{"id":"https://openalex.org/W7117307710","doi":"https://doi.org/10.1007/s42979-025-04514-z","title":"Direct Kernel Virtual Address Space Forensics for Live Memory Analysis","display_name":"Direct Kernel Virtual Address Space Forensics for Live Memory Analysis","publication_year":2025,"publication_date":"2025-12-26","ids":{"openalex":"https://openalex.org/W7117307710","doi":"https://doi.org/10.1007/s42979-025-04514-z"},"language":"en","primary_location":{"id":"doi:10.1007/s42979-025-04514-z","is_oa":false,"landing_page_url":"https://doi.org/10.1007/s42979-025-04514-z","pdf_url":null,"source":{"id":"https://openalex.org/S4210174798","display_name":"SN Computer Science","issn_l":"2661-8907","issn":["2661-8907","2662-995X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"SN Computer Science","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5108937990","display_name":"Anh-Khoa Nguyen","orcid":null},"institutions":[{"id":"https://openalex.org/I123565023","display_name":"Vietnam National University Ho Chi Minh City","ror":"https://ror.org/00waaqh38","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023"]},{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]},{"id":"https://openalex.org/I4210104442","display_name":"Ho Chi Minh City University of Education","ror":"https://ror.org/01cs0jg44","country_code":"VN","type":"education","lineage":["https://openalex.org/I4210104442"]},{"id":"https://openalex.org/I47265099","display_name":"Ho Chi Minh City University of Technology","ror":"https://ror.org/04qva2324","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023","https://openalex.org/I47265099"]}],"countries":["SG","VN"],"is_corresponding":true,"raw_author_name":"Anh-Khoa Nguyen","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Singapore, Singapore","Faculty of Computer Science and Engineering, Ho Chi Minh City University of Technology (HCMUT), 268 Ly Thuong Kiet Street, District 10, Ho Chi Minh, Vietnam","Verichains Lab, Ho Chi Minh, Vietnam","Vietnam National University Ho Chi Minh City, Linh Trung Ward, Thu Duc, Ho Chi Minh, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"Faculty of Computer Science and Engineering, Ho Chi Minh City University of Technology (HCMUT), 268 Ly Thuong Kiet Street, District 10, Ho Chi Minh, Vietnam","institution_ids":["https://openalex.org/I47265099"]},{"raw_affiliation_string":"Verichains Lab, Ho Chi Minh, Vietnam","institution_ids":["https://openalex.org/I4210104442"]},{"raw_affiliation_string":"Vietnam National University Ho Chi Minh City, Linh Trung Ward, Thu Duc, Ho Chi Minh, Vietnam","institution_ids":["https://openalex.org/I123565023"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114816343","display_name":"Tien-Dung Vo-Van","orcid":null},"institutions":[{"id":"https://openalex.org/I123565023","display_name":"Vietnam National University Ho Chi Minh City","ror":"https://ror.org/00waaqh38","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023"]},{"id":"https://openalex.org/I47265099","display_name":"Ho Chi Minh City University of Technology","ror":"https://ror.org/04qva2324","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023","https://openalex.org/I47265099"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Tien-Dung Vo-Van","raw_affiliation_strings":["Faculty of Computer Science and Engineering, Ho Chi Minh City University of Technology (HCMUT), 268 Ly Thuong Kiet Street, District 10, Ho Chi Minh, Vietnam","Vietnam National University Ho Chi Minh City, Linh Trung Ward, Thu Duc, Ho Chi Minh, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computer Science and Engineering, Ho Chi Minh City University of Technology (HCMUT), 268 Ly Thuong Kiet Street, District 10, Ho Chi Minh, Vietnam","institution_ids":["https://openalex.org/I47265099"]},{"raw_affiliation_string":"Vietnam National University Ho Chi Minh City, Linh Trung Ward, Thu Duc, Ho Chi Minh, Vietnam","institution_ids":["https://openalex.org/I123565023"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033116193","display_name":"Anh-Quynh Nguyen","orcid":null},"institutions":[{"id":"https://openalex.org/I123565023","display_name":"Vietnam National University Ho Chi Minh City","ror":"https://ror.org/00waaqh38","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023"]},{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]},{"id":"https://openalex.org/I4210104442","display_name":"Ho Chi Minh City University of Education","ror":"https://ror.org/01cs0jg44","country_code":"VN","type":"education","lineage":["https://openalex.org/I4210104442"]},{"id":"https://openalex.org/I47265099","display_name":"Ho Chi Minh City University of Technology","ror":"https://ror.org/04qva2324","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023","https://openalex.org/I47265099"]}],"countries":["SG","VN"],"is_corresponding":false,"raw_author_name":"Anh-Quynh Nguyen","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Singapore, Singapore","Faculty of Computer Science and Engineering, Ho Chi Minh City University of Technology (HCMUT), 268 Ly Thuong Kiet Street, District 10, Ho Chi Minh, Vietnam","Verichains Lab, Ho Chi Minh, Vietnam","Vietnam National University Ho Chi Minh City, Linh Trung Ward, Thu Duc, Ho Chi Minh, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]},{"raw_affiliation_string":"Faculty of Computer Science and Engineering, Ho Chi Minh City University of Technology (HCMUT), 268 Ly Thuong Kiet Street, District 10, Ho Chi Minh, Vietnam","institution_ids":["https://openalex.org/I47265099"]},{"raw_affiliation_string":"Verichains Lab, Ho Chi Minh, Vietnam","institution_ids":["https://openalex.org/I4210104442"]},{"raw_affiliation_string":"Vietnam National University Ho Chi Minh City, Linh Trung Ward, Thu Duc, Ho Chi Minh, Vietnam","institution_ids":["https://openalex.org/I123565023"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066684139","display_name":"Thanh Nguyen-Le","orcid":null},"institutions":[{"id":"https://openalex.org/I4210104442","display_name":"Ho Chi Minh City University of Education","ror":"https://ror.org/01cs0jg44","country_code":"VN","type":"education","lineage":["https://openalex.org/I4210104442"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Thanh Nguyen-Le","raw_affiliation_strings":["Verichains Lab, Ho Chi Minh, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Verichains Lab, Ho Chi Minh, Vietnam","institution_ids":["https://openalex.org/I4210104442"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053366173","display_name":"Dinh-Thuan Le","orcid":null},"institutions":[{"id":"https://openalex.org/I123565023","display_name":"Vietnam National University Ho Chi Minh City","ror":"https://ror.org/00waaqh38","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023"]},{"id":"https://openalex.org/I47265099","display_name":"Ho Chi Minh City University of Technology","ror":"https://ror.org/04qva2324","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023","https://openalex.org/I47265099"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Dinh-Thuan Le","raw_affiliation_strings":["Faculty of Computer Science and Engineering, Ho Chi Minh City University of Technology (HCMUT), 268 Ly Thuong Kiet Street, District 10, Ho Chi Minh, Vietnam","Vietnam National University Ho Chi Minh City, Linh Trung Ward, Thu Duc, Ho Chi Minh, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computer Science and Engineering, Ho Chi Minh City University of Technology (HCMUT), 268 Ly Thuong Kiet Street, District 10, Ho Chi Minh, Vietnam","institution_ids":["https://openalex.org/I47265099"]},{"raw_affiliation_string":"Vietnam National University Ho Chi Minh City, Linh Trung Ward, Thu Duc, Ho Chi Minh, Vietnam","institution_ids":["https://openalex.org/I123565023"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052816964","display_name":"Khuong Nguyen-An","orcid":"https://orcid.org/0000-0002-9910-6387"},"institutions":[{"id":"https://openalex.org/I123565023","display_name":"Vietnam National University Ho Chi Minh City","ror":"https://ror.org/00waaqh38","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023"]},{"id":"https://openalex.org/I47265099","display_name":"Ho Chi Minh City University of Technology","ror":"https://ror.org/04qva2324","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023","https://openalex.org/I47265099"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Khuong Nguyen-An","raw_affiliation_strings":["Faculty of Computer Science and Engineering, Ho Chi Minh City University of Technology (HCMUT), 268 Ly Thuong Kiet Street, District 10, Ho Chi Minh, Vietnam","Vietnam National University Ho Chi Minh City, Linh Trung Ward, Thu Duc, Ho Chi Minh, Vietnam"],"raw_orcid":"https://orcid.org/0000-0002-9910-6387","affiliations":[{"raw_affiliation_string":"Faculty of Computer Science and Engineering, Ho Chi Minh City University of Technology (HCMUT), 268 Ly Thuong Kiet Street, District 10, Ho Chi Minh, Vietnam","institution_ids":["https://openalex.org/I47265099"]},{"raw_affiliation_string":"Vietnam National University Ho Chi Minh City, Linh Trung Ward, Thu Duc, Ho Chi Minh, Vietnam","institution_ids":["https://openalex.org/I123565023"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5108937990"],"corresponding_institution_ids":["https://openalex.org/I123565023","https://openalex.org/I172675005","https://openalex.org/I4210104442","https://openalex.org/I47265099"],"apc_list":{"value":2290,"currency":"EUR","value_usd":2890},"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.74342808,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"7","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9595999717712402,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9595999717712402,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13192","display_name":"Forensic Fingerprint Detection Methods","score":0.007899999618530273,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.006599999964237213,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/virtual-memory","display_name":"Virtual memory","score":0.6901999711990356},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.6556000113487244},{"id":"https://openalex.org/keywords/memory-footprint","display_name":"Memory footprint","score":0.6389999985694885},{"id":"https://openalex.org/keywords/memory-map","display_name":"Memory map","score":0.5267000198364258},{"id":"https://openalex.org/keywords/memory-management","display_name":"Memory management","score":0.5026000142097473},{"id":"https://openalex.org/keywords/memory-leak","display_name":"Memory leak","score":0.49239999055862427},{"id":"https://openalex.org/keywords/physical-address","display_name":"Physical address","score":0.47679999470710754},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.4602999985218048},{"id":"https://openalex.org/keywords/memory-protection","display_name":"Memory protection","score":0.45019999146461487}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7746999859809875},{"id":"https://openalex.org/C76399640","wikidata":"https://www.wikidata.org/wiki/Q189401","display_name":"Virtual memory","level":4,"score":0.6901999711990356},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.6556000113487244},{"id":"https://openalex.org/C74912251","wikidata":"https://www.wikidata.org/wiki/Q6815727","display_name":"Memory footprint","level":2,"score":0.6389999985694885},{"id":"https://openalex.org/C74426580","wikidata":"https://www.wikidata.org/wiki/Q719484","display_name":"Memory map","level":3,"score":0.5267000198364258},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.5026000142097473},{"id":"https://openalex.org/C156731835","wikidata":"https://www.wikidata.org/wiki/Q751740","display_name":"Memory leak","level":4,"score":0.49239999055862427},{"id":"https://openalex.org/C41036726","wikidata":"https://www.wikidata.org/wiki/Q844824","display_name":"Physical address","level":3,"score":0.47679999470710754},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.4602999985218048},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.45019999146461487},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.4413999915122986},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.4147999882698059},{"id":"https://openalex.org/C144240696","wikidata":"https://www.wikidata.org/wiki/Q367204","display_name":"Address space","level":2,"score":0.40119999647140503},{"id":"https://openalex.org/C57863822","wikidata":"https://www.wikidata.org/wiki/Q905488","display_name":"Flat memory model","level":4,"score":0.3801000118255615},{"id":"https://openalex.org/C153247305","wikidata":"https://www.wikidata.org/wiki/Q835713","display_name":"Memory address","level":3,"score":0.37950000166893005},{"id":"https://openalex.org/C171675096","wikidata":"https://www.wikidata.org/wiki/Q1143380","display_name":"Extended memory","level":4,"score":0.37439998984336853},{"id":"https://openalex.org/C2985957978","wikidata":"https://www.wikidata.org/wiki/Q492","display_name":"Human memory","level":3,"score":0.37380000948905945},{"id":"https://openalex.org/C30390489","wikidata":"https://www.wikidata.org/wiki/Q4680748","display_name":"Adaptive memory","level":3,"score":0.32260000705718994},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3122999966144562},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.3107999861240387},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.3019999861717224},{"id":"https://openalex.org/C90307666","wikidata":"https://www.wikidata.org/wiki/Q1932562","display_name":"sysfs","level":3,"score":0.29840001463890076},{"id":"https://openalex.org/C63511323","wikidata":"https://www.wikidata.org/wiki/Q908936","display_name":"Interleaved memory","level":4,"score":0.28850001096725464},{"id":"https://openalex.org/C28180684","wikidata":"https://www.wikidata.org/wiki/Q4080983","display_name":"Memory safety","level":3,"score":0.2793999910354614},{"id":"https://openalex.org/C136085584","wikidata":"https://www.wikidata.org/wiki/Q910289","display_name":"Overlay","level":2,"score":0.27880001068115234},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.2750000059604645},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.2524000108242035},{"id":"https://openalex.org/C186799414","wikidata":"https://www.wikidata.org/wiki/Q3494571","display_name":"Logical address","level":4,"score":0.2506999969482422}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s42979-025-04514-z","is_oa":false,"landing_page_url":"https://doi.org/10.1007/s42979-025-04514-z","pdf_url":null,"source":{"id":"https://openalex.org/S4210174798","display_name":"SN Computer Science","issn_l":"2661-8907","issn":["2661-8907","2662-995X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"SN Computer Science","raw_type":"journal-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/212460","is_oa":false,"landing_page_url":"https://hdl.handle.net/10356/212460","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6963082551956177,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W2040527645","https://openalex.org/W2140908857","https://openalex.org/W2152282261","https://openalex.org/W2242312968","https://openalex.org/W2314995052","https://openalex.org/W2544541072","https://openalex.org/W2959173014","https://openalex.org/W4307570965"],"related_works":[],"abstract_inverted_index":null,"counts_by_year":[],"updated_date":"2025-12-26T23:12:39.385286","created_date":"2025-12-26T00:00:00"}
