715,3213609011,,0,002-020-246-447-998; 006-138-917-123-177; 007-321-225-339-593; 008-454-749-236-945; 010-284-227-477-250; 010-458-498-389-380; 012-587-637-705-413; 013-410-561-307-525; 018-552-581-098-658; 019-912-316-692-552; 022-028-128-880-266; 022-338-684-752-242; 023-858-572-607-02X; 025-217-964-155-547; 027-096-043-528-331; 028-705-577-620-56X; 029-164-830-214-360; 030-121-862-351-330; 031-061-623-893-188; 032-456-953-732-97X; 032-725-437-508-413; 035-859-793-614-223; 036-017-549-836-946; 041-749-004-943-703; 047-125-525-662-686; 047-782-671-230-742; 055-811-656-615-740; 056-216-240-850-368; 058-156-586-882-704; 058-882-017-546-096; 060-971-363-644-947; 065-322-784-190-818; 068-520-918-599-405; 074-995-483-560-419; 077-425-502-034-153; 092-827-935-965-207; 093-801-189-809-800; 103-535-795-864-289; 105-030-249-648-537; 124-276-088-610-544; 125-682-509-275-554; 141-227-167-540-818; 148-828-929-349-306; 170-516-749-420-456,2,true,"CC BY, CC BY-NC-ND",gold 190-429-044-131-224,Investigação Forense Digital em Redes Sociais: A Análise das Evidências de Crimes no Facebook e no Twitter,,2014,journal article,"Brazilian Journal of Forensic Sciences, Medical Law and Bioethics",2237261x,"Brazilian Journal of Forensic Sciences, Medical Law and Bioethics",,D. P. Franco; N. M. Cardoso,,3,3,233,257,Humanities; Sociology; Art,,,,,,http://dx.doi.org/10.17063/bjfs3-3-y2014233,,10.17063/bjfs3-3-y2014233,,,0,,0,true,cc-by,gold 190-471-875-086-638,Prelim i - Editorial Board,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,37,,301201,301201,Computer science,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00109-8,,10.1016/s2666-2817(21)00109-8,,,0,,0,true,,bronze 190-754-967-593-450,Researches on Some Problems in Digital Forensics,,2008,journal article,Journal of Tianjin Administrative Cadre College of Politics and Law,,,,Hao Wen-jiang,"Along with the universality and development of the calculator science,especially the all-round acceleration of our national economy and social informationization progress,the foundation and global role of calculator information system have been progressively strengthened.But in the meantime,the cases involving the calculator system also increase steadily,so the correctness of digital forensics has a bearing on how to decide the nature of the case and conviction and punishment.The author,based on the comprehension toward concept and characteristics of the electronic evidence,explained the principle of digital forensics and put forward existing problems in the current digital forensics and corresponding countermeasures.",,,,,Information system; Law; Countermeasure; Calculator; Conviction; National economy; Computer security; Computer science; Correctness; Digital forensics,,,,,https://en.cnki.com.cn/Article_en/CJFDTOTAL-TZFG200803006.htm,https://en.cnki.com.cn/Article_en/CJFDTOTAL-TZFG200803006.htm,,,2372141527,,0,,0,false,, 191-979-192-049-890,The Application of X-Ways Forensics in Digital Forensics,,2009,journal article,Chinese Journal of Forensic Sciences,16712072,,,Yin Dan,"The development and features of several famous digital forensic tools are introduced. The functions and application of volume snapshots of X-Ways Forensics are illustrated, in particular.",,,,,Volume (computing); Engineering; Data science; Computer security; Digital forensics,,,,,http://en.cnki.com.cn/Article_en/CJFDTotal-SFJD200905023.htm,http://en.cnki.com.cn/Article_en/CJFDTotal-SFJD200905023.htm,,,2373747502,,0,,0,false,, 191-992-698-018-836,Prelim i - Editorial Board,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,37,,301257,301257,Editorial board,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00171-2,,10.1016/s2666-2817(21)00171-2,,,0,,0,true,,bronze 194-646-821-795-161,An improved forensic-by-design framework for cloud computing with systems engineering standard compliance,,2022,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,Abdellah Akilal; M-Tahar Kechadi,"“Forensic-by-design” is an emergent and ambitious paradigm that extends the Digital Forensic Readiness (DFR) perspective. Similar to Security-by-design, this new vision advocates the integration of Forensic requirements into the system's design and development stages to get “Forensic-ready” systems. While it seems promising, we hypothesize that: (a) this new alternative is not effective for some open boundaries systems, and (b) this strategy is not fully aligned with the Systems and software Engineering (SE) standards. A six phases research methodology based on systematic literature review, mapping, and analysis was adopted. Our results confirm indeed the stated hypothesis, identify missing key factors, and point out potential omissions. A new System and software Engineering driven Forensic-by-design framework, with an emphasis on Cloud computing systems, is therefore proposed. • “Forensic-by-design” can be seen as an adversarial shift in Digital Forensic Readiness (DFR). • “Forensic-by-design” is more suited to closed boundaries systems and suffers from multiple insufficiencies. • The proposed framework remedy to the observed limits and is compliant with the systems and software engineering standards. • The proposed framework aims to integrate security, privacy, and resiliency requirements into systems design and development.",40,,301315,301315,Computer science; Digital forensics; Cloud computing; Adversarial system; Requirements engineering; Software engineering; Key (lock); Security engineering; Software; Data science; Computer security; Systems engineering,,,,,,http://dx.doi.org/10.1016/j.fsidi.2021.301315,,10.1016/j.fsidi.2021.301315,,,0,000-566-000-503-971; 002-383-410-319-043; 005-800-655-385-595; 008-358-741-185-610; 008-437-429-472-135; 014-558-090-827-619; 018-948-094-812-86X; 022-991-306-740-078; 024-462-843-796-80X; 030-858-457-088-176; 039-756-277-761-714; 043-826-131-546-638; 044-982-723-456-135; 045-273-682-926-448; 046-357-391-782-442; 049-337-278-368-275; 050-304-428-383-118; 054-626-009-006-964; 060-874-727-746-537; 076-889-170-335-628; 080-029-349-030-650; 082-793-334-095-933; 090-980-715-883-62X; 091-540-399-535-662; 091-619-263-117-914; 092-121-205-176-412; 107-272-816-064-541; 120-361-603-676-195; 120-848-133-769-462; 124-837-341-752-034; 124-912-663-881-389; 130-150-403-430-724; 132-342-259-584-364; 138-518-998-385-929; 151-944-242-677-668,1,true,,bronze 195-303-242-762-834,Using the DC3 forensic challenge as a basis for a special topics digital forensics upper level undergraduate course,2008-06-01,2008,journal article,Journal of Computing Sciences in Colleges,19374763,,,null CollinsDavid; null McGuireTimothy,"The DC3 (Defense Cybercrime Unit) issues an annual forensic challenge to law enforcement, corporations, and universities. This challenge includes a packet of individual computer forensics related p...",,,,,Forensic science; Course (navigation); Cybercrime; Law enforcement; Computer security; Computer science; Unit (housing); Computer forensics; Digital forensics,,,,,https://dl.acm.org/doi/10.5555/1352383.1352387,https://dl.acm.org/doi/10.5555/1352383.1352387,,,3014397913,,0,,0,false,, 197-276-534-396-671,Forensic comparison of fired cartridge cases: Feature-extraction methods for feature-based calculation of likelihood ratios.,2022-05-27,2022,journal article,Forensic science international. Synergy,2589871x,Elsevier BV,Netherlands,Nabanita Basu; Rachel S Bolton-King; Geoffrey Stewart Morrison,"We describe and validate a feature-based system for calculation of likelihood ratios from 3D digital images of fired cartridge cases. The system includes a database of 3D digital images of the bases of 10 cartridges fired per firearm from approximately 300 firearms of the same class (semi-automatic pistols that fire 9 mm diameter centre-fire Luger-type ammunition, and that have hemispherical firing pins and parallel breech-face marks). The images were captured using Evofinder®, an imaging system that is commonly used by operational forensic laboratories. A key component of the research reported is the comparison of different feature-extraction methods. Feature sets compared include those previously proposed in the literature, plus Zernike-moment based features. Comparisons are also made of using feature sets extracted from the firing-pin impression, from the breech-face region, and from the whole region of interest (firing-pin impression + breech-face region + flowback if present). Likelihood ratios are calculated using a statistical modelling pipeline that is standard in forensic voice comparison. Validation is conducted and results are assessed using validation procedures and validation metrics and graphics that are standard in forensic voice comparison.",5,,100272,100272,Feature (linguistics); Computer science; Cartridge; Artificial intelligence; Feature extraction; Pattern recognition (psychology); Face (sociological concept); Computer vision,Calibration; Cartridge case; Feature; Firearm; Likelihood ratio; Validation,,,Research England,,http://dx.doi.org/10.1016/j.fsisyn.2022.100272,35677322,10.1016/j.fsisyn.2022.100272,,PMC9168521,0,002-570-097-071-89X; 002-914-447-841-273; 006-420-729-196-888; 007-141-734-571-464; 007-366-285-838-916; 009-691-114-647-375; 012-657-537-842-77X; 018-834-555-462-191; 023-766-437-138-867; 023-884-142-851-267; 024-318-653-276-751; 028-577-737-344-258; 030-949-893-366-973; 032-719-441-074-186; 033-120-690-053-891; 034-842-269-251-561; 049-719-701-376-525; 050-143-591-709-320; 050-583-124-821-478; 051-569-900-219-726; 051-610-165-724-540; 052-986-563-809-904; 054-126-844-371-315; 054-978-387-747-822; 066-425-900-800-061; 067-793-023-379-986; 072-965-484-886-875; 081-396-842-457-94X; 083-873-526-243-247; 085-756-182-486-703; 091-380-165-512-812; 093-327-661-004-948; 093-703-392-171-84X; 099-941-337-074-205; 107-899-760-364-965; 109-310-120-646-735; 109-546-790-038-633; 118-733-094-075-780; 120-388-714-246-243; 120-723-878-984-117; 131-492-768-728-239; 137-071-040-050-798; 137-256-263-507-40X; 137-486-915-481-975; 140-872-209-126-582; 141-597-303-733-189; 144-828-987-966-083; 155-508-602-456-071; 160-706-144-459-627; 165-717-274-484-703; 166-043-248-700-036,4,true,"CC BY, CC BY-NC-ND",gold 198-188-537-910-708,Distance Learning in Forensic Nursing: The Lived Educational Experience,2017-09-13,2017,journal article,Journal of Forensic Sciences and Digital Investigation,,Northern California Open Access Publications,,,,,,18,26,Lived experience; Forensic nursing; Forensic science; Psychology; Nursing; Medical education; Medicine; Psychoanalysis; Veterinary medicine,,,,,,http://dx.doi.org/10.29199/fsdi.101015,,10.29199/fsdi.101015,,,0,,0,true,cc-by,hybrid 198-480-779-430-174,Radio-morphometric Analysis of Sella Turcica in the South Indian Population: A Digital Cephalometric Study,2017-06-15,2017,journal article,Arab Journal of Forensic Sciences and Forensic Medicine,16586786; 16586794,Naif Arab University for Security Sciences,,,,1,5,,,Sella turcica; Orthodontics; Cephalometric analysis; Population; Geography; Anatomy; Medicine; Environmental health,,,,,,http://dx.doi.org/10.26735/16586794.2017.019,,10.26735/16586794.2017.019,,,0,,1,true,cc-by-nc,gold 198-534-899-847-91X,Prelim i - Editorial Board,,2021,journal article,Forensic Science International: Digital Investigation,26662817; 26662825,Elsevier BV,,,,38,,301277,301277,Editorial board,,,,,,http://dx.doi.org/10.1016/s2666-2817(21)00195-5,,10.1016/s2666-2817(21)00195-5,,,0,,0,true,,bronze 199-320-642-531-170,Alt-tech social forensics: Forensic analysis of alternative social networking applications,,2022,journal article,Forensic Science International: Digital Investigation,26662817,Elsevier BV,,Hailey Johnson; Karl Volk; Robert Serafin; Cinthya Grajeda; Ibrahim Baggili,,42,,301406,,,,,,,,http://dx.doi.org/10.1016/j.fsidi.2022.301406,,10.1016/j.fsidi.2022.301406,,,0,003-504-554-245-316; 008-667-688-301-190; 008-855-420-001-822; 020-405-975-217-252; 039-999-270-718-277; 042-746-308-855-318; 049-131-797-799-081; 072-302-303-718-198; 085-317-975-978-471; 089-038-694-381-605,0,false,,