{"id":"https://openalex.org/W2113189763","doi":"https://doi.org/10.1109/eit.2014.6871826","title":"A novel approach to evaluating similarity in computer forensic investigations","display_name":"A novel approach to evaluating similarity in computer forensic investigations","publication_year":2014,"publication_date":"2014-06-01","ids":{"openalex":"https://openalex.org/W2113189763","doi":"https://doi.org/10.1109/eit.2014.6871826","mag":"2113189763"},"language":"en","primary_location":{"id":"doi:10.1109/eit.2014.6871826","is_oa":false,"landing_page_url":"https://doi.org/10.1109/eit.2014.6871826","pdf_url":null,"source":{"id":"https://openalex.org/S4393918193","display_name":"IEEE International Conference on Electro Information Technology","issn_l":"2154-0357","issn":["2154-0357"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE International Conference on Electro/Information Technology","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074737000","display_name":"Ryan Q. Hankins","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Ryan Q. Hankins","raw_affiliation_strings":["Dell Inc., Eden Prairie, MN, USA","Dell Inc. Eden Prairie, Eden, MN, USA"],"affiliations":[{"raw_affiliation_string":"Dell Inc., Eden Prairie, MN, USA","institution_ids":[]},{"raw_affiliation_string":"Dell Inc. Eden Prairie, Eden, MN, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101552533","display_name":"Jigang Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I99069390","display_name":"Metropolitan State University","ror":"https://ror.org/056rp9e47","country_code":"US","type":"education","lineage":["https://openalex.org/I91221267","https://openalex.org/I99069390"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jigang Liu","raw_affiliation_strings":["Department of Information and Computer Sciences, Metropolitan State University, Saint Paul, MN, USA","Dept. of Inf. & Comput. Sci., Metropolitan State Univ., St. Paul, MN, USA"],"affiliations":[{"raw_affiliation_string":"Department of Information and Computer Sciences, Metropolitan State University, Saint Paul, MN, USA","institution_ids":["https://openalex.org/I99069390"]},{"raw_affiliation_string":"Dept. of Inf. & Comput. Sci., Metropolitan State Univ., St. Paul, MN, USA","institution_ids":["https://openalex.org/I99069390"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5074737000"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.14243102,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"567","last_page":"572"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8498927354812622},{"id":"https://openalex.org/keywords/computer-forensics","display_name":"Computer forensics","score":0.7786389589309692},{"id":"https://openalex.org/keywords/string","display_name":"String (physics)","score":0.6776819229125977},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.6397687792778015},{"id":"https://openalex.org/keywords/ranking","display_name":"Ranking (information retrieval)","score":0.587611973285675},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5725493431091309},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5305030345916748},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.5201278328895569},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.5104862451553345},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.35906869173049927},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.28218477964401245},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.27499526739120483},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.17457649111747742},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.08768856525421143}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8498927354812622},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.7786389589309692},{"id":"https://openalex.org/C157486923","wikidata":"https://www.wikidata.org/wiki/Q1376436","display_name":"String (physics)","level":2,"score":0.6776819229125977},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.6397687792778015},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.587611973285675},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5725493431091309},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5305030345916748},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.5201278328895569},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.5104862451553345},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.35906869173049927},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.28218477964401245},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.27499526739120483},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.17457649111747742},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.08768856525421143},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/eit.2014.6871826","is_oa":false,"landing_page_url":"https://doi.org/10.1109/eit.2014.6871826","pdf_url":null,"source":{"id":"https://openalex.org/S4393918193","display_name":"IEEE International Conference on Electro Information Technology","issn_l":"2154-0357","issn":["2154-0357"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE International Conference on Electro/Information Technology","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6299999952316284,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W66633355","https://openalex.org/W1517100234","https://openalex.org/W1557168499","https://openalex.org/W1979260289","https://openalex.org/W2068081774","https://openalex.org/W2077766607","https://openalex.org/W2096127821","https://openalex.org/W2108278098","https://openalex.org/W2108378253","https://openalex.org/W2130906372","https://openalex.org/W2132069633","https://openalex.org/W2156037541","https://openalex.org/W2161532103","https://openalex.org/W2335634178","https://openalex.org/W2582697902","https://openalex.org/W2970408101","https://openalex.org/W6674531144","https://openalex.org/W6683646574"],"related_works":["https://openalex.org/W2045155990","https://openalex.org/W4313163053","https://openalex.org/W2398847397","https://openalex.org/W3045811229","https://openalex.org/W4300973204","https://openalex.org/W1483408780","https://openalex.org/W4284884309","https://openalex.org/W2908749798","https://openalex.org/W2105980483","https://openalex.org/W4243842598"],"abstract_inverted_index":{"Abstraction-based":[0],"approaches":[1,22],"to":[2,12,50,69,97,112],"data":[3,15,30,46,74,120],"analysis":[4,27,111],"in":[5,62],"computer":[6,25,52,64,110],"forensics":[7,26,53,65],"require":[8],"substantial":[9],"human":[10,59,108],"effort":[11,60],"determine":[13],"what":[14,73],"is":[16,75],"useful.":[17],"Automated":[18],"or":[19],"semi-automated,":[20],"similarity-based":[21],"allow":[23],"rapid":[24],"of":[28,39,45,57,81,93,107],"large":[29],"sets":[31],"with":[32],"less":[33],"focus":[34],"on":[35],"untangling":[36],"many":[37],"layers":[38],"abstraction.":[40],"Rapid":[41],"and":[42,71,77,109,114,127],"automated":[43],"ranking":[44],"by":[47],"its":[48],"value":[49],"a":[51,94,105],"investigation":[54],"eliminates":[55],"much":[56],"the":[58,63,79,117,122],"required":[61],"process,":[66],"leaving":[67],"investigators":[68],"judge":[70],"specify":[72],"interesting,":[76],"automating":[78,129],"rest":[80],"analysis.":[82,130],"In":[83],"this":[84],"paper,":[85],"we":[86],"develop":[87],"two":[88],"algorithms":[89],"that":[90,102],"find":[91],"portions":[92],"string":[95],"relevant":[96],"an":[98],"investigation,":[99],"then":[100],"refine":[101],"portion":[103],"using":[104],"combination":[106],"rapidly":[113],"effectively":[115],"extract":[116],"most":[118],"useful":[119],"from":[121],"string,":[123],"speeding,":[124],"automatically":[125],"documenting,":[126],"partially":[128]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}