{"id":"https://openalex.org/W3155232911","doi":"https://doi.org/10.1109/access.2021.3071795","title":"Developing Software Signature Search Engines Using Paragraph Vector Model: A Triage Approach for Digital Forensics","display_name":"Developing Software Signature Search Engines Using Paragraph Vector Model: A Triage Approach for Digital Forensics","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3155232911","doi":"https://doi.org/10.1109/access.2021.3071795","mag":"3155232911"},"language":"en","primary_location":{"id":"doi:10.1109/access.2021.3071795","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3071795","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09399093.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09399093.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046059064","display_name":"Somayeh Soltani","orcid":"https://orcid.org/0000-0001-7152-7334"},"institutions":[{"id":"https://openalex.org/I86958956","display_name":"Ferdowsi University of Mashhad","ror":"https://ror.org/00g6ka752","country_code":"IR","type":"education","lineage":["https://openalex.org/I86958956"]}],"countries":["IR"],"is_corresponding":true,"raw_author_name":"Somayeh Soltani","raw_affiliation_strings":["Ferdowsi University of Mashhad, Mashhad, Iran"],"affiliations":[{"raw_affiliation_string":"Ferdowsi University of Mashhad, Mashhad, Iran","institution_ids":["https://openalex.org/I86958956"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001755097","display_name":"Seyed Amin Hosseini Seno","orcid":"https://orcid.org/0000-0002-0838-1800"},"institutions":[{"id":"https://openalex.org/I86958956","display_name":"Ferdowsi University of Mashhad","ror":"https://ror.org/00g6ka752","country_code":"IR","type":"education","lineage":["https://openalex.org/I86958956"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Seyed Amin Hosseini Seno","raw_affiliation_strings":["Ferdowsi University of Mashhad, Mashhad, Iran"],"affiliations":[{"raw_affiliation_string":"Ferdowsi University of Mashhad, Mashhad, Iran","institution_ids":["https://openalex.org/I86958956"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061832344","display_name":"Rahmat Budiarto","orcid":"https://orcid.org/0000-0002-6374-4731"},"institutions":[{"id":"https://openalex.org/I4210125886","display_name":"Al-Azhar University","ror":"https://ror.org/03ewepe58","country_code":"ID","type":"education","lineage":["https://openalex.org/I4210125886"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Rahmat Budiarto","raw_affiliation_strings":["Faculty of Science and Technology, Universitas Al-Azhar Indonesia, Jakarta, Indonesia"],"affiliations":[{"raw_affiliation_string":"Faculty of Science and Technology, Universitas Al-Azhar Indonesia, Jakarta, Indonesia","institution_ids":["https://openalex.org/I4210125886"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5046059064"],"corresponding_institution_ids":["https://openalex.org/I86958956"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.8262,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.77492021,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"9","issue":null,"first_page":"55814","last_page":"55832"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7633943557739258},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.6703159809112549},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.6366655230522156},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5636345744132996},{"id":"https://openalex.org/keywords/digital-signature","display_name":"Digital signature","score":0.4844248592853546},{"id":"https://openalex.org/keywords/word2vec","display_name":"Word2vec","score":0.43682777881622314},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.418164998292923},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.38719579577445984},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.33841782808303833},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.24862006306648254},{"id":"https://openalex.org/keywords/space","display_name":"Space (punctuation)","score":0.1317310333251953},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1198137104511261}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7633943557739258},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.6703159809112549},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.6366655230522156},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5636345744132996},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.4844248592853546},{"id":"https://openalex.org/C2776461190","wikidata":"https://www.wikidata.org/wiki/Q22673982","display_name":"Word2vec","level":3,"score":0.43682777881622314},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.418164998292923},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.38719579577445984},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.33841782808303833},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.24862006306648254},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.1317310333251953},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1198137104511261},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2021.3071795","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3071795","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09399093.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:7e14a02f21c34df6b0a96a70f341300e","is_oa":true,"landing_page_url":"https://doaj.org/article/7e14a02f21c34df6b0a96a70f341300e","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 9, Pp 55814-55832 (2021)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2021.3071795","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3071795","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09399093.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5799999833106995,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3155232911.pdf","grobid_xml":"https://content.openalex.org/works/W3155232911.grobid-xml"},"referenced_works_count":62,"referenced_works":["https://openalex.org/W122208520","https://openalex.org/W202115601","https://openalex.org/W1549130775","https://openalex.org/W1597710132","https://openalex.org/W1614298861","https://openalex.org/W1630596628","https://openalex.org/W1736726159","https://openalex.org/W1809298346","https://openalex.org/W1983832819","https://openalex.org/W1984981793","https://openalex.org/W2000674713","https://openalex.org/W2006281793","https://openalex.org/W2009229022","https://openalex.org/W2012058337","https://openalex.org/W2014113877","https://openalex.org/W2037841959","https://openalex.org/W2043793914","https://openalex.org/W2050839987","https://openalex.org/W2077054130","https://openalex.org/W2101746535","https://openalex.org/W2106507884","https://openalex.org/W2119668875","https://openalex.org/W2128333478","https://openalex.org/W2131744502","https://openalex.org/W2143642500","https://openalex.org/W2152247885","https://openalex.org/W2153030345","https://openalex.org/W2153579005","https://openalex.org/W2186179662","https://openalex.org/W2187089797","https://openalex.org/W2516954358","https://openalex.org/W2560477067","https://openalex.org/W2609404193","https://openalex.org/W2625580212","https://openalex.org/W2760899636","https://openalex.org/W2765088361","https://openalex.org/W2789908754","https://openalex.org/W2900159069","https://openalex.org/W2908043065","https://openalex.org/W2908104715","https://openalex.org/W2909866185","https://openalex.org/W2919464213","https://openalex.org/W2950577311","https://openalex.org/W2955220648","https://openalex.org/W2986920974","https://openalex.org/W3013748100","https://openalex.org/W3104258764","https://openalex.org/W3134794149","https://openalex.org/W4294170691","https://openalex.org/W6632971680","https://openalex.org/W6635547364","https://openalex.org/W6636510571","https://openalex.org/W6675853506","https://openalex.org/W6679775712","https://openalex.org/W6682691769","https://openalex.org/W6686953961","https://openalex.org/W6726369184","https://openalex.org/W6726503192","https://openalex.org/W6737034517","https://openalex.org/W6765490630","https://openalex.org/W6791785082","https://openalex.org/W6980931721"],"related_works":["https://openalex.org/W2413131564","https://openalex.org/W2358030434","https://openalex.org/W2384924894","https://openalex.org/W831794578","https://openalex.org/W2983174643","https://openalex.org/W3216896380","https://openalex.org/W4226247780","https://openalex.org/W2152540000","https://openalex.org/W78375865","https://openalex.org/W186691841"],"abstract_inverted_index":{"Today,":[0],"with":[1],"the":[2,31,54,65,70,76,94,110,113,117,135,141,152,156,183,226,230,239,244],"growth":[3],"of":[4,34,101,106,144,173,185,213,218,229],"information":[5],"and":[6,17,109,148,155,170,193,211,243],"communication":[7],"technology,":[8],"digital":[9,35,44],"crimes":[10],"have":[11,21,181,215],"also":[12],"spread.":[13],"Advanced":[14],"storage":[15],"technologies":[16],"their":[18,28],"low":[19],"cost":[20],"led":[22],"to":[23,37,52,62,73,90,128,139,177],"a":[24,41,84,123,216],"significant":[25],"increase":[26],"in":[27,164,233],"use.":[29],"Therefore,":[30],"high":[32],"volume":[33],"data":[36],"be":[38],"analyzed":[39],"is":[40,61,112,236],"challenge":[42],"facing":[43],"forensic":[45,48,55,124],"investigators.":[46],"Digital":[47],"triage":[49,59],"solutions":[50],"aim":[51],"alleviate":[53],"backlog.":[56],"A":[57],"promising":[58],"technique":[60],"quickly":[63],"find":[64,149,224],"software":[66,85,92,107,130,146,166],"packages":[67],"run":[68],"on":[69,93,200],"target":[71],"system":[72,95],"narrow":[74],"down":[75],"search":[77,87,103,168],"space.":[78],"In":[79],"this":[80,102],"paper,":[81],"we":[82,133,223],"propose":[83,122],"signature":[86,147,157,167],"engine":[88,104],"(S3E)":[89],"identify":[91],"under":[96],"investigation.":[97],"The":[98,197],"document":[99],"collection":[100],"consists":[105],"signatures,":[108],"query":[111,153],"features":[114],"extracted":[115],"from":[116],"system\u2019s":[118],"hard":[119],"disk.":[120],"We":[121,180],"differential":[125],"analysis":[126],"model":[127,138,242],"build":[129],"signatures.":[131],"Besides,":[132,222],"use":[134],"paragraph":[136],"vector":[137,154],"construct":[140],"corresponding":[142],"vectors":[143],"each":[145],"similarities":[150],"between":[151],"vectors.":[158],"Different":[159],"design":[160],"parameters":[161,175],"are":[162],"involved":[163],"making":[165],"engines,":[169],"distinct":[171],"values":[172],"these":[174,186],"lead":[176],"different":[178],"models.":[179],"measured":[182],"performance":[184],"S3E":[187,206,231],"models":[188,207,232],"against":[189],"several":[190],"controlled":[191],"systems":[192],"some":[194,205],"pseudo-real":[195],"systems.":[196],"experimental":[198],"results":[199],"both":[201,234],"datasets":[202,235],"show":[203],"that":[204,225],"achieve":[208],"perfect":[209],"recall,":[210],"many":[212],"them":[214],"recall":[217,227],"more":[219],"than":[220,238],"90%.":[221],"rate":[228],"higher":[237],"averaged":[240],"word2vec":[241],"TF-IDF":[245],"model.":[246]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}