{"id":"https://openalex.org/W2995693800","doi":"https://doi.org/10.1007/s11036-019-01441-1","title":"Disk Cluster Allocation Behavior in Windows and NTFS","display_name":"Disk Cluster Allocation Behavior in Windows and NTFS","publication_year":2019,"publication_date":"2019-12-19","ids":{"openalex":"https://openalex.org/W2995693800","doi":"https://doi.org/10.1007/s11036-019-01441-1","mag":"2995693800"},"language":"en","primary_location":{"id":"doi:10.1007/s11036-019-01441-1","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11036-019-01441-1","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11036-019-01441-1.pdf","source":{"id":"https://openalex.org/S192894947","display_name":"Mobile Networks and Applications","issn_l":"1383-469X","issn":["1383-469X","1572-8153"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Mobile Networks and Applications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s11036-019-01441-1.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060865590","display_name":"Martin Karresand","orcid":"https://orcid.org/0009-0009-4203-451X"},"institutions":[{"id":"https://openalex.org/I1291458624","display_name":"Swedish Defence Research Agency","ror":"https://ror.org/0470cgs30","country_code":"SE","type":"funder","lineage":["https://openalex.org/I1291458624"]},{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO","SE"],"is_corresponding":true,"raw_author_name":"Martin Karresand","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gjovik, Norway","Division of Command, Control, Communications, Computers, Intelligence, Surveillance and Reconnaissance, Swedish Defence Research Agency, Linkoping, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gjovik, Norway","institution_ids":["https://openalex.org/I204778367"]},{"raw_affiliation_string":"Division of Command, Control, Communications, Computers, Intelligence, Surveillance and Reconnaissance, Swedish Defence Research Agency, Linkoping, Sweden","institution_ids":["https://openalex.org/I1291458624"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015374093","display_name":"Stefan Axelsson","orcid":"https://orcid.org/0000-0002-9085-4469"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]},{"id":"https://openalex.org/I746986","display_name":"Halmstad University","ror":"https://ror.org/03h0qfp10","country_code":"SE","type":"education","lineage":["https://openalex.org/I746986"]}],"countries":["NO","SE"],"is_corresponding":false,"raw_author_name":"Stefan Axelsson","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gjovik, Norway","School of Information Technology, Halmstad University, Halmstad, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gjovik, Norway","institution_ids":["https://openalex.org/I204778367"]},{"raw_affiliation_string":"School of Information Technology, Halmstad University, Halmstad, Sweden","institution_ids":["https://openalex.org/I746986"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5045303243","display_name":"Geir Olav Dyrkolbotn","orcid":null},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Geir Olav Dyrkolbotn","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gjovik, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gjovik, Norway","institution_ids":["https://openalex.org/I204778367"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5060865590"],"corresponding_institution_ids":["https://openalex.org/I1291458624","https://openalex.org/I204778367"],"apc_list":null,"apc_paid":null,"fwci":1.0579,"has_fulltext":true,"cited_by_count":9,"citation_normalized_percentile":{"value":0.84647635,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"25","issue":"1","first_page":"248","last_page":"258"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.9842000007629395,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.854781448841095},{"id":"https://openalex.org/keywords/file-system-fragmentation","display_name":"File system fragmentation","score":0.8071166276931763},{"id":"https://openalex.org/keywords/file-size","display_name":"File size","score":0.7012253999710083},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.6710566282272339},{"id":"https://openalex.org/keywords/computer-file","display_name":"Computer file","score":0.6233307719230652},{"id":"https://openalex.org/keywords/versioning-file-system","display_name":"Versioning file system","score":0.5868995189666748},{"id":"https://openalex.org/keywords/file-control-block","display_name":"File Control Block","score":0.5591988563537598},{"id":"https://openalex.org/keywords/unix-file-types","display_name":"Unix file types","score":0.5568044185638428},{"id":"https://openalex.org/keywords/file-system","display_name":"File system","score":0.5443347096443176},{"id":"https://openalex.org/keywords/torrent-file","display_name":"Torrent file","score":0.43596765398979187},{"id":"https://openalex.org/keywords/block-size","display_name":"Block size","score":0.42452988028526306},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.4043402075767517},{"id":"https://openalex.org/keywords/stub-file","display_name":"Stub file","score":0.3111921548843384}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.854781448841095},{"id":"https://openalex.org/C26656859","wikidata":"https://www.wikidata.org/wiki/Q4089244","display_name":"File system fragmentation","level":4,"score":0.8071166276931763},{"id":"https://openalex.org/C2776029614","wikidata":"https://www.wikidata.org/wiki/Q1146367","display_name":"File size","level":2,"score":0.7012253999710083},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.6710566282272339},{"id":"https://openalex.org/C95637964","wikidata":"https://www.wikidata.org/wiki/Q82753","display_name":"Computer file","level":2,"score":0.6233307719230652},{"id":"https://openalex.org/C166807848","wikidata":"https://www.wikidata.org/wiki/Q3445065","display_name":"Versioning file system","level":4,"score":0.5868995189666748},{"id":"https://openalex.org/C180500224","wikidata":"https://www.wikidata.org/wiki/Q1412592","display_name":"File Control Block","level":4,"score":0.5591988563537598},{"id":"https://openalex.org/C21729314","wikidata":"https://www.wikidata.org/wiki/Q7896858","display_name":"Unix file types","level":4,"score":0.5568044185638428},{"id":"https://openalex.org/C2780940931","wikidata":"https://www.wikidata.org/wiki/Q174989","display_name":"File system","level":2,"score":0.5443347096443176},{"id":"https://openalex.org/C40350719","wikidata":"https://www.wikidata.org/wiki/Q2451637","display_name":"Torrent file","level":4,"score":0.43596765398979187},{"id":"https://openalex.org/C41431624","wikidata":"https://www.wikidata.org/wiki/Q1053357","display_name":"Block size","level":3,"score":0.42452988028526306},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.4043402075767517},{"id":"https://openalex.org/C13674803","wikidata":"https://www.wikidata.org/wiki/Q7627301","display_name":"Stub file","level":3,"score":0.3111921548843384},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s11036-019-01441-1","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11036-019-01441-1","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11036-019-01441-1.pdf","source":{"id":"https://openalex.org/S192894947","display_name":"Mobile Networks and Applications","issn_l":"1383-469X","issn":["1383-469X","1572-8153"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Mobile Networks and Applications","raw_type":"journal-article"},{"id":"pmh:oai:fhs.brage.unit.no:11250/2690116","is_oa":true,"landing_page_url":"https://hdl.handle.net/11250/2690116","pdf_url":null,"source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal on spesial topics in mobile networks and applications","raw_type":"info:eu-repo/semantics/other"},{"id":"pmh:oai:ntnuopen.ntnu.no:11250/2636995","is_oa":true,"landing_page_url":"http://hdl.handle.net/11250/2636995","pdf_url":null,"source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal on spesial topics in mobile networks and applications","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1007/s11036-019-01441-1","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11036-019-01441-1","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11036-019-01441-1.pdf","source":{"id":"https://openalex.org/S192894947","display_name":"Mobile Networks and Applications","issn_l":"1383-469X","issn":["1383-469X","1572-8153"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Mobile Networks and Applications","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G851620125","display_name":null,"funder_award_id":"248094/O70","funder_id":"https://openalex.org/F4320323299","funder_display_name":"Norges Forskningsr\u00e5d"}],"funders":[{"id":"https://openalex.org/F4320323299","display_name":"Norges Forskningsr\u00e5d","ror":"https://ror.org/00epmv149"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2995693800.pdf","grobid_xml":"https://content.openalex.org/works/W2995693800.grobid-xml"},"referenced_works_count":20,"referenced_works":["https://openalex.org/W99794819","https://openalex.org/W134076915","https://openalex.org/W145064556","https://openalex.org/W1527287894","https://openalex.org/W1603441233","https://openalex.org/W1916709771","https://openalex.org/W2003205887","https://openalex.org/W2059504081","https://openalex.org/W2098596557","https://openalex.org/W2122956713","https://openalex.org/W2131465005","https://openalex.org/W2137833784","https://openalex.org/W2149286187","https://openalex.org/W2163809172","https://openalex.org/W2257449051","https://openalex.org/W2462319771","https://openalex.org/W2956279071","https://openalex.org/W2965218094","https://openalex.org/W3151741126","https://openalex.org/W3152703111"],"related_works":["https://openalex.org/W1990666357","https://openalex.org/W4313226861","https://openalex.org/W2342627122","https://openalex.org/W4210915796","https://openalex.org/W130417735","https://openalex.org/W2058294301","https://openalex.org/W3042208251","https://openalex.org/W4389858212","https://openalex.org/W2090783200","https://openalex.org/W2600623072"],"abstract_inverted_index":{"Abstract":[0],"The":[1,138,197,215],"allocation":[2,38,55,182],"algorithm":[3,39,56],"of":[4,16,40,95,130,201,217,221,234],"a":[5,9,153,173,177,202],"file":[6,46,114,154,160,165,174,194,205,237],"system":[7,115],"has":[8],"huge":[10],"impact":[11],"on":[12,26,36,74],"almost":[13],"all":[14],"aspects":[15],"digital":[17,225],"forensics,":[18],"because":[19],"it":[20],"determines":[21],"where":[22],"data":[23],"is":[24,31,142,161,195,206],"placed":[25],"storage":[27],"media.":[28],"Yet":[29],"there":[30],"only":[32,145],"basic":[33],"information":[34],"available":[35],"the":[37,41,53,82,88,107,134,164,180,193,218,224,232],"currently":[42],"most":[43],"widely":[44],"spread":[45],"system;":[47],"NTFS.":[48],"We":[49,169],"have":[50],"therefore":[51],"studied":[52],"NTFS":[54,75],"and":[57,72,87,106,210,228,239],"its":[58,186],"behavior":[59],"empirically.":[60],"To":[61],"do":[62],"that":[63,120,172],"we":[64],"used":[65],"two":[66,103],"virtual":[67,79],"machines":[68],"running":[69],"Windows":[70],"7":[71],"10":[73],"formatted":[76],"fixed":[77],"size":[78,132,141,191],"hard":[80],"disks,":[81],"first":[83,198],"being":[84],"64":[85],"GiB":[86],"latter":[89],"1":[90],"TiB":[91],"in":[92,140,190],"size.":[93],"Files":[94],"different":[96],"sizes":[97],"were":[98,110],"written":[99,122,162,175,204],"to":[100,112,213,223],"disk":[101],"using":[102],"writing":[104],"strategies":[105],"$Bitmap":[108],"files":[109,121,135],"manipulated":[111],"emulate":[113],"fragmentation.":[116],"Our":[117],"results":[118,216],"show":[119],"as":[123,176,192],"one":[124],"large":[125],"block":[126],"are":[127,136,188,220],"allocated":[128,199],"areas":[129],"decreasing":[131],"when":[133],"fragmented.":[137],"decrease":[139],"seen":[143],"not":[144],"within":[146],"files,":[147],"but":[148],"also":[149,170],"between":[150],"them.":[151],"Hence":[152],"having":[155,166],"smaller":[156],"fragments":[157,187],"than":[158],"another":[159],"after":[163],"larger":[167],"fragments.":[168],"found":[171],"stream":[178,203],"gets":[179],"opposite":[181],"behavior,":[183],"i.":[184],"e.":[185],"increasing":[189],"written.":[196],"unit":[200],"always":[207],"very":[208],"small":[209],"hence":[211],"easy":[212],"identify.":[214],"experiment":[219],"importance":[222],"forensics":[226],"field":[227],"will":[229],"help":[230],"improve":[231],"efficiency":[233],"for":[235],"example":[236],"carving":[238],"timestamp":[240],"verification.":[241]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2020,"cited_by_count":1}],"updated_date":"2026-06-19T15:47:20.252518","created_date":"2025-10-10T00:00:00"}