{"id":"https://openalex.org/W2982130953","doi":"https://doi.org/10.1109/access.2019.2948774","title":"An Automated Live Forensic and Postmortem Analysis Tool for Bitcoin on Windows Systems","display_name":"An Automated Live Forensic and Postmortem Analysis Tool for Bitcoin on Windows Systems","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2982130953","doi":"https://doi.org/10.1109/access.2019.2948774","mag":"2982130953"},"language":"en","primary_location":{"id":"doi:10.1109/access.2019.2948774","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2948774","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08878085.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08878085.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5016740582","display_name":"Stephan Z\u00f6llner","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Stephan Zollner","raw_affiliation_strings":["Bavarian Police Institute for Further Education, Training Institute of the Bavarian Police, Ainring, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bavarian Police Institute for Further Education, Training Institute of the Bavarian Police, Ainring, Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001746807","display_name":"Kim\u2010Kwang Raymond Choo","orcid":"https://orcid.org/0000-0001-9208-5336"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kim-Kwang Raymond Choo","raw_affiliation_strings":["Department of Information Systems and Cyber Security, University of Texas at San Antonio, San Antonio, USA"],"raw_orcid":"https://orcid.org/0000-0001-9208-5336","affiliations":[{"raw_affiliation_string":"Department of Information Systems and Cyber Security, University of Texas at San Antonio, San Antonio, USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5073189627","display_name":"Nhien\u2010An Le\u2010Khac","orcid":"https://orcid.org/0000-0003-4373-2212"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Nhien-An Le-Khac","raw_affiliation_strings":["School of Computer Science, University College Dublin, Dublin 4, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, University College Dublin, Dublin 4, Ireland","institution_ids":["https://openalex.org/I100930933"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":5.5108,"has_fulltext":true,"cited_by_count":35,"citation_normalized_percentile":{"value":0.96117557,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":"7","issue":null,"first_page":"158250","last_page":"158263"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.982200026512146,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7169884443283081},{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.6549100279808044},{"id":"https://openalex.org/keywords/computer-forensics","display_name":"Computer forensics","score":0.6399267911911011},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.5914306044578552},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.5405193567276001},{"id":"https://openalex.org/keywords/extortion","display_name":"Extortion","score":0.5398191213607788},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5032941699028015},{"id":"https://openalex.org/keywords/open-source","display_name":"Open source","score":0.46756917238235474},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.46396175026893616},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.437455952167511},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.43213218450546265},{"id":"https://openalex.org/keywords/cybercrime","display_name":"Cybercrime","score":0.423734188079834},{"id":"https://openalex.org/keywords/cryptocurrency","display_name":"Cryptocurrency","score":0.42271965742111206},{"id":"https://openalex.org/keywords/forensic-science","display_name":"Forensic science","score":0.41945427656173706},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.21202072501182556},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.18184348940849304},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09819459915161133},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.09256359934806824}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7169884443283081},{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.6549100279808044},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.6399267911911011},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.5914306044578552},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.5405193567276001},{"id":"https://openalex.org/C2779066997","wikidata":"https://www.wikidata.org/wiki/Q6452087","display_name":"Extortion","level":2,"score":0.5398191213607788},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5032941699028015},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.46756917238235474},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.46396175026893616},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.437455952167511},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.43213218450546265},{"id":"https://openalex.org/C2779390178","wikidata":"https://www.wikidata.org/wiki/Q29137","display_name":"Cybercrime","level":3,"score":0.423734188079834},{"id":"https://openalex.org/C180706569","wikidata":"https://www.wikidata.org/wiki/Q13479982","display_name":"Cryptocurrency","level":2,"score":0.42271965742111206},{"id":"https://openalex.org/C140505726","wikidata":"https://www.wikidata.org/wiki/Q495304","display_name":"Forensic science","level":2,"score":0.41945427656173706},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.21202072501182556},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.18184348940849304},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09819459915161133},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.09256359934806824},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2019.2948774","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2948774","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08878085.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:1f300de1fb1c42d1807b535f2e8d0dc8","is_oa":true,"landing_page_url":"https://doaj.org/article/1f300de1fb1c42d1807b535f2e8d0dc8","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 7, Pp 158250-158263 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2019.2948774","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2948774","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08878085.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7799999713897705}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2982130953.pdf","grobid_xml":"https://content.openalex.org/works/W2982130953.grobid-xml"},"referenced_works_count":12,"referenced_works":["https://openalex.org/W2270757519","https://openalex.org/W2561790816","https://openalex.org/W2614305404","https://openalex.org/W2763255326","https://openalex.org/W2889271520","https://openalex.org/W2894701659","https://openalex.org/W2945978829","https://openalex.org/W2963282477","https://openalex.org/W4285719527","https://openalex.org/W6693908240","https://openalex.org/W6730638903","https://openalex.org/W6742374447"],"related_works":["https://openalex.org/W3178261856","https://openalex.org/W2886257824","https://openalex.org/W3010504543","https://openalex.org/W4232551112","https://openalex.org/W3009452534","https://openalex.org/W2292239832","https://openalex.org/W2181728705","https://openalex.org/W4245807945","https://openalex.org/W4380791770","https://openalex.org/W2342877402"],"abstract_inverted_index":{"Bitcoin":[0,26,61,160],"is":[1,51,71,118],"popular":[2,159],"not":[3],"only":[4],"with":[5,9],"consumers,":[6],"but":[7],"also":[8],"cybercriminals":[10],"(e.g.,":[11],"in":[12,30,62],"ransomware":[13],"and":[14,17,40,47,93,101,134,162,173],"online":[15,19],"extortion,":[16],"commercial":[18],"child":[20],"exploitation).":[21],"Given":[22],"the":[23,34,44,63,98,108,116,119],"potential":[24],"of":[25,49,60,68,75,103,110,121,147,158],"to":[27,36,96,107],"be":[28,152],"involved":[29],"a":[31,85,113,145,155],"criminal":[32],"investigation,":[33],"need":[35],"have":[37],"an":[38,127],"up-to-date":[39],"in-depth":[41],"understanding":[42],"on":[43,72,80,112,165,170],"forensic":[45,58,86,104,133,156],"acquisition":[46],"analysis":[48,74,95,102],"Bitcoins":[50,111],"crucial.":[52],"However,":[53],"there":[54],"has":[55],"been":[56],"limited":[57],"research":[59,70],"literature.":[64],"The":[65],"general":[66],"focus":[67,120],"existing":[69],"postmortem":[73,94,135],"specific":[76],"locations":[77],"(e.g.":[78],"wallets":[79],"mobile":[81],"devices),":[82],"rather":[83],"than":[84],"approach":[87],"that":[88,150],"combines":[89],"live":[90,132],"data":[91],"forensics":[92],"facilitate":[97],"identification,":[99],"acquisition,":[100],"traces":[105],"relating":[106],"use":[109],"system.":[114],"Hence,":[115],"latter":[117],"this":[122,139],"paper":[123],"where":[124],"we":[125,143],"present":[126],"open":[128,140],"source":[129,141],"tool":[130],"for":[131],"analysing":[136],"automatically.":[137],"Using":[138],"tool,":[142],"describe":[144],"list":[146],"target":[148],"artifacts":[149],"can":[151],"obtained":[153],"from":[154],"investigation":[157],"clients":[161],"Web":[163],"Wallets":[164],"different":[166],"web":[167],"browsers":[168],"installed":[169],"Windows":[171,174],"7":[172],"10":[175],"platforms.":[176]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":6}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}