{"id":"https://openalex.org/W2136994803","doi":"https://doi.org/10.1109/tifs.2010.2060484","title":"An Automated Solution to the Multiuser Carved Data Ascription Problem","display_name":"An Automated Solution to the Multiuser Carved Data Ascription Problem","publication_year":2010,"publication_date":"2010-07-26","ids":{"openalex":"https://openalex.org/W2136994803","doi":"https://doi.org/10.1109/tifs.2010.2060484","mag":"2136994803"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2010.2060484","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2010.2060484","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077305737","display_name":"Simson Garfinkel","orcid":"https://orcid.org/0000-0003-1294-2831"},"institutions":[{"id":"https://openalex.org/I35364215","display_name":"Naval Postgraduate School","ror":"https://ror.org/033yfkj90","country_code":"US","type":"education","lineage":["https://openalex.org/I1330347796","https://openalex.org/I3130687028","https://openalex.org/I35364215"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Simson L. Garfinkel","raw_affiliation_strings":["Department of Computer Science, Naval Postgraduate School, Pacific Grove, CA, USA","Dept. of Comput. Sci., Naval Postgrad. Sch., Pacific Grove, CA, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Naval Postgraduate School, Pacific Grove, CA, USA","institution_ids":["https://openalex.org/I35364215"]},{"raw_affiliation_string":"Dept. of Comput. Sci., Naval Postgrad. Sch., Pacific Grove, CA, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016199569","display_name":"Aleatha Parker-Wood","orcid":null},"institutions":[{"id":"https://openalex.org/I185103710","display_name":"University of California, Santa Cruz","ror":"https://ror.org/03s65by71","country_code":"US","type":"education","lineage":["https://openalex.org/I185103710"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aleatha Parker-Wood","raw_affiliation_strings":["Department of Computer Science, University of California, Santa Cruz, CA, USA","Dept. of Comput. Sci., Univ. of California, Santa Cruz, CA, USA#TAB#"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of California, Santa Cruz, CA, USA","institution_ids":["https://openalex.org/I185103710"]},{"raw_affiliation_string":"Dept. of Comput. Sci., Univ. of California, Santa Cruz, CA, USA#TAB#","institution_ids":["https://openalex.org/I185103710"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040341934","display_name":"Daniel Huynh","orcid":null},"institutions":[{"id":"https://openalex.org/I192545095","display_name":"United States Military Academy","ror":"https://ror.org/01jepya76","country_code":"US","type":"education","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I192545095","https://openalex.org/I4210088792"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniel Huynh","raw_affiliation_strings":["Department of Computer Science, United Stated Military Academy, West Point, NY, USA","Dept. of Comput. Sci., United States Mil. Acad., West Point, West Point, NY, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, United Stated Military Academy, West Point, NY, USA","institution_ids":["https://openalex.org/I192545095"]},{"raw_affiliation_string":"Dept. of Comput. Sci., United States Mil. Acad., West Point, West Point, NY, USA","institution_ids":["https://openalex.org/I192545095"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5070558277","display_name":"James J. Migletz","orcid":null},"institutions":[{"id":"https://openalex.org/I4210106167","display_name":"Marine Corps University","ror":"https://ror.org/01r5gad37","country_code":"US","type":"education","lineage":["https://openalex.org/I4210106167"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"James Migletz","raw_affiliation_strings":["U.S. Marine Corporations, Quantico, VA, USA","U.S. Marine Corps, Quantico, VA, USA"],"affiliations":[{"raw_affiliation_string":"U.S. Marine Corporations, Quantico, VA, USA","institution_ids":["https://openalex.org/I4210106167"]},{"raw_affiliation_string":"U.S. Marine Corps, Quantico, VA, USA","institution_ids":["https://openalex.org/I4210106167"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5077305737"],"corresponding_institution_ids":["https://openalex.org/I35364215"],"apc_list":null,"apc_paid":null,"fwci":2.8566,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.93211779,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"5","issue":"4","first_page":"868","last_page":"882"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.98580002784729,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.895978569984436},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.8130037784576416},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.6965548992156982},{"id":"https://openalex.org/keywords/metadata-repository","display_name":"Metadata repository","score":0.6703415513038635},{"id":"https://openalex.org/keywords/timestamp","display_name":"Timestamp","score":0.6098464131355286},{"id":"https://openalex.org/keywords/directory","display_name":"Directory","score":0.5855941772460938},{"id":"https://openalex.org/keywords/file-system","display_name":"File system","score":0.43850693106651306},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.4128918945789337},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3949817419052124},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.360069215297699},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3356589674949646},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.23636284470558167},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2324569821357727},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.0984465479850769}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.895978569984436},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.8130037784576416},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.6965548992156982},{"id":"https://openalex.org/C153048206","wikidata":"https://www.wikidata.org/wiki/Q3454922","display_name":"Metadata repository","level":3,"score":0.6703415513038635},{"id":"https://openalex.org/C113954288","wikidata":"https://www.wikidata.org/wiki/Q186885","display_name":"Timestamp","level":2,"score":0.6098464131355286},{"id":"https://openalex.org/C2777683733","wikidata":"https://www.wikidata.org/wiki/Q201456","display_name":"Directory","level":2,"score":0.5855941772460938},{"id":"https://openalex.org/C2780940931","wikidata":"https://www.wikidata.org/wiki/Q174989","display_name":"File system","level":2,"score":0.43850693106651306},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.4128918945789337},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3949817419052124},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.360069215297699},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3356589674949646},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.23636284470558167},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2324569821357727},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.0984465479850769}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2010.2060484","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2010.2060484","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:calhoun.nps.edu:10945/44283","is_oa":false,"landing_page_url":"http://hdl.handle.net/10945/44283","pdf_url":null,"source":{"id":"https://openalex.org/S4306400952","display_name":"Calhoun: The Naval Postgraduate School Institutional Archive (Naval Postgraduate School)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I35364215","host_organization_name":"Naval Postgraduate School","host_organization_lineage":["https://openalex.org/I35364215"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W116673063","https://openalex.org/W145064556","https://openalex.org/W315634289","https://openalex.org/W1504694836","https://openalex.org/W1552553528","https://openalex.org/W1570448133","https://openalex.org/W1680392829","https://openalex.org/W2046983286","https://openalex.org/W2076333420","https://openalex.org/W2076342816","https://openalex.org/W2086549170","https://openalex.org/W2096123080","https://openalex.org/W2116021422","https://openalex.org/W2125055259","https://openalex.org/W2152247885","https://openalex.org/W2166467874","https://openalex.org/W2912780347","https://openalex.org/W2966207845","https://openalex.org/W4243957593","https://openalex.org/W4247522292","https://openalex.org/W4254004579","https://openalex.org/W6674594167"],"related_works":["https://openalex.org/W3021038098","https://openalex.org/W1552553528","https://openalex.org/W2497487026","https://openalex.org/W2183628870","https://openalex.org/W3023161639","https://openalex.org/W2008531296","https://openalex.org/W2379265733","https://openalex.org/W2394393789","https://openalex.org/W2374379029","https://openalex.org/W1503116306"],"abstract_inverted_index":{"This":[0,130],"paper":[1,104],"presents":[2],"a":[3,34,51,61,127,141,167,184,223],"novel":[4],"solution":[5],"to":[6,38,50,135,139,149,200],"the":[7,11,80,151,155,171,197,217,229],"problem":[8],"of":[9,13,154,196],"determining":[10],"ownership":[12],"carved":[14,156],"information":[15,41,55],"found":[16,44,68],"on":[17,216],"disk":[18,77,128],"drives":[19,212],"and":[20,92,138,210,231],"other":[21],"storage":[22],"media":[23],"that":[24,45,145,186,213,226],"have":[25,87],"been":[26],"used":[27,134,148],"by":[28,106,190],"more":[29],"than":[30],"one":[31],"person.":[32],"When":[33],"computer":[35],"is":[36,56,67,82,132,161,187],"subject":[37],"forensic":[39],"examination,":[40],"may":[42],"be":[43,47,96,147,174],"cannot":[46,95],"readily":[48,97],"ascribed":[49],"specific":[52,62,202],"user.":[53],"Such":[54],"typically":[57],"not":[58,86],"located":[59],"in":[60,102,119,166,183,207],"file":[63,70,89,110],"or":[64],"directory,":[65],"but":[66],"through":[69],"carving,":[71],"which":[72],"recovers":[73],"data":[74,81,205],"from":[75,126],"unallocated":[76],"sectors.":[78],"Because":[79],"carved,":[83],"it":[84],"does":[85],"associated":[88],"system":[90,111],"metadata,":[91],"its":[93],"owner":[94,153],"ascertained.":[98],"The":[99,158],"technique":[100,180,198],"presented":[101],"this":[103],"starts":[105],"automatically":[107,227],"recovering":[108],"both":[109,201],"metadata":[112,117,131],"as":[113,115],"well":[114,162],"extended":[116],"embedded":[118,123],"files":[120],"(for":[121],"instance,":[122],"timestamps)":[124],"directly":[125],"image.":[129],"then":[133],"find":[136],"exemplars":[137],"create":[140],"machine":[142],"learning":[143],"classifier":[144,160,185,230],"can":[146,173],"ascertain":[150],"likely":[152],"data.":[157],"resulting":[159],"suited":[163],"for":[164],"use":[165],"legal":[168],"setting":[169],"since":[170],"accuracy":[172],"easily":[175,188],"verified":[176],"using":[177],"cross-validation.":[178],"Our":[179],"also":[181,221],"results":[182,195],"validated":[189],"manual":[191],"inspection.":[192],"We":[193,220],"report":[194],"applied":[199],"hard":[203],"drive":[204],"created":[206],"our":[208],"laboratory":[209],"multiuser":[211],"we":[214],"acquired":[215],"secondary":[218],"market.":[219],"present":[222],"tool":[224],"set":[225],"creates":[228],"performs":[232],"validation.":[233]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":2}],"updated_date":"2026-04-05T17:49:38.594831","created_date":"2025-10-10T00:00:00"}