{"id":"https://openalex.org/W2740163751","doi":"https://doi.org/10.1145/3106237.3106308","title":"On evidence preservation requirements for forensic-ready systems","display_name":"On evidence preservation requirements for forensic-ready systems","publication_year":2017,"publication_date":"2017-08-02","ids":{"openalex":"https://openalex.org/W2740163751","doi":"https://doi.org/10.1145/3106237.3106308","mag":"2740163751"},"language":"en","primary_location":{"id":"doi:10.1145/3106237.3106308","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3106237.3106308","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://figshare.com/articles/conference_contribution/On_evidence_preservation_requirements_for_forensic-ready_systems/19851793","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029277829","display_name":"Dalal Alrajeh","orcid":"https://orcid.org/0000-0002-1365-8026"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Dalal Alrajeh","raw_affiliation_strings":["Imperial College London, UK"],"affiliations":[{"raw_affiliation_string":"Imperial College London, UK","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049622460","display_name":"Liliana Pasquale","orcid":"https://orcid.org/0000-0001-9673-3054"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Liliana Pasquale","raw_affiliation_strings":["University College Dublin, Ireland"],"affiliations":[{"raw_affiliation_string":"University College Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060861082","display_name":"Bashar Nuseibeh","orcid":"https://orcid.org/0000-0002-3476-053X"},"institutions":[{"id":"https://openalex.org/I204136569","display_name":"The Open University","ror":"https://ror.org/05mzfcs16","country_code":"GB","type":"education","lineage":["https://openalex.org/I204136569"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Bashar Nuseibeh","raw_affiliation_strings":["Open University, UK / Lero, Ireland"],"affiliations":[{"raw_affiliation_string":"Open University, UK / Lero, Ireland","institution_ids":["https://openalex.org/I204136569"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5029277829"],"corresponding_institution_ids":["https://openalex.org/I47508984"],"apc_list":null,"apc_paid":null,"fwci":3.5406,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.93952176,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"559","last_page":"569"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.7688673734664917},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7457820773124695},{"id":"https://openalex.org/keywords/digital-evidence","display_name":"Digital evidence","score":0.5169429183006287},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.475897878408432},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4096146523952484}],"concepts":[{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.7688673734664917},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7457820773124695},{"id":"https://openalex.org/C2781357168","wikidata":"https://www.wikidata.org/wiki/Q5276084","display_name":"Digital evidence","level":3,"score":0.5169429183006287},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.475897878408432},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4096146523952484}],"mesh":[],"locations_count":7,"locations":[{"id":"doi:10.1145/3106237.3106308","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3106237.3106308","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering","raw_type":"proceedings-article"},{"id":"pmh:oai:oro.open.ac.uk:50894","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306401187","display_name":"Open Research Online (The Open University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I204136569","host_organization_name":"The Open University","host_organization_lineage":["https://openalex.org/I204136569"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"Conference or Workshop Item"},{"id":"pmh:oai:ulir.ul.ie:10344/6785","is_oa":false,"landing_page_url":"http://hdl.handle.net/10344/6785","pdf_url":null,"source":{"id":"https://openalex.org/S4306401530","display_name":"University of Limerick Institutional Repository (University of Limerick)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I230495080","host_organization_name":"University of Limerick","host_organization_lineage":["https://openalex.org/I230495080"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:ulir.ul.ie:10344/7430","is_oa":false,"landing_page_url":"http://hdl.handle.net/10344/7430","pdf_url":null,"source":{"id":"https://openalex.org/S4306401530","display_name":"University of Limerick Institutional Repository (University of Limerick)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I230495080","host_organization_name":"University of Limerick","host_organization_lineage":["https://openalex.org/I230495080"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:figshare.com:article/19851793","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/On_evidence_preservation_requirements_for_forensic-ready_systems/19851793","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},{"id":"pmh:oai:figshare.com:article/19852366","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/On_evidence_preservation_requirements_for_forensic-ready_systems/19852366","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},{"id":"pmh:oai:spiral.imperial.ac.uk:10044/1/53836","is_oa":false,"landing_page_url":"http://hdl.handle.net/10044/1/53836","pdf_url":null,"source":{"id":"https://openalex.org/S4306401396","display_name":"Spiral (Imperial College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I47508984","host_organization_name":"Imperial College London","host_organization_lineage":["https://openalex.org/I47508984"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"11th Joint Meeting of the European Software Engineering Conference and the ACM SIGSOFT Symposium on the Foundations of Software Engineering","raw_type":"Conference Paper"}],"best_oa_location":{"id":"pmh:oai:figshare.com:article/19851793","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/On_evidence_preservation_requirements_for_forensic-ready_systems/19851793","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.47999998927116394}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W36102565","https://openalex.org/W38166071","https://openalex.org/W183810113","https://openalex.org/W185406290","https://openalex.org/W1482532598","https://openalex.org/W1551070491","https://openalex.org/W1573412770","https://openalex.org/W1597710132","https://openalex.org/W1672891595","https://openalex.org/W1811887233","https://openalex.org/W1978495386","https://openalex.org/W1980201832","https://openalex.org/W1992758609","https://openalex.org/W2009229022","https://openalex.org/W2009605580","https://openalex.org/W2023808162","https://openalex.org/W2027147096","https://openalex.org/W2032386914","https://openalex.org/W2053983842","https://openalex.org/W2070226202","https://openalex.org/W2083031585","https://openalex.org/W2086075943","https://openalex.org/W2090948362","https://openalex.org/W2094838541","https://openalex.org/W2096904725","https://openalex.org/W2097154968","https://openalex.org/W2097714017","https://openalex.org/W2108623020","https://openalex.org/W2110157102","https://openalex.org/W2113212164","https://openalex.org/W2121070677","https://openalex.org/W2123506780","https://openalex.org/W2130906372","https://openalex.org/W2131730994","https://openalex.org/W2131934866","https://openalex.org/W2135220153","https://openalex.org/W2137312030","https://openalex.org/W2140796142","https://openalex.org/W2146758771","https://openalex.org/W2155822737","https://openalex.org/W2162255975","https://openalex.org/W2164589933","https://openalex.org/W2170890990","https://openalex.org/W2171634230","https://openalex.org/W2303287830","https://openalex.org/W2312132523","https://openalex.org/W2565695915","https://openalex.org/W2612791874","https://openalex.org/W2724898928","https://openalex.org/W2899987233","https://openalex.org/W2964073874","https://openalex.org/W2999957995","https://openalex.org/W4236740106","https://openalex.org/W6601519416","https://openalex.org/W6601546190","https://openalex.org/W6607448945","https://openalex.org/W6634424245","https://openalex.org/W6637298476","https://openalex.org/W6682859162"],"related_works":["https://openalex.org/W5341801","https://openalex.org/W2598491911","https://openalex.org/W2548287415","https://openalex.org/W4288054526","https://openalex.org/W2181728705","https://openalex.org/W3122539278","https://openalex.org/W4247205791","https://openalex.org/W3024263644","https://openalex.org/W2611755027","https://openalex.org/W1604717907"],"abstract_inverted_index":{"Forensic":[0],"readiness":[1],"denotes":[2],"the":[3,33,52,91,171],"capability":[4],"of":[5,13,54,90,94,162,173],"a":[6,101,129,133],"system":[7],"to":[8,59,68,82,100,119,138,144,178],"support":[9,160],"digital":[10,55,103,146],"forensic":[11,56,147],"investigations":[12],"potential,":[14],"known":[15],"incidents":[16,40],"by":[17],"preserving":[18],"in":[19,170],"advance":[20],"data":[21,95,157,174],"that":[22,45,96,152,158,175],"could":[23,159],"serve":[24],"as":[25],"evidence":[26,85,107],"explaining":[27],"how":[28,69],"an":[29,112,182],"incident":[30],"occurred.":[31],"Given":[32],"increasing":[34],"rate":[35],"at":[36],"which":[37],"(potentially":[38],"criminal)":[39],"occur,":[41],"designing":[42],"so\u2030ware":[43],"systems":[44,72,118],"are":[46],"forensic-ready":[47,70],"can":[48,73],"facilitate":[49],"and":[50,110,132],"reduce":[51],"costs":[53],"investigations.":[57],"However,":[58],"date,":[60],"little":[61],"or":[62],"no":[63],"attention":[64],"has":[65],"been":[66],"given":[67],"so\u2030ftware":[71],"be":[74,98,179],"designed":[75],"systematically.":[76],"In":[77],"this":[78],"paper":[79],"we":[80,136],"propose":[81,111],"explicitly":[83],"represent":[84],"preservation":[86,89,108],"requirements":[87,109],"prescribing":[88],"minimal":[92],"amount":[93],"would":[97,176],"relevant":[99,156],"future":[102],"investigation.":[104,183],"We":[105,123],"formalise":[106],"approach":[113,154],"for":[114,117],"synthesising":[115],"specifications":[116],"meet":[120],"these":[121],"requirements.":[122],"present":[124],"our":[125,140,153],"prototype":[126],"implementation\u2014based":[127],"on":[128],"satisfiability":[130],"solver":[131],"logic-based":[134],"learner\u2014which":[135],"use":[137],"evaluate":[139],"approach,":[141],"applying":[142],"it":[143,166],"two":[145],"corpora.":[148],"Our":[149],"evaluation":[150],"suggests":[151],"preserves":[155],"hypotheses":[161],"potential":[163],"incidents.":[164],"Moreover,":[165],"enables":[167],"significant":[168],"reduction":[169],"volume":[172],"need":[177],"examined":[180],"during":[181]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":5},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":1}],"updated_date":"2026-04-05T17:49:38.594831","created_date":"2025-10-10T00:00:00"}