{"id":"https://openalex.org/W3046647252","doi":"https://doi.org/10.1145/3407023.3407068","title":"SoK","display_name":"SoK","publication_year":2020,"publication_date":"2020-07-30","ids":{"openalex":"https://openalex.org/W3046647252","doi":"https://doi.org/10.1145/3407023.3407068","mag":"3046647252"},"language":"en","primary_location":{"id":"doi:10.1145/3407023.3407068","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3407023.3407068","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3407023.3407068","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3407023.3407068","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Xiaoyu Du","orcid":null},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Xiaoyu Du","raw_affiliation_strings":["University College Dublin, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Chris Hargreaves","orcid":null},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Chris Hargreaves","raw_affiliation_strings":["University of Oxford, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Oxford, United Kingdom","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"middle","author":{"id":null,"display_name":"John Sheppard","orcid":null},"institutions":[{"id":"https://openalex.org/I7478328","display_name":"Waterford Institute of Technology","ror":"https://ror.org/03ypxwh20","country_code":"IE","type":"nonprofit","lineage":["https://openalex.org/I7478328"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"John Sheppard","raw_affiliation_strings":["Waterford Institute of Technology, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Waterford Institute of Technology, Ireland","institution_ids":["https://openalex.org/I7478328"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Felix Anda","orcid":null},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Felix Anda","raw_affiliation_strings":["University College Dublin, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Asanka Sayakkara","orcid":null},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Asanka Sayakkara","raw_affiliation_strings":["University College Dublin, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Nhien-An Le-Khac","orcid":null},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Nhien-An Le-Khac","raw_affiliation_strings":["University College Dublin, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"last","author":{"id":null,"display_name":"Mark Scanlon","orcid":null},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Mark Scanlon","raw_affiliation_strings":["University College Dublin, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":82,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/expediting","display_name":"Expediting","score":0.7177000045776367},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.6783999800682068},{"id":"https://openalex.org/keywords/big-data","display_name":"Big data","score":0.5794000029563904},{"id":"https://openalex.org/keywords/law-enforcement","display_name":"Law enforcement","score":0.5005000233650208},{"id":"https://openalex.org/keywords/digital-evidence","display_name":"Digital evidence","score":0.4724000096321106},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4611999988555908}],"concepts":[{"id":"https://openalex.org/C134448949","wikidata":"https://www.wikidata.org/wiki/Q1384274","display_name":"Expediting","level":2,"score":0.7177000045776367},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.6783999800682068},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.5794000029563904},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5561000108718872},{"id":"https://openalex.org/C2780262971","wikidata":"https://www.wikidata.org/wiki/Q44554","display_name":"Law enforcement","level":2,"score":0.5005000233650208},{"id":"https://openalex.org/C2781357168","wikidata":"https://www.wikidata.org/wiki/Q5276084","display_name":"Digital evidence","level":3,"score":0.4724000096321106},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4611999988555908},{"id":"https://openalex.org/C157170001","wikidata":"https://www.wikidata.org/wiki/Q4781507","display_name":"Applications of artificial intelligence","level":2,"score":0.3982999920845032},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.39239999651908875},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3880999982357025},{"id":"https://openalex.org/C20556612","wikidata":"https://www.wikidata.org/wiki/Q4469374","display_name":"Volume (thermodynamics)","level":2,"score":0.34599998593330383},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.28999999165534973},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.2858000099658966},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2759999930858612},{"id":"https://openalex.org/C58328972","wikidata":"https://www.wikidata.org/wiki/Q184609","display_name":"Expert system","level":2,"score":0.2685999870300293},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.2624000012874603},{"id":"https://openalex.org/C138827492","wikidata":"https://www.wikidata.org/wiki/Q6661985","display_name":"Data processing","level":2,"score":0.2529999911785126}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3407023.3407068","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3407023.3407068","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3407023.3407068","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2012.01987","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2012.01987","pdf_url":"https://arxiv.org/pdf/2012.01987","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:ora.ox.ac.uk:uuid:21a9b698-8684-4e0d-9579-9d561e288d1f","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306402636","display_name":"Oxford University Research Archive (ORA) (University of Oxford)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40120149","host_organization_name":"University of Oxford","host_organization_lineage":["https://openalex.org/I40120149"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Symplectic Elements","raw_type":"Conference item"},{"id":"pmh:oai:researchrepository.ucd.ie:10197/24771","is_oa":true,"landing_page_url":"http://hdl.handle.net/10197/24771","pdf_url":null,"source":{"id":"https://openalex.org/S4306402280","display_name":"Research Repository UCD (University College Dublin)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I100930933","host_organization_name":"University College Dublin","host_organization_lineage":["https://openalex.org/I100930933"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference Publication"}],"best_oa_location":{"id":"doi:10.1145/3407023.3407068","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3407023.3407068","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3407023.3407068","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3046647252.pdf","grobid_xml":"https://content.openalex.org/works/W3046647252.grobid-xml"},"referenced_works_count":74,"referenced_works":["https://openalex.org/W68631387","https://openalex.org/W299810643","https://openalex.org/W1506864492","https://openalex.org/W1801425632","https://openalex.org/W1972958568","https://openalex.org/W1978495386","https://openalex.org/W2008071701","https://openalex.org/W2009229022","https://openalex.org/W2027166822","https://openalex.org/W2040317322","https://openalex.org/W2048657872","https://openalex.org/W2053832511","https://openalex.org/W2057303018","https://openalex.org/W2077054130","https://openalex.org/W2087966162","https://openalex.org/W2110760901","https://openalex.org/W2114667516","https://openalex.org/W2124695272","https://openalex.org/W2128333478","https://openalex.org/W2131816657","https://openalex.org/W2134012643","https://openalex.org/W2136687465","https://openalex.org/W2136994803","https://openalex.org/W2144299314","https://openalex.org/W2155319953","https://openalex.org/W2162423596","https://openalex.org/W2170047587","https://openalex.org/W2213892522","https://openalex.org/W2250629766","https://openalex.org/W2278186031","https://openalex.org/W2342408547","https://openalex.org/W2369596206","https://openalex.org/W2407561938","https://openalex.org/W2409697880","https://openalex.org/W2412509443","https://openalex.org/W2473842208","https://openalex.org/W2476429474","https://openalex.org/W2508310662","https://openalex.org/W2513853793","https://openalex.org/W2528201848","https://openalex.org/W2536506428","https://openalex.org/W2556867355","https://openalex.org/W2557513839","https://openalex.org/W2572561073","https://openalex.org/W2581632054","https://openalex.org/W2605252717","https://openalex.org/W2611887307","https://openalex.org/W2625110865","https://openalex.org/W2737507793","https://openalex.org/W2742353928","https://openalex.org/W2760859903","https://openalex.org/W2792716682","https://openalex.org/W2803905603","https://openalex.org/W2811973125","https://openalex.org/W2887831059","https://openalex.org/W2891744193","https://openalex.org/W2891833507","https://openalex.org/W2902106343","https://openalex.org/W2904539465","https://openalex.org/W2907376671","https://openalex.org/W2907831177","https://openalex.org/W2911278693","https://openalex.org/W2914961791","https://openalex.org/W2926701059","https://openalex.org/W2940875447","https://openalex.org/W2942308003","https://openalex.org/W2942466912","https://openalex.org/W2961326167","https://openalex.org/W2969259791","https://openalex.org/W2983270658","https://openalex.org/W3004327361","https://openalex.org/W3013748100","https://openalex.org/W3030684651","https://openalex.org/W3128434951"],"related_works":[],"abstract_inverted_index":{"Multi-year":[0],"digital":[1,60,76],"forensic":[2,15,77],"backlogs":[3],"have":[4],"become":[5],"commonplace":[6],"in":[7,59,73],"law":[8],"enforcement":[9],"agencies":[10],"throughout":[11],"the":[12,20,29,42,75],"globe.":[13],"Digital":[14],"investigators":[16],"are":[17],"overloaded":[18],"with":[19],"volume":[21,30],"of":[22,31,88,94],"cases":[23],"requiring":[24],"their":[25],"expertise":[26],"compounded":[27],"by":[28],"data":[32,47],"to":[33,44],"be":[34],"processed.":[35],"Artificial":[36],"intelligence":[37,54,67,90],"is":[38,101],"often":[39],"seen":[40],"as":[41],"solution":[43],"many":[45],"big":[46],"problems.":[48],"This":[49],"paper":[50],"summarises":[51],"existing":[52],"artificial":[53,66,89],"based":[55,68],"tools":[56],"and":[57,97],"approaches":[58],"forensics.":[61],"Automated":[62],"evidence":[63],"processing":[64,83],"leveraging":[65],"techniques":[69],"shows":[70],"great":[71],"promise":[72],"expediting":[74],"analysis":[78],"process":[79],"while":[80],"increasing":[81],"case":[82],"capacities.":[84],"For":[85],"each":[86],"application":[87],"highlighted,":[91],"a":[92],"number":[93],"current":[95],"challenges":[96],"future":[98],"potential":[99],"impact":[100],"discussed.":[102]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":15},{"year":2024,"cited_by_count":26},{"year":2023,"cited_by_count":19},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":7}],"updated_date":"2026-07-17T09:13:05.818461","created_date":"2020-08-07T00:00:00"}