{"id":"https://openalex.org/W7161295520","doi":"https://doi.org/10.1109/access.2026.3693691","title":"Lightweight Forensic Triage Framework for Clandestine Operational Instructions: A Two-Case Leave-One-Case-Out Evaluation","display_name":"Lightweight Forensic Triage Framework for Clandestine Operational Instructions: A Two-Case Leave-One-Case-Out Evaluation","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7161295520","doi":"https://doi.org/10.1109/access.2026.3693691"},"language":"en","primary_location":{"id":"doi:10.1109/access.2026.3693691","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3693691","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3693691","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5122030171","display_name":"Sanghyeob Ko","orcid":null},"institutions":[{"id":"https://openalex.org/I848706","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20","country_code":"KR","type":"education","lineage":["https://openalex.org/I848706"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sanghyeob Ko","raw_affiliation_strings":["Department of Forensic Sciences, Sungkyunkwan University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0009-0008-1478-9168","affiliations":[{"raw_affiliation_string":"Department of Forensic Sciences, Sungkyunkwan University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I848706"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102813809","display_name":"Gibum Kim","orcid":"https://orcid.org/0000-0001-7298-4254"},"institutions":[{"id":"https://openalex.org/I848706","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20","country_code":"KR","type":"education","lineage":["https://openalex.org/I848706"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Gibum Kim","raw_affiliation_strings":["Department of Forensic Sciences, Sungkyunkwan University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0001-7298-4254","affiliations":[{"raw_affiliation_string":"Department of Forensic Sciences, Sungkyunkwan University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I848706"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.79191721,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"74933","last_page":"74946"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11430","display_name":"Disaster Response and Management","score":0.5432000160217285,"subfield":{"id":"https://openalex.org/subfields/3604","display_name":"Emergency Medical Services"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},"topics":[{"id":"https://openalex.org/T11430","display_name":"Disaster Response and Management","score":0.5432000160217285,"subfield":{"id":"https://openalex.org/subfields/3604","display_name":"Emergency Medical Services"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T11867","display_name":"Traumatic Ocular and Foreign Body Injuries","score":0.05000000074505806,"subfield":{"id":"https://openalex.org/subfields/2731","display_name":"Ophthalmology"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T12296","display_name":"Autopsy Techniques and Outcomes","score":0.028599999845027924,"subfield":{"id":"https://openalex.org/subfields/2741","display_name":"Radiology, Nuclear Medicine and Imaging"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/triage","display_name":"Triage","score":0.6832000017166138},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.2937999963760376},{"id":"https://openalex.org/keywords/data-breach","display_name":"Data breach","score":0.24690000712871552},{"id":"https://openalex.org/keywords/computer-forensics","display_name":"Computer forensics","score":0.24160000681877136},{"id":"https://openalex.org/keywords/law-enforcement","display_name":"Law enforcement","score":0.23499999940395355}],"concepts":[{"id":"https://openalex.org/C2777120189","wikidata":"https://www.wikidata.org/wiki/Q780067","display_name":"Triage","level":2,"score":0.6832000017166138},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6040999889373779},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5144000053405762},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.2937999963760376},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.24690000712871552},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.24160000681877136},{"id":"https://openalex.org/C2780262971","wikidata":"https://www.wikidata.org/wiki/Q44554","display_name":"Law enforcement","level":2,"score":0.23499999940395355},{"id":"https://openalex.org/C140505726","wikidata":"https://www.wikidata.org/wiki/Q495304","display_name":"Forensic science","level":2,"score":0.22519999742507935},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.22220000624656677},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2134000062942505}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2026.3693691","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3693691","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:cc199c409f024ad1802880b765c2f8ba","is_oa":true,"landing_page_url":"https://doaj.org/article/cc199c409f024ad1802880b765c2f8ba","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 14, Pp 74933-74946 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3693691","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3693691","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Digital":[0],"forensic":[1,206],"casework":[2],"rarely":[3],"proceeds":[4],"under":[5,165],"laboratory":[6],"conditions.":[7,167],"Under":[8],"time":[9],"and":[10,61,83,106,121,146,162,233],"resource":[11],"constraints,":[12],"analysts":[13],"often":[14],"triage":[15,36],"thousands":[16],"of":[17,28,104,110,157,184],"seized":[18],"text":[19],"files,":[20],"with":[21,69,112,133,144],"critical":[22],"documents":[23,44,78],"embedded":[24],"in":[25,45,116],"large":[26],"volumes":[27],"irrelevant":[29],"material.":[30],"This":[31],"study":[32],"presents":[33],"a":[34,54,57,70,89,101,107,134,140,154,181,200,204],"lightweight":[35,147],"approach":[37],"for":[38],"prioritizing":[39],"clandestine":[40],"operational":[41],"instruction":[42],"(COI)":[43],"CPU-only":[46],"deployment":[47],"environments.":[48],"The":[49,195,223],"method":[50],"combines":[51],"TF-IDF":[52],"features,":[53],"LinearSVC":[55],"classifier,":[56],"tunable":[58],"decision":[59],"threshold,":[60],"SHAP-based":[62],"analyst-facing":[63],"rationale.":[64],"Cross-case":[65],"transfer":[66],"was":[67],"evaluated":[68,229],"leave-one-case-out":[71],"(LOCO)":[72],"protocol":[73],"using":[74],"133":[75],"court-adjudicated":[76],"COI":[77],"from":[79,177],"two":[80,96],"independent":[81],"investigations":[82],"500":[84],"synthetic":[85],"negatives":[86,115],"constructed":[87],"as":[88,199,219],"structured":[90],"stress-test":[91],"contrast":[92],"set.":[93],"Across":[94],"the":[95,98,228],"folds,":[97],"model":[99,137,160],"achieved":[100],"mean":[102,108],"accuracy":[103],"99.29%":[105],"F1":[109],"98.28%,":[111],"5":[113],"false":[114],"total":[117],"(fold-wise":[118],"FNR:":[119,124],"2.27%":[120],"4.49%;":[122],"pooled":[123],"3.76%).":[125],"End-to-end":[126],"screening":[127,201],"required":[128],"0.32":[129],"ms":[130],"per":[131],"document,":[132],"1.34":[135],"MB":[136],"footprint":[138],"on":[139,172],"single-threaded":[141],"CPU.":[142],"Comparisons":[143],"transformer-based":[145],"baselines":[148],"showed":[149],"that":[150],"this":[151],"configuration":[152],"provided":[153],"favorable":[155],"balance":[156],"accuracy,":[158],"latency,":[159],"size,":[161],"feature-level":[163],"auditability":[164],"CPU-constrained":[166],"A":[168],"proxy":[169],"false-positive":[170,182],"evaluation":[171],"9,606":[173],"Korean":[174],"Wikipedia":[175],"paragraphs":[176],"KorQuAD":[178],"v1.0":[179],"yielded":[180],"rate":[183],"0.31%":[185],"(95%":[186],"CI:":[187],"0.21%–0.45%).":[188],"Work":[189],"Saved":[190],"over":[191],"Sampling":[192],"reached":[193],"79%.":[194],"system":[196],"is":[197],"intended":[198],"aid":[202],"within":[203],"tiered":[205],"workflow.":[207],"SHAP":[208],"outputs":[209],"are":[210,225],"designed":[211],"to":[212,227],"support":[213],"analyst":[214],"review":[215],"rather":[216],"than":[217],"serve":[218],"standalone":[220],"evidentiary":[221],"instruments.":[222],"findings":[224],"limited":[226],"Korean-language":[230],"counterintelligence":[231],"cases":[232],"have":[234],"not":[235],"been":[236],"validated":[237],"across":[238],"other":[239],"languages,":[240],"crime":[241],"types,":[242],"or":[243],"jurisdictions.":[244]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-05-16T00:00:00"}