{"id":"https://openalex.org/W2740163751","doi":"https://doi.org/10.1145/3106237.3106308","title":"On evidence preservation requirements for forensic-ready systems","display_name":"On evidence preservation requirements for forensic-ready systems","publication_year":2017,"publication_date":"2017-08-02","ids":{"openalex":"https://openalex.org/W2740163751","doi":"https://doi.org/10.1145/3106237.3106308","mag":"2740163751"},"language":"en","primary_location":{"id":"doi:10.1145/3106237.3106308","doi":"https://doi.org/10.1145/3106237.3106308","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3106237.3106308","pdf_url":null,"source":{"id":"https://openalex.org/S4363608883","display_name":"ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hdl.handle.net/10344/7430","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029277829","display_name":"Dalal Alrajeh","orcid":"https://orcid.org/0000-0002-1365-8026","observed_orcids":["https://orcid.org/0000-0002-1365-8026"]},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Dalal Alrajeh","raw_affiliation_strings":["Imperial College London, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Imperial College London, UK","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049622460","display_name":"Liliana Pasquale","orcid":"https://orcid.org/0000-0001-9673-3054","observed_orcids":["https://orcid.org/0000-0001-9673-3054"]},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Liliana Pasquale","raw_affiliation_strings":["University College Dublin, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060861082","display_name":"Bashar Nuseibeh","orcid":"https://orcid.org/0000-0002-3476-053X","observed_orcids":["https://orcid.org/0000-0002-3476-053X"]},"institutions":[{"id":"https://openalex.org/I204136569","display_name":"The Open University","ror":"https://ror.org/05mzfcs16","country_code":"GB","type":"education","lineage":["https://openalex.org/I204136569"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Bashar Nuseibeh","raw_affiliation_strings":["Open University, UK / Lero, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Open University, UK / Lero, Ireland","institution_ids":["https://openalex.org/I204136569"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2553,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.82128666,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":87,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"559","last_page":"569"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14171","display_name":"Education, Law, and Society","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/forensic-readiness","display_name":"forensic readiness","score":0.796999990940094},{"id":"https://openalex.org/keywords/preservation-of-evidence","display_name":"evidence preservation","score":0.7649999856948853},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"digital forensics","score":0.9589999914169312},{"id":"https://openalex.org/keywords/specification-synthesis","display_name":"specification synthesis","score":0.7630000114440918},{"id":"https://openalex.org/keywords/satisfiability-solving","display_name":"satisfiability solving","score":0.9309999942779541},{"id":"https://openalex.org/keywords/data-volume-reduction","display_name":"data volume reduction","score":0.6019999980926514}],"concepts":[{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.7688673734664917},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7457820773124695},{"id":"https://openalex.org/C2781357168","wikidata":"https://www.wikidata.org/wiki/Q5276084","display_name":"Digital evidence","level":3,"score":0.5169429183006287},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.475897878408432},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4096146523952484}],"mesh":[],"locations_count":11,"locations":[{"id":"doi:10.1145/3106237.3106308","doi":"https://doi.org/10.1145/3106237.3106308","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3106237.3106308","pdf_url":null,"source":{"id":"https://openalex.org/S4363608883","display_name":"ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering","raw_type":"proceedings-article"},{"id":"pmh:oai:oro.open.ac.uk:50894","doi":null,"is_oa":false,"landing_page_url":"https://oro.open.ac.uk/50894/1/__userdata_documents6_sm42426_Desktop_ORO%20Publications%20to%20upload_fse17-mainid304.pdf","pdf_url":"https://oro.open.ac.uk/50894/1/__userdata_documents6_sm42426_Desktop_ORO%20Publications%20to%20upload_fse17-mainid304.pdf","source":{"id":"https://openalex.org/S4306401187","display_name":"Open Research Online (The Open University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I204136569","host_organization_name":"The Open University","host_organization_lineage":["https://openalex.org/I204136569"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"Conference or Workshop Item"},{"id":"pmh:http://www.rian.ie/148999/","doi":null,"is_oa":false,"landing_page_url":"http://hdl.handle.net/10344/6785","pdf_url":null,"source":{"id":"https://openalex.org/S4306400033","display_name":"Arrow@dit (Dublin Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4210144925","host_organization_name":"Technological University Dublin","host_organization_lineage":["https://openalex.org/I4210144925"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"ASAP","raw_type":"Conference item"},{"id":"pmh:http://www.rian.ie/157223/","doi":null,"is_oa":false,"landing_page_url":"http://hdl.handle.net/10344/7430","pdf_url":null,"source":{"id":"https://openalex.org/S4306400033","display_name":"Arrow@dit (Dublin Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4210144925","host_organization_name":"Technological University Dublin","host_organization_lineage":["https://openalex.org/I4210144925"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"291652","raw_type":"Conference item"},{"id":"pmh:oai:researchrepository.ul.ie:10344/7430","doi":null,"is_oa":true,"landing_page_url":"https://hdl.handle.net/10344/7430","pdf_url":null,"source":{"id":"https://openalex.org/S4306401530","display_name":"University of Limerick Institutional Repository (University of Limerick)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I230495080","host_organization_name":"University of Limerick","host_organization_lineage":["https://openalex.org/I230495080"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Meetings and Proceedings"},{"id":"pmh:oai:figshare.com:article/19851793","doi":null,"is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/On_evidence_preservation_requirements_for_forensic-ready_systems/19851793","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference contribution"},{"id":"pmh:oai:figshare.com:article/19852366","doi":null,"is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/On_evidence_preservation_requirements_for_forensic-ready_systems/19852366","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference contribution"},{"id":"pmh:oai:spiral.imperial.ac.uk:10044/1/53836","doi":null,"is_oa":false,"landing_page_url":"http://hdl.handle.net/10044/1/53836","pdf_url":null,"source":{"id":"https://openalex.org/S4306401396","display_name":"Spiral (Imperial College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I47508984","host_organization_name":"Imperial College London","host_organization_lineage":["https://openalex.org/I47508984"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"11th Joint Meeting of the European Software Engineering Conference and the ACM SIGSOFT Symposium on the Foundations of Software Engineering","raw_type":"Conference Paper"},{"id":"pmh:oai:ulir.ul.ie:10344/6785","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/10344/6785","pdf_url":null,"source":{"id":"https://openalex.org/S4306401530","display_name":"University of Limerick Institutional Repository (University of Limerick)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I230495080","host_organization_name":"University of Limerick","host_organization_lineage":["https://openalex.org/I230495080"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:ulir.ul.ie:10344/7430","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/10344/7430","pdf_url":null,"source":{"id":"https://openalex.org/S4306401530","display_name":"University of Limerick Institutional Repository (University of Limerick)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I230495080","host_organization_name":"University of Limerick","host_organization_lineage":["https://openalex.org/I230495080"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"doi:10.34961/606","doi":"https://doi.org/10.34961/606","is_oa":true,"landing_page_url":"https://doi.org/10.34961/606","pdf_url":null,"source":{"id":"https://openalex.org/S4306401530","display_name":"University of Limerick Institutional Repository (University of Limerick)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I230495080","host_organization_name":"University of Limerick","host_organization_lineage":["https://openalex.org/I230495080"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Other"}],"best_oa_location":{"id":"pmh:oai:researchrepository.ul.ie:10344/7430","doi":null,"is_oa":true,"landing_page_url":"https://hdl.handle.net/10344/7430","pdf_url":null,"source":{"id":"https://openalex.org/S4306401530","display_name":"University of Limerick Institutional Repository (University of Limerick)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I230495080","host_organization_name":"University of Limerick","host_organization_lineage":["https://openalex.org/I230495080"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Meetings and Proceedings"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":53,"referenced_works":["https://openalex.org/W36102565","https://openalex.org/W38166071","https://openalex.org/W183810113","https://openalex.org/W185406290","https://openalex.org/W1482532598","https://openalex.org/W1551070491","https://openalex.org/W1573412770","https://openalex.org/W1597710132","https://openalex.org/W1672891595","https://openalex.org/W1811887233","https://openalex.org/W1978495386","https://openalex.org/W1980201832","https://openalex.org/W1992758609","https://openalex.org/W2009229022","https://openalex.org/W2009605580","https://openalex.org/W2023808162","https://openalex.org/W2032386914","https://openalex.org/W2053983842","https://openalex.org/W2070226202","https://openalex.org/W2083031585","https://openalex.org/W2086075943","https://openalex.org/W2090948362","https://openalex.org/W2094838541","https://openalex.org/W2096904725","https://openalex.org/W2097154968","https://openalex.org/W2097714017","https://openalex.org/W2108623020","https://openalex.org/W2110157102","https://openalex.org/W2113212164","https://openalex.org/W2121070677","https://openalex.org/W2123506780","https://openalex.org/W2130906372","https://openalex.org/W2131730994","https://openalex.org/W2131934866","https://openalex.org/W2135220153","https://openalex.org/W2135319067","https://openalex.org/W2137312030","https://openalex.org/W2140796142","https://openalex.org/W2146758771","https://openalex.org/W2155822737","https://openalex.org/W2162255975","https://openalex.org/W2164589933","https://openalex.org/W2170890990","https://openalex.org/W2171634230","https://openalex.org/W2303287830","https://openalex.org/W2312132523","https://openalex.org/W2481893031","https://openalex.org/W2565695915","https://openalex.org/W2612791874","https://openalex.org/W2964073874","https://openalex.org/W4243521886","https://openalex.org/W4249646973","https://openalex.org/W6601519416"],"related_works":["https://openalex.org/W3126338337","https://openalex.org/W1515900497","https://openalex.org/W3174805299","https://openalex.org/W4396629014","https://openalex.org/W2612791874","https://openalex.org/W3014497022","https://openalex.org/W2807945522","https://openalex.org/W185406290","https://openalex.org/W39220356","https://openalex.org/W2501575478"],"abstract_inverted_index":{"Forensic":[0],"readiness":[1],"denotes":[2],"the":[3,33,52,91,171],"capability":[4],"of":[5,13,54,90,94,162,173],"a":[6,101,129,133],"system":[7],"to":[8,59,68,82,100,119,138,144,178],"support":[9,160],"digital":[10,55,103,146],"forensic":[11,56,147],"investigations":[12],"potential,":[14],"known":[15],"incidents":[16,40],"by":[17],"preserving":[18],"in":[19,170],"advance":[20],"data":[21,95,157,174],"that":[22,45,96,152,158,175],"could":[23,159],"serve":[24],"as":[25],"evidence":[26,85,107],"explaining":[27],"how":[28,69],"an":[29,112,182],"incident":[30],"occurred.":[31],"Given":[32],"increasing":[34],"rate":[35],"at":[36],"which":[37],"(potentially":[38],"criminal)":[39],"occur,":[41],"designing":[42],"so\u2030ware":[43],"systems":[44,72,118],"are":[46],"forensic-ready":[47,70],"can":[48,73],"facilitate":[49],"and":[50,110,132],"reduce":[51],"costs":[53],"investigations.":[57],"However,":[58],"date,":[60],"little":[61],"or":[62],"no":[63],"attention":[64],"has":[65],"been":[66],"given":[67],"so\u2030ftware":[71],"be":[74,98,179],"designed":[75],"systematically.":[76],"In":[77],"this":[78],"paper":[79],"we":[80,136],"propose":[81,111],"explicitly":[83],"represent":[84],"preservation":[86,89,108],"requirements":[87,109],"prescribing":[88],"minimal":[92],"amount":[93],"would":[97,176],"relevant":[99,156],"future":[102],"investigation.":[104,183],"We":[105,123],"formalise":[106],"approach":[113,154],"for":[114,117],"synthesising":[115],"specifications":[116],"meet":[120],"these":[121],"requirements.":[122],"present":[124],"our":[125,140,153],"prototype":[126],"implementation\u2014based":[127],"on":[128],"satisfiability":[130],"solver":[131],"logic-based":[134],"learner\u2014which":[135],"use":[137],"evaluate":[139],"approach,":[141],"applying":[142],"it":[143,166],"two":[145],"corpora.":[148],"Our":[149],"evaluation":[150],"suggests":[151],"preserves":[155],"hypotheses":[161],"potential":[163],"incidents.":[164],"Moreover,":[165],"enables":[167],"significant":[168],"reduction":[169],"volume":[172],"need":[177],"examined":[180],"during":[181]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2017-08-08T00:00:00"}