{"id":"https://openalex.org/W2739673000","doi":"https://doi.org/10.1145/3121252.3121253","title":"Use of organisational topologies for forensic investigations","display_name":"Use of organisational topologies for forensic investigations","publication_year":2017,"publication_date":"2017-08-01","ids":{"openalex":"https://openalex.org/W2739673000","doi":"https://doi.org/10.1145/3121252.3121253","mag":"2739673000"},"language":"en","primary_location":{"id":"doi:10.1145/3121252.3121253","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3121252.3121253","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st ACM SIGSOFT International Workshop on Software Engineering and Digital Forensics","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013899490","display_name":"George Grispos","orcid":"https://orcid.org/0000-0003-3468-0182"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"George Grispos","raw_affiliation_strings":["Lero, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lero, Ireland","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012265130","display_name":"Sorren Hanvey","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sorren Hanvey","raw_affiliation_strings":["Lero, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lero, Ireland","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060861082","display_name":"Bashar Nuseibeh","orcid":"https://orcid.org/0000-0002-3476-053X"},"institutions":[{"id":"https://openalex.org/I204136569","display_name":"The Open University","ror":"https://ror.org/05mzfcs16","country_code":"GB","type":"education","lineage":["https://openalex.org/I204136569"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Bashar Nuseibeh","raw_affiliation_strings":["Open University, UK / Lero, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Open University, UK / Lero, Ireland","institution_ids":["https://openalex.org/I204136569"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.7150527834892273},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6646308898925781},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6435069441795349},{"id":"https://openalex.org/keywords/asset","display_name":"Asset (computer security)","score":0.642361044883728},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.5394597053527832},{"id":"https://openalex.org/keywords/network-topology","display_name":"Network topology","score":0.504494309425354},{"id":"https://openalex.org/keywords/topology","display_name":"Topology (electrical circuits)","score":0.45678624510765076},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.38325509428977966},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.36977213621139526},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.19138315320014954},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.08965247869491577}],"concepts":[{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.7150527834892273},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6646308898925781},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6435069441795349},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.642361044883728},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.5394597053527832},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.504494309425354},{"id":"https://openalex.org/C184720557","wikidata":"https://www.wikidata.org/wiki/Q7825049","display_name":"Topology (electrical circuits)","level":2,"score":0.45678624510765076},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38325509428977966},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.36977213621139526},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.19138315320014954},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.08965247869491577},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3121252.3121253","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3121252.3121253","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st ACM SIGSOFT International Workshop on Software Engineering and Digital Forensics","raw_type":"proceedings-article"},{"id":"pmh:oai:oro.open.ac.uk:50906","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4377196284","display_name":"Open Research Online - ORO (The Open University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I204136569","host_organization_name":"The Open University","host_organization_lineage":["https://openalex.org/I204136569"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"Conference or Workshop Item"},{"id":"pmh:oai:oro.open.ac.uk:67229","is_oa":false,"landing_page_url":"https://oro.open.ac.uk/67229/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401187","display_name":"Open Research Online (The Open University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I204136569","host_organization_name":"The Open University","host_organization_lineage":["https://openalex.org/I204136569"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference or Workshop Item"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4052407672","display_name":null,"funder_award_id":"Grant No. 13/RC/2094","funder_id":"https://openalex.org/F4320320847","funder_display_name":"Science Foundation Ireland"},{"id":"https://openalex.org/G7048960024","display_name":null,"funder_award_id":"Advanced Grant. No. 291652","funder_id":"https://openalex.org/F4320334678","funder_display_name":"European Research Council"}],"funders":[{"id":"https://openalex.org/F4320320847","display_name":"Science Foundation Ireland","ror":"https://ror.org/0271asj38"},{"id":"https://openalex.org/F4320334678","display_name":"European Research Council","ror":"https://ror.org/0472cxd90"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W100452635","https://openalex.org/W185406290","https://openalex.org/W1533883536","https://openalex.org/W1539707978","https://openalex.org/W1595964914","https://openalex.org/W1637837609","https://openalex.org/W1913359239","https://openalex.org/W1966207563","https://openalex.org/W1992758609","https://openalex.org/W2031423416","https://openalex.org/W2032386914","https://openalex.org/W2044942713","https://openalex.org/W2074416483","https://openalex.org/W2104285835","https://openalex.org/W2136260912","https://openalex.org/W2142283273","https://openalex.org/W2142925340","https://openalex.org/W2166602595","https://openalex.org/W2312132523","https://openalex.org/W2480118173","https://openalex.org/W2482026192","https://openalex.org/W2505928430","https://openalex.org/W2555041669","https://openalex.org/W2560230990","https://openalex.org/W2612791874","https://openalex.org/W2725276470","https://openalex.org/W2767072091","https://openalex.org/W3125590599","https://openalex.org/W6607448945"],"related_works":["https://openalex.org/W2086397253","https://openalex.org/W2133122801","https://openalex.org/W600422426","https://openalex.org/W2007156430","https://openalex.org/W3081478936","https://openalex.org/W2785612136","https://openalex.org/W2099529706","https://openalex.org/W2198066681","https://openalex.org/W1988224651","https://openalex.org/W2096179639"],"abstract_inverted_index":{"In":[0,81,110],"today's":[1],"highly":[2],"regulated":[3],"business":[4],"environment,":[5],"it":[6],"is":[7,44,187],"becoming":[8],"increasingly":[9],"important":[10],"that":[11,45,51,152,175,207],"organisations":[12,46],"implement":[13,47],"forensic-ready":[14],"systems":[15],"and":[16,25,60,101,132,140,166],"architectures":[17],"to":[18,62,97,103,144,164,177,189,212,219],"aid":[19],"the":[20,87,91,99,111,113,134,149,171,183,195,220],"investigation":[21],"of":[22,41,89,93,115,137,148,173,197,210],"security":[23],"incidents":[24],"data":[26],"breaches.":[27],"Previously,":[28],"different":[29],"solutions":[30,43],"have":[31],"been":[32,118],"proposed":[33],"for":[34],"implementing":[35],"forensic":[36,108],"readiness":[37],"within":[38,78],"organisations.":[39],"One":[40],"these":[42],"an":[48,79,94,198,213],"organisational":[49,150],"structure":[50,96,151,200],"takes":[52,153],"into":[53,154],"consideration":[54,155],"digital":[55,156],"forensics":[56],"by":[57],"establishing":[58],"roles":[59,100],"responsibilities":[61,102],"assist":[63,104,203],"with":[64,105],"investigations.":[65],"However,":[66],"no":[67],"previous":[68,130],"research":[69,131],"has":[70,117],"defined":[71],"how":[72],"this":[73,82,129],"can":[74,161,201],"actually":[75],"be":[76,162,178,209],"accomplished":[77],"organisation.":[80],"paper,":[83],"we":[84],"put":[85],"forth":[86],"idea":[88],"using":[90],"topology":[92,116,160,196],"organisation's":[95,199],"define":[98,145],"handling":[106],"a":[107,146,168],"investigation.":[109,223],"past,":[112],"role":[114],"examined":[119],"from":[120],"various":[121],"perspectives,":[122],"including":[123],"software":[124],"engineering.":[125],"We":[126],"draw":[127],"on":[128,216],"use":[133],"topological":[135],"properties":[136],"containment,":[138],"proximity":[139],"reachability":[141],"in":[142],"order":[143],"representation":[147],"forensics.":[157],"For":[158],"example,":[159],"used":[163],"express":[165],"provide":[167],"context":[169],"regarding":[170],"location":[172],"assets":[174],"need":[176],"investigated,":[179],"as":[180,182],"well":[181],"individuals,":[184],"whose":[185],"assistance":[186],"required":[188],"investigate":[190],"such":[191],"assets.":[192],"Furthermore,":[193],"knowing":[194],"also":[202],"investigators":[204],"identify":[205],"stakeholders":[206],"could":[208],"interest":[211],"investigation,":[214],"based":[215],"their":[217],"relationship":[218],"asset(s)":[221],"under":[222]},"counts_by_year":[{"year":2018,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}