{"id":"https://openalex.org/W2968341225","doi":"https://doi.org/10.1145/3339252.3339275","title":"Enhancing credibility of digital evidence through provenance-based incident response handling","display_name":"Enhancing credibility of digital evidence through provenance-based incident response handling","publication_year":2019,"publication_date":"2019-08-09","ids":{"openalex":"https://openalex.org/W2968341225","doi":"https://doi.org/10.1145/3339252.3339275","mag":"2968341225"},"language":"en","primary_location":{"id":"doi:10.1145/3339252.3339275","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3339252.3339275","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 14th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://phaidra.univie.ac.at/o:1076814","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001047624","display_name":"Ludwig Englbrecht","orcid":"https://orcid.org/0000-0002-8546-3017"},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ludwig Englbrecht","raw_affiliation_strings":["Department of Information Systems, University of Regensburg, Regensburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Systems, University of Regensburg, Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056633669","display_name":"Gregor Langner","orcid":"https://orcid.org/0000-0002-3271-5073"},"institutions":[{"id":"https://openalex.org/I129774422","display_name":"University of Vienna","ror":"https://ror.org/03prydq77","country_code":"AT","type":"education","lineage":["https://openalex.org/I129774422"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Gregor Langner","raw_affiliation_strings":["Research Group Multimedia Information Systems, University of Vienna, Vienna, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Research Group Multimedia Information Systems, University of Vienna, Vienna, Austria","institution_ids":["https://openalex.org/I129774422"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068820890","display_name":"G\u00fcnther Pernul","orcid":null},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"G\u00fcnther Pernul","raw_affiliation_strings":["Department of Information Systems, University of Regensburg, Regensburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Systems, University of Regensburg, Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060519573","display_name":"Gerald Quirchmayr","orcid":"https://orcid.org/0000-0003-2998-742X"},"institutions":[{"id":"https://openalex.org/I129774422","display_name":"University of Vienna","ror":"https://ror.org/03prydq77","country_code":"AT","type":"education","lineage":["https://openalex.org/I129774422"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Gerald Quirchmayr","raw_affiliation_strings":["Research Group Multimedia Information Systems, University of Vienna, Vienna, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Research Group Multimedia Information Systems, University of Vienna, Vienna, Austria","institution_ids":["https://openalex.org/I129774422"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10751","display_name":"Forensic and Genetic Research","score":0.988099992275238,"subfield":{"id":"https://openalex.org/subfields/1311","display_name":"Genetics"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7424889802932739},{"id":"https://openalex.org/keywords/credibility","display_name":"Credibility","score":0.7385390996932983},{"id":"https://openalex.org/keywords/incident-response","display_name":"Incident response","score":0.7380068898200989},{"id":"https://openalex.org/keywords/digital-evidence","display_name":"Digital evidence","score":0.7003066539764404},{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.6058778166770935},{"id":"https://openalex.org/keywords/provenance","display_name":"Provenance","score":0.5621088743209839},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5348260402679443},{"id":"https://openalex.org/keywords/incident-report","display_name":"Incident report","score":0.49807119369506836},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.49411728978157043},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.48009803891181946},{"id":"https://openalex.org/keywords/computer-forensics","display_name":"Computer forensics","score":0.4764026701450348},{"id":"https://openalex.org/keywords/response-time","display_name":"Response time","score":0.4743674695491791}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7424889802932739},{"id":"https://openalex.org/C2780224610","wikidata":"https://www.wikidata.org/wiki/Q1530061","display_name":"Credibility","level":2,"score":0.7385390996932983},{"id":"https://openalex.org/C2985105721","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident response","level":2,"score":0.7380068898200989},{"id":"https://openalex.org/C2781357168","wikidata":"https://www.wikidata.org/wiki/Q5276084","display_name":"Digital evidence","level":3,"score":0.7003066539764404},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.6058778166770935},{"id":"https://openalex.org/C2780049196","wikidata":"https://www.wikidata.org/wiki/Q23582628","display_name":"Provenance","level":2,"score":0.5621088743209839},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5348260402679443},{"id":"https://openalex.org/C2909164965","wikidata":"https://www.wikidata.org/wiki/Q6014597","display_name":"Incident report","level":2,"score":0.49807119369506836},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49411728978157043},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.48009803891181946},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.4764026701450348},{"id":"https://openalex.org/C19012869","wikidata":"https://www.wikidata.org/wiki/Q578372","display_name":"Response time","level":2,"score":0.4743674695491791},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C121684516","wikidata":"https://www.wikidata.org/wiki/Q7600677","display_name":"Computer graphics (images)","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C5900021","wikidata":"https://www.wikidata.org/wiki/Q163082","display_name":"Petrology","level":1,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3339252.3339275","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3339252.3339275","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 14th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},{"id":"pmh:info:fedora/oai:univie.ac.at:o:1076814","is_oa":true,"landing_page_url":"https://phaidra.univie.ac.at/o:1076814","pdf_url":null,"source":{"id":"https://openalex.org/S4306401993","display_name":"Phaidra (Universit\u00e4t Wien)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I129774422","host_organization_name":"University of Vienna","host_organization_lineage":["https://openalex.org/I129774422"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ARES '19: Proceedings of the 14th International Conference on Availability, Reliability and Security (ICPS Proceedings) (2019-08-26)","raw_type":"conference Object"}],"best_oa_location":{"id":"pmh:info:fedora/oai:univie.ac.at:o:1076814","is_oa":true,"landing_page_url":"https://phaidra.univie.ac.at/o:1076814","pdf_url":null,"source":{"id":"https://openalex.org/S4306401993","display_name":"Phaidra (Universit\u00e4t Wien)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I129774422","host_organization_name":"University of Vienna","host_organization_lineage":["https://openalex.org/I129774422"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ARES '19: Proceedings of the 14th International Conference on Availability, Reliability and Security (ICPS Proceedings) (2019-08-26)","raw_type":"conference Object"},"sustainable_development_goals":[{"score":0.7900000214576721,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G5813784343","display_name":null,"funder_award_id":"740723","funder_id":"https://openalex.org/F4320335254","funder_display_name":"Horizon 2020"},{"id":"https://openalex.org/G8355716405","display_name":null,"funder_award_id":"740723","funder_id":"https://openalex.org/F4320332999","funder_display_name":"Horizon 2020 Framework Programme"}],"funders":[{"id":"https://openalex.org/F4320332999","display_name":"Horizon 2020 Framework Programme","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320335254","display_name":"Horizon 2020","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W191839766","https://openalex.org/W625206410","https://openalex.org/W1550210377","https://openalex.org/W1816130922","https://openalex.org/W2009232481","https://openalex.org/W2444331967","https://openalex.org/W2609517807","https://openalex.org/W2628759714","https://openalex.org/W2738645295","https://openalex.org/W2747669027","https://openalex.org/W2751082626","https://openalex.org/W3101089035","https://openalex.org/W6718624410"],"related_works":["https://openalex.org/W2598491911","https://openalex.org/W2181728705","https://openalex.org/W4247205791","https://openalex.org/W4242633011","https://openalex.org/W2489557937","https://openalex.org/W4238452393","https://openalex.org/W2536999591","https://openalex.org/W4244711387","https://openalex.org/W93745046","https://openalex.org/W2558079263"],"abstract_inverted_index":{"Digital":[0,46],"forensics":[1],"are":[2,117,173,180],"becoming":[3],"increasingly":[4],"important":[5],"for":[6,60,95,150,177],"the":[7,32,36,40,43,49,80,101,109,113,141,164,171],"investigation":[8],"of":[9,42,51,67,82,103],"computer-related":[10],"crimes,":[11],"white-collar":[12],"crimes":[13],"and":[14,38,62,112,127,175],"massive":[15],"hacker":[16],"attacks.":[17],"After":[18],"an":[19,24,93,135],"incident":[20,26,68,89,114,136,142],"has":[21],"been":[22],"detected":[23],"appropriate":[25],"response":[27,69,115,143],"is":[28,131,144,153],"usually":[29],"initiated":[30],"with":[31,119],"aim":[33],"to":[34,78,88,98,155,167],"mitigate":[35],"attack":[37],"ensure":[39],"recovery":[41],"IT":[44],"systems.":[45],"Forensics":[47],"pursues":[48],"goal":[50],"acquiring":[52],"evidence":[53,84],"that":[54],"will":[55],"stand":[56],"up":[57],"in":[58],"court":[59],"sentencing":[61],"sometimes":[63],"opposes":[64],"contradicting":[65],"objectives":[66],"approaches.":[70],"The":[71],"concept":[72,166],"presented":[73],"here":[74],"provides":[75],"a":[76,120,168],"solution":[77],"strengthen":[79],"credibility":[81],"digital":[83,104],"during":[85,134],"actions":[86],"related":[87],"response.":[90,137],"It":[91],"adapts":[92],"approach":[94],"data":[96,123,129],"provenance":[97,124,130,160],"accurately":[99],"track":[100],"transformation":[102],"evidence.":[105],"For":[106],"this":[107],"purpose,":[108],"affected":[110],"system":[111,122],"systems":[116],"equipped":[118],"whole":[121],"capturing":[125],"mechanism":[126],"then":[128],"captured":[132],"simultaneously":[133],"Context":[138],"information":[139],"about":[140],"also":[145],"documented.":[146],"An":[147],"adapted":[148],"algorithm":[149],"sub-graph":[151],"detection":[152],"used":[154],"identify":[156],"similarities":[157],"between":[158],"two":[159],"graphs.":[161],"By":[162],"applying":[163],"proposed":[165],"use":[169],"case,":[170],"advantages":[172],"demonstrated":[174],"possibilities":[176],"further":[178],"development":[179],"presented.":[181]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}