{"id":"https://openalex.org/W2923208273","doi":"https://doi.org/10.1145/3310355","title":"Introducing the Temporal Dimension to Memory Forensics","display_name":"Introducing the Temporal Dimension to Memory Forensics","publication_year":2019,"publication_date":"2019-03-18","ids":{"openalex":"https://openalex.org/W2923208273","doi":"https://doi.org/10.1145/3310355","mag":"2923208273"},"language":"en","primary_location":{"id":"doi:10.1145/3310355","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3310355","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058787341","display_name":"Fabio Pagani","orcid":"https://orcid.org/0000-0002-4357-9804"},"institutions":[{"id":"https://openalex.org/I1902872","display_name":"EURECOM","ror":"https://ror.org/00sse7z02","country_code":"FR","type":"education","lineage":["https://openalex.org/I1902872","https://openalex.org/I205703379"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Fabio Pagani","raw_affiliation_strings":["Eurecom, France"],"raw_orcid":"https://orcid.org/0000-0002-4357-9804","affiliations":[{"raw_affiliation_string":"Eurecom, France","institution_ids":["https://openalex.org/I1902872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083142611","display_name":"Oleksii Fedorov","orcid":null},"institutions":[{"id":"https://openalex.org/I202483615","display_name":"National Technical University of Ukraine \u201cIgor Sikorsky Kyiv Polytechnic Institute\u201d","ror":"https://ror.org/00syn5v21","country_code":"UA","type":"education","lineage":["https://openalex.org/I202483615"]}],"countries":["UA"],"is_corresponding":false,"raw_author_name":"Oleksii Fedorov","raw_affiliation_strings":["Igor Sikorsky Kyiv Polytechnic Institute, Ukraine"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Igor Sikorsky Kyiv Polytechnic Institute, Ukraine","institution_ids":["https://openalex.org/I202483615"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002025561","display_name":"Davide Balzarotti","orcid":"https://orcid.org/0000-0001-5957-6213"},"institutions":[{"id":"https://openalex.org/I1902872","display_name":"EURECOM","ror":"https://ror.org/00sse7z02","country_code":"FR","type":"education","lineage":["https://openalex.org/I1902872","https://openalex.org/I205703379"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Davide Balzarotti","raw_affiliation_strings":["Eurecom, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Eurecom, France","institution_ids":["https://openalex.org/I1902872"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.1479,"has_fulltext":false,"cited_by_count":39,"citation_normalized_percentile":{"value":0.96441546,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"22","issue":"2","first_page":"1","last_page":"21"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8214057683944702},{"id":"https://openalex.org/keywords/digital-evidence","display_name":"Digital evidence","score":0.6461565494537354},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.6427399516105652},{"id":"https://openalex.org/keywords/dimension","display_name":"Dimension (graph theory)","score":0.6300345063209534},{"id":"https://openalex.org/keywords/computer-forensics","display_name":"Computer forensics","score":0.5585111379623413},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5127571821212769},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.4823593497276306},{"id":"https://openalex.org/keywords/locality","display_name":"Locality","score":0.48035869002342224},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.4758431911468506},{"id":"https://openalex.org/keywords/locality-of-reference","display_name":"Locality of reference","score":0.43582719564437866},{"id":"https://openalex.org/keywords/data-acquisition","display_name":"Data acquisition","score":0.4121086597442627},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.33821970224380493},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.23760980367660522},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.10203948616981506}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8214057683944702},{"id":"https://openalex.org/C2781357168","wikidata":"https://www.wikidata.org/wiki/Q5276084","display_name":"Digital evidence","level":3,"score":0.6461565494537354},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.6427399516105652},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.6300345063209534},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.5585111379623413},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5127571821212769},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4823593497276306},{"id":"https://openalex.org/C2779808786","wikidata":"https://www.wikidata.org/wiki/Q6664603","display_name":"Locality","level":2,"score":0.48035869002342224},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.4758431911468506},{"id":"https://openalex.org/C27602214","wikidata":"https://www.wikidata.org/wiki/Q1868547","display_name":"Locality of reference","level":3,"score":0.43582719564437866},{"id":"https://openalex.org/C163985040","wikidata":"https://www.wikidata.org/wiki/Q1172399","display_name":"Data acquisition","level":2,"score":0.4121086597442627},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33821970224380493},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.23760980367660522},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10203948616981506},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3310355","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3310355","pdf_url":null,"source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},{"id":"pmh:oai:HAL:hal-04093565v1","is_oa":false,"landing_page_url":"https://hal.science/hal-04093565","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ACM Transactions on Privacy and Security, 2019, 22 (2), pp.1 - 21. ⟨10.1145/3310355⟩","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:fr.eurecom:5827","is_oa":false,"landing_page_url":"http://www.eurecom.fr/publication/5827","pdf_url":null,"source":{"id":"https://openalex.org/S4377196942","display_name":"Graduate School and Research Center in Digital Science (EURECOM)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1902872","host_organization_name":"EURECOM","host_organization_lineage":["https://openalex.org/I1902872"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ACM Transactions Privacy and Security (TOPS), Volume 22, N\u00b02, March 2019
\\n","raw_type":"Journal"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5121054629","display_name":"Towards a Reliable and Automated Analysis of Compromised Systems","funder_award_id":"771844","funder_id":"https://openalex.org/F4320338335","funder_display_name":"H2020 European Research Council"}],"funders":[{"id":"https://openalex.org/F4320338335","display_name":"H2020 European Research Council","ror":"https://ror.org/0472cxd90"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W308356197","https://openalex.org/W1504084862","https://openalex.org/W1638530311","https://openalex.org/W1893186272","https://openalex.org/W1934709275","https://openalex.org/W1968389182","https://openalex.org/W1970914644","https://openalex.org/W1979319057","https://openalex.org/W1991563835","https://openalex.org/W1995494432","https://openalex.org/W1996734614","https://openalex.org/W2004982394","https://openalex.org/W2040527645","https://openalex.org/W2048134700","https://openalex.org/W2049722158","https://openalex.org/W2055002124","https://openalex.org/W2068661019","https://openalex.org/W2071030167","https://openalex.org/W2072863245","https://openalex.org/W2091452626","https://openalex.org/W2092935428","https://openalex.org/W2096269529","https://openalex.org/W2099950469","https://openalex.org/W2103956577","https://openalex.org/W2113032636","https://openalex.org/W2113854927","https://openalex.org/W2118558829","https://openalex.org/W2122097147","https://openalex.org/W2128213437","https://openalex.org/W2138580357","https://openalex.org/W2140908857","https://openalex.org/W2143642500","https://openalex.org/W2146330317","https://openalex.org/W2174071553","https://openalex.org/W2175377689","https://openalex.org/W2229662347","https://openalex.org/W2299592321","https://openalex.org/W2322769439","https://openalex.org/W2329331065","https://openalex.org/W2350778671","https://openalex.org/W2399247437","https://openalex.org/W2415908313","https://openalex.org/W2489881394","https://openalex.org/W2579276500","https://openalex.org/W2744934275","https://openalex.org/W2786042943","https://openalex.org/W2790853175","https://openalex.org/W2791677974","https://openalex.org/W2792801185"],"related_works":["https://openalex.org/W2598491911","https://openalex.org/W2181728705","https://openalex.org/W4247205791","https://openalex.org/W4283205458","https://openalex.org/W2489557937","https://openalex.org/W4238452393","https://openalex.org/W2536999591","https://openalex.org/W4242633011","https://openalex.org/W93745046","https://openalex.org/W4244711387"],"abstract_inverted_index":{"Kickstarted":[0],"by":[1,247],"the":[2,45,48,57,60,73,85,88,94,97,103,132,155,175,183,192,195,235,240],"Digital":[3],"Forensic":[4],"Research":[5],"Workshop":[6],"(DFRWS)":[7],"conference":[8],"in":[9,65,75,137,157],"2005,":[10],"modern":[11],"memory":[12,52,62,98,105,150,230],"analysis":[13,136,241],"is":[14,54,71,90,99,114],"now":[15],"one":[16],"of":[17,21,59,87,96,134,161,177,194],"most":[18],"active":[19],"areas":[20],"computer":[22],"forensics":[23,151],"and":[24,37,56,120,129,181,216,242],"it":[25],"mostly":[26],"focuses":[27],"on":[28,44],"techniques":[29,42],"to":[30,142,173,185,209,228,233,243,249],"locate":[31],"key":[32],"operating":[33],"system":[34,89],"data":[35,162],"structures":[36],"extract":[38],"high-level":[39],"information.":[40],"These":[41],"work":[43],"assumption":[46],"that":[47,139,149,189,211],"information":[49,83],"inside":[50],"a":[51,170,178,250],"dump":[53,106],"consistent":[55],"copy":[58],"physical":[61],"was":[63,163],"obtained":[64],"an":[66,135,220],"atomic":[67],"operation.":[68],"Unfortunately,":[69,123],"this":[70,112,145],"seldom":[72],"case":[74],"real":[76],"investigations,":[77],"where":[78],"software":[79],"acquisition":[80,196],"tools":[81,232],"record":[82],"while":[84],"rest":[86],"running.":[91],"Thus,":[92],"since":[93],"content":[95],"changing":[100],"very":[101,127,214],"rapidly,":[102],"resulting":[104],"may":[107],"contain":[108],"inconsistent":[109],"data.":[110],"While":[111],"problem":[113],"known,":[115],"its":[116,245],"consequences":[117],"are":[118,140,213],"unclear":[119],"often":[121],"overlooked.":[122],"errors":[124],"can":[125,130,190,217],"be":[126],"subtle":[128],"affect":[131],"results":[133],"ways":[138],"difficult":[141],"detect.":[143],"In":[144],"article,":[146],"we":[147,205,226],"argue":[148],"should":[152],"also":[153],"consider":[154],"time":[156,197],"which":[158],"each":[159],"piece":[160],"acquired.":[164],"This":[165],"new":[166,186],"temporal":[167,236],"dimension":[168,237],"provides":[169],"preliminary":[171],"way":[172],"assess":[174],"reliability":[176],"given":[179],"result":[180],"opens":[182],"door":[184],"research":[187],"directions":[188],"minimize":[191,244],"effect":[193,246],"or":[198],"detect":[199],"inconsistencies.":[200],"To":[201],"support":[202],"our":[203],"hypothesis,":[204],"conducted":[206],"several":[207],"experiments":[208],"show":[210],"inconsistencies":[212],"frequent":[215],"negatively":[218],"impact":[219],"analysis.":[221],"We":[222],"then":[223],"discuss":[224],"modifications":[225],"made":[227],"popular":[229],"forensic":[231],"make":[234],"explicit":[238],"during":[239],"resorting":[248],"locality-based":[251],"acquisition.":[252]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":1}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}