Matches in SemOpenAlex for { <https://semopenalex.org/work/W4387618532> ?p ?o ?g. }
Showing items 1 to 66 of
66
with 100 items per page.
- W4387618532 endingPage "301610" @default.
- W4387618532 startingPage "301610" @default.
- W4387618532 abstract "With the increasing use of the Internet for criminal activities, web servers have become more and more important during forensic investigations. In many cases, web servers are used to host leaked data, as a management interface for Command and Control servers, or as a platform for illicit content. As a result, extracting information from web servers has become a critical aspect of digital forensics. By default, a lot of information can already be extracted by performing traditional storage forensics including the analysis of logs. However this approach quickly reaches its limits as soon as anti-forensic techniques such as the deletion of configuration files or the deactivation of logging capabilities are implemented. This paper evaluates the feasibility of memory forensics as a complement to traditional storage forensics for cases involving web servers. For this purpose, we present a methodology for extracting forensically relevant artefacts from the memory of Apache web servers, which are among the most commonly used on the Internet. Through various experiments, we evaluate the applicability of our approach in different scenarios. In the process, we also take a closer look at the overall existence of digital traces, which cannot easily be found by following a structured approach. Our findings demonstrate that certain Apache web server structures contain important information that can be retrieved from memory even after the originating event has passed. Additionally, traces such as IP addresses were still found in memory even after complete structures were already overwritten by further interaction. These results highlight the benefits and the potential of memory analysis for web servers in digital investigations." @default.
- W4387618532 created "2023-10-14" @default.
- W4387618532 creator A5028522304 @default.
- W4387618532 creator A5037768050 @default.
- W4387618532 creator A5052832324 @default.
- W4387618532 creator A5066741507 @default.
- W4387618532 date "2023-10-01" @default.
- W4387618532 modified "2023-10-15" @default.
- W4387618532 title "About the applicability of Apache2 web server memory forensics" @default.
- W4387618532 cites W2324374191 @default.
- W4387618532 cites W2579276500 @default.
- W4387618532 doi "https://doi.org/10.1016/j.fsidi.2023.301610" @default.
- W4387618532 hasPublicationYear "2023" @default.
- W4387618532 type Work @default.
- W4387618532 citedByCount "0" @default.
- W4387618532 crossrefType "journal-article" @default.
- W4387618532 hasAuthorship W4387618532A5028522304 @default.
- W4387618532 hasAuthorship W4387618532A5037768050 @default.
- W4387618532 hasAuthorship W4387618532A5052832324 @default.
- W4387618532 hasAuthorship W4387618532A5066741507 @default.
- W4387618532 hasBestOaLocation W43876185321 @default.
- W4387618532 hasConcept C110875604 @default.
- W4387618532 hasConcept C111919701 @default.
- W4387618532 hasConcept C11392498 @default.
- W4387618532 hasConcept C118643609 @default.
- W4387618532 hasConcept C136764020 @default.
- W4387618532 hasConcept C2781357168 @default.
- W4387618532 hasConcept C38652104 @default.
- W4387618532 hasConcept C41008148 @default.
- W4387618532 hasConcept C4373008 @default.
- W4387618532 hasConcept C50747538 @default.
- W4387618532 hasConcept C556601545 @default.
- W4387618532 hasConcept C84418412 @default.
- W4387618532 hasConcept C93996380 @default.
- W4387618532 hasConceptScore W4387618532C110875604 @default.
- W4387618532 hasConceptScore W4387618532C111919701 @default.
- W4387618532 hasConceptScore W4387618532C11392498 @default.
- W4387618532 hasConceptScore W4387618532C118643609 @default.
- W4387618532 hasConceptScore W4387618532C136764020 @default.
- W4387618532 hasConceptScore W4387618532C2781357168 @default.
- W4387618532 hasConceptScore W4387618532C38652104 @default.
- W4387618532 hasConceptScore W4387618532C41008148 @default.
- W4387618532 hasConceptScore W4387618532C4373008 @default.
- W4387618532 hasConceptScore W4387618532C50747538 @default.
- W4387618532 hasConceptScore W4387618532C556601545 @default.
- W4387618532 hasConceptScore W4387618532C84418412 @default.
- W4387618532 hasConceptScore W4387618532C93996380 @default.
- W4387618532 hasLocation W43876185321 @default.
- W4387618532 hasOpenAccess W4387618532 @default.
- W4387618532 hasPrimaryLocation W43876185321 @default.
- W4387618532 hasRelatedWork W2489557937 @default.
- W4387618532 hasRelatedWork W3001565613 @default.
- W4387618532 hasRelatedWork W3018602826 @default.
- W4387618532 hasRelatedWork W3186279996 @default.
- W4387618532 hasRelatedWork W4212798336 @default.
- W4387618532 hasRelatedWork W4238452393 @default.
- W4387618532 hasRelatedWork W4283205458 @default.
- W4387618532 hasRelatedWork W4385257722 @default.
- W4387618532 hasRelatedWork W872258296 @default.
- W4387618532 hasRelatedWork W2398847397 @default.
- W4387618532 hasVolume "46" @default.
- W4387618532 isParatext "false" @default.
- W4387618532 isRetracted "false" @default.
- W4387618532 workType "article" @default.