{"id":"https://openalex.org/W2555871483","doi":"https://doi.org/10.3390/fi8040054","title":"Network Forensics Method Based on Evidence Graph and Vulnerability Reasoning","display_name":"Network Forensics Method Based on Evidence Graph and Vulnerability Reasoning","publication_year":2016,"publication_date":"2016-11-10","ids":{"openalex":"https://openalex.org/W2555871483","doi":"https://doi.org/10.3390/fi8040054","mag":"2555871483"},"language":"en","primary_location":{"id":"doi:10.3390/fi8040054","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi8040054","pdf_url":"https://www.mdpi.com/1999-5903/8/4/54/pdf?version=1478768340","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1999-5903/8/4/54/pdf?version=1478768340","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032712488","display_name":"Jingsha He","orcid":"https://orcid.org/0000-0002-8122-8052"},"institutions":[{"id":"https://openalex.org/I37796252","display_name":"Beijing University of Technology","ror":"https://ror.org/037b1pp87","country_code":"CN","type":"education","lineage":["https://openalex.org/I37796252"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingsha He","raw_affiliation_strings":["Faculty of Information Technology & Beijing Engineering Research Center for IoT Software and Systems, Beijing University of Technology, Beijing 100124, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology & Beijing Engineering Research Center for IoT Software and Systems, Beijing University of Technology, Beijing 100124, China","institution_ids":["https://openalex.org/I37796252"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046113888","display_name":"Cheng-Yue Chang","orcid":"https://orcid.org/0000-0002-5002-3484"},"institutions":[{"id":"https://openalex.org/I37796252","display_name":"Beijing University of Technology","ror":"https://ror.org/037b1pp87","country_code":"CN","type":"education","lineage":["https://openalex.org/I37796252"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Chengyue Chang","raw_affiliation_strings":["Faculty of Information Technology & Beijing Engineering Research Center for IoT Software and Systems, Beijing University of Technology, Beijing 100124, China"],"raw_orcid":"https://orcid.org/0000-0002-5002-3484","affiliations":[{"raw_affiliation_string":"Faculty of Information Technology & Beijing Engineering Research Center for IoT Software and Systems, Beijing University of Technology, Beijing 100124, China","institution_ids":["https://openalex.org/I37796252"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101645668","display_name":"Peng He","orcid":null},"institutions":[{"id":"https://openalex.org/I161350542","display_name":"China Three Gorges University","ror":"https://ror.org/0419nfc77","country_code":"CN","type":"education","lineage":["https://openalex.org/I161350542"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Peng He","raw_affiliation_strings":["College of Computer and Information Technology, China Three Gorges University, Yichang 443002, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer and Information Technology, China Three Gorges University, Yichang 443002, China","institution_ids":["https://openalex.org/I161350542"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051139581","display_name":"Muhammad Salman Pathan","orcid":"https://orcid.org/0000-0002-0210-3121"},"institutions":[{"id":"https://openalex.org/I37796252","display_name":"Beijing University of Technology","ror":"https://ror.org/037b1pp87","country_code":"CN","type":"education","lineage":["https://openalex.org/I37796252"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Muhammad Pathan","raw_affiliation_strings":["Faculty of Information Technology & Beijing Engineering Research Center for IoT Software and Systems, Beijing University of Technology, Beijing 100124, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology & Beijing Engineering Research Center for IoT Software and Systems, Beijing University of Technology, Beijing 100124, China","institution_ids":["https://openalex.org/I37796252"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5046113888","https://openalex.org/A5101645668"],"corresponding_institution_ids":["https://openalex.org/I161350542","https://openalex.org/I37796252"],"apc_list":{"value":1600,"currency":"CHF","value_usd":1782},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1782},"fwci":3.6336,"has_fulltext":true,"cited_by_count":16,"citation_normalized_percentile":{"value":0.94539441,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"8","issue":"4","first_page":"54","last_page":"54"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-forensics","display_name":"Network forensics","score":0.9270316362380981},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.899338960647583},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6396667957305908},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.6311028599739075},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.5733910202980042},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5184676051139832},{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.5164847373962402},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5054166316986084},{"id":"https://openalex.org/keywords/computer-forensics","display_name":"Computer forensics","score":0.4730845093727112},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.448554128408432},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3407013416290283},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.3289341330528259},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.2174915075302124},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.18727371096611023}],"concepts":[{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.9270316362380981},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.899338960647583},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6396667957305908},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.6311028599739075},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5733910202980042},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5184676051139832},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.5164847373962402},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5054166316986084},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.4730845093727112},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.448554128408432},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3407013416290283},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.3289341330528259},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2174915075302124},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.18727371096611023}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.3390/fi8040054","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi8040054","pdf_url":"https://www.mdpi.com/1999-5903/8/4/54/pdf?version=1478768340","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:gam:jftint:v:8:y:2016:i:4:p:54-:d:82564","is_oa":false,"landing_page_url":"https://www.mdpi.com/1999-5903/8/4/54/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},{"id":"pmh:oai:doaj.org/article:9d75ff02aa7f46fa9ec98e79447255cf","is_oa":true,"landing_page_url":"https://doaj.org/article/9d75ff02aa7f46fa9ec98e79447255cf","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Future Internet, Vol 8, Iss 4, p 54 (2016)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1999-5903/8/4/54/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/fi8040054","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Future Internet; Volume 8; Issue 4; Pages: 54","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/fi8040054","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi8040054","pdf_url":"https://www.mdpi.com/1999-5903/8/4/54/pdf?version=1478768340","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.800000011920929,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2555871483.pdf","grobid_xml":"https://content.openalex.org/works/W2555871483.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W30513114","https://openalex.org/W100932002","https://openalex.org/W918972627","https://openalex.org/W1555728360","https://openalex.org/W1606442248","https://openalex.org/W1994686640","https://openalex.org/W1994920437","https://openalex.org/W1996619035","https://openalex.org/W2001479375","https://openalex.org/W2054127354","https://openalex.org/W2066500984","https://openalex.org/W2085047345","https://openalex.org/W2131060714","https://openalex.org/W2146758771","https://openalex.org/W2153635508","https://openalex.org/W2271567685","https://openalex.org/W2276979642","https://openalex.org/W2291470926","https://openalex.org/W2295872724","https://openalex.org/W2320191019","https://openalex.org/W2376010234","https://openalex.org/W2414339927","https://openalex.org/W6601270933","https://openalex.org/W6633484139","https://openalex.org/W6650865560","https://openalex.org/W6672247373"],"related_works":["https://openalex.org/W4238452393","https://openalex.org/W2489557937","https://openalex.org/W2161391695","https://openalex.org/W3018602826","https://openalex.org/W4385257722","https://openalex.org/W2480188389","https://openalex.org/W4240498326","https://openalex.org/W4283205458","https://openalex.org/W2972427363","https://openalex.org/W2067681493"],"abstract_inverted_index":{"As":[0],"the":[1,16,34,40,76,84,145,150,174,188],"Internet":[2,80],"becomes":[3],"larger":[4],"in":[5,9,14,108],"scale,":[6],"more":[7,12,182],"complex":[8],"structure":[10],"and":[11,44,64,87,123,135,142,161,184],"diversified":[13],"traffic,":[15,81],"number":[17,36],"of":[18,37,42,52,79,120,170],"crimes":[19],"that":[20,116,173],"utilize":[21],"computer":[22,38,43,69],"technologies":[23],"is":[24,55,89,181],"also":[25],"increasing":[26,35],"at":[27],"a":[28,111,118],"phenomenal":[29],"rate.":[30],"To":[31],"react":[32],"to":[33,56,75,102,138,148],"crimes,":[39,70],"field":[41],"network":[45,53,99,113,121,124,146],"forensics":[46,54,100,114],"has":[47],"emerged.":[48],"The":[49],"general":[50],"purpose":[51],"find":[57,149],"malicious":[58],"users":[59],"or":[60,93],"activities":[61],"by":[62],"gathering":[63],"dissecting":[65],"firm":[66],"evidences":[67],"about":[68],"e.g.,":[71],"hacking.":[72],"However,":[73],"due":[74],"large":[77],"volume":[78],"not":[82],"all":[83],"traffic":[85],"captured":[86],"analyzed":[88],"valuable":[90],"for":[91],"investigation":[92],"confirmation.":[94],"After":[95],"analyzing":[96],"some":[97],"existing":[98],"methods":[101],"identify":[103,163],"common":[104],"shortcomings,":[105],"we":[106,131],"propose":[107],"this":[109],"paper":[110],"new":[112],"method":[115,155,180],"uses":[117],"combination":[119],"vulnerability":[122,133],"evidence":[125,134,175],"graph.":[126],"In":[127],"our":[128,179],"proposed":[129,154],"method,":[130],"use":[132],"reasoning":[136,189],"algorithm":[137],"reconstruct":[139,157],"attack":[140,158],"scenarios":[141,159],"then":[143,162],"backtrack":[144],"packets":[147],"original":[151],"evidences.":[152],"Our":[153],"can":[156],"effectively":[160],"multi-staged":[164],"attacks":[165],"through":[166],"evidential":[167],"reasoning.":[168],"Results":[169],"experiments":[171],"show":[172],"graph":[176],"constructed":[177],"using":[178],"complete":[183],"credible":[185],"while":[186],"possessing":[187],"capability.":[190]},"counts_by_year":[{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":2},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":2}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2016-11-30T00:00:00"}