{"id":"https://openalex.org/W4384298337","doi":"https://doi.org/10.1145/3609232","title":"Back and Forth\u2014On Automatic Exposure of Origin and Dissemination of Files on Windows","display_name":"Back and Forth\u2014On Automatic Exposure of Origin and Dissemination of Files on Windows","publication_year":2023,"publication_date":"2023-07-14","ids":{"openalex":"https://openalex.org/W4384298337","doi":"https://doi.org/10.1145/3609232"},"language":"en","primary_location":{"id":"doi:10.1145/3609232","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3609232","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3609232","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3609232","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5075348102","display_name":"Samantha Klier","orcid":"https://orcid.org/0009-0008-1605-3250"},"institutions":[{"id":"https://openalex.org/I40527276","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82","country_code":"DE","type":"education","lineage":["https://openalex.org/I1315109972","https://openalex.org/I40527276","https://openalex.org/I4387152969"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Samantha Klier","raw_affiliation_strings":["University of the Bundeswehr Munich, RI CODE, Germany"],"raw_orcid":"https://orcid.org/0009-0008-1605-3250","affiliations":[{"raw_affiliation_string":"University of the Bundeswehr Munich, RI CODE, Germany","institution_ids":["https://openalex.org/I40527276"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092469551","display_name":"Jan Varenkamp","orcid":"https://orcid.org/0009-0001-8951-5283"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jan Varenkamp","raw_affiliation_strings":["Technical University of Darmstadt, Germany"],"raw_orcid":"https://orcid.org/0009-0001-8951-5283","affiliations":[{"raw_affiliation_string":"Technical University of Darmstadt, Germany","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010243095","display_name":"Harald Baier","orcid":"https://orcid.org/0000-0002-9254-6398"},"institutions":[{"id":"https://openalex.org/I40527276","display_name":"Universit\u00e4t der Bundeswehr M\u00fcnchen","ror":"https://ror.org/05kkv3f82","country_code":"DE","type":"education","lineage":["https://openalex.org/I1315109972","https://openalex.org/I40527276","https://openalex.org/I4387152969"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Harald Baier","raw_affiliation_strings":["University of the Bundeswehr Munich, RI CODE, Germany"],"raw_orcid":"https://orcid.org/0000-0002-9254-6398","affiliations":[{"raw_affiliation_string":"University of the Bundeswehr Munich, RI CODE, Germany","institution_ids":["https://openalex.org/I40527276"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8627,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.78593323,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":"4","issue":"3","first_page":"1","last_page":"17"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13192","display_name":"Forensic Fingerprint Detection Methods","score":0.9824000000953674,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/plug-in","display_name":"Plug-in","score":0.8123817443847656},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7265855669975281},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.5991915464401245},{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.4986531734466553},{"id":"https://openalex.org/keywords/microsoft-windows","display_name":"Microsoft Windows","score":0.4743165671825409},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4400525689125061},{"id":"https://openalex.org/keywords/file-transfer","display_name":"File transfer","score":0.41664713621139526},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.32288095355033875},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.255138099193573},{"id":"https://openalex.org/keywords/transfer","display_name":"Transfer (computing)","score":0.22789478302001953},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.10102841258049011}],"concepts":[{"id":"https://openalex.org/C4924752","wikidata":"https://www.wikidata.org/wiki/Q184148","display_name":"Plug-in","level":2,"score":0.8123817443847656},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7265855669975281},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.5991915464401245},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.4986531734466553},{"id":"https://openalex.org/C508378895","wikidata":"https://www.wikidata.org/wiki/Q1406","display_name":"Microsoft Windows","level":3,"score":0.4743165671825409},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4400525689125061},{"id":"https://openalex.org/C2776162994","wikidata":"https://www.wikidata.org/wiki/Q534400","display_name":"File transfer","level":3,"score":0.41664713621139526},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.32288095355033875},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.255138099193573},{"id":"https://openalex.org/C2776175482","wikidata":"https://www.wikidata.org/wiki/Q1195816","display_name":"Transfer (computing)","level":2,"score":0.22789478302001953},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.10102841258049011}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3609232","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3609232","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3609232","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3609232","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3609232","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3609232","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Gender equality","id":"https://metadata.un.org/sdg/5","score":0.7599999904632568}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4384298337.pdf","grobid_xml":"https://content.openalex.org/works/W4384298337.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W903044527","https://openalex.org/W2009229022","https://openalex.org/W2014113877","https://openalex.org/W2025334531","https://openalex.org/W2087888801","https://openalex.org/W2603041533","https://openalex.org/W2746119360","https://openalex.org/W2793714280","https://openalex.org/W2884399119","https://openalex.org/W2908104715","https://openalex.org/W3013748100","https://openalex.org/W3026406599","https://openalex.org/W3044564311","https://openalex.org/W3107271146","https://openalex.org/W3193393894","https://openalex.org/W4225660059"],"related_works":["https://openalex.org/W4287378204","https://openalex.org/W2981957539","https://openalex.org/W47352601","https://openalex.org/W2545422590","https://openalex.org/W4240705470","https://openalex.org/W2945311252","https://openalex.org/W631546281","https://openalex.org/W4213354039","https://openalex.org/W2266220644","https://openalex.org/W3089357476"],"abstract_inverted_index":{"The":[0],"number":[1],"of":[2,76,85,115,158,187,199],"Child":[3],"Sexual":[4],"Abuse":[5],"Material":[6],"(CSAM)":[7],"cases":[8],"has":[9],"increased":[10],"dramatically":[11],"in":[12,24,82,99],"recent":[13],"years.":[14],"This":[15,92],"leads":[16],"to":[17,20,65,107,124,167,176],"the":[18,42,49,66,83,100,141,155,181],"need":[19],"automate":[21],"various":[22],"steps":[23],"digital":[25,97,178],"forensic":[26],"processing,":[27],"especially":[28],"for":[29,140,173],"CSAM":[30,35,80],"investigations.":[31],"For":[32],"instance,":[33],"if":[34],"pictures":[36],"are":[37],"found":[38],"on":[39],"a":[40,116,131,136],"device,":[41],"investigator":[43,175],"aim":[44],"at":[45],"finding":[46],"traces":[47,98,179],"about":[48,96,110,180],"origin":[50,111,182],"and":[51,88,104,112,122,134,170,183,194],"possible":[52,113,184],"further":[53,185],"dissemination,":[54],"respectively.":[55],"In":[56],"this":[57,61,126],"article,":[58],"we":[59,129],"address":[60],"challenge":[62],"with":[63],"respect":[64],"widespread":[67],"Windows":[68,101,159],"operating":[69,102],"system.":[70],"We":[71,118,146,189],"model":[72],"different":[73,156],"common":[74],"scenarios":[75],"system":[77,103,160],"use":[78],"by":[79],"offenders":[81],"scope":[84],"file":[86],"inbound":[87],"outbound":[89],"transfer":[90],"channels.":[91],"gives":[93],"us":[94],"insights":[95],"its":[105],"applications":[106,123],"get":[108],"knowledge":[109],"destination":[114],"file.":[117],"review":[119],"available":[120],"concepts":[121],"support":[125,172],"issue.":[127],"Furthermore,":[128],"develop":[130],"recursive-based":[132],"approach":[133],"provide":[135,196],"prototype":[137,149],"as":[138],"plugin":[139,193],"open":[142],"source":[143],"application":[144],"Autopsy.":[145],"call":[147],"our":[148,191,200],"AutoTrack":[150,192],".":[151],"Our":[152],"evaluation":[153],"against":[154],"models":[157],"usage":[161],"reveals":[162],"that":[163],"Autotrack":[164],"is":[165],"superior":[166],"existing":[168],"solutions":[169],"provides":[171],"an":[174],"find":[177],"dissemination":[186],"files.":[188],"publish":[190],"thus":[195],"full":[197],"reproducibility":[198],"approach.":[201]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}