Matches in SemOpenAlex for { <https://semopenalex.org/work/W3216796243> ?p ?o ?g. }
Showing items 1 to 96 of
96
with 100 items per page.
- W3216796243 endingPage "26" @default.
- W3216796243 startingPage "1" @default.
- W3216796243 abstract "Despite a considerable number of approaches that have been proposed to protect computer systems, cyber-criminal activities are on the rise and forensic analysis of compromised machines and seized devices is becoming essential in computer security. This article focuses on memory forensics, a branch of digital forensics that extract artifacts from the volatile memory. In particular, this article looks at a key ingredient required by memory forensics frameworks: a precise model of the OS kernel under analysis, also known as profile . By using the information stored in the profile, memory forensics tools are able to bridge the semantic gap and interpret raw bytes to extract evidences from a memory dump. A big problem with profile-based solutions is that custom profiles must be created for each and every system under analysis. This is especially problematic for Linux systems, because profiles are not generic : they are strictly tied to a specific kernel version and to the configuration used to build the kernel. Failing to create a valid profile means that an analyst cannot unleash the true power of memory forensics and is limited to primitive carving strategies. For this reason, in this article we present a novel approach that combines source code and binary analysis techniques to automatically generate a profile from a memory dump, without relying on any non-public information. Our experiments show that this is a viable solution and that profiles reconstructed by our framework can be used to run many plugins, which are essential for a successful forensics investigation." @default.
- W3216796243 created "2021-12-06" @default.
- W3216796243 creator A5031789232 @default.
- W3216796243 creator A5043086228 @default.
- W3216796243 date "2021-11-23" @default.
- W3216796243 modified "2023-09-25" @default.
- W3216796243 title "AutoProfile: Towards Automated Profile Generation for Memory Analysis" @default.
- W3216796243 cites W125046873 @default.
- W3216796243 cites W1558430956 @default.
- W3216796243 cites W1964999724 @default.
- W3216796243 cites W1975177131 @default.
- W3216796243 cites W1992114977 @default.
- W3216796243 cites W2048134700 @default.
- W3216796243 cites W2092064901 @default.
- W3216796243 cites W2106445881 @default.
- W3216796243 cites W2135162105 @default.
- W3216796243 cites W2137725382 @default.
- W3216796243 cites W2138580357 @default.
- W3216796243 cites W2140908857 @default.
- W3216796243 cites W2144981449 @default.
- W3216796243 cites W2295441334 @default.
- W3216796243 cites W2322769439 @default.
- W3216796243 cites W2345585541 @default.
- W3216796243 cites W2403740588 @default.
- W3216796243 cites W2471431439 @default.
- W3216796243 cites W2514974017 @default.
- W3216796243 cites W2521856610 @default.
- W3216796243 cites W2579276500 @default.
- W3216796243 cites W2603029413 @default.
- W3216796243 cites W2755330617 @default.
- W3216796243 cites W2891621711 @default.
- W3216796243 cites W2969967096 @default.
- W3216796243 cites W2991598641 @default.
- W3216796243 cites W1965310865 @default.
- W3216796243 doi "https://doi.org/10.1145/3485471" @default.
- W3216796243 hasPublicationYear "2021" @default.
- W3216796243 type Work @default.
- W3216796243 sameAs 3216796243 @default.
- W3216796243 citedByCount "2" @default.
- W3216796243 countsByYear W32167962432022 @default.
- W3216796243 countsByYear W32167962432023 @default.
- W3216796243 crossrefType "journal-article" @default.
- W3216796243 hasAuthorship W3216796243A5031789232 @default.
- W3216796243 hasAuthorship W3216796243A5043086228 @default.
- W3216796243 hasBestOaLocation W32167962431 @default.
- W3216796243 hasConcept C10144332 @default.
- W3216796243 hasConcept C111919701 @default.
- W3216796243 hasConcept C114614502 @default.
- W3216796243 hasConcept C136085584 @default.
- W3216796243 hasConcept C176649486 @default.
- W3216796243 hasConcept C18131444 @default.
- W3216796243 hasConcept C33923547 @default.
- W3216796243 hasConcept C38652104 @default.
- W3216796243 hasConcept C41008148 @default.
- W3216796243 hasConcept C43364308 @default.
- W3216796243 hasConcept C4924752 @default.
- W3216796243 hasConcept C541664917 @default.
- W3216796243 hasConcept C74193536 @default.
- W3216796243 hasConcept C76399640 @default.
- W3216796243 hasConcept C84418412 @default.
- W3216796243 hasConceptScore W3216796243C10144332 @default.
- W3216796243 hasConceptScore W3216796243C111919701 @default.
- W3216796243 hasConceptScore W3216796243C114614502 @default.
- W3216796243 hasConceptScore W3216796243C136085584 @default.
- W3216796243 hasConceptScore W3216796243C176649486 @default.
- W3216796243 hasConceptScore W3216796243C18131444 @default.
- W3216796243 hasConceptScore W3216796243C33923547 @default.
- W3216796243 hasConceptScore W3216796243C38652104 @default.
- W3216796243 hasConceptScore W3216796243C41008148 @default.
- W3216796243 hasConceptScore W3216796243C43364308 @default.
- W3216796243 hasConceptScore W3216796243C4924752 @default.
- W3216796243 hasConceptScore W3216796243C541664917 @default.
- W3216796243 hasConceptScore W3216796243C74193536 @default.
- W3216796243 hasConceptScore W3216796243C76399640 @default.
- W3216796243 hasConceptScore W3216796243C84418412 @default.
- W3216796243 hasIssue "1" @default.
- W3216796243 hasLocation W32167962431 @default.
- W3216796243 hasOpenAccess W3216796243 @default.
- W3216796243 hasPrimaryLocation W32167962431 @default.
- W3216796243 hasRelatedWork W2094041165 @default.
- W3216796243 hasRelatedWork W2171724053 @default.
- W3216796243 hasRelatedWork W2267015620 @default.
- W3216796243 hasRelatedWork W2466602928 @default.
- W3216796243 hasRelatedWork W2607923856 @default.
- W3216796243 hasRelatedWork W3008812935 @default.
- W3216796243 hasRelatedWork W3216796243 @default.
- W3216796243 hasRelatedWork W4301913095 @default.
- W3216796243 hasRelatedWork W178967340 @default.
- W3216796243 hasRelatedWork W2554092549 @default.
- W3216796243 hasVolume "25" @default.
- W3216796243 isParatext "false" @default.
- W3216796243 isRetracted "false" @default.
- W3216796243 magId "3216796243" @default.
- W3216796243 workType "article" @default.