{"id":"https://openalex.org/W2763255326","doi":"https://doi.org/10.1109/access.2017.2759766","title":"Process Memory Investigation of the Bitcoin Clients Electrum and Bitcoin Core","display_name":"Process Memory Investigation of the Bitcoin Clients Electrum and Bitcoin Core","publication_year":2017,"publication_date":"2017-01-01","ids":{"openalex":"https://openalex.org/W2763255326","doi":"https://doi.org/10.1109/access.2017.2759766","mag":"2763255326"},"language":"en","primary_location":{"id":"doi:10.1109/access.2017.2759766","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2017.2759766","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2017.2759766","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014325504","display_name":"Luuc Van Der Horst","orcid":null},"institutions":[{"id":"https://openalex.org/I4210106878","display_name":"Korps Landelijke Politiediensten","ror":"https://ror.org/01trfzy92","country_code":"NL","type":"government","lineage":["https://openalex.org/I4210101771","https://openalex.org/I4210106878","https://openalex.org/I4210140876"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Luuc Van Der Horst","raw_affiliation_strings":["Dutch National Police, Driebergen, AA, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dutch National Police, Driebergen, AA, The Netherlands","institution_ids":["https://openalex.org/I4210106878"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001746807","display_name":"Kim\u2010Kwang Raymond Choo","orcid":"https://orcid.org/0000-0001-9208-5336"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kim-Kwang Raymond Choo","raw_affiliation_strings":["Department of Information Systems and Cyber Security, University of Texas at San Antonio, San Antonio, TX, USA"],"raw_orcid":"https://orcid.org/0000-0001-9208-5336","affiliations":[{"raw_affiliation_string":"Department of Information Systems and Cyber Security, University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073189627","display_name":"Nhien\u2010An Le\u2010Khac","orcid":"https://orcid.org/0000-0003-4373-2212"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Nhien-An Le-Khac","raw_affiliation_strings":["School of Computer Science, University College Dublin, Dublin 4, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, University College Dublin, Dublin 4, Ireland","institution_ids":["https://openalex.org/I100930933"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":11.4084,"has_fulltext":false,"cited_by_count":71,"citation_normalized_percentile":{"value":0.98389711,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"5","issue":null,"first_page":"22385","last_page":"22398"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cryptocurrency","display_name":"Cryptocurrency","score":0.7064017057418823},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7043710350990295},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6189873814582825},{"id":"https://openalex.org/keywords/ransom","display_name":"Ransom","score":0.5901987552642822},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5739988088607788},{"id":"https://openalex.org/keywords/database-transaction","display_name":"Database transaction","score":0.5231651067733765},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.5176180601119995},{"id":"https://openalex.org/keywords/digital-evidence","display_name":"Digital evidence","score":0.44006478786468506},{"id":"https://openalex.org/keywords/core","display_name":"Core (optical fiber)","score":0.43721845746040344},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.35050997138023376},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3494468927383423},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3274194002151489},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.12395992875099182}],"concepts":[{"id":"https://openalex.org/C180706569","wikidata":"https://www.wikidata.org/wiki/Q13479982","display_name":"Cryptocurrency","level":2,"score":0.7064017057418823},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7043710350990295},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6189873814582825},{"id":"https://openalex.org/C2781426709","wikidata":"https://www.wikidata.org/wiki/Q1414572","display_name":"Ransom","level":2,"score":0.5901987552642822},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5739988088607788},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.5231651067733765},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.5176180601119995},{"id":"https://openalex.org/C2781357168","wikidata":"https://www.wikidata.org/wiki/Q5276084","display_name":"Digital evidence","level":3,"score":0.44006478786468506},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.43721845746040344},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.35050997138023376},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3494468927383423},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3274194002151489},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.12395992875099182},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2017.2759766","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2017.2759766","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:82024c2e11714645ad0a2f8c0cb4502c","is_oa":true,"landing_page_url":"https://doaj.org/article/82024c2e11714645ad0a2f8c0cb4502c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 5, Pp 22385-22398 (2017)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2017.2759766","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2017.2759766","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6800000071525574}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W919859439","https://openalex.org/W1695856642","https://openalex.org/W1994130174","https://openalex.org/W2022932831","https://openalex.org/W2184265472","https://openalex.org/W2473446475","https://openalex.org/W2483024783","https://openalex.org/W2557698442","https://openalex.org/W2749305344","https://openalex.org/W2754931682","https://openalex.org/W2963621967","https://openalex.org/W4248175462","https://openalex.org/W4251996605","https://openalex.org/W6624582754"],"related_works":["https://openalex.org/W5341801","https://openalex.org/W2548287415","https://openalex.org/W4247205791","https://openalex.org/W2957710009","https://openalex.org/W2181728705","https://openalex.org/W4288054526","https://openalex.org/W1604717907","https://openalex.org/W4205890227","https://openalex.org/W3122539278","https://openalex.org/W2611755027"],"abstract_inverted_index":{"Bitcoin":[0],"cryptocurrency":[1],"is":[2,55,117],"reportedly":[3],"one":[4],"widely":[5],"used":[6,13],"digital":[7],"currency":[8],"in":[9,24,37,129],"criminal":[10],"activities":[11],"(e.g.":[12,70],"for":[14],"online":[15],"purchases":[16],"of":[17,22,34,46,60,66,121,125],"illicit":[18],"drugs":[19],"and":[20,53,64,75,98,101,113,123,138],"paying":[21],"ransom":[23],"ransomware":[25],"cases).":[26],"However,":[27],"there":[28],"has":[29],"been":[30],"limited":[31],"forensic":[32],"research":[33],"bitcoin":[35,49,51,71,111],"clients":[36],"the":[38,43,58,80,91,126,136,142],"literature.":[39],"In":[40],"this":[41,106],"paper,":[42],"process":[44,81,115,130],"memory":[45,82,116,131],"two":[47],"popular":[48],"clients,":[50],"Core":[52,112],"electrum,":[54],"examined":[56],"with":[57,86],"aims":[59],"identifying":[61],"potential":[62,67],"sources":[63],"types":[65],"relevant":[68],"data":[69,74],"keys,":[72],"transaction":[73],"passphrases).":[76],"Artefacts":[77],"obtained":[78,89],"from":[79,90,105,135],"are":[83,132],"also":[84,133],"studied":[85],"other":[87],"artefacts":[88,127],"client":[92,143],"device":[93,144],"(application":[94],"files":[95,100,140],"on":[96,141],"disk":[97],"memory-mapped":[99],"registry":[102],"keys).":[103],"Findings":[104],"study":[107],"suggest":[108],"that":[109],"both":[110],"electrum's":[114],"a":[118],"valuable":[119],"source":[120],"evidence,":[122],"many":[124],"found":[128],"available":[134],"application":[137],"wallet":[139],"(disk).":[145]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":12},{"year":2020,"cited_by_count":8},{"year":2019,"cited_by_count":9},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}