Matches in SemOpenAlex for { <https://semopenalex.org/work/W2004362457> ?p ?o ?g. }
Showing items 1 to 67 of
67
with 100 items per page.
- W2004362457 endingPage "S77" @default.
- W2004362457 startingPage "S71" @default.
- W2004362457 abstract "We present a method to examine a filesystem and determine if and when files were copied from it. We develop this method by stochastically modeling filesystem behavior under both routine activity and copying, and identifying emergent patterns in MAC timestamps unique to copying. These patterns are detectable even months afterwards. We have successfully used this method to investigate data exfiltration in the field. Our method presents a new approach to forensics: by looking for stochastically emergent patterns, we can detect silent activities that lack artifacts." @default.
- W2004362457 created "2016-06-24" @default.
- W2004362457 creator A5064614257 @default.
- W2004362457 date "2011-08-01" @default.
- W2004362457 modified "2023-09-25" @default.
- W2004362457 title "Detecting data theft using stochastic forensics" @default.
- W2004362457 cites W2070320970 @default.
- W2004362457 cites W2070834743 @default.
- W2004362457 cites W4240588952 @default.
- W2004362457 doi "https://doi.org/10.1016/j.diin.2011.05.009" @default.
- W2004362457 hasPublicationYear "2011" @default.
- W2004362457 type Work @default.
- W2004362457 sameAs 2004362457 @default.
- W2004362457 citedByCount "25" @default.
- W2004362457 countsByYear W20043624572012 @default.
- W2004362457 countsByYear W20043624572013 @default.
- W2004362457 countsByYear W20043624572014 @default.
- W2004362457 countsByYear W20043624572015 @default.
- W2004362457 countsByYear W20043624572016 @default.
- W2004362457 countsByYear W20043624572017 @default.
- W2004362457 countsByYear W20043624572018 @default.
- W2004362457 countsByYear W20043624572019 @default.
- W2004362457 countsByYear W20043624572020 @default.
- W2004362457 countsByYear W20043624572023 @default.
- W2004362457 crossrefType "journal-article" @default.
- W2004362457 hasAuthorship W2004362457A5064614257 @default.
- W2004362457 hasBestOaLocation W20043624571 @default.
- W2004362457 hasConcept C113954288 @default.
- W2004362457 hasConcept C124101348 @default.
- W2004362457 hasConcept C17744445 @default.
- W2004362457 hasConcept C199539241 @default.
- W2004362457 hasConcept C202444582 @default.
- W2004362457 hasConcept C2779151265 @default.
- W2004362457 hasConcept C33923547 @default.
- W2004362457 hasConcept C38652104 @default.
- W2004362457 hasConcept C41008148 @default.
- W2004362457 hasConcept C9652623 @default.
- W2004362457 hasConceptScore W2004362457C113954288 @default.
- W2004362457 hasConceptScore W2004362457C124101348 @default.
- W2004362457 hasConceptScore W2004362457C17744445 @default.
- W2004362457 hasConceptScore W2004362457C199539241 @default.
- W2004362457 hasConceptScore W2004362457C202444582 @default.
- W2004362457 hasConceptScore W2004362457C2779151265 @default.
- W2004362457 hasConceptScore W2004362457C33923547 @default.
- W2004362457 hasConceptScore W2004362457C38652104 @default.
- W2004362457 hasConceptScore W2004362457C41008148 @default.
- W2004362457 hasConceptScore W2004362457C9652623 @default.
- W2004362457 hasLocation W20043624571 @default.
- W2004362457 hasOpenAccess W2004362457 @default.
- W2004362457 hasPrimaryLocation W20043624571 @default.
- W2004362457 hasRelatedWork W105617988 @default.
- W2004362457 hasRelatedWork W1547043107 @default.
- W2004362457 hasRelatedWork W1559434481 @default.
- W2004362457 hasRelatedWork W1606975172 @default.
- W2004362457 hasRelatedWork W2348097614 @default.
- W2004362457 hasRelatedWork W2368138740 @default.
- W2004362457 hasRelatedWork W2377216019 @default.
- W2004362457 hasRelatedWork W2589345488 @default.
- W2004362457 hasRelatedWork W3111068657 @default.
- W2004362457 hasRelatedWork W4244121124 @default.
- W2004362457 hasVolume "8" @default.
- W2004362457 isParatext "false" @default.
- W2004362457 isRetracted "false" @default.
- W2004362457 magId "2004362457" @default.
- W2004362457 workType "article" @default.