Matches in SemOpenAlex for { <https://semopenalex.org/work/W4310551426> ?p ?o ?g. }
- W4310551426 endingPage "301484" @default.
- W4310551426 startingPage "301484" @default.
- W4310551426 abstract "One of the challenges of digital forensics is the high volume of investigative cases. To address this problem, researchers have proposed various triage methods. Detecting the applications that have run on the compromised system under inspection can be an excellent triage method that gives the investigator an overview of the system. In this paper, we construct the signature of software usage on a system using file path artifacts. We propose a software signature detection engine (SSDE) to identify the usage of the software on the system under investigation. The SSDE consists of two subsystems: the signature construction subsystem, which builds the software signature using the TF-IDF weighting scheme, and the signature detection subsystem, which identifies the executed set of software on the target system. We consider several parameters with different values in the design of SSDEs, leading to more than 500 SSDE models. We test the SSDE models against 14 pseudo-real systems from the M57 Patents scenario and evaluate their performance. The experimental results show that about 38% of SSDE models achieve near-perfect Precision, and about 18% of them achieve near-perfect Recall. We introduce the top models and determine which parameter values lead to the superior models. Besides, we compare the SSDE models with some doc2vec-based models. The results show that SSDE models have higher average Precision, slightly lower average Recall, and much less computational time." @default.
- W4310551426 created "2022-12-12" @default.
- W4310551426 creator A5001755097 @default.
- W4310551426 creator A5046059064 @default.
- W4310551426 date "2023-03-01" @default.
- W4310551426 modified "2023-09-25" @default.
- W4310551426 title "Detecting the software usage on a compromised system: A triage solution for digital forensics" @default.
- W4310551426 cites W2004362457 @default.
- W4310551426 cites W2006281793 @default.
- W4310551426 cites W2009229022 @default.
- W4310551426 cites W2037841959 @default.
- W4310551426 cites W2043793914 @default.
- W4310551426 cites W2059636126 @default.
- W4310551426 cites W2077054130 @default.
- W4310551426 cites W2095315533 @default.
- W4310551426 cites W2101746535 @default.
- W4310551426 cites W2128333478 @default.
- W4310551426 cites W2160266583 @default.
- W4310551426 cites W2339452396 @default.
- W4310551426 cites W2604064983 @default.
- W4310551426 cites W2789908754 @default.
- W4310551426 cites W2908043065 @default.
- W4310551426 cites W2908104715 @default.
- W4310551426 cites W2909866185 @default.
- W4310551426 cites W2919464213 @default.
- W4310551426 cites W2940350413 @default.
- W4310551426 cites W2958335733 @default.
- W4310551426 cites W3013748100 @default.
- W4310551426 cites W3017203559 @default.
- W4310551426 cites W3096266278 @default.
- W4310551426 cites W3155232911 @default.
- W4310551426 doi "https://doi.org/10.1016/j.fsidi.2022.301484" @default.
- W4310551426 hasPublicationYear "2023" @default.
- W4310551426 type Work @default.
- W4310551426 citedByCount "0" @default.
- W4310551426 crossrefType "journal-article" @default.
- W4310551426 hasAuthorship W4310551426A5001755097 @default.
- W4310551426 hasAuthorship W4310551426A5046059064 @default.
- W4310551426 hasConcept C111919701 @default.
- W4310551426 hasConcept C118463975 @default.
- W4310551426 hasConcept C124101348 @default.
- W4310551426 hasConcept C126838900 @default.
- W4310551426 hasConcept C134306372 @default.
- W4310551426 hasConcept C154945302 @default.
- W4310551426 hasConcept C177264268 @default.
- W4310551426 hasConcept C183115368 @default.
- W4310551426 hasConcept C194828623 @default.
- W4310551426 hasConcept C199360897 @default.
- W4310551426 hasConcept C2524010 @default.
- W4310551426 hasConcept C2777120189 @default.
- W4310551426 hasConcept C2777904410 @default.
- W4310551426 hasConcept C2779696439 @default.
- W4310551426 hasConcept C33923547 @default.
- W4310551426 hasConcept C38652104 @default.
- W4310551426 hasConcept C41008148 @default.
- W4310551426 hasConcept C71924100 @default.
- W4310551426 hasConcept C77618280 @default.
- W4310551426 hasConcept C81669768 @default.
- W4310551426 hasConcept C84418412 @default.
- W4310551426 hasConcept C99138194 @default.
- W4310551426 hasConceptScore W4310551426C111919701 @default.
- W4310551426 hasConceptScore W4310551426C118463975 @default.
- W4310551426 hasConceptScore W4310551426C124101348 @default.
- W4310551426 hasConceptScore W4310551426C126838900 @default.
- W4310551426 hasConceptScore W4310551426C134306372 @default.
- W4310551426 hasConceptScore W4310551426C154945302 @default.
- W4310551426 hasConceptScore W4310551426C177264268 @default.
- W4310551426 hasConceptScore W4310551426C183115368 @default.
- W4310551426 hasConceptScore W4310551426C194828623 @default.
- W4310551426 hasConceptScore W4310551426C199360897 @default.
- W4310551426 hasConceptScore W4310551426C2524010 @default.
- W4310551426 hasConceptScore W4310551426C2777120189 @default.
- W4310551426 hasConceptScore W4310551426C2777904410 @default.
- W4310551426 hasConceptScore W4310551426C2779696439 @default.
- W4310551426 hasConceptScore W4310551426C33923547 @default.
- W4310551426 hasConceptScore W4310551426C38652104 @default.
- W4310551426 hasConceptScore W4310551426C41008148 @default.
- W4310551426 hasConceptScore W4310551426C71924100 @default.
- W4310551426 hasConceptScore W4310551426C77618280 @default.
- W4310551426 hasConceptScore W4310551426C81669768 @default.
- W4310551426 hasConceptScore W4310551426C84418412 @default.
- W4310551426 hasConceptScore W4310551426C99138194 @default.
- W4310551426 hasLocation W43105514261 @default.
- W4310551426 hasOpenAccess W4310551426 @default.
- W4310551426 hasPrimaryLocation W43105514261 @default.
- W4310551426 hasRelatedWork W1632087785 @default.
- W4310551426 hasRelatedWork W1925590563 @default.
- W4310551426 hasRelatedWork W2025092962 @default.
- W4310551426 hasRelatedWork W2030953305 @default.
- W4310551426 hasRelatedWork W2051861562 @default.
- W4310551426 hasRelatedWork W2352505041 @default.
- W4310551426 hasRelatedWork W2356657381 @default.
- W4310551426 hasRelatedWork W2368486472 @default.
- W4310551426 hasRelatedWork W2384844651 @default.
- W4310551426 hasRelatedWork W62077333 @default.
- W4310551426 hasVolume "44" @default.
- W4310551426 isParatext "false" @default.
- W4310551426 isRetracted "false" @default.