{"id":"https://openalex.org/W1520005074","doi":"https://doi.org/10.1007/978-3-642-15506-2_13","title":"Identifying Volatile Data from Multiple Memory Dumps in Live Forensics","display_name":"Identifying Volatile Data from Multiple Memory Dumps in Live Forensics","publication_year":2010,"publication_date":"2010-01-01","ids":{"openalex":"https://openalex.org/W1520005074","doi":"https://doi.org/10.1007/978-3-642-15506-2_13","mag":"1520005074"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-642-15506-2_13","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-642-15506-2_13","pdf_url":null,"source":{"id":"https://openalex.org/S4210175514","display_name":"IFIP International Federation for Information Processing/IFIP","issn_l":"1571-5736","issn":["1571-5736","1861-2288"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IFIP Advances in Information and Communication Technology","raw_type":"book-chapter"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://inria.hal.science/hal-01060618","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5108356556","display_name":"Frank Law","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Frank Law","raw_affiliation_strings":["Hong Kong, Hong Kong, China","Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hong Kong, Hong Kong, China","institution_ids":[]},{"raw_affiliation_string":"Hong Kong","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031854980","display_name":"Patrick P. K. Chan","orcid":"https://orcid.org/0000-0001-7774-580X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Patrick Chan","raw_affiliation_strings":["Hong Kong, Hong Kong, China","Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hong Kong, Hong Kong, China","institution_ids":[]},{"raw_affiliation_string":"Hong Kong","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110500992","display_name":"Siu\u2010Ming Yiu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Siu-Ming Yiu","raw_affiliation_strings":["Hong Kong, Hong Kong, China","Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hong Kong, Hong Kong, China","institution_ids":[]},{"raw_affiliation_string":"Hong Kong","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047919318","display_name":"Benjamin Tang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Benjamin Tang","raw_affiliation_strings":["Hong Kong, Hong Kong, China","Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hong Kong, Hong Kong, China","institution_ids":[]},{"raw_affiliation_string":"Hong Kong","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108472865","display_name":"Pierre Lai","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pierre Lai","raw_affiliation_strings":["Hong Kong, Hong Kong, China","Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hong Kong, Hong Kong, China","institution_ids":[]},{"raw_affiliation_string":"Hong Kong","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102173312","display_name":"Kam-Pui Chow","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kam-Pui Chow","raw_affiliation_strings":["Hong Kong, Hong Kong, China","Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hong Kong, Hong Kong, China","institution_ids":[]},{"raw_affiliation_string":"Hong Kong","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067968762","display_name":"Ricci Ieong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ricci Ieong","raw_affiliation_strings":["Hong Kong, Hong Kong, China","Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hong Kong, Hong Kong, China","institution_ids":[]},{"raw_affiliation_string":"Hong Kong","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102903158","display_name":"Michael Kwan","orcid":"https://orcid.org/0000-0001-9697-9468"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Michael Kwan","raw_affiliation_strings":["Hong Kong, Hong Kong, China","Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hong Kong, Hong Kong, China","institution_ids":[]},{"raw_affiliation_string":"Hong Kong","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013112058","display_name":"Wing-Kai Hon","orcid":"https://orcid.org/0000-0002-0570-2904"},"institutions":[{"id":"https://openalex.org/I25846049","display_name":"National Tsing Hua University","ror":"https://ror.org/00zdnkx70","country_code":"TW","type":"education","lineage":["https://openalex.org/I25846049"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Wing-Kai Hon","raw_affiliation_strings":["National Tsing Hua University, Hsinchu, Taiwan","National Tsing Hua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Tsing Hua University, Hsinchu, Taiwan","institution_ids":["https://openalex.org/I25846049"]},{"raw_affiliation_string":"National Tsing Hua University","institution_ids":["https://openalex.org/I25846049"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5109853326","display_name":"Lucas C. K. Hui","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lucas Hui","raw_affiliation_strings":["Hong Kong, Hong Kong, China","Hong Kong"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hong Kong, Hong Kong, China","institution_ids":[]},{"raw_affiliation_string":"Hong Kong","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.4376,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.57817938,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"185","last_page":"194"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7040216326713562},{"id":"https://openalex.org/keywords/snapshot","display_name":"Snapshot (computer storage)","score":0.634620726108551},{"id":"https://openalex.org/keywords/memory-map","display_name":"Memory map","score":0.47798436880111694},{"id":"https://openalex.org/keywords/memory-protection","display_name":"Memory protection","score":0.4204111397266388},{"id":"https://openalex.org/keywords/flat-memory-model","display_name":"Flat memory model","score":0.33243781328201294},{"id":"https://openalex.org/keywords/semiconductor-memory","display_name":"Semiconductor memory","score":0.3185470700263977},{"id":"https://openalex.org/keywords/memory-management","display_name":"Memory management","score":0.29383552074432373},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.276459276676178},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14464417099952698}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7040216326713562},{"id":"https://openalex.org/C55282118","wikidata":"https://www.wikidata.org/wiki/Q252683","display_name":"Snapshot (computer storage)","level":2,"score":0.634620726108551},{"id":"https://openalex.org/C74426580","wikidata":"https://www.wikidata.org/wiki/Q719484","display_name":"Memory map","level":3,"score":0.47798436880111694},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.4204111397266388},{"id":"https://openalex.org/C57863822","wikidata":"https://www.wikidata.org/wiki/Q905488","display_name":"Flat memory model","level":4,"score":0.33243781328201294},{"id":"https://openalex.org/C98986596","wikidata":"https://www.wikidata.org/wiki/Q1143031","display_name":"Semiconductor memory","level":2,"score":0.3185470700263977},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.29383552074432373},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.276459276676178},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14464417099952698}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/978-3-642-15506-2_13","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-642-15506-2_13","pdf_url":null,"source":{"id":"https://openalex.org/S4210175514","display_name":"IFIP International Federation for Information Processing/IFIP","issn_l":"1571-5736","issn":["1571-5736","1861-2288"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IFIP Advances in Information and Communication Technology","raw_type":"book-chapter"},{"id":"pmh:oai:HAL:hal-01060618v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-01060618","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"6th IFIP WG 11.9 International Conference on Digital Forensics (DF), Jan 2010, Hong Kong, China. pp.185-194, ⟨10.1007/978-3-642-15506-2_13⟩","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:hub.hku.hk:10722/151988","is_oa":false,"landing_page_url":"http://hdl.handle.net/10722/151988","pdf_url":null,"source":{"id":"https://openalex.org/S4377196271","display_name":"The HKU Scholars Hub (University of Hong Kong)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I889458895","host_organization_name":"University of Hong Kong","host_organization_lineage":["https://openalex.org/I889458895"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference_Paper"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-01060618v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-01060618","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"6th IFIP WG 11.9 International Conference on Digital Forensics (DF), Jan 2010, Hong Kong, China. pp.185-194, ⟨10.1007/978-3-642-15506-2_13⟩","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5600000023841858,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W22973579","https://openalex.org/W1582456956","https://openalex.org/W1990614609","https://openalex.org/W2004982394","https://openalex.org/W2010376606","https://openalex.org/W2040527645","https://openalex.org/W2099569691","https://openalex.org/W2106270115","https://openalex.org/W2118558829","https://openalex.org/W2143642500","https://openalex.org/W2337826830"],"related_works":["https://openalex.org/W2140386982","https://openalex.org/W4248614727","https://openalex.org/W2296275612","https://openalex.org/W2493772236","https://openalex.org/W2199439667","https://openalex.org/W2043352873","https://openalex.org/W3023986248","https://openalex.org/W3048967625","https://openalex.org/W2386349366","https://openalex.org/W2074563599"],"abstract_inverted_index":null,"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2013,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}