{"id":"https://openalex.org/W4318185501","doi":"https://doi.org/10.1109/bigdata55660.2022.10020208","title":"A tool for assisting in the forensic investigation of cyber-security incidents","display_name":"A tool for assisting in the forensic investigation of cyber-security incidents","publication_year":2022,"publication_date":"2022-12-17","ids":{"openalex":"https://openalex.org/W4318185501","doi":"https://doi.org/10.1109/bigdata55660.2022.10020208"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata55660.2022.10020208","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata55660.2022.10020208","pdf_url":null,"source":{"id":"https://openalex.org/S4363607709","display_name":"2022 IEEE International Conference on Big Data (Big Data)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012539933","display_name":"Konstantinos Touloumis","orcid":"https://orcid.org/0000-0002-8560-7391"},"institutions":[{"id":"https://openalex.org/I174458059","display_name":"National Technical University of Athens","ror":"https://ror.org/03cx6bg69","country_code":"GR","type":"education","lineage":["https://openalex.org/I174458059"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Konstantinos Touloumis","raw_affiliation_strings":["National Technical University of Athens,Decision Support Systems Laboratory,Athens,Greece","Decision Support Systems Laboratory, National Technical University of Athens, Athens, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Technical University of Athens,Decision Support Systems Laboratory,Athens,Greece","institution_ids":["https://openalex.org/I174458059"]},{"raw_affiliation_string":"Decision Support Systems Laboratory, National Technical University of Athens, Athens, Greece","institution_ids":["https://openalex.org/I174458059"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070773155","display_name":"Ariadni Michalitsi-Psarrou","orcid":"https://orcid.org/0000-0003-0792-8568"},"institutions":[{"id":"https://openalex.org/I174458059","display_name":"National Technical University of Athens","ror":"https://ror.org/03cx6bg69","country_code":"GR","type":"education","lineage":["https://openalex.org/I174458059"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Ariadni Michalitsi-Psarrou","raw_affiliation_strings":["National Technical University of Athens,Decision Support Systems Laboratory,Athens,Greece","Decision Support Systems Laboratory, National Technical University of Athens, Athens, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Technical University of Athens,Decision Support Systems Laboratory,Athens,Greece","institution_ids":["https://openalex.org/I174458059"]},{"raw_affiliation_string":"Decision Support Systems Laboratory, National Technical University of Athens, Athens, Greece","institution_ids":["https://openalex.org/I174458059"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025488036","display_name":"Anna Georgiadou","orcid":"https://orcid.org/0000-0002-0078-6969"},"institutions":[{"id":"https://openalex.org/I174458059","display_name":"National Technical University of Athens","ror":"https://ror.org/03cx6bg69","country_code":"GR","type":"education","lineage":["https://openalex.org/I174458059"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Anna Georgiadou","raw_affiliation_strings":["National Technical University of Athens,Decision Support Systems Laboratory,Athens,Greece","Decision Support Systems Laboratory, National Technical University of Athens, Athens, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Technical University of Athens,Decision Support Systems Laboratory,Athens,Greece","institution_ids":["https://openalex.org/I174458059"]},{"raw_affiliation_string":"Decision Support Systems Laboratory, National Technical University of Athens, Athens, Greece","institution_ids":["https://openalex.org/I174458059"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015748230","display_name":"Dimitris Askounis","orcid":"https://orcid.org/0000-0002-2618-5715"},"institutions":[{"id":"https://openalex.org/I174458059","display_name":"National Technical University of Athens","ror":"https://ror.org/03cx6bg69","country_code":"GR","type":"education","lineage":["https://openalex.org/I174458059"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Dimitris Askounis","raw_affiliation_strings":["National Technical University of Athens,Decision Support Systems Laboratory,Athens,Greece","Decision Support Systems Laboratory, National Technical University of Athens, Athens, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Technical University of Athens,Decision Support Systems Laboratory,Athens,Greece","institution_ids":["https://openalex.org/I174458059"]},{"raw_affiliation_string":"Decision Support Systems Laboratory, National Technical University of Athens, Athens, Greece","institution_ids":["https://openalex.org/I174458059"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I174458059"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2630","last_page":"2636"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7835620641708374},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6891485452651978},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6860529780387878},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5866738557815552},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5364288687705994},{"id":"https://openalex.org/keywords/safeguard","display_name":"Safeguard","score":0.47545477747917175},{"id":"https://openalex.org/keywords/critical-infrastructure","display_name":"Critical infrastructure","score":0.46848997473716736},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.45669418573379517},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.0798402726650238}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7835620641708374},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6891485452651978},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6860529780387878},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5866738557815552},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5364288687705994},{"id":"https://openalex.org/C2780771206","wikidata":"https://www.wikidata.org/wiki/Q3271761","display_name":"Safeguard","level":2,"score":0.47545477747917175},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.46848997473716736},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.45669418573379517},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0798402726650238},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C155202549","wikidata":"https://www.wikidata.org/wiki/Q178803","display_name":"International trade","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/bigdata55660.2022.10020208","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata55660.2022.10020208","pdf_url":null,"source":{"id":"https://openalex.org/S4363607709","display_name":"2022 IEEE International Conference on Big Data (Big Data)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6100000143051147,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W26759578","https://openalex.org/W1545599162","https://openalex.org/W1648198059","https://openalex.org/W2039148409","https://openalex.org/W2049454285","https://openalex.org/W2052588183","https://openalex.org/W2101494340","https://openalex.org/W2108756230","https://openalex.org/W2152288238","https://openalex.org/W2161464134","https://openalex.org/W2471983163","https://openalex.org/W2590756067","https://openalex.org/W2601924125","https://openalex.org/W2774142897","https://openalex.org/W2775260907","https://openalex.org/W2788153147","https://openalex.org/W2789353435","https://openalex.org/W2798046836","https://openalex.org/W2953017892","https://openalex.org/W2965629907","https://openalex.org/W2972913341","https://openalex.org/W3036035276","https://openalex.org/W3128039057","https://openalex.org/W3161846523","https://openalex.org/W4206646452","https://openalex.org/W6601519416","https://openalex.org/W6682705083"],"related_works":["https://openalex.org/W3121667336","https://openalex.org/W2492640494","https://openalex.org/W4379054516","https://openalex.org/W2384877859","https://openalex.org/W2392961223","https://openalex.org/W2505820029","https://openalex.org/W4378234050","https://openalex.org/W1545955397","https://openalex.org/W4297199789","https://openalex.org/W2380314794"],"abstract_inverted_index":{"The":[0],"exponential":[1],"growth":[2],"of":[3,9,17,32,38,49,63,73,78,123,208],"networking":[4],"capabilities":[5],"including":[6],"the":[7,61,64,71,74,76,79,81,84,94,99,120,130,160,179,184,198,205,216],"Internet":[8],"Things":[10],"(IoT),":[11],"has":[12],"led":[13],"to":[14,52,59,112,128,140,149,152,171,222],"an":[15,124,212],"outburst":[16],"cyberattacks.":[18],"Many":[19],"well-documented":[20],"cyber-attacks":[21],"have":[22,109,137],"targeted":[23],"critical":[24,39,103,224],"energy":[25,104,213,225],"infrastructures":[26,228],"as":[27,29,42,44],"well":[28,43],"any":[30],"kind":[31],"cloud-based":[33],"IT":[34,227],"platforms.":[35],"Early":[36],"examination":[37],"systems\u2019":[40],"vulnerabilities,":[41],"previous":[45],"cyber-security":[46,65,209],"incidents,":[47],"are":[48,147],"utmost":[50],"importance":[51],"prevent":[53],"new":[54],"ones.":[55],"A":[56,189],"thorough":[57],"investigation":[58,122,207],"examine":[60],"context":[62],"breach":[66],"can":[67,88,200,218],"reveal":[68,90],"facts":[69],"about":[70],"source":[72],"attack,":[75],"profile":[77],"attacker,":[80],"resources,":[82],"and":[83,87,115,186,226],"skills":[85],"required":[86],"further":[89],"mitigations":[91],"for":[92,144,177],"preventing":[93],"attack":[95],"from":[96],"re-appearing":[97],"in":[98,119,154],"future.":[100],"To":[101],"safeguard":[102],"infrastructures,":[105],"many":[106,131],"forensic":[107,155,180,206],"approaches":[108],"been":[110,138],"developed":[111,139],"collect,":[113],"analyze,":[114],"digitalize":[116],"evidence":[117],"assisting":[118,204],"in-depth":[121],"incident.":[125],"However,":[126],"up":[127],"now,":[129],"open-source":[132],"vulnerability":[133,174],"data":[134,175],"sources":[135,176],"which":[136],"provide":[141],"valuable":[142],"information":[143],"a":[145,164],"cyber-attack":[146],"yet":[148],"be":[150,201,220],"employed":[151],"assist":[153],"investigation.":[156],"This":[157],"paper":[158],"introduces":[159],"Automated":[161],"Forensic":[162],"Tool,":[163],"platform":[165],"that":[166,195],"employs":[167],"machine":[168],"learning":[169],"algorithms":[170],"combine":[172],"different":[173],"facilitating":[178],"procedure":[181],"while":[182],"minimizing":[183],"time":[185],"effort":[187],"needed.":[188],"use":[190],"case":[191],"is":[192],"also":[193,219],"demonstrated":[194],"displays":[196],"how":[197],"tool":[199,217],"used":[202],"towards":[203],"incidents":[210],"on":[211],"infrastructure,":[214],"but":[215],"applied":[221],"other":[223],"with":[229],"minor":[230],"adaptations.":[231]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}