{"id":"https://openalex.org/W4212905105","doi":"https://doi.org/10.1093/jigpal/jzac012","title":"An efficient IoT forensic approach for the evidence acquisition and analysis based on network link","display_name":"An efficient IoT forensic approach for the evidence acquisition and analysis based on network link","publication_year":2022,"publication_date":"2022-02-17","ids":{"openalex":"https://openalex.org/W4212905105","doi":"https://doi.org/10.1093/jigpal/jzac012"},"language":"en","primary_location":{"id":"doi:10.1093/jigpal/jzac012","is_oa":false,"landing_page_url":"https://doi.org/10.1093/jigpal/jzac012","pdf_url":null,"source":{"id":"https://openalex.org/S2734381524","display_name":"Logic Journal of IGPL","issn_l":"1367-0751","issn":["1367-0751","1368-9894"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Logic Journal of the IGPL","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003504712","display_name":"Saad Khalid Alabdulsalam","orcid":null},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":true,"raw_author_name":"Saad Khalid Alabdulsalam","raw_affiliation_strings":["University College Dublin , Dublin, Ireland"],"affiliations":[{"raw_affiliation_string":"University College Dublin , Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049089848","display_name":"Trung Q. Duong","orcid":"https://orcid.org/0000-0002-4703-4836"},"institutions":[{"id":"https://openalex.org/I126231945","display_name":"Queen's University Belfast","ror":"https://ror.org/00hswnk62","country_code":"GB","type":"education","lineage":["https://openalex.org/I126231945"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Trung Q Duong","raw_affiliation_strings":["Queen Belfast University , Belfast, UK"],"affiliations":[{"raw_affiliation_string":"Queen Belfast University , Belfast, UK","institution_ids":["https://openalex.org/I126231945"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001746807","display_name":"Kim\u2010Kwang Raymond Choo","orcid":"https://orcid.org/0000-0001-9208-5336"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kim-Kwang Raymond Choo","raw_affiliation_strings":["University of Texas at San Antonio , San Antonio, TX, USA"],"affiliations":[{"raw_affiliation_string":"University of Texas at San Antonio , San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073189627","display_name":"Nhien\u2010An Le\u2010Khac","orcid":"https://orcid.org/0000-0003-4373-2212"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Nhien-An Le-Khac","raw_affiliation_strings":["University College Dublin , Dublin, Ireland"],"affiliations":[{"raw_affiliation_string":"University College Dublin , Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5003504712"],"corresponding_institution_ids":["https://openalex.org/I100930933"],"apc_list":{"value":4151,"currency":"USD","value_usd":4151},"apc_paid":null,"fwci":2.1211,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.89254998,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":96},"biblio":{"volume":"30","issue":"6","first_page":"1041","last_page":"1055"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8386427164077759},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.6898722648620605},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5535870790481567},{"id":"https://openalex.org/keywords/wireless","display_name":"Wireless","score":0.5252465605735779},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.5041700601577759},{"id":"https://openalex.org/keywords/wireless-network","display_name":"Wireless network","score":0.48517781496047974},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4757477939128876},{"id":"https://openalex.org/keywords/network-forensics","display_name":"Network forensics","score":0.4664314091205597},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4588063955307007},{"id":"https://openalex.org/keywords/proof-of-concept","display_name":"Proof of concept","score":0.4285820722579956},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.4121239185333252},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3493196368217468},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.1851239800453186},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.1689947247505188},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.16503369808197021}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8386427164077759},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.6898722648620605},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5535870790481567},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.5252465605735779},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.5041700601577759},{"id":"https://openalex.org/C108037233","wikidata":"https://www.wikidata.org/wiki/Q11375","display_name":"Wireless network","level":3,"score":0.48517781496047974},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4757477939128876},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.4664314091205597},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4588063955307007},{"id":"https://openalex.org/C124978682","wikidata":"https://www.wikidata.org/wiki/Q1201019","display_name":"Proof of concept","level":2,"score":0.4285820722579956},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.4121239185333252},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3493196368217468},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.1851239800453186},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.1689947247505188},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.16503369808197021},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1093/jigpal/jzac012","is_oa":false,"landing_page_url":"https://doi.org/10.1093/jigpal/jzac012","pdf_url":null,"source":{"id":"https://openalex.org/S2734381524","display_name":"Logic Journal of IGPL","issn_l":"1367-0751","issn":["1367-0751","1368-9894"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Logic Journal of the IGPL","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.550000011920929}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W1994506898","https://openalex.org/W2053550965","https://openalex.org/W2216564370","https://openalex.org/W2526931032","https://openalex.org/W2532424365","https://openalex.org/W2555871483","https://openalex.org/W2591712613","https://openalex.org/W2790909851","https://openalex.org/W2886320151","https://openalex.org/W2896075375","https://openalex.org/W2940523353","https://openalex.org/W2940534673","https://openalex.org/W2946519725","https://openalex.org/W2959564865","https://openalex.org/W2962923137","https://openalex.org/W2980558733","https://openalex.org/W2995139505","https://openalex.org/W3048638183","https://openalex.org/W3176207025","https://openalex.org/W4243605135","https://openalex.org/W4246565755","https://openalex.org/W4251866715","https://openalex.org/W4253269957","https://openalex.org/W6734080319","https://openalex.org/W6748270191","https://openalex.org/W6749243267","https://openalex.org/W6755209532","https://openalex.org/W6756726924","https://openalex.org/W6762696991","https://openalex.org/W6765659519","https://openalex.org/W6781824710"],"related_works":["https://openalex.org/W4245926026","https://openalex.org/W2586548817","https://openalex.org/W4311097251","https://openalex.org/W2625093826","https://openalex.org/W2950174689","https://openalex.org/W4200598720","https://openalex.org/W2921026492","https://openalex.org/W4361251261","https://openalex.org/W3031181660","https://openalex.org/W4285201139"],"abstract_inverted_index":{"Abstract":[0],"In":[1],"an":[2,76,126,166,199],"Internet":[3],"of":[4,30,60,99,147,155,177,202,217,235,250],"Things":[5],"(IoT)":[6],"environment,":[7],"IoT":[8,77,92,106,139,181,190,218,253],"devices":[9,107,191,219,254],"are":[10,34],"typically":[11],"connected":[12],"through":[13],"different":[14,105,244,252],"network":[15,78,149,157,226],"media":[16],"types":[17],"such":[18,31,165],"as":[19],"mobile,":[20],"wireless":[21],"and":[22,43,52,66,124,158,197,220],"wired":[23],"networks.":[24],"Due":[25],"to":[26,50,89,128,143,183],"the":[27,81,97,102,122,145,153,156,159,206,213],"pervasive":[28],"nature":[29],"devices,":[32,61],"they":[33],"a":[35,57,135,175,193,224,232,236],"potential":[36],"evidence":[37],"source":[38],"in":[39,70,121,171,192,223,242],"both":[40],"civil":[41],"litigation":[42],"criminal":[44],"investigations.":[45],"It":[46],"is,":[47],"however,":[48],"challenging":[49],"identify":[51],"acquire":[53],"forensic":[54,82],"artefacts":[55],"from":[56,118,231],"broad":[58],"range":[59],"which":[62],"have":[63],"varying":[64],"storage":[65],"communication":[67],"capabilities.":[68],"Hence,":[69],"this":[71,256],"paper,":[72],"we":[73,95,173],"first":[74],"propose":[75],"architecture":[79],"for":[80,137,187,204,255],"purpose":[83],"that":[84],"uses":[85],"machine":[86],"learning":[87],"algorithms":[88],"autonomously":[90],"detect":[91],"devices.":[93,209],"Then":[94],"posit":[96],"importance":[98],"focusing":[100],"on":[101,152],"links":[103,207],"between":[104,208],"(e.g.":[108],"whether":[109],"one":[110],"device":[111,120],"is":[112],"controlled":[113],"or":[114],"can":[115,168],"be":[116,169],"accessed":[117],"another":[119],"system),":[123],"design":[125],"approach":[127,133,167],"do":[129],"so.":[130],"Specifically,":[131],"our":[132],"adopts":[134],"graph":[136],"modelling":[138],"communications\u2019":[140],"message":[141],"flows":[142],"facilitate":[144],"identification":[146],"correlated":[148],"traffic":[150],"based":[151],"direction":[154],"associated":[160],"attributes.":[161],"To":[162],"demonstrate":[163],"how":[164],"deployed":[170,241],"practice,":[172],"provide":[174],"proof":[176],"concept":[178],"using":[179,228],"two":[180,189,243],"controllers":[182],"generate":[184],"480":[185],"commands":[186],"controlling":[188],"smart":[194,239],"home":[195,240],"environment":[196],"achieve":[198],"accuracy":[200],"rate":[201],"98.3%":[203],"detecting":[205],"We":[210,246],"also":[211],"evaluate":[212],"proposed":[214],"autonomous":[215],"discovering":[216],"their":[221],"activities":[222],"TCP":[225],"by":[227],"real-world":[229],"measurements":[230],"public":[233],"dataset":[234],"popular":[237],"off-the-shelf":[238],"locations.":[245],"selected":[247],"39":[248],"out":[249],"81":[251],"evaluation.":[257]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}