{"id":"https://openalex.org/W1502988369","doi":"https://doi.org/10.1109/infcomw.2015.7179370","title":"Correlating processes for automatic memory evidence analysis","display_name":"Correlating processes for automatic memory evidence analysis","publication_year":2015,"publication_date":"2015-04-01","ids":{"openalex":"https://openalex.org/W1502988369","doi":"https://doi.org/10.1109/infcomw.2015.7179370","mag":"1502988369"},"language":"en","primary_location":{"id":"doi:10.1109/infcomw.2015.7179370","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infcomw.2015.7179370","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103805225","display_name":"Xiao Fu","orcid":"https://orcid.org/0009-0006-6601-5290"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xiao Fu","raw_affiliation_strings":["Software Institute, Nanjing University, China","[Software Institute Nanjing University, China]"],"affiliations":[{"raw_affiliation_string":"Software Institute, Nanjing University, China","institution_ids":["https://openalex.org/I4210128818","https://openalex.org/I881766915"]},{"raw_affiliation_string":"[Software Institute Nanjing University, China]","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060514022","display_name":"Xiaojiang Du","orcid":"https://orcid.org/0000-0003-4235-9671"},"institutions":[{"id":"https://openalex.org/I84392919","display_name":"Temple University","ror":"https://ror.org/00kx1jb78","country_code":"US","type":"education","lineage":["https://openalex.org/I84392919"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiaojiang Du","raw_affiliation_strings":["Department of Computer and Information Sciences, Temple University, USA","\u2002Department of Computer and Information Sciences, Temple University, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer and Information Sciences, Temple University, USA","institution_ids":["https://openalex.org/I84392919"]},{"raw_affiliation_string":"\u2002Department of Computer and Information Sciences, Temple University, USA","institution_ids":["https://openalex.org/I84392919"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073104000","display_name":"Bin Luo","orcid":"https://orcid.org/0000-0002-9036-0063"},"institutions":[{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bin Luo","raw_affiliation_strings":["Software Institute, Nanjing University, China","[Software Institute Nanjing University, China]"],"affiliations":[{"raw_affiliation_string":"Software Institute, Nanjing University, China","institution_ids":["https://openalex.org/I4210128818","https://openalex.org/I881766915"]},{"raw_affiliation_string":"[Software Institute Nanjing University, China]","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110232519","display_name":"Jin Shi","orcid":"https://orcid.org/0000-0002-1621-6944"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jin Shi","raw_affiliation_strings":["School of Information Management, Nanjing University, China","[School of Information Management, Nanjing University, China]"],"affiliations":[{"raw_affiliation_string":"School of Information Management, Nanjing University, China","institution_ids":["https://openalex.org/I881766915"]},{"raw_affiliation_string":"[School of Information Management, Nanjing University, China]","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090064722","display_name":"Zhitao Guan","orcid":"https://orcid.org/0000-0003-0901-8621"},"institutions":[{"id":"https://openalex.org/I153473198","display_name":"North China Electric Power University","ror":"https://ror.org/04qr5t414","country_code":"CN","type":"education","lineage":["https://openalex.org/I153473198"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhitao Guan","raw_affiliation_strings":["School of Control and Computer Engineering, North Power Electric Power University, China"],"affiliations":[{"raw_affiliation_string":"School of Control and Computer Engineering, North Power Electric Power University, China","institution_ids":["https://openalex.org/I153473198"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056716675","display_name":"Yuhua Wang","orcid":"https://orcid.org/0000-0001-7749-000X"},"institutions":[{"id":"https://openalex.org/I151727225","display_name":"Harbin Engineering University","ror":"https://ror.org/03x80pn82","country_code":"CN","type":"education","lineage":["https://openalex.org/I151727225"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuhua Wang","raw_affiliation_strings":["College of Computer Science and Technology, Harbin Engineering University, China","College of Computer Science and Technology, Harbin Engineering University, china"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Harbin Engineering University, China","institution_ids":["https://openalex.org/I151727225"]},{"raw_affiliation_string":"College of Computer Science and Technology, Harbin Engineering University, china","institution_ids":["https://openalex.org/I151727225"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5103805225"],"corresponding_institution_ids":["https://openalex.org/I4210128818","https://openalex.org/I881766915"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.03717091,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"115","last_page":"120"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13192","display_name":"Forensic Fingerprint Detection Methods","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8535760045051575},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5721251964569092},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.501267671585083},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.484195739030838},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4554550051689148},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4273895025253296},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.41624316573143005},{"id":"https://openalex.org/keywords/memory-management","display_name":"Memory management","score":0.4130539894104004},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.4061344563961029},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.19035306572914124}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8535760045051575},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5721251964569092},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.501267671585083},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.484195739030838},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4554550051689148},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4273895025253296},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.41624316573143005},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.4130539894104004},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4061344563961029},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.19035306572914124},{"id":"https://openalex.org/C136085584","wikidata":"https://www.wikidata.org/wiki/Q910289","display_name":"Overlay","level":2,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/infcomw.2015.7179370","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infcomw.2015.7179370","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7699999809265137}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W90265526","https://openalex.org/W2010376606","https://openalex.org/W2040527645","https://openalex.org/W2081989812","https://openalex.org/W2115107160","https://openalex.org/W2118534519","https://openalex.org/W2128213437","https://openalex.org/W2132174782","https://openalex.org/W2164240796","https://openalex.org/W6603712106"],"related_works":["https://openalex.org/W4244478748","https://openalex.org/W4223488648","https://openalex.org/W2134969820","https://openalex.org/W2251605416","https://openalex.org/W2560439919","https://openalex.org/W4389340727","https://openalex.org/W3150465815","https://openalex.org/W1997222214","https://openalex.org/W2802581102","https://openalex.org/W2982428536"],"abstract_inverted_index":{"Nowadays":[0],"in":[1,69,81,160],"order":[2,70],"to":[3,43,64,71,121],"process":[4],"and":[5,27,52,76,105,135,180],"store":[6],"many":[7],"kinds":[8],"of":[9,15,24,38,49],"multimedia":[10],"data,":[11],"the":[12,21,78,106,143,182],"storage":[13],"capability":[14],"memory":[16,39,50,66,91,126],"has":[17,30,85],"grown":[18],"greatly.":[19],"Moreover":[20],"widespread":[22],"use":[23],"mobile":[25],"devices":[26],"cloud":[28],"computing":[29],"made":[31],"criminal":[32,74,79,178,183],"investigators":[33,175],"often":[34],"face":[35],"a":[36,46,118,137,161],"lot":[37],"dumps.":[40],"They":[41],"have":[42,59,167],"deal":[44],"with":[45],"large":[47],"quantity":[48],"data":[51,55,99,133],"complex":[53],"OS":[54,132],"structures":[56,134],"which":[57],"they":[58],"little":[60],"knowledge":[61],"of.":[62],"How":[63],"analyze":[65],"evidence":[67,127,159],"automatically":[68],"find":[72,176],"hidden":[73,177],"behavior":[75,103,179],"reconstruct":[77,181],"scenario":[80],"an":[82,87],"understandable":[83],"way":[84],"become":[86],"important":[88],"problem.":[89],"Current":[90],"analysis":[92],"methods":[93],"usually":[94],"aim":[95],"at":[96],"recovering":[97],"certain":[98],"structures.":[100],"The":[101],"illegal":[102],"identification":[104],"event":[107],"reconstruction":[108],"are":[109],"still":[110],"completed":[111],"manually":[112],"by":[113,148],"investigators.":[114],"This":[115],"paper":[116],"presents":[117],"novel":[119],"method":[120,156],"correlate":[122],"processes":[123],"for":[124],"automatic":[125],"analysis.":[128],"Through":[129],"analyzing":[130],"key":[131],"utilizing":[136],"clustering":[138],"algorithm,":[139],"it":[140],"can":[141,157,173],"discover":[142],"relationships":[144,151],"among":[145],"processes.":[146],"And":[147],"describing":[149],"these":[150,170],"as":[152],"correlation":[153,171],"graphs,":[154],"our":[155],"display":[158],"high":[162],"semantic":[163],"level.":[164],"Some":[165],"experiments":[166],"proved":[168],"that":[169],"graphs":[172],"help":[174],"scenarios.":[184]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}