Matches in SemOpenAlex for { <https://semopenalex.org/work/W4384563661> ?p ?o ?g. }
- W4384563661 endingPage "120991" @default.
- W4384563661 startingPage "120991" @default.
- W4384563661 abstract "Event logs are a powerful source of digital evidence as they contain detailed information about activities performed on a computer. Forensic investigation of the event logs is a challenging and time-consuming task due to their large volume and continuous generation. A significant amount of time, effort, and knowledge is required to interpret their contents, discovering irregular events that are potentially pertinent to the investigation. As the number of digital investigations increases, so too must resources available to investigators. This requires new techniques to make the process easier and faster, reducing the burden on human investigators as well as being resource efficient. In this paper, a novel solution is presented to examine event logs and automatically identify irregular activities during forensic analysis. The proposed solution utilises a rare itemset mining approach to establish relationships among event entries, based on their contents. Following on, identified event relationships are ordered based on their temporal order to represent the timeline or sequence of activity. The solution is also capable of prioritising identified activities by calculating their degree of irregularity. The empirical analysis is performed on 15 live machines, and the results are discussed in terms of accuracy and performance metrics." @default.
- W4384563661 created "2023-07-18" @default.
- W4384563661 creator A5037686924 @default.
- W4384563661 creator A5053811883 @default.
- W4384563661 creator A5083933840 @default.
- W4384563661 date "2023-12-01" @default.
- W4384563661 modified "2023-10-17" @default.
- W4384563661 title "Context-based irregular activity detection in event logs for forensic investigations: An itemset mining approach" @default.
- W4384563661 cites W2064477572 @default.
- W4384563661 cites W2086019232 @default.
- W4384563661 cites W2137039452 @default.
- W4384563661 cites W2138184277 @default.
- W4384563661 cites W2154663323 @default.
- W4384563661 cites W2339742849 @default.
- W4384563661 cites W2343120715 @default.
- W4384563661 cites W2550661212 @default.
- W4384563661 cites W2551502590 @default.
- W4384563661 cites W2604587076 @default.
- W4384563661 cites W2744561214 @default.
- W4384563661 cites W2765279214 @default.
- W4384563661 cites W2767094836 @default.
- W4384563661 cites W2772073082 @default.
- W4384563661 cites W2789436223 @default.
- W4384563661 cites W2810689795 @default.
- W4384563661 cites W2883154776 @default.
- W4384563661 cites W2890792016 @default.
- W4384563661 cites W2899604289 @default.
- W4384563661 cites W2919324643 @default.
- W4384563661 cites W2944362491 @default.
- W4384563661 cites W2948271738 @default.
- W4384563661 cites W2971290869 @default.
- W4384563661 cites W2976114882 @default.
- W4384563661 cites W2988438622 @default.
- W4384563661 cites W2997682566 @default.
- W4384563661 cites W3003705911 @default.
- W4384563661 cites W3103154784 @default.
- W4384563661 cites W3167049955 @default.
- W4384563661 cites W4249088215 @default.
- W4384563661 cites W949909655 @default.
- W4384563661 doi "https://doi.org/10.1016/j.eswa.2023.120991" @default.
- W4384563661 hasPublicationYear "2023" @default.
- W4384563661 type Work @default.
- W4384563661 citedByCount "0" @default.
- W4384563661 crossrefType "journal-article" @default.
- W4384563661 hasAuthorship W4384563661A5037686924 @default.
- W4384563661 hasAuthorship W4384563661A5053811883 @default.
- W4384563661 hasAuthorship W4384563661A5083933840 @default.
- W4384563661 hasBestOaLocation W43845636611 @default.
- W4384563661 hasConcept C111919701 @default.
- W4384563661 hasConcept C121332964 @default.
- W4384563661 hasConcept C124101348 @default.
- W4384563661 hasConcept C124670913 @default.
- W4384563661 hasConcept C144133560 @default.
- W4384563661 hasConcept C151730666 @default.
- W4384563661 hasConcept C162324750 @default.
- W4384563661 hasConcept C162853370 @default.
- W4384563661 hasConcept C166957645 @default.
- W4384563661 hasConcept C174998907 @default.
- W4384563661 hasConcept C187736073 @default.
- W4384563661 hasConcept C206345919 @default.
- W4384563661 hasConcept C23123220 @default.
- W4384563661 hasConcept C2522767166 @default.
- W4384563661 hasConcept C2779343474 @default.
- W4384563661 hasConcept C2779662365 @default.
- W4384563661 hasConcept C2780451532 @default.
- W4384563661 hasConcept C31258907 @default.
- W4384563661 hasConcept C38652104 @default.
- W4384563661 hasConcept C41008148 @default.
- W4384563661 hasConcept C4438859 @default.
- W4384563661 hasConcept C62520636 @default.
- W4384563661 hasConcept C80309976 @default.
- W4384563661 hasConcept C84418412 @default.
- W4384563661 hasConcept C85345410 @default.
- W4384563661 hasConcept C86803240 @default.
- W4384563661 hasConcept C95457728 @default.
- W4384563661 hasConcept C98045186 @default.
- W4384563661 hasConceptScore W4384563661C111919701 @default.
- W4384563661 hasConceptScore W4384563661C121332964 @default.
- W4384563661 hasConceptScore W4384563661C124101348 @default.
- W4384563661 hasConceptScore W4384563661C124670913 @default.
- W4384563661 hasConceptScore W4384563661C144133560 @default.
- W4384563661 hasConceptScore W4384563661C151730666 @default.
- W4384563661 hasConceptScore W4384563661C162324750 @default.
- W4384563661 hasConceptScore W4384563661C162853370 @default.
- W4384563661 hasConceptScore W4384563661C166957645 @default.
- W4384563661 hasConceptScore W4384563661C174998907 @default.
- W4384563661 hasConceptScore W4384563661C187736073 @default.
- W4384563661 hasConceptScore W4384563661C206345919 @default.
- W4384563661 hasConceptScore W4384563661C23123220 @default.
- W4384563661 hasConceptScore W4384563661C2522767166 @default.
- W4384563661 hasConceptScore W4384563661C2779343474 @default.
- W4384563661 hasConceptScore W4384563661C2779662365 @default.
- W4384563661 hasConceptScore W4384563661C2780451532 @default.
- W4384563661 hasConceptScore W4384563661C31258907 @default.
- W4384563661 hasConceptScore W4384563661C38652104 @default.
- W4384563661 hasConceptScore W4384563661C41008148 @default.
- W4384563661 hasConceptScore W4384563661C4438859 @default.
- W4384563661 hasConceptScore W4384563661C62520636 @default.