Matches in SemOpenAlex for { <https://semopenalex.org/work/W1777157359> ?p ?o ?g. }
Showing items 1 to 81 of
81
with 100 items per page.
- W1777157359 endingPage "130" @default.
- W1777157359 startingPage "115" @default.
- W1777157359 abstract "We describe a tool Dirim for automatically finding files on a drive that are anomalous or suspicious, and thus worthy of focus during digital-forensic investigation, based on solely their directory information. Anomalies are found both from comparing overall drive statistics and from comparing clusters of related files using a novel approach of superclustering of clusters. Suspicious file detection looks for a set of specific clues. We discuss results of experiments we conducted on a representative corpus on 1467 drive images where we did find interesting anomalies but not much deception (as expected given the corpus). Cluster comparison performed best at providing useful information for an investigator, but the other methods provided unique additional information albeit with a significant number of false alarms." @default.
- W1777157359 created "2016-06-24" @default.
- W1777157359 creator A5019584512 @default.
- W1777157359 creator A5077305737 @default.
- W1777157359 date "2012-01-01" @default.
- W1777157359 modified "2023-10-05" @default.
- W1777157359 title "Finding Anomalous and Suspicious Files from Directory Metadata on a Large Corpus" @default.
- W1777157359 cites W1982659489 @default.
- W1777157359 cites W1986288430 @default.
- W1777157359 cites W1986454686 @default.
- W1777157359 cites W2019239374 @default.
- W1777157359 cites W2076342816 @default.
- W1777157359 cites W2094030202 @default.
- W1777157359 cites W2125767749 @default.
- W1777157359 cites W2144678296 @default.
- W1777157359 cites W2152247885 @default.
- W1777157359 cites W2160127232 @default.
- W1777157359 cites W4239048948 @default.
- W1777157359 doi "https://doi.org/10.1007/978-3-642-35515-8_10" @default.
- W1777157359 hasPublicationYear "2012" @default.
- W1777157359 type Work @default.
- W1777157359 sameAs 1777157359 @default.
- W1777157359 citedByCount "12" @default.
- W1777157359 countsByYear W17771573592012 @default.
- W1777157359 countsByYear W17771573592014 @default.
- W1777157359 countsByYear W17771573592015 @default.
- W1777157359 countsByYear W17771573592016 @default.
- W1777157359 countsByYear W17771573592020 @default.
- W1777157359 countsByYear W17771573592021 @default.
- W1777157359 crossrefType "book-chapter" @default.
- W1777157359 hasAuthorship W1777157359A5019584512 @default.
- W1777157359 hasAuthorship W1777157359A5077305737 @default.
- W1777157359 hasBestOaLocation W17771573592 @default.
- W1777157359 hasConcept C111919701 @default.
- W1777157359 hasConcept C120665830 @default.
- W1777157359 hasConcept C121332964 @default.
- W1777157359 hasConcept C136764020 @default.
- W1777157359 hasConcept C177264268 @default.
- W1777157359 hasConcept C192209626 @default.
- W1777157359 hasConcept C199360897 @default.
- W1777157359 hasConcept C204321447 @default.
- W1777157359 hasConcept C23123220 @default.
- W1777157359 hasConcept C2777683733 @default.
- W1777157359 hasConcept C38652104 @default.
- W1777157359 hasConcept C41008148 @default.
- W1777157359 hasConcept C84418412 @default.
- W1777157359 hasConcept C93518851 @default.
- W1777157359 hasConceptScore W1777157359C111919701 @default.
- W1777157359 hasConceptScore W1777157359C120665830 @default.
- W1777157359 hasConceptScore W1777157359C121332964 @default.
- W1777157359 hasConceptScore W1777157359C136764020 @default.
- W1777157359 hasConceptScore W1777157359C177264268 @default.
- W1777157359 hasConceptScore W1777157359C192209626 @default.
- W1777157359 hasConceptScore W1777157359C199360897 @default.
- W1777157359 hasConceptScore W1777157359C204321447 @default.
- W1777157359 hasConceptScore W1777157359C23123220 @default.
- W1777157359 hasConceptScore W1777157359C2777683733 @default.
- W1777157359 hasConceptScore W1777157359C38652104 @default.
- W1777157359 hasConceptScore W1777157359C41008148 @default.
- W1777157359 hasConceptScore W1777157359C84418412 @default.
- W1777157359 hasConceptScore W1777157359C93518851 @default.
- W1777157359 hasLocation W17771573591 @default.
- W1777157359 hasLocation W17771573592 @default.
- W1777157359 hasOpenAccess W1777157359 @default.
- W1777157359 hasPrimaryLocation W17771573591 @default.
- W1777157359 hasRelatedWork W1515308544 @default.
- W1777157359 hasRelatedWork W1992807924 @default.
- W1777157359 hasRelatedWork W2062427795 @default.
- W1777157359 hasRelatedWork W2313595856 @default.
- W1777157359 hasRelatedWork W2324261804 @default.
- W1777157359 hasRelatedWork W2354642172 @default.
- W1777157359 hasRelatedWork W2357291590 @default.
- W1777157359 hasRelatedWork W2360553097 @default.
- W1777157359 hasRelatedWork W2361349944 @default.
- W1777157359 hasRelatedWork W2775669459 @default.
- W1777157359 isParatext "false" @default.
- W1777157359 isRetracted "false" @default.
- W1777157359 magId "1777157359" @default.
- W1777157359 workType "book-chapter" @default.