{"id":"https://openalex.org/W3193393894","doi":"https://doi.org/10.1145/3465481.3470051","title":"Forensic Artifact Finder (ForensicAF): An Approach &amp; Tool for Leveraging Crowd-Sourced Curated Forensic Artifacts","display_name":"Forensic Artifact Finder (ForensicAF): An Approach &amp; Tool for Leveraging Crowd-Sourced Curated Forensic Artifacts","publication_year":2021,"publication_date":"2021-08-16","ids":{"openalex":"https://openalex.org/W3193393894","doi":"https://doi.org/10.1145/3465481.3470051","mag":"3193393894"},"language":"en","primary_location":{"id":"doi:10.1145/3465481.3470051","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3465481.3470051","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://digitalcommons.newhaven.edu/electricalcomputerengineering-facpubs/97","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079547315","display_name":"Tyler Balon","orcid":null},"institutions":[{"id":"https://openalex.org/I40253897","display_name":"University of New Haven","ror":"https://ror.org/00zm4rq24","country_code":"US","type":"education","lineage":["https://openalex.org/I40253897"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tyler Balon","raw_affiliation_strings":["University of New Haven, US"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New Haven, US","institution_ids":["https://openalex.org/I40253897"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001463315","display_name":"Krikor Herlopian","orcid":null},"institutions":[{"id":"https://openalex.org/I40253897","display_name":"University of New Haven","ror":"https://ror.org/00zm4rq24","country_code":"US","type":"education","lineage":["https://openalex.org/I40253897"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Krikor Herlopian","raw_affiliation_strings":["University of New Haven, US"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New Haven, US","institution_ids":["https://openalex.org/I40253897"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043176147","display_name":"Ibrahim Baggili","orcid":"https://orcid.org/0000-0002-9574-9537"},"institutions":[{"id":"https://openalex.org/I40253897","display_name":"University of New Haven","ror":"https://ror.org/00zm4rq24","country_code":"US","type":"education","lineage":["https://openalex.org/I40253897"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ibrahim Baggili","raw_affiliation_strings":["University of New Haven, US"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New Haven, US","institution_ids":["https://openalex.org/I40253897"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064634690","display_name":"Cinthya Grajeda-Mendez","orcid":null},"institutions":[{"id":"https://openalex.org/I40253897","display_name":"University of New Haven","ror":"https://ror.org/00zm4rq24","country_code":"US","type":"education","lineage":["https://openalex.org/I40253897"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cinthya Grajeda-Mendez","raw_affiliation_strings":["University of New Haven, US"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New Haven, US","institution_ids":["https://openalex.org/I40253897"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I40253897"],"apc_list":null,"apc_paid":null,"fwci":1.0229,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.7631569,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10751","display_name":"Forensic and Genetic Research","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1311","display_name":"Genetics"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/artifact","display_name":"Artifact (error)","score":0.8700143098831177},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8169546127319336},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.6070611476898193},{"id":"https://openalex.org/keywords/relevance","display_name":"Relevance (law)","score":0.5728625655174255},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4989902973175049},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.3346068561077118},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.33234766125679016},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3281906247138977},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3262169361114502}],"concepts":[{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.8700143098831177},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8169546127319336},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.6070611476898193},{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.5728625655174255},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4989902973175049},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3346068561077118},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.33234766125679016},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3281906247138977},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3262169361114502},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3465481.3470051","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3465481.3470051","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},{"id":"pmh:oai:digitalcommons.newhaven.edu:electricalcomputerengineering-facpubs-1098","is_oa":true,"landing_page_url":"https://digitalcommons.newhaven.edu/electricalcomputerengineering-facpubs/97","pdf_url":"https://digitalcommons.newhaven.edu/electricalcomputerengineering-facpubs/97","source":{"id":"https://openalex.org/S4377196522","display_name":"Digital Commons - New Heaven (University of New Haven)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40253897","host_organization_name":"University of New Haven","host_organization_lineage":["https://openalex.org/I40253897"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Electrical & Computer Engineering and Computer Science Faculty Publications","raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:digitalcommons.newhaven.edu:electricalcomputerengineering-facpubs-1098","is_oa":true,"landing_page_url":"https://digitalcommons.newhaven.edu/electricalcomputerengineering-facpubs/97","pdf_url":"https://digitalcommons.newhaven.edu/electricalcomputerengineering-facpubs/97","source":{"id":"https://openalex.org/S4377196522","display_name":"Digital Commons - New Heaven (University of New Haven)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40253897","host_organization_name":"University of New Haven","host_organization_lineage":["https://openalex.org/I40253897"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Electrical & Computer Engineering and Computer Science Faculty Publications","raw_type":"text"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.6200000047683716,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G7181268933","display_name":"SaTC: EDU: Expanding Digital Forensics Education with Artifact Curation and Scalable, Accessible Artifact Exercises","funder_award_id":"1900210","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3193393894.pdf","grobid_xml":"https://content.openalex.org/works/W3193393894.grobid-xml"},"referenced_works_count":28,"referenced_works":["https://openalex.org/W16205776","https://openalex.org/W1538546197","https://openalex.org/W1539338302","https://openalex.org/W1994343277","https://openalex.org/W1998964974","https://openalex.org/W2000674713","https://openalex.org/W2009132875","https://openalex.org/W2010573219","https://openalex.org/W2054315779","https://openalex.org/W2081747167","https://openalex.org/W2088900229","https://openalex.org/W2099236609","https://openalex.org/W2102414025","https://openalex.org/W2112138185","https://openalex.org/W2152247885","https://openalex.org/W2156350103","https://openalex.org/W2261973985","https://openalex.org/W2293804469","https://openalex.org/W2527619560","https://openalex.org/W2529285936","https://openalex.org/W2563802072","https://openalex.org/W2601284434","https://openalex.org/W2604064983","https://openalex.org/W2884399119","https://openalex.org/W2886221244","https://openalex.org/W2961326167","https://openalex.org/W3080100402","https://openalex.org/W3186276894"],"related_works":["https://openalex.org/W973641971","https://openalex.org/W2384888906","https://openalex.org/W2003734918","https://openalex.org/W1843462531","https://openalex.org/W2376314740","https://openalex.org/W2366644548","https://openalex.org/W1584628001","https://openalex.org/W2036641180","https://openalex.org/W2106813246","https://openalex.org/W2080228689"],"abstract_inverted_index":{"Current":[0],"methods":[1],"for":[2,71,184],"artifact":[3,51,185],"analysis":[4],"and":[5,12,43,100,114,122,190],"understanding":[6],"depend":[7],"on":[8,32,111,156],"investigator":[9],"expertise.":[10],"Experienced":[11],"technically":[13],"savvy":[14],"examiners":[15],"spend":[16],"a":[17,181],"lot":[18],"of":[19,88,167],"time":[20,38],"reverse":[21],"engineering":[22],"applications":[23],"while":[24],"attempting":[25],"to":[26],"find":[27],"crumbs":[28],"they":[29],"leave":[30],"behind":[31],"systems.":[33],"This":[34],"takes":[35],"away":[36],"valuable":[37],"from":[39,76,93,187],"the":[40,58,77,85],"investigative":[41],"process,":[42],"slows":[44],"down":[45],"forensic":[46,60,168],"examination.":[47],"Furthermore,":[48],"when":[49],"specific":[50],"knowledge":[52],"is":[53,180],"gained,":[54],"it":[55,102,137],"stays":[56],"within":[57],"respective":[59],"units.":[61],"To":[62],"combat":[63],"these":[64],"challenges,":[65],"we":[66],"present":[67],"ForensicAF,":[68],"an":[69,104],"approach":[70,83,99,183],"leveraging":[72],"curated,":[73],"crowd-sourced":[74,199],"artifacts":[75,92,133,166,197],"Artifact":[78],"Genome":[79],"Project":[80],"(AGP).":[81],"The":[82],"has":[84],"overarching":[86],"goal":[87],"uncovering":[89],"forensically":[90],"relevant":[91],"storage":[94,188],"media.":[95],"We":[96,117,176],"explain":[97],"our":[98],"construct":[101],"as":[103,195],"Autopsy":[105],"Ingest":[106],"Module.":[107],"Our":[108],"implementation":[109],"focused":[110],"both":[112],"File":[113,146],"Registry":[115],"artifacts.":[116],"evaluated":[118],"ForensicAF":[119,127,164,179],"using":[120],"systematic":[121],"random":[123],"sampling":[124],"experiments.":[125],"While":[126],"showed":[128],"consistent":[129],"results":[130],"with":[131],"registry":[132],"across":[134],"all":[135],"experiments,":[136],"also":[138],"revealed":[139],"that":[140,170,178],"deeper":[141],"folder":[142],"traversal":[143],"yields":[144],"more":[145,196],"Artifacts":[147],"during":[148],"data":[149],"source":[150],"ingestion.":[151],"When":[152],"experiments":[153],"were":[154],"conducted":[155],"case":[157],"scenario":[158],"disk":[159],"images":[160],"without":[161],"apriori":[162],"knowledge,":[163],"uncovered":[165],"relevance":[169],"help":[171],"in":[172],"solving":[173],"those":[174],"scenarios.":[175],"contend":[177],"promising":[182],"extraction":[186],"media,":[189],"its":[191],"utility":[192],"will":[193],"advance":[194],"are":[198],"by":[200],"AGP.":[201]},"counts_by_year":[{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1}],"updated_date":"2026-08-04T08:18:43.703281","created_date":"2025-10-10T00:00:00"}
