{"id":"https://openalex.org/W2003787057","doi":"https://doi.org/10.1108/imcs-11-2013-0080","title":"Forensic triage of email network narratives through visualisation","display_name":"Forensic triage of email network narratives through visualisation","publication_year":2014,"publication_date":"2014-10-07","ids":{"openalex":"https://openalex.org/W2003787057","doi":"https://doi.org/10.1108/imcs-11-2013-0080","mag":"2003787057"},"language":"en","primary_location":{"id":"doi:10.1108/imcs-11-2013-0080","is_oa":false,"landing_page_url":"https://doi.org/10.1108/imcs-11-2013-0080","pdf_url":null,"source":{"id":"https://openalex.org/S204075876","display_name":"Information Management & Computer Security","issn_l":"0968-5227","issn":["0968-5227","1758-5805"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Management & Computer Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://researchonline.ljmu.ac.uk/id/eprint/192/3/IMCSv1postrefereedversion.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5107411487","display_name":"J. S. Haggerty","orcid":"https://orcid.org/0000-0002-4806-3153"},"institutions":[{"id":"https://openalex.org/I54459138","display_name":"University of Salford","ror":"https://ror.org/01tmqtf75","country_code":"GB","type":"education","lineage":["https://openalex.org/I54459138"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"John Haggerty","raw_affiliation_strings":["School of Computing, Science and Engineering, University of Salford, Salford, Greater Manchester, UK","(School of Computing, Science and Engineering, University of Salford, Salford, Greater Manchester, UK)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing, Science and Engineering, University of Salford, Salford, Greater Manchester, UK","institution_ids":["https://openalex.org/I54459138"]},{"raw_affiliation_string":"(School of Computing, Science and Engineering, University of Salford, Salford, Greater Manchester, UK)","institution_ids":["https://openalex.org/I54459138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109461433","display_name":"Sheryllynne Haggerty","orcid":null},"institutions":[{"id":"https://openalex.org/I142263535","display_name":"University of Nottingham","ror":"https://ror.org/01ee9ar58","country_code":"GB","type":"education","lineage":["https://openalex.org/I142263535"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Sheryllynne Haggerty","raw_affiliation_strings":["School of Humanities, University of Nottingham, Nottingham, UK","School of Humanities, University of Nottingham, Nottingham, UK#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Humanities, University of Nottingham, Nottingham, UK","institution_ids":["https://openalex.org/I142263535"]},{"raw_affiliation_string":"School of Humanities, University of Nottingham, Nottingham, UK#TAB#","institution_ids":["https://openalex.org/I142263535"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5066867227","display_name":"Mark Taylor","orcid":"https://orcid.org/0000-0002-5647-426X"},"institutions":[{"id":"https://openalex.org/I63098007","display_name":"Liverpool John Moores University","ror":"https://ror.org/04zfme737","country_code":"GB","type":"education","lineage":["https://openalex.org/I63098007"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mark Taylor","raw_affiliation_strings":["School of Computing and Mathematical Sciences, Liverpool John Moores University, Liverpool, UK","School of Computing and Mathematical Sciences, Liverpool John Moores University - Liverpool, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing and Mathematical Sciences, Liverpool John Moores University, Liverpool, UK","institution_ids":["https://openalex.org/I63098007"]},{"raw_affiliation_string":"School of Computing and Mathematical Sciences, Liverpool John Moores University - Liverpool, UK","institution_ids":["https://openalex.org/I63098007"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2361,"has_fulltext":true,"cited_by_count":13,"citation_normalized_percentile":{"value":0.82853419,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"22","issue":"4","first_page":"358","last_page":"370"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9783999919891357,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/triage","display_name":"Triage","score":0.7849333882331848},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7511598467826843},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.7079346179962158},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.6393920183181763},{"id":"https://openalex.org/keywords/network-forensics","display_name":"Network forensics","score":0.6190676689147949},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.6132109761238098},{"id":"https://openalex.org/keywords/narrative","display_name":"Narrative","score":0.6081386804580688},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.48759785294532776},{"id":"https://openalex.org/keywords/data-visualization","display_name":"Data visualization","score":0.4692309498786926},{"id":"https://openalex.org/keywords/digital-evidence","display_name":"Digital evidence","score":0.42838144302368164},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4149738550186157},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.348755419254303},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.23924469947814941},{"id":"https://openalex.org/keywords/medicine","display_name":"Medicine","score":0.09955102205276489}],"concepts":[{"id":"https://openalex.org/C2777120189","wikidata":"https://www.wikidata.org/wiki/Q780067","display_name":"Triage","level":2,"score":0.7849333882331848},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7511598467826843},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.7079346179962158},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.6393920183181763},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.6190676689147949},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.6132109761238098},{"id":"https://openalex.org/C199033989","wikidata":"https://www.wikidata.org/wiki/Q1318295","display_name":"Narrative","level":2,"score":0.6081386804580688},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.48759785294532776},{"id":"https://openalex.org/C172367668","wikidata":"https://www.wikidata.org/wiki/Q6504956","display_name":"Data visualization","level":3,"score":0.4692309498786926},{"id":"https://openalex.org/C2781357168","wikidata":"https://www.wikidata.org/wiki/Q5276084","display_name":"Digital evidence","level":3,"score":0.42838144302368164},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4149738550186157},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.348755419254303},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.23924469947814941},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.09955102205276489},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C194828623","wikidata":"https://www.wikidata.org/wiki/Q2861470","display_name":"Emergency medicine","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1108/imcs-11-2013-0080","is_oa":false,"landing_page_url":"https://doi.org/10.1108/imcs-11-2013-0080","pdf_url":null,"source":{"id":"https://openalex.org/S204075876","display_name":"Information Management & Computer Security","issn_l":"0968-5227","issn":["0968-5227","1758-5805"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Management & Computer Security","raw_type":"journal-article"},{"id":"pmh:oai:researchonline.ljmu.ac.uk:192","is_oa":true,"landing_page_url":null,"pdf_url":"https://researchonline.ljmu.ac.uk/id/eprint/192/3/IMCSv1postrefereedversion.pdf","source":{"id":"https://openalex.org/S4306401246","display_name":"Liverpool John Moores University","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I63098007","host_organization_name":"Liverpool John Moores University","host_organization_lineage":["https://openalex.org/I63098007"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"},{"id":"pmh:oai:usir.salford.ac.uk:40588","is_oa":true,"landing_page_url":"http://usir.salford.ac.uk/id/eprint/40588/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401501","display_name":"University of Salford Institutional Repository (University of Salford)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I54459138","host_organization_name":"University of Salford","host_organization_lineage":["https://openalex.org/I54459138"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"}],"best_oa_location":{"id":"pmh:oai:researchonline.ljmu.ac.uk:192","is_oa":true,"landing_page_url":null,"pdf_url":"https://researchonline.ljmu.ac.uk/id/eprint/192/3/IMCSv1postrefereedversion.pdf","source":{"id":"https://openalex.org/S4306401246","display_name":"Liverpool John Moores University","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I63098007","host_organization_name":"Liverpool John Moores University","host_organization_lineage":["https://openalex.org/I63098007"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.4099999964237213,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2003787057.pdf","grobid_xml":"https://content.openalex.org/works/W2003787057.grobid-xml"},"referenced_works_count":23,"referenced_works":["https://openalex.org/W1718668302","https://openalex.org/W1990628890","https://openalex.org/W1993405431","https://openalex.org/W1998267875","https://openalex.org/W2021001446","https://openalex.org/W2043300008","https://openalex.org/W2049201511","https://openalex.org/W2051297055","https://openalex.org/W2063333689","https://openalex.org/W2063340904","https://openalex.org/W2064962717","https://openalex.org/W2070840891","https://openalex.org/W2078296622","https://openalex.org/W2108982845","https://openalex.org/W2110719115","https://openalex.org/W2129510823","https://openalex.org/W2133732756","https://openalex.org/W2148445031","https://openalex.org/W2157900633","https://openalex.org/W2174658193","https://openalex.org/W2397013671","https://openalex.org/W2544062440","https://openalex.org/W3144498961"],"related_works":["https://openalex.org/W4280533142","https://openalex.org/W138782056","https://openalex.org/W3197657744","https://openalex.org/W3083231950","https://openalex.org/W2174009075","https://openalex.org/W4319777530","https://openalex.org/W2923001438","https://openalex.org/W2283126197","https://openalex.org/W4287026789","https://openalex.org/W2003787057"],"abstract_inverted_index":{"Purpose":[0],"\u2013":[1,88,134,182,225],"The":[2,183,198],"purpose":[3],"of":[4,17,34,45,109,114,169,177,209,221,230,238,244,253],"this":[5,160,202,261],"paper":[6,90,203],"is":[7,83],"to":[8,30,58,94,105,119,127,144,171,213,249],"propose":[9],"a":[10,37,42,48,52,76,84,141,228,251],"novel":[11],"approach":[12,139,199],"that":[13,74,194],"automates":[14],"the":[15,32,92,95,107,110,136,155,162,172,205,241,255,263],"visualisation":[16,208,232,243],"both":[18],"quantitative":[19,245],"data":[20,25,64,131,152,248,267],"(the":[21,26],"network)":[22],"and":[23,51,60,72,99,174,207,217,246,259],"qualitative":[24,247],"content)":[27],"within":[28,149],"emails":[29],"aid":[31,214],"triage":[33,59,128,206],"evidence":[35,46,130,148],"during":[36,47],"forensics":[38,53,142,188],"investigation.":[39],"Email":[40],"remains":[41],"key":[43,103,165],"source":[44],"digital":[49,187],"investigation,":[50],"examiner":[54,143],"may":[55,124],"be":[56,125],"required":[57],"analyse":[61],"large":[62,129,150],"email":[63,97,151,196,210,266],"sets":[65],"for":[66,186,191],"evidence.":[67,179,223],"Current":[68],"practice":[69],"utilises":[70],"tools":[71],"techniques":[73],"require":[75],"manual":[77],"trawl":[78],"through":[79],"such":[80],"data,":[81],"which":[82],"time-consuming":[85],"process.":[86],"Design/methodology/approach":[87],"This":[89],"applies":[91],"methodology":[93],"Enron":[96],"corpus,":[98],"in":[100,159,201,234,265],"particular":[101],"one":[102],"suspect,":[104],"demonstrate":[106],"applicability":[108],"approach.":[111],"Resulting":[112],"visualisations":[113],"network":[115,122,137,211,231,264],"narratives":[116,123,212],"are":[117,185,227,257],"discussed":[118],"show":[120],"how":[121,260],"used":[126],"sets.":[132,153,268],"Findings":[133],"Using":[135],"narrative":[138],"enables":[140],"quickly":[145],"identify":[146,164,218],"relevant":[147],"Within":[154],"case":[156],"study":[157],"presented":[158],"paper,":[161],"results":[163],"witnesses,":[166],"other":[167],"actors":[168,256],"interest":[170],"investigation":[173,216],"potential":[175,219],"sources":[176,220],"further":[178],"Practical":[180],"implications":[181,184],"examiners":[189],"or":[190],"security":[192],"investigations":[193],"involve":[195],"data.":[197],"posited":[200],"demonstrates":[204],"an":[215],"electronic":[222],"Originality/value":[224],"There":[226],"number":[229],"applications":[233],"use.":[235],"However,":[236],"none":[237],"these":[239],"enable":[240],"combined":[242],"provide":[250],"view":[252],"what":[254],"discussing":[258],"shapes":[262]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":2},{"year":2014,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}