{"id":"https://openalex.org/W2166284501","doi":null,"title":"Prioritizing Computer Forensics Using Triage Techniques","display_name":"Prioritizing Computer Forensics Using Triage Techniques","publication_year":2014,"publication_date":"2014-08-28","ids":{"openalex":"https://openalex.org/W2166284501","mag":"2166284501"},"language":"en","primary_location":{"id":"mag:2166284501","doi":null,"is_oa":false,"landing_page_url":"https://essay.utwente.nl/65671/","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005082468","display_name":"M W Gielen","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"M W Gielen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5005082468"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":87,"max":93},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-forensics","display_name":"digital forensics","score":0.8820000290870667},{"id":"https://openalex.org/keywords/forensic-triage","display_name":"forensic triage","score":0.9879999756813049},{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.7229999899864197},{"id":"https://openalex.org/keywords/data-reduction","display_name":"data reduction","score":0.6140000224113464}],"concepts":[{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.8641961812973022},{"id":"https://openalex.org/C2777120189","wikidata":"https://www.wikidata.org/wiki/Q780067","display_name":"Triage","level":2,"score":0.8349013328552246},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7664008736610413},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.6544294357299805},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.6388249397277832},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4948040843009949},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.4821329116821289},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4217643737792969},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.411124050617218},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.36804696917533875},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0761745274066925},{"id":"https://openalex.org/C545542383","wikidata":"https://www.wikidata.org/wiki/Q2751242","display_name":"Medical emergency","level":1,"score":0.07331067323684692},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:2166284501","doi":null,"is_oa":false,"landing_page_url":"https://essay.utwente.nl/65671/","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W30743733","https://openalex.org/W193911599","https://openalex.org/W218419718","https://openalex.org/W794061798","https://openalex.org/W1570969260","https://openalex.org/W1578425966","https://openalex.org/W1777157359","https://openalex.org/W1983107693","https://openalex.org/W1991140435","https://openalex.org/W2005886648","https://openalex.org/W2007087405","https://openalex.org/W2030623417","https://openalex.org/W2031929387","https://openalex.org/W2054018023","https://openalex.org/W2054313663","https://openalex.org/W2066500984","https://openalex.org/W2084718378","https://openalex.org/W2105318042","https://openalex.org/W2107576540","https://openalex.org/W2109037290","https://openalex.org/W2118534519","https://openalex.org/W2123965969","https://openalex.org/W2125300273","https://openalex.org/W2129010475","https://openalex.org/W2131934866","https://openalex.org/W2133990480","https://openalex.org/W2136654754","https://openalex.org/W2142876969","https://openalex.org/W2146758771","https://openalex.org/W2147380834","https://openalex.org/W2150423842","https://openalex.org/W2150847526","https://openalex.org/W2151300580","https://openalex.org/W2151703673","https://openalex.org/W2156350103","https://openalex.org/W2175377689","https://openalex.org/W2183187518","https://openalex.org/W2183802064","https://openalex.org/W2184963752","https://openalex.org/W2331627005","https://openalex.org/W2526632866","https://openalex.org/W2550377063","https://openalex.org/W2611632074","https://openalex.org/W2628759714","https://openalex.org/W2741413520","https://openalex.org/W2993178110","https://openalex.org/W3013799284"],"related_works":["https://openalex.org/W2127811713","https://openalex.org/W2150965025","https://openalex.org/W2741413520","https://openalex.org/W4393040259","https://openalex.org/W2032080533","https://openalex.org/W7053972949","https://openalex.org/W1977236908","https://openalex.org/W3010201843","https://openalex.org/W207734451","https://openalex.org/W7043751568"],"abstract_inverted_index":{"There":[0],"is":[1,25,49,67],"a":[2,8,12,16,26,33,76,101,105],"lot":[3,17],"of":[4,18,41,46,61,70,78,137,152],"information":[5],"contained":[6],"on":[7,98],"single":[9],"computer":[10,19,48],"and":[11,20,39,58,82,104],"company":[13],"can":[14,144],"contain":[15],"other":[21],"devices.":[22],"If":[23],"there":[24,52],"breach":[27],"somewhere":[28],"in":[29],"this":[30,65,142],"organization\r\nhow":[31],"will":[32],"forensic":[34,71,79,153],"analyst":[35],"find":[36],"the":[37,42,47,62,68,120,133,138,150],"source":[38],"extend":[40],"breach?":[43],"Investigating":[44],"all":[45,124,136],"not":[50],"doable,":[51],"are":[53],"simply":[54],"too":[55],"much":[56],"computers":[57,88,108,122],"information.":[59],"One":[60],"solutions":[63],"to":[64,86,148],"problem":[66],"use":[69],"triage.":[72],"This":[73,94],"research":[74],"combines":[75],"couple":[77],"triage":[80],"methods":[81],"uses":[83],"these":[84],"techniques":[85],"classify":[87],"into":[89],"either":[90],"malicious":[91,139],"or":[92],"clean.":[93],"method":[95,143],"was":[96,115,129],"tested":[97],"two":[99],"datasets,":[100],"generated":[102],"set":[103,106],"containing":[107],"from":[109],"real":[110],"companies.":[111],"The":[112,126],"first":[113],"dataset":[114,128],"reduced":[116,130],"by":[117,131],"50%":[118],"where":[119],"remaining":[121],"were":[123],"infected.":[125],"second":[127],"79%,":[132],"result":[134],"included":[135],"computers.":[140],"Thus":[141],"be":[145],"used":[146],"successful":[147],"reduce":[149],"workload":[151],"analysts.":[154]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2025-11-06T04:12:42.849631","created_date":"2016-06-24T00:00:00"}