{"id":"https://openalex.org/W4402452318","doi":"https://doi.org/10.1186/s42400-024-00241-9","title":"SIFT: Sifting file types\u2014application of explainable artificial intelligence in cyber forensics","display_name":"SIFT: Sifting file types\u2014application of explainable artificial intelligence in cyber forensics","publication_year":2024,"publication_date":"2024-09-11","ids":{"openalex":"https://openalex.org/W4402452318","doi":"https://doi.org/10.1186/s42400-024-00241-9"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-024-00241-9","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00241-9","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-024-00241-9.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://link.springer.com/content/pdf/10.1186/s42400-024-00241-9.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068304082","display_name":"Shahid Alam","orcid":"https://orcid.org/0000-0002-4080-8042"},"institutions":[{"id":"https://openalex.org/I4210088963","display_name":"University of Ha'il","ror":"https://ror.org/013w98a82","country_code":"SA","type":"education","lineage":["https://openalex.org/I4210088963"]}],"countries":["SA"],"is_corresponding":true,"raw_author_name":"Shahid Alam","raw_affiliation_strings":["Department of Information Security, College of Computer Science and Engineering, University of Ha\u2019il, Ha\u2019il, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-4080-8042","affiliations":[{"raw_affiliation_string":"Department of Information Security, College of Computer Science and Engineering, University of Ha\u2019il, Ha\u2019il, Saudi Arabia","institution_ids":["https://openalex.org/I4210088963"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002519167","display_name":"Alper Kamil Demir","orcid":"https://orcid.org/0000-0002-9256-0368"},"institutions":[{"id":"https://openalex.org/I50379099","display_name":"Adana Science and Technology University","ror":"https://ror.org/013z3yn41","country_code":"TR","type":"education","lineage":["https://openalex.org/I50379099"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Alper Kamil Demir","raw_affiliation_strings":["Computer Engineering Department, Adana Alparslan Turkes Science and Technology University, Adana, Turkey"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Engineering Department, Adana Alparslan Turkes Science and Technology University, Adana, Turkey","institution_ids":["https://openalex.org/I50379099"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5068304082"],"corresponding_institution_ids":["https://openalex.org/I4210088963"],"apc_list":null,"apc_paid":null,"fwci":7.0493,"has_fulltext":true,"cited_by_count":11,"citation_normalized_percentile":{"value":0.96970697,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"7","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6280891299247742},{"id":"https://openalex.org/keywords/computer-forensics","display_name":"Computer forensics","score":0.43421271443367004},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3615637421607971},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.3057052493095398}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6280891299247742},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.43421271443367004},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3615637421607971},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.3057052493095398}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-024-00241-9","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00241-9","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-024-00241-9.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:11ac77826a23488c9f37b85bbf973176","is_oa":false,"landing_page_url":"https://doaj.org/article/11ac77826a23488c9f37b85bbf973176","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 7, Iss 1, Pp 1-23 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-024-00241-9","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00241-9","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-024-00241-9.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4402452318.pdf"},"referenced_works_count":65,"referenced_works":["https://openalex.org/W181662211","https://openalex.org/W1592476148","https://openalex.org/W1603441233","https://openalex.org/W1999311686","https://openalex.org/W2027166822","https://openalex.org/W2043793914","https://openalex.org/W2049050234","https://openalex.org/W2069867586","https://openalex.org/W2071484336","https://openalex.org/W2077766607","https://openalex.org/W2083096180","https://openalex.org/W2086549170","https://openalex.org/W2104511137","https://openalex.org/W2117991511","https://openalex.org/W2125371264","https://openalex.org/W2135812132","https://openalex.org/W2137833784","https://openalex.org/W2137983211","https://openalex.org/W2144211451","https://openalex.org/W2151686889","https://openalex.org/W2151958475","https://openalex.org/W2158698691","https://openalex.org/W2159350554","https://openalex.org/W2201691864","https://openalex.org/W2282821441","https://openalex.org/W2328678893","https://openalex.org/W2341234495","https://openalex.org/W2519674279","https://openalex.org/W2745246325","https://openalex.org/W2769919275","https://openalex.org/W2796263526","https://openalex.org/W2887831059","https://openalex.org/W2891503716","https://openalex.org/W2990757050","https://openalex.org/W3007706270","https://openalex.org/W3036399259","https://openalex.org/W3046419603","https://openalex.org/W3108376867","https://openalex.org/W3164846705","https://openalex.org/W3165767308","https://openalex.org/W3204840549","https://openalex.org/W3211639647","https://openalex.org/W4205561327","https://openalex.org/W4210361514","https://openalex.org/W4283643667","https://openalex.org/W4283834185","https://openalex.org/W4294691140","https://openalex.org/W4307570589","https://openalex.org/W4310683226","https://openalex.org/W4312198934","https://openalex.org/W4313194114","https://openalex.org/W4313650676","https://openalex.org/W4319321305","https://openalex.org/W4321787619","https://openalex.org/W4366262984","https://openalex.org/W4380628751","https://openalex.org/W4383501674","https://openalex.org/W4385383529","https://openalex.org/W4386142022","https://openalex.org/W4386234374","https://openalex.org/W4387485650","https://openalex.org/W4387941667","https://openalex.org/W4389428567","https://openalex.org/W4394890790","https://openalex.org/W4397294392"],"related_works":["https://openalex.org/W2181728705","https://openalex.org/W4238452393","https://openalex.org/W2489557937","https://openalex.org/W4247205791","https://openalex.org/W2167366752","https://openalex.org/W3002268218","https://openalex.org/W2385667210","https://openalex.org/W3001565613","https://openalex.org/W1506329045","https://openalex.org/W72026768"],"abstract_inverted_index":{"Abstract":[0],"Artificial":[1],"Intelligence":[2],"(AI)":[3],"is":[4,28,55,74,94,150,189,263],"being":[5],"applied":[6],"to":[7,51,64,121,142,145,152,176],"improve":[8,182],"the":[9,20,31,39,46,58,61,65,77,91,123,173,215,221,227,248,257,264],"efficiency":[10],"of":[11,30,33,45,60,67,76,80,104,125,224,234,244,259,267],"software":[12],"systems":[13],"used":[14,41,48,151],"in":[15,19,42,49,83,226,270],"various":[16],"domains,":[17],"especially":[18],"health":[21],"and":[22,37,87,115,128,161,191,218,246],"forensic":[23],"sciences.":[24],"Explainable":[25],"AI":[26,34,69],"(XAI)":[27],"one":[29,75],"fields":[32],"that":[35],"interprets":[36],"explains":[38],"methods":[40],"AI.":[43],"One":[44],"techniques":[47,251],"XAI":[50,120,165,269],"provide":[52],"such":[53],"interpretations":[54,117],"by":[56,119,252],"computing":[57],"relevance":[59,168],"input":[62],"features":[63,154,175],"output":[66],"an":[68],"model.":[70],"File":[71,137],"fragment":[72,179,275],"classification":[73,124],"vital":[78],"issues":[79],"file":[81,105,108,126,157,178,236,274],"carving":[82],"Cyber":[84],"Forensics":[85],"(CF)":[86],"becomes":[88],"challenging":[89],"when":[90],"filesystem":[92],"metadata":[93],"missing":[95],".":[96],"Other":[97],"major":[98],"challenges":[99],"it":[100],"faces":[101],"are:":[102],"proliferation":[103],"formats":[106],",":[107,110,112],"embeddings":[109],"automation":[111],"We":[113],"leverage":[114],"utilize":[116],"provided":[118],"optimize":[122,177],"fragments":[127],"propose":[129],"a":[130,146,156,185,241],"novel":[131],"sifting":[132],"approach,":[133],"named":[134],"SIFT":[135,139,239],"(Sifting":[136],"Types).":[138],"employs":[140],"TF-IDF":[141],"assign":[143],"weight":[144],"byte":[147],"(feature),":[148],"which":[149],"select":[153],"from":[155],"fragment.":[158],"Threshold-based":[159],"LIME":[160],"SHAP":[162],"(the":[163],"two":[164],"techniques)":[166],"feature":[167],"values":[169],"are":[170],"computed":[171],"for":[172,272],"selected":[174],"classification.":[180,276],"To":[181,256],"multinomial":[183],"classification,":[184],"Multilayer":[186],"Perceptron":[187],"model":[188],"developed":[190],"optimized":[192],"with":[193,199,231],"five":[194],"hidden":[195],"layers,":[196],"each":[197],"layer":[198,216],"$$i":[200],"\\times":[201],"n$$":[202],"<mml:math":[203],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\">":[204],"<mml:mrow>":[205],"<mml:mi>i</mml:mi>":[206],"<mml:mo>\u00d7</mml:mo>":[207],"<mml:mi>n</mml:mi>":[208],"</mml:mrow>":[209],"</mml:math>":[210],"neurons,":[211],"where":[212],"i":[213],"=":[214,220],"number":[217,223],"n":[219],"total":[222],"classes":[225],"dataset.":[228],"When":[229],"tested":[230],"47,482":[232],"samples":[233],"20":[235],"types":[237],"(classes),":[238],"achieves":[240],"detection":[242],"rate":[243],"82.1%":[245],"outperforms":[247],"other":[249],"state-of-the-art":[250],"at":[253],"least":[254],"10%.":[255],"best":[258],"our":[260],"knowledge,":[261],"this":[262],"first":[265],"effort":[266],"applying":[268],"CF":[271],"optimizing":[273]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-11T18:08:03.149640","created_date":"2025-10-10T00:00:00"}