{"id":"https://openalex.org/W4210783895","doi":"https://doi.org/10.1109/access.2022.3142508","title":"A Comprehensive Survey on Computer Forensics: State-of-the-Art, Tools, Techniques, Challenges, and Future Directions","display_name":"A Comprehensive Survey on Computer Forensics: State-of-the-Art, Tools, Techniques, Challenges, and Future Directions","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4210783895","doi":"https://doi.org/10.1109/access.2022.3142508"},"language":"en","primary_location":{"id":"doi:10.1109/access.2022.3142508","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3142508","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09678340.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09678340.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069580698","display_name":"Abdul Rehman Javed","orcid":"https://orcid.org/0000-0002-0570-1813"},"institutions":[{"id":"https://openalex.org/I899713450","display_name":"Air University","ror":"https://ror.org/03yfe9v83","country_code":"PK","type":"education","lineage":["https://openalex.org/I899713450"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Abdul Rehman Javed","raw_affiliation_strings":["Department of Cyber Security, Air University, Islamabad, Pakistan"],"raw_orcid":"https://orcid.org/0000-0002-0570-1813","affiliations":[{"raw_affiliation_string":"Department of Cyber Security, Air University, Islamabad, Pakistan","institution_ids":["https://openalex.org/I899713450"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014328365","display_name":"Waqas Ahmed","orcid":"https://orcid.org/0000-0002-3809-1089"},"institutions":[{"id":"https://openalex.org/I899713450","display_name":"Air University","ror":"https://ror.org/03yfe9v83","country_code":"PK","type":"education","lineage":["https://openalex.org/I899713450"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Waqas Ahmed","raw_affiliation_strings":["Department of Cyber Security, Air University, Islamabad, Pakistan"],"raw_orcid":"https://orcid.org/0000-0002-3809-1089","affiliations":[{"raw_affiliation_string":"Department of Cyber Security, Air University, Islamabad, Pakistan","institution_ids":["https://openalex.org/I899713450"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018409592","display_name":"Mamoun Alazab","orcid":"https://orcid.org/0000-0002-1928-3704"},"institutions":[{"id":"https://openalex.org/I29894533","display_name":"Charles Darwin University","ror":"https://ror.org/048zcaj52","country_code":"AU","type":"education","lineage":["https://openalex.org/I29894533"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mamoun Alazab","raw_affiliation_strings":["College of Engineering, IT and Environment, Charles Darwin University, Casuarina, NT, Australia"],"raw_orcid":"https://orcid.org/0000-0002-1928-3704","affiliations":[{"raw_affiliation_string":"College of Engineering, IT and Environment, Charles Darwin University, Casuarina, NT, Australia","institution_ids":["https://openalex.org/I29894533"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037494059","display_name":"Zunera Jalil","orcid":"https://orcid.org/0000-0003-2531-2564"},"institutions":[{"id":"https://openalex.org/I899713450","display_name":"Air University","ror":"https://ror.org/03yfe9v83","country_code":"PK","type":"education","lineage":["https://openalex.org/I899713450"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Zunera Jalil","raw_affiliation_strings":["Department of Cyber Security, Air University, Islamabad, Pakistan"],"raw_orcid":"https://orcid.org/0000-0003-2531-2564","affiliations":[{"raw_affiliation_string":"Department of Cyber Security, Air University, Islamabad, Pakistan","institution_ids":["https://openalex.org/I899713450"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106182605","display_name":"Kashif Kifayat","orcid":"https://orcid.org/0000-0001-5088-0825"},"institutions":[{"id":"https://openalex.org/I899713450","display_name":"Air University","ror":"https://ror.org/03yfe9v83","country_code":"PK","type":"education","lineage":["https://openalex.org/I899713450"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Kashif Kifayat","raw_affiliation_strings":["Department of Cyber Security, Air University, Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Cyber Security, Air University, Islamabad, Pakistan","institution_ids":["https://openalex.org/I899713450"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041854978","display_name":"Thippa Reddy Gadekallu","orcid":"https://orcid.org/0000-0003-0097-801X"},"institutions":[{"id":"https://openalex.org/I876193797","display_name":"Vellore Institute of Technology University","ror":"https://ror.org/00qzypv28","country_code":"IN","type":"education","lineage":["https://openalex.org/I876193797"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Thippa Reddy Gadekallu","raw_affiliation_strings":["School of Information Technology and Engineering, Vellore Institute of Technology, Vellore, Tamil Nadu, India"],"raw_orcid":"https://orcid.org/0000-0003-0097-801X","affiliations":[{"raw_affiliation_string":"School of Information Technology and Engineering, Vellore Institute of Technology, Vellore, Tamil Nadu, India","institution_ids":["https://openalex.org/I876193797"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":41.114,"has_fulltext":true,"cited_by_count":148,"citation_normalized_percentile":{"value":0.99851688,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"10","issue":null,"first_page":"11065","last_page":"11089"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6954475045204163},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.47773119807243347},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.4710533320903778},{"id":"https://openalex.org/keywords/computer-forensics","display_name":"Computer forensics","score":0.4362636208534241},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.3427599370479584},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2589867115020752},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.07731989026069641}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6954475045204163},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.47773119807243347},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4710533320903778},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.4362636208534241},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.3427599370479584},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2589867115020752},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.07731989026069641}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2022.3142508","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3142508","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09678340.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:f8c70e230f9f4662b816b98e4553af5b","is_oa":true,"landing_page_url":"https://doaj.org/article/f8c70e230f9f4662b816b98e4553af5b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 10, Pp 11065-11089 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2022.3142508","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3142508","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09678340.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.75,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320322799","display_name":"Higher Education Commission, Pakistan","ror":"https://ror.org/038y3sz68"},{"id":"https://openalex.org/F4320326275","display_name":"Higher Education Commision, Pakistan","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4210783895.pdf","grobid_xml":"https://content.openalex.org/works/W4210783895.grobid-xml"},"referenced_works_count":149,"referenced_works":["https://openalex.org/W24678375","https://openalex.org/W134076915","https://openalex.org/W1550458109","https://openalex.org/W1968389182","https://openalex.org/W1972940696","https://openalex.org/W2009132875","https://openalex.org/W2093512257","https://openalex.org/W2096127821","https://openalex.org/W2101060448","https://openalex.org/W2104987990","https://openalex.org/W2128487888","https://openalex.org/W2156350103","https://openalex.org/W2186771183","https://openalex.org/W2218675318","https://openalex.org/W2241332959","https://openalex.org/W2295872724","https://openalex.org/W2321234679","https://openalex.org/W2330756720","https://openalex.org/W2344466211","https://openalex.org/W2468595924","https://openalex.org/W2544541072","https://openalex.org/W2577149899","https://openalex.org/W2579276500","https://openalex.org/W2612643416","https://openalex.org/W2626976993","https://openalex.org/W2744536417","https://openalex.org/W2765148839","https://openalex.org/W2766036797","https://openalex.org/W2777222560","https://openalex.org/W2786407015","https://openalex.org/W2800005718","https://openalex.org/W2803006805","https://openalex.org/W2885309848","https://openalex.org/W2888149920","https://openalex.org/W2896075375","https://openalex.org/W2899240608","https://openalex.org/W2903659538","https://openalex.org/W2905433694","https://openalex.org/W2913977307","https://openalex.org/W2940828040","https://openalex.org/W2943720364","https://openalex.org/W2945132367","https://openalex.org/W2963376995","https://openalex.org/W2963912653","https://openalex.org/W2988487118","https://openalex.org/W2995988651","https://openalex.org/W2996096283","https://openalex.org/W2997028558","https://openalex.org/W2999260060","https://openalex.org/W3000100729","https://openalex.org/W3000966602","https://openalex.org/W3001184952","https://openalex.org/W3001364574","https://openalex.org/W3005923092","https://openalex.org/W3007360442","https://openalex.org/W3008603700","https://openalex.org/W3011988910","https://openalex.org/W3012092032","https://openalex.org/W3012424806","https://openalex.org/W3013798357","https://openalex.org/W3013896538","https://openalex.org/W3015737415","https://openalex.org/W3016481661","https://openalex.org/W3017009154","https://openalex.org/W3018409233","https://openalex.org/W3025360836","https://openalex.org/W3026686007","https://openalex.org/W3032626790","https://openalex.org/W3033079786","https://openalex.org/W3033675321","https://openalex.org/W3034530968","https://openalex.org/W3034992578","https://openalex.org/W3037684965","https://openalex.org/W3037998698","https://openalex.org/W3039367688","https://openalex.org/W3042336373","https://openalex.org/W3042687732","https://openalex.org/W3044183625","https://openalex.org/W3044499889","https://openalex.org/W3046673079","https://openalex.org/W3047693928","https://openalex.org/W3047883753","https://openalex.org/W3048788384","https://openalex.org/W3049501660","https://openalex.org/W3080363623","https://openalex.org/W3080783655","https://openalex.org/W3090264722","https://openalex.org/W3090907207","https://openalex.org/W3091194297","https://openalex.org/W3094117827","https://openalex.org/W3094127989","https://openalex.org/W3094138310","https://openalex.org/W3094190102","https://openalex.org/W3094314599","https://openalex.org/W3097838915","https://openalex.org/W3098311144","https://openalex.org/W3104472564","https://openalex.org/W3107603264","https://openalex.org/W3112012112","https://openalex.org/W3114024232","https://openalex.org/W3117245247","https://openalex.org/W3119460354","https://openalex.org/W3122934377","https://openalex.org/W3124340574","https://openalex.org/W3130388287","https://openalex.org/W3130747497","https://openalex.org/W3130982961","https://openalex.org/W3135306750","https://openalex.org/W3135918897","https://openalex.org/W3136090905","https://openalex.org/W3136148828","https://openalex.org/W3136152199","https://openalex.org/W3138407946","https://openalex.org/W3138726304","https://openalex.org/W3143494146","https://openalex.org/W3143966273","https://openalex.org/W3146114005","https://openalex.org/W3158109590","https://openalex.org/W3158580149","https://openalex.org/W3159253496","https://openalex.org/W3160591418","https://openalex.org/W3161846523","https://openalex.org/W3161903836","https://openalex.org/W3162398026","https://openalex.org/W3164725880","https://openalex.org/W3165474736","https://openalex.org/W3169324926","https://openalex.org/W3171139915","https://openalex.org/W3173922570","https://openalex.org/W3176982126","https://openalex.org/W3182564622","https://openalex.org/W3187919716","https://openalex.org/W3188556817","https://openalex.org/W3192851990","https://openalex.org/W3194419036","https://openalex.org/W3198713703","https://openalex.org/W3200181601","https://openalex.org/W4213005639","https://openalex.org/W4232266924","https://openalex.org/W4249256508","https://openalex.org/W6600523719","https://openalex.org/W6601015418","https://openalex.org/W6674531144","https://openalex.org/W6688496910","https://openalex.org/W6728804577","https://openalex.org/W6739744729","https://openalex.org/W6754423104","https://openalex.org/W6795190887","https://openalex.org/W7009179008"],"related_works":["https://openalex.org/W2181728705","https://openalex.org/W4238452393","https://openalex.org/W2167366752","https://openalex.org/W2489557937","https://openalex.org/W4247205791","https://openalex.org/W3002268218","https://openalex.org/W2385667210","https://openalex.org/W3001565613","https://openalex.org/W1506329045","https://openalex.org/W72026768"],"abstract_inverted_index":{"With":[0],"the":[1,33,70,101,114,124,128],"alarmingly":[2],"increasing":[3],"rate":[4],"of":[5,37,88],"cybercrimes":[6,15],"worldwide,":[7],"there":[8],"is":[9],"a":[10,85,109],"dire":[11],"need":[12],"to":[13,59,117],"combat":[14],"timely":[16],"and":[17,35,41,46,57,93,132,136],"effectively.":[18],"Cyberattacks":[19],"on":[20,26,68,81,113],"computing":[21],"machines":[22],"leave":[23],"certain":[24],"artifacts":[25],"target":[27],"device":[28],"storage":[29],"that":[30],"can":[31],"reveal":[32],"identity":[34],"behavior":[36],"cyber-criminals":[38],"if":[39],"processed":[40],"analyzed":[42],"intelligently.":[43],"Forensic":[44],"agencies":[45],"law":[47],"enforcement":[48],"departments":[49],"use":[50],"several":[51],"digital":[52,61,73],"forensic":[53,91,94],"toolkits,":[54],"both":[55],"commercial":[56],"open-source,":[58],"examine":[60],"evidence.":[62],"The":[63,104],"proposed":[64,105,129],"research":[65,82,138],"survey":[66,106,130],"focuses":[67],"identifying":[69],"current":[71,102,134],"state-of-the-art":[72],"forensics":[74,99,125],"concepts":[75],"in":[76,100,120,140],"existing":[77],"research,":[78],"sheds":[79],"light":[80],"gaps,":[83],"presents":[84,108],"detailed":[86],"introduction":[87],"different":[89],"computer":[90,98,141],"domains":[92],"toolkits":[95],"used":[96],"for":[97],"era.":[103],"also":[107],"comparative":[110],"analysis":[111],"based":[112],"tool\u2019s":[115],"characteristics":[116],"facilitate":[118],"investigators":[119],"tool":[121],"selection":[122],"during":[123],"process.":[126],"Finally,":[127],"identifies":[131],"derives":[133],"challenges":[135],"future":[137],"directions":[139],"forensics.":[142]},"counts_by_year":[{"year":2026,"cited_by_count":19},{"year":2025,"cited_by_count":32},{"year":2024,"cited_by_count":46},{"year":2023,"cited_by_count":34},{"year":2022,"cited_by_count":17}],"updated_date":"2026-06-17T08:01:34.144755","created_date":"2025-10-10T00:00:00"}