{"id":"https://openalex.org/W2762394013","doi":"https://doi.org/10.1504/ijics.2017.10008447","title":"A survey on forensic event reconstruction systems","display_name":"A survey on forensic event reconstruction systems","publication_year":2017,"publication_date":"2017-01-01","ids":{"openalex":"https://openalex.org/W2762394013","doi":"https://doi.org/10.1504/ijics.2017.10008447","mag":"2762394013"},"language":"en","primary_location":{"id":"doi:10.1504/ijics.2017.10008447","is_oa":false,"landing_page_url":"https://doi.org/10.1504/ijics.2017.10008447","pdf_url":null,"source":{"id":"https://openalex.org/S85012289","display_name":"International Journal of Information and Computer Security","issn_l":"1744-1765","issn":["1744-1765","1744-1773"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310317825","host_organization_name":"Inderscience Publishers","host_organization_lineage":["https://openalex.org/P4310317825"],"host_organization_lineage_names":["Inderscience Publishers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information and Computer Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103160400","display_name":"Ashraf Matrawy","orcid":"https://orcid.org/0000-0001-9220-4630"},"institutions":[{"id":"https://openalex.org/I67031392","display_name":"Carleton University","ror":"https://ror.org/02qtvee93","country_code":"CA","type":"education","lineage":["https://openalex.org/I67031392"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ashraf Matrawy","raw_affiliation_strings":["School of Information Technology, Carleton University, 1125 Colonel By Drive, Ottawa, ON, K1S 5B6, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Technology, Carleton University, 1125 Colonel By Drive, Ottawa, ON, K1S 5B6, Canada","institution_ids":["https://openalex.org/I67031392"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037210600","display_name":"Abes Dabir","orcid":null},"institutions":[{"id":"https://openalex.org/I67031392","display_name":"Carleton University","ror":"https://ror.org/02qtvee93","country_code":"CA","type":"education","lineage":["https://openalex.org/I67031392"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Abes Dabir","raw_affiliation_strings":["Systems and Computer Engineering, Carleton University, 1125 Colonel By Drive, Ottawa, ON, K1S 5B6, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Systems and Computer Engineering, Carleton University, 1125 Colonel By Drive, Ottawa, ON, K1S 5B6, Canada","institution_ids":["https://openalex.org/I67031392"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012118535","display_name":"AbdelRahman Abdou","orcid":"https://orcid.org/0000-0002-2783-107X"},"institutions":[{"id":"https://openalex.org/I67031392","display_name":"Carleton University","ror":"https://ror.org/02qtvee93","country_code":"CA","type":"education","lineage":["https://openalex.org/I67031392"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"AbdelRahman M. Abdou","raw_affiliation_strings":["Systems and Computer Engineering, Carleton University, 1125 Colonel By Drive, Ottawa, ON, K1S 5B6, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Systems and Computer Engineering, Carleton University, 1125 Colonel By Drive, Ottawa, ON, K1S 5B6, Canada","institution_ids":["https://openalex.org/I67031392"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I67031392"],"apc_list":null,"apc_paid":null,"fwci":0.2104,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.58105686,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":"9","issue":"4","first_page":"337","last_page":"337"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7732822299003601},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.77139812707901},{"id":"https://openalex.org/keywords/law-enforcement","display_name":"Law enforcement","score":0.683883786201477},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.6692390441894531},{"id":"https://openalex.org/keywords/event-reconstruction","display_name":"Event reconstruction","score":0.6052088141441345},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5980962514877319},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5910307168960571},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.47958269715309143},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.4598459005355835},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.38949188590049744},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.13768532872200012},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.09104010462760925}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7732822299003601},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.77139812707901},{"id":"https://openalex.org/C2780262971","wikidata":"https://www.wikidata.org/wiki/Q44554","display_name":"Law enforcement","level":2,"score":0.683883786201477},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.6692390441894531},{"id":"https://openalex.org/C2775853353","wikidata":"https://www.wikidata.org/wiki/Q5416724","display_name":"Event reconstruction","level":3,"score":0.6052088141441345},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5980962514877319},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5910307168960571},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.47958269715309143},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.4598459005355835},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.38949188590049744},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.13768532872200012},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.09104010462760925},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1504/ijics.2017.10008447","is_oa":false,"landing_page_url":"https://doi.org/10.1504/ijics.2017.10008447","pdf_url":null,"source":{"id":"https://openalex.org/S85012289","display_name":"International Journal of Information and Computer Security","issn_l":"1744-1765","issn":["1744-1765","1744-1773"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310317825","host_organization_name":"Inderscience Publishers","host_organization_lineage":["https://openalex.org/P4310317825"],"host_organization_lineage_names":["Inderscience Publishers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information and Computer Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.8199999928474426,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W47175211","https://openalex.org/W155312093","https://openalex.org/W1638793211","https://openalex.org/W1641762327","https://openalex.org/W1813040609","https://openalex.org/W2035541386","https://openalex.org/W2048168101","https://openalex.org/W2061745606","https://openalex.org/W2093406244","https://openalex.org/W2111336271","https://openalex.org/W2112127916","https://openalex.org/W2131726714","https://openalex.org/W2133089788","https://openalex.org/W2134488808","https://openalex.org/W2142892618","https://openalex.org/W2144416276","https://openalex.org/W2152582571","https://openalex.org/W2170967934","https://openalex.org/W2171956059","https://openalex.org/W2236730110","https://openalex.org/W2295705535","https://openalex.org/W2337826830","https://openalex.org/W2579106964"],"related_works":["https://openalex.org/W2357468538","https://openalex.org/W1577110157","https://openalex.org/W2355007334","https://openalex.org/W2906422846","https://openalex.org/W2390009783","https://openalex.org/W4254602698","https://openalex.org/W2394461323","https://openalex.org/W2349441905","https://openalex.org/W2361044160","https://openalex.org/W2133389611"],"abstract_inverted_index":{"Security":[0],"related":[1],"incidents":[2],"such":[3,17],"as":[4,18,119,121],"unauthorised":[5],"system":[6,53],"access,":[7],"data":[8],"tampering":[9],"and":[10,23,127,134],"theft":[11],"have":[12],"been":[13],"noticeably":[14],"rising.":[15],"Tools":[16],"firewalls,":[19],"intrusion":[20,41],"detection":[21],"systems":[22,86,108],"anti-virus":[24],"software":[25],"strive":[26],"to":[27,45,76,89,123,147],"prevent":[28,35],"these":[29,32],"incidents.":[30],"Since":[31],"tools":[33,131],"only":[34],"an":[36,39],"attack,":[37],"once":[38],"illegal":[40],"occurs,":[42],"they":[43],"cease":[44],"provide":[46,90],"useful":[47],"information":[48],"beyond":[49],"this":[50],"point.":[51],"Consequently,":[52],"administrators":[54,92],"are":[55,87,117,132],"interested":[56],"in":[57,61],"identifying":[58],"the":[59,74,91,101,111,138],"vulnerability":[60],"order":[62],"to:":[63],"1)":[64],"avoid":[65],"future":[66],"exploitation;":[67],"2)":[68],"recover":[69],"corrupted":[70],"data;":[71],"3)":[72],"present":[73,97],"attacker":[75],"law":[77],"enforcement":[78],"where":[79],"possible.":[80],"As":[81],"such,":[82],"forensic":[83,105,143],"event":[84,106],"reconstruction":[85,107],"used":[88],"with":[93],"possible":[94],"information.":[95],"We":[96],"a":[98,142],"survey":[99],"on":[100,137],"current":[102],"approaches":[103],"towards":[104],"proposed":[109],"over":[110],"past":[112],"few":[113],"years.":[114],"Technical":[115],"details":[116],"discussed,":[118],"well":[120],"analysis":[122],"their":[124],"effectiveness,":[125],"advantages":[126],"limitations.":[128],"The":[129],"presented":[130],"compared":[133],"assessed":[135],"based":[136],"primary":[139],"principles":[140],"that":[141],"technique":[144],"is":[145],"expected":[146],"follow.":[148]},"counts_by_year":[{"year":2019,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}