{"id":"https://openalex.org/W4413592250","doi":"https://doi.org/10.1145/3748265","title":"DiskForge: Timestomping on Disk Images for Educational Benefit","display_name":"DiskForge: Timestomping on Disk Images for Educational Benefit","publication_year":2025,"publication_date":"2025-08-25","ids":{"openalex":"https://openalex.org/W4413592250","doi":"https://doi.org/10.1145/3748265"},"language":"en","primary_location":{"id":"doi:10.1145/3748265","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3748265","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3748265","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3748265","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119424272","display_name":"Niclas Pohl","orcid":null},"institutions":[{"id":"https://openalex.org/I181369854","display_name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg","ror":"https://ror.org/00f7hpc57","country_code":"DE","type":"education","lineage":["https://openalex.org/I181369854"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Niclas Pohl","raw_affiliation_strings":["Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Erlangen, Germany","Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Germany"],"raw_orcid":"https://orcid.org/0009-0001-0189-7409","affiliations":[{"raw_affiliation_string":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Erlangen, Germany","institution_ids":["https://openalex.org/I181369854"]},{"raw_affiliation_string":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Germany","institution_ids":["https://openalex.org/I181369854"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079124757","display_name":"Lena L. Voigt","orcid":null},"institutions":[{"id":"https://openalex.org/I181369854","display_name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg","ror":"https://ror.org/00f7hpc57","country_code":"DE","type":"education","lineage":["https://openalex.org/I181369854"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Lena L. Voigt","raw_affiliation_strings":["Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Erlangen, Germany","Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Germany"],"raw_orcid":"https://orcid.org/0009-0009-8409-2136","affiliations":[{"raw_affiliation_string":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Erlangen, Germany","institution_ids":["https://openalex.org/I181369854"]},{"raw_affiliation_string":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Germany","institution_ids":["https://openalex.org/I181369854"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012344491","display_name":"Christopher Hargreaves","orcid":"https://orcid.org/0009-0008-1088-8302"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Christopher Hargreaves","raw_affiliation_strings":["University of Oxford, Oxford, United Kingdom","University of Oxford, United Kingdom"],"raw_orcid":"https://orcid.org/0009-0008-1088-8302","affiliations":[{"raw_affiliation_string":"University of Oxford, Oxford, United Kingdom","institution_ids":["https://openalex.org/I40120149"]},{"raw_affiliation_string":"University of Oxford, United Kingdom","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049148516","display_name":"Christofer Fein","orcid":"https://orcid.org/0009-0003-5073-6972"},"institutions":[{"id":"https://openalex.org/I4210113269","display_name":"Hochschule Niederrhein","ror":"https://ror.org/027b9qx26","country_code":"DE","type":"education","lineage":["https://openalex.org/I4210113269"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christofer Fein","raw_affiliation_strings":["Hochschule Niederrhein, Krefeld, Germany","Hochschule Niederrhein, Germany"],"raw_orcid":"https://orcid.org/0009-0003-5073-6972","affiliations":[{"raw_affiliation_string":"Hochschule Niederrhein, Krefeld, Germany","institution_ids":["https://openalex.org/I4210113269"]},{"raw_affiliation_string":"Hochschule Niederrhein, Germany","institution_ids":["https://openalex.org/I4210113269"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035871932","display_name":"Felix Freiling","orcid":"https://orcid.org/0000-0002-8279-8401"},"institutions":[{"id":"https://openalex.org/I181369854","display_name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg","ror":"https://ror.org/00f7hpc57","country_code":"DE","type":"education","lineage":["https://openalex.org/I181369854"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Felix Freiling","raw_affiliation_strings":["Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Erlangen, Germany","Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Germany"],"raw_orcid":"https://orcid.org/0000-0002-8279-8401","affiliations":[{"raw_affiliation_string":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Erlangen, Germany","institution_ids":["https://openalex.org/I181369854"]},{"raw_affiliation_string":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Germany","institution_ids":["https://openalex.org/I181369854"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.0267,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.89167228,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"6","issue":"4","first_page":"1","last_page":"20"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11657","display_name":"Digital and Traditional Archives Management","score":0.9398000240325928,"subfield":{"id":"https://openalex.org/subfields/1206","display_name":"Conservation"},"field":{"id":"https://openalex.org/fields/12","display_name":"Arts and Humanities"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.48892703652381897},{"id":"https://openalex.org/keywords/computer-graphics","display_name":"Computer graphics (images)","score":0.4576941132545471},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.355352520942688},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.32083505392074585}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.48892703652381897},{"id":"https://openalex.org/C121684516","wikidata":"https://www.wikidata.org/wiki/Q7600677","display_name":"Computer graphics (images)","level":1,"score":0.4576941132545471},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.355352520942688},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.32083505392074585}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3748265","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3748265","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3748265","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3748265","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3748265","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3748265","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1531912241","display_name":null,"funder_award_id":"393541319/GRK2475/2-2024","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"},{"id":"https://openalex.org/G2857958101","display_name":"GRK 2475: Cyberkriminalit\u00e4t und Forensische Informatik","funder_award_id":"393541319","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"}],"funders":[{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4413592250.pdf","grobid_xml":"https://content.openalex.org/works/W4413592250.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W134076915","https://openalex.org/W1184775628","https://openalex.org/W1992607645","https://openalex.org/W2009229022","https://openalex.org/W2076342816","https://openalex.org/W2128279601","https://openalex.org/W2599533098","https://openalex.org/W2604974889","https://openalex.org/W2742353928","https://openalex.org/W2791462350","https://openalex.org/W2990405932","https://openalex.org/W3025740502","https://openalex.org/W3029152356","https://openalex.org/W3029705332","https://openalex.org/W4221101754","https://openalex.org/W4221111023","https://openalex.org/W4392852533","https://openalex.org/W4392852568","https://openalex.org/W4396542361","https://openalex.org/W4403530826","https://openalex.org/W4408773806","https://openalex.org/W4408948589"],"related_works":["https://openalex.org/W2772917594","https://openalex.org/W2036807459","https://openalex.org/W2058170566","https://openalex.org/W2755342338","https://openalex.org/W2166024367","https://openalex.org/W3116076068","https://openalex.org/W2229312674","https://openalex.org/W2951359407","https://openalex.org/W2079911747","https://openalex.org/W1969923398"],"abstract_inverted_index":{"Despite":[0],"many":[1,11],"advances":[2],"in":[3,8,79,126,166],"automatic":[4],"exercise":[5],"generation":[6,44],"tools":[7,58,91],"digital":[9],"forensics,":[10],"disk":[12,24,77,89,153],"images":[13,25,78],"for":[14,52,72,116,149],"training":[15],"and":[16,92,100,132,147,170],"education":[17],"are":[18,26],"still":[19],"manually":[20],"created.":[21],"The":[22],"resulting":[23],"commonly":[27],"useful,":[28],"but":[29],"often":[30],"need":[31,38],"to":[32,39,76,98],"be":[33],"adapted":[34],"because":[35],"of":[36,42,64,110,120,137,145,163],"the":[37,43,84,96,104,108,114,117,142,160],"scrub":[40],"artifacts":[41],"process":[45],"or":[46,50],"adapt":[47],"file":[48,127],"contents":[49],"timestamps":[51,125],"evidence":[53],"individualization.":[54],"Since":[55],"common":[56],"forensics":[57,90],"do":[59],"not":[60],"allow":[61],"easy":[62],"editing":[63],"evidence,":[65],"we":[66,112,140],"present":[67],"DiskForge,":[68,111],"an":[69],"extensible":[70],"framework":[71,115],"performing":[73],"small":[74],"changes":[75],"educational":[80],"circumstances.":[81],"DiskForge":[82],"combines":[83,93],"typical":[85],"parsing":[86],"functionalities":[87],"from":[88],"them":[94],"with":[95],"option":[97],"update":[99],"edit":[101],"structures":[102],"within":[103],"disk.":[105,183],"To":[106],"demonstrate":[107,141],"applicability":[109],"instantiate":[113],"use":[118],"case":[119],"timestomping":[121],",":[122],"i.e.,":[123],"changing":[124,180],"system":[128],"metadata,":[129],"log":[130],"files,":[131],"SQLite":[133],"databases.":[134],"For":[135],"each":[136],"these":[138],"instances,":[139],"new":[143],"level":[144],"ease":[146],"precision":[148],"timestamp":[150,164],"manipulation":[151],"on":[152,182],"images.":[154],"Our":[155],"evaluation,":[156],"however,":[157],"also":[158],"highlights":[159],"fragile":[161],"nature":[162],"interpretation":[165],"current":[167],"forensic":[168],"tooling,":[169],"ultimately":[171],"that":[172],"creating":[173],"perfect":[174],"forgeries":[175],"is":[176],"harder":[177],"than":[178],"merely":[179],"bits":[181]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}