{"id":"https://openalex.org/W7104176803","doi":"https://doi.org/10.1016/j.fsidi.2025.302023","title":"Evaluating digital forensic findings in Trojan horse defense cases using Bayesian networks","display_name":"Evaluating digital forensic findings in Trojan horse defense cases using Bayesian networks","publication_year":2025,"publication_date":"2025-11-06","ids":{"openalex":"https://openalex.org/W7104176803","doi":"https://doi.org/10.1016/j.fsidi.2025.302023"},"language":"en","primary_location":{"id":"doi:10.1016/j.fsidi.2025.302023","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.fsidi.2025.302023","pdf_url":null,"source":{"id":"https://openalex.org/S4210178067","display_name":"Forensic Science International Digital Investigation","issn_l":"2666-2817","issn":["2666-2817","2666-2825"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Forensic Science International: Digital Investigation","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.fsidi.2025.302023","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Marouschka Vink","orcid":null},"institutions":[{"id":"https://openalex.org/I158244335","display_name":"Netherlands Forensic Institute","ror":"https://ror.org/04s2z4291","country_code":"NL","type":"facility","lineage":["https://openalex.org/I158244335"]},{"id":"https://openalex.org/I865915315","display_name":"Vrije Universiteit Amsterdam","ror":"https://ror.org/008xxew50","country_code":"NL","type":"education","lineage":["https://openalex.org/I865915315"]},{"id":"https://openalex.org/I887064364","display_name":"University of Amsterdam","ror":"https://ror.org/04dkp9463","country_code":"NL","type":"education","lineage":["https://openalex.org/I887064364"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Marouschka Vink","raw_affiliation_strings":["Korteweg-de Vries Institute, University of Amsterdam, Amsterdam, Netherlands","Netherlands Forensic Institute, The Hague, Netherlands"],"affiliations":[{"raw_affiliation_string":"Korteweg-de Vries Institute, University of Amsterdam, Amsterdam, Netherlands","institution_ids":["https://openalex.org/I865915315","https://openalex.org/I887064364"]},{"raw_affiliation_string":"Netherlands Forensic Institute, The Hague, Netherlands","institution_ids":["https://openalex.org/I158244335"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Ruud Schramp","orcid":null},"institutions":[{"id":"https://openalex.org/I158244335","display_name":"Netherlands Forensic Institute","ror":"https://ror.org/04s2z4291","country_code":"NL","type":"facility","lineage":["https://openalex.org/I158244335"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Ruud Schramp","raw_affiliation_strings":["Netherlands Forensic Institute, The Hague, Netherlands"],"affiliations":[{"raw_affiliation_string":"Netherlands Forensic Institute, The Hague, Netherlands","institution_ids":["https://openalex.org/I158244335"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Bas Kokshoorn","orcid":null},"institutions":[{"id":"https://openalex.org/I13089092","display_name":"Amsterdam University College","ror":"https://ror.org/03dpjfc73","country_code":"NL","type":"education","lineage":["https://openalex.org/I13089092"]},{"id":"https://openalex.org/I158244335","display_name":"Netherlands Forensic Institute","ror":"https://ror.org/04s2z4291","country_code":"NL","type":"facility","lineage":["https://openalex.org/I158244335"]},{"id":"https://openalex.org/I55106644","display_name":"Amsterdam University of Applied Sciences","ror":"https://ror.org/00y2z2s03","country_code":"NL","type":"education","lineage":["https://openalex.org/I55106644"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Bas Kokshoorn","raw_affiliation_strings":["Forensic Trace Dynamics, Faculty of Technology, Amsterdam University of Applied Sciences (AUAS), Amsterdam, Netherlands","Netherlands Forensic Institute, The Hague, Netherlands"],"affiliations":[{"raw_affiliation_string":"Forensic Trace Dynamics, Faculty of Technology, Amsterdam University of Applied Sciences (AUAS), Amsterdam, Netherlands","institution_ids":["https://openalex.org/I55106644","https://openalex.org/I13089092"]},{"raw_affiliation_string":"Netherlands Forensic Institute, The Hague, Netherlands","institution_ids":["https://openalex.org/I158244335"]}]},{"author_position":"last","author":{"id":null,"display_name":"Marjan J. Sjerps","orcid":null},"institutions":[{"id":"https://openalex.org/I158244335","display_name":"Netherlands Forensic Institute","ror":"https://ror.org/04s2z4291","country_code":"NL","type":"facility","lineage":["https://openalex.org/I158244335"]},{"id":"https://openalex.org/I865915315","display_name":"Vrije Universiteit Amsterdam","ror":"https://ror.org/008xxew50","country_code":"NL","type":"education","lineage":["https://openalex.org/I865915315"]},{"id":"https://openalex.org/I887064364","display_name":"University of Amsterdam","ror":"https://ror.org/04dkp9463","country_code":"NL","type":"education","lineage":["https://openalex.org/I887064364"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Marjan J. Sjerps","raw_affiliation_strings":["Korteweg-de Vries Institute, University of Amsterdam, Amsterdam, Netherlands","Netherlands Forensic Institute, The Hague, Netherlands"],"affiliations":[{"raw_affiliation_string":"Korteweg-de Vries Institute, University of Amsterdam, Amsterdam, Netherlands","institution_ids":["https://openalex.org/I865915315","https://openalex.org/I887064364"]},{"raw_affiliation_string":"Netherlands Forensic Institute, The Hague, Netherlands","institution_ids":["https://openalex.org/I158244335"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I158244335","https://openalex.org/I865915315","https://openalex.org/I887064364"],"apc_list":{"value":2950,"currency":"USD","value_usd":2950},"apc_paid":{"value":2950,"currency":"USD","value_usd":2950},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.69084785,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"55","issue":null,"first_page":"302023","last_page":"302023"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.7285000085830688,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.7285000085830688,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10751","display_name":"Forensic and Genetic Research","score":0.06310000270605087,"subfield":{"id":"https://openalex.org/subfields/1311","display_name":"Genetics"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}},{"id":"https://openalex.org/T13192","display_name":"Forensic Fingerprint Detection Methods","score":0.019899999722838402,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/trojan-horse","display_name":"Trojan horse","score":0.9136999845504761},{"id":"https://openalex.org/keywords/bayesian-network","display_name":"Bayesian network","score":0.8267999887466431},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.5554999709129333},{"id":"https://openalex.org/keywords/bayesian-probability","display_name":"Bayesian probability","score":0.5329999923706055},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.48969998955726624},{"id":"https://openalex.org/keywords/categorical-variable","display_name":"Categorical variable","score":0.4081000089645386},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3716999888420105}],"concepts":[{"id":"https://openalex.org/C2777337426","wikidata":"https://www.wikidata.org/wiki/Q14639","display_name":"Trojan horse","level":2,"score":0.9136999845504761},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.8267999887466431},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6198999881744385},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.5554999709129333},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.5329999923706055},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.48969998955726624},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46399998664855957},{"id":"https://openalex.org/C5274069","wikidata":"https://www.wikidata.org/wiki/Q2285707","display_name":"Categorical variable","level":2,"score":0.4081000089645386},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.39969998598098755},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3837999999523163},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3716999888420105},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3594000041484833},{"id":"https://openalex.org/C82142266","wikidata":"https://www.wikidata.org/wiki/Q3456604","display_name":"Dynamic Bayesian network","level":3,"score":0.3441999852657318},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.32339999079704285},{"id":"https://openalex.org/C160234255","wikidata":"https://www.wikidata.org/wiki/Q812535","display_name":"Bayesian inference","level":3,"score":0.3019999861717224},{"id":"https://openalex.org/C101112237","wikidata":"https://www.wikidata.org/wiki/Q4874481","display_name":"Bayesian statistics","level":4,"score":0.2669000029563904},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.26669999957084656},{"id":"https://openalex.org/C2781357168","wikidata":"https://www.wikidata.org/wiki/Q5276084","display_name":"Digital evidence","level":3,"score":0.25690001249313354},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.25679999589920044},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.2502000033855438}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1016/j.fsidi.2025.302023","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.fsidi.2025.302023","pdf_url":null,"source":{"id":"https://openalex.org/S4210178067","display_name":"Forensic Science International Digital Investigation","issn_l":"2666-2817","issn":["2666-2817","2666-2825"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Forensic Science International: Digital Investigation","raw_type":"journal-article"},{"id":"pmh:oai:dare.uva.nl:openaire/9a462dc7-e1f6-4c8b-9073-9bf820d5ee62","is_oa":true,"landing_page_url":"https://handle.uba.uva.nl/personal/pure/en/publications/evaluating-digital-forensic-findings-in-trojan-horse-defense-cases-using-bayesian-networks(9a462dc7-e1f6-4c8b-9073-9bf820d5ee62).html","pdf_url":null,"source":{"id":"https://openalex.org/S4306400088","display_name":"UvA-DARE (University of Amsterdam)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I887064364","host_organization_name":"University of Amsterdam","host_organization_lineage":["https://openalex.org/I887064364"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Vink, M, Schramp, R, Kokshoorn, B & Sjerps, M J 2025, 'Evaluating digital forensic findings in Trojan horse defense cases using Bayesian networks', Forensic Science International: Digital Investigation, vol. 55, 302023. https://doi.org/10.1016/j.fsidi.2025.302023","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":{"id":"doi:10.1016/j.fsidi.2025.302023","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.fsidi.2025.302023","pdf_url":null,"source":{"id":"https://openalex.org/S4210178067","display_name":"Forensic Science International Digital Investigation","issn_l":"2666-2817","issn":["2666-2817","2666-2825"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Forensic Science International: Digital Investigation","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6279443502426147,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W1486612074","https://openalex.org/W1539216639","https://openalex.org/W1974323608","https://openalex.org/W2021732238","https://openalex.org/W2048232735","https://openalex.org/W2048524363","https://openalex.org/W2055940071","https://openalex.org/W2109216626","https://openalex.org/W2123782123","https://openalex.org/W2125744756","https://openalex.org/W2154899717","https://openalex.org/W2161686340","https://openalex.org/W2477497102","https://openalex.org/W2494610647","https://openalex.org/W2498676545","https://openalex.org/W2559853671","https://openalex.org/W2731301994","https://openalex.org/W2772285706","https://openalex.org/W2796436783","https://openalex.org/W2900731931","https://openalex.org/W2935248465","https://openalex.org/W2964047248","https://openalex.org/W2981140894","https://openalex.org/W3024614833","https://openalex.org/W3126160358","https://openalex.org/W3174820259","https://openalex.org/W4240199441","https://openalex.org/W4391069715","https://openalex.org/W4391820468","https://openalex.org/W4402035686","https://openalex.org/W4407782323"],"related_works":[],"abstract_inverted_index":{"Digital":[0],"forensic":[1,44,66,168,176,198],"scientists":[2],"primarily":[3],"rely":[4],"on":[5,155],"individual":[6],"internal":[7],"reasoning":[8,25,235],"and":[9,32,70,101,143,233],"categorical":[10],"conclusions":[11],"when":[12],"evaluating":[13,42],"evidence":[14,137],"in":[15,41,49,88,138,166,183],"casework.":[16,169],"This":[17,171,227],"can":[18,146,200],"make":[19],"it":[20],"difficult":[21],"to":[22,84,97,131,179,204],"maintain":[23],"structured":[24,219],"that":[26,125,144,191],"is":[27,52],"logically":[28,58],"sound,":[29],"balanced,":[30,231],"robust,":[31,232],"transparent.":[33],"Trojan":[34,89,139,184,205],"horse":[35,90,140,185,206],"defense":[36,91,141,186,207],"cases":[37,51,142],"exemplify":[38],"these":[39,75,126],"challenges":[40],"digital":[43,86,136,167,175,215],"findings.":[45],"The":[46,210],"key":[47],"challenge":[48],"such":[50],"combining":[53],"multiple":[54,214],"observations":[55],"into":[56],"a":[57,103,116,120,174,218,222],"sound":[59],"probabilistic":[60],"evaluation":[61,100,134],"while":[62],"maintaining":[63],"an":[64],"understandable":[65],"report":[67],"for":[68,150,196],"court":[69],"other":[71],"recipients.":[72],"To":[73],"address":[74],"challenges,":[76],"we":[77,158],"propose":[78],"using":[79],"the":[80,99,113,133],"likelihood":[81,104],"ratio":[82],"framework":[83,220],"evaluate":[85],"findings":[87,216],"cases,":[92],"with":[93],"Bayesian":[94,117,164,181,193,211],"networks":[95,127,165,182,194],"serving":[96],"visualize":[98],"derive":[102],"ratio.":[105],"We":[106,123,189],"will":[107],"illustrate":[108],"this":[109],"approach":[110,228],"by":[111],"demonstrating":[112],"construction":[114],"of":[115,135,163,224],"network":[118,212],"through":[119],"case":[121,152],"example.":[122],"show":[124],"are":[128],"very":[129],"suitable":[130],"model":[132],"they":[145],"be":[147,201],"easily":[148],"adapted":[149],"various":[151],"circumstances.":[153],"Based":[154],"our":[156],"findings,":[157],"strongly":[159],"recommend":[160],"broader":[161],"exploration":[162],"\u2022":[170,188,209,226],"paper":[172],"provides":[173],"practitioner\u2019s":[177],"guide":[178],"modeling":[180],"cases.":[187,208],"demonstrate":[190],"template":[192],"developed":[195],"physical":[197],"disciplines":[199],"effectively":[202],"applied":[203],"combines":[213],"within":[217],"given":[221],"set":[223],"propositions.":[225],"offers":[229],"logical,":[230],"transparent":[234],"under":[236],"uncertainty.":[237]},"counts_by_year":[],"updated_date":"2026-03-17T09:09:15.849793","created_date":"2025-11-06T00:00:00"}