{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T11:31:23Z","timestamp":1742988683043,"version":"3.40.3"},"publisher-location":"Cham","reference-count":28,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030312381"},{"type":"electronic","value":"9783030312398"}],"license":[{"start":{"date-parts":[[2019,9,25]],"date-time":"2019-09-25T00:00:00Z","timestamp":1569369600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-31239-8_16","type":"book-chapter","created":{"date-parts":[[2019,9,24]],"date-time":"2019-09-24T06:03:26Z","timestamp":1569305006000},"page":"202-219","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A Sequential Investigation Model for Solving Time Critical Digital Forensic Cases Involving a Single Investigator"],"prefix":"10.1007","author":[{"given":"Jatinder N. D.","family":"Gupta","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ezhil","family":"Kalaimannan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Seong-Moo","family":"Yoo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,9,25]]},"reference":[{"key":"16_CR1","unstructured":"Palmer, G.: A road map for digital forensic research (2001). Technical Report DTR-T001-0"},{"issue":"2","key":"16_CR2","doi-asserted-by":"publisher","first-page":"148","DOI":"10.1016\/j.diin.2013.04.005","volume":"10","author":"JI James","year":"2013","unstructured":"James, J.I., Gladyshev, P.: A survey of digital forensic investigator decision processes and measurement of decisions based on enhanced preview. Digit. Investig. 10(2), 148\u2013157 (2013)","journal-title":"Digit. Investig."},{"key":"16_CR3","unstructured":"Richardson R.: CSI Computer crime and Security survey (2011). \n                    http:\/\/www.ncxgroup.com\/wp-content\/uploads\/2012\/02\/CSIsurvey2010.pdf\n                    \n                  . Accessed 29 Nov 2013"},{"issue":"2","key":"16_CR4","doi-asserted-by":"publisher","first-page":"138","DOI":"10.1016\/j.diin.2013.07.002","volume":"10","author":"E Casey","year":"2013","unstructured":"Casey, E., Katz, G., Lewthwaite, J.: Honing digital forensic processes. Digit. Investig. 10(2), 138\u2013146 (2013)","journal-title":"Digit. Investig."},{"key":"16_CR5","unstructured":"Pollitt, M.: Computer forensics: an approach to evidence in cyberspace. In: Proceedings of the National Information Systems Security Conference, pp. 487\u2013491 (1995)"},{"key":"16_CR6","first-page":"561","volume-title":"Information Systems and Applications","author":"R Agarwal","year":"2015","unstructured":"Agarwal, R., Kothari, S.: Review of digital forensic investigations frameworks. In: Kim, K.J. (ed.) Information Systems and Applications, pp. 561\u2013571. Springer, Heidelberg (2015)"},{"issue":"3","key":"16_CR7","first-page":"1","volume":"1","author":"M Reith","year":"2002","unstructured":"Reith, M., Carr, C., Gunsch, G.: An examination of digital forensic models. Int. J. Digit. Evid. 1(3), 1\u201312 (2002)","journal-title":"Int. J. Digit. Evid."},{"issue":"2","key":"16_CR8","first-page":"27","volume":"1","author":"MK Rogers","year":"2006","unstructured":"Rogers, M.K., Goldman, J., Mislan, R., Wedge, T., Debrota, S.: Computer forensics field triage process model. J. Digit. Forensics Secur. Law 1(2), 27\u201340 (2006)","journal-title":"J. Digit. Forensics Secur. Law"},{"key":"16_CR9","unstructured":"Freiling, F.C., Schwittay, B.: A common process model for incident response and computer forensics. In: Proceedings of Conference on IT Incident Management and IT Forensics, pp.19\u201340 (2007)"},{"key":"16_CR10","unstructured":"Walls, R.J., Levine, B.N., Liberatore, M., Shields, C.: Effective digital forensics research is investigator-centric. In: Proceedings of the 6th USENIX Conference on Hot Topics in Security, pp. 1\u201311 (2011)"},{"issue":"S","key":"16_CR11","doi-asserted-by":"publisher","first-page":"S75","DOI":"10.1016\/j.diin.2016.01.010","volume":"16","author":"B Hitchcock","year":"2016","unstructured":"Hitchcock, B., Le-Khac, N., Scanlon, M.: Tiered forensic methodology model for digital field triage by non-digital evidence specialists. Digit. Invest. 16(S), S75\u2013S85 (2016)","journal-title":"Digit. Invest."},{"issue":"2","key":"16_CR12","doi-asserted-by":"publisher","first-page":"168","DOI":"10.1016\/j.diin.2013.03.001","volume":"10","author":"R Overill","year":"2013","unstructured":"Overill, R., Silomon, J., Roscoe, K.: Triage template pipelines in digital forensic investigations. Digit. Invest. 10(2), 168\u2013174 (2013)","journal-title":"Digit. Invest."},{"issue":"1","key":"16_CR13","doi-asserted-by":"publisher","first-page":"8","DOI":"10.1016\/S1361-3723(15)30018-X","volume":"3","author":"MS Bashir","year":"2015","unstructured":"Bashir, M.S., Khan, M.N.: A triage framework for digital forensics. Comput. Fraud Secur. 3(1), 8\u201318 (2015)","journal-title":"Comput. Fraud Secur."},{"key":"16_CR14","unstructured":"Sun, G.Z., Dong, Y., Liu, J.P., Shen T.: The validity of trusted forensics based on probability. In: Proceedings of the International Conference on Information Engineering and Computer Science, pp. 1\u20134 (2009)"},{"issue":"2","key":"16_CR15","doi-asserted-by":"publisher","first-page":"4","DOI":"10.1145\/1455518.1455523","volume":"12","author":"W Wang","year":"2008","unstructured":"Wang, W., Daniels, T.A.: Graph based approach toward network forensics analysis. ACM Trans. Inf. Syst. Secur. (TISSEC) 12(2), 4\u201333 (2008)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"16_CR16","doi-asserted-by":"crossref","unstructured":"Spyridopoulos, T., Tryfonas, T., May, J.: Incident analysis & digital forensics in SCADA and industrial control systems. In: Proceedings of the 8th IET International System Safety Conference incorporating the Cyber Security Conference, pp. 1\u20136 (2013)","DOI":"10.1049\/cp.2013.1720"},{"issue":"4","key":"16_CR17","first-page":"59","volume":"5","author":"S Alharbi","year":"2011","unstructured":"Alharbi, S., Weber-Jahnke, J., Traore, I.: The proactive and reactive digital forensics invesitgation process: a systematic literature review. Int. J. Secur. Appl. 5(4), 59\u201371 (2011)","journal-title":"Int. J. Secur. Appl."},{"issue":"1","key":"16_CR18","doi-asserted-by":"publisher","first-page":"91","DOI":"10.1007\/s40012-012-0008-7","volume":"1","author":"S Raghavan","year":"2013","unstructured":"Raghavan, S.: Digital forensic research: current state of the art. CSIT 1(1), 91\u2013114 (2013)","journal-title":"CSIT"},{"issue":"1","key":"16_CR19","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.cor.2015.11.003","volume":"69","author":"JND Gupta","year":"2016","unstructured":"Gupta, J.N.D., Kalaimannan, E., Yoo, S.M.: A heuristic for maximizing investigation effectiveness of digital forensic cases involving multiple investigators. Comput. Oper. Res. 69(1), 1\u20139 (2016)","journal-title":"Comput. Oper. Res."},{"issue":"S","key":"16_CR20","doi-asserted-by":"publisher","first-page":"S56","DOI":"10.1016\/j.diin.2017.02.001","volume":"20","author":"DM Divakaran","year":"2017","unstructured":"Divakaran, D.M., Fok, K.W., Nevat, I., Thing, V.L.L.: Evidence gathering for network security and forensics. Digit. Invest. 20(S), S56\u2013S65 (2017)","journal-title":"Digit. Invest."},{"key":"16_CR21","doi-asserted-by":"crossref","unstructured":"Herrerias, J., Gomez, R.: A log correlation model to support the evidence search process in a forensic investigation. In: Second International Workshop on Systematic Approaches to Digital Forensic Engineering, pp. 31\u201342 (2007)","DOI":"10.1109\/SADFE.2007.1"},{"key":"16_CR22","unstructured":"US Department of Justice: Forensic Examination of Digital Evidence: A Guide for Law Enforcement. National Institute of Justice Report No. NCJ 187736 (2004)"},{"key":"16_CR23","unstructured":"Williams, J.: ACPO good practice guide for digital evidence (2011). \n                    http:\/\/www.acpo.police.uk\/documents\/crime\/2011\/201110-cba-digital-evidence-v5.pdf\n                    \n                  . Accessed 25 Oct 2014"},{"key":"16_CR24","volume-title":"Computers and Intractability: A Guide to the Theory of NP-Completeness","author":"MR Garey","year":"1979","unstructured":"Garey, M.R., Johnson, D.S.: Computers and Intractability: A Guide to the Theory of NP-Completeness. Freeman, Dallas (1979)"},{"key":"16_CR25","volume-title":"Knapsack Problems: Algorithms and Computational Implementation","author":"S Martello","year":"1990","unstructured":"Martello, S., Toth, P.: Knapsack Problems: Algorithms and Computational Implementation. Wiley, Hoboken (1990)"},{"issue":"1","key":"16_CR26","doi-asserted-by":"publisher","first-page":"266","DOI":"10.1287\/opre.5.2.266","volume":"5","author":"G Dantzig","year":"1957","unstructured":"Dantzig, G.: Discrete varaible extremum problems. Oper. Res. 5(1), 266\u2013277 (1957)","journal-title":"Oper. Res."},{"issue":"1","key":"16_CR27","doi-asserted-by":"publisher","first-page":"16","DOI":"10.1080\/07408178608975325","volume":"18","author":"DA Amar","year":"1986","unstructured":"Amar, D.A., Gupta, J.N.D.: Simulated versus real life data in testing the efficiency of scheduling algorithms. IIE Trans. 18(1), 16\u201325 (1986)","journal-title":"IIE Trans."},{"key":"16_CR28","unstructured":"AIMMS 3.13: Paragon Decision Technology B.V., Netherlands. \n                    http:\/\/www.AIMMS.com"}],"container-title":["Advances in Intelligent Systems and Computing","National Cyber Summit (NCS) Research Track"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-31239-8_16","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,24]],"date-time":"2019-09-24T17:06:35Z","timestamp":1569344795000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-31239-8_16"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,9,25]]},"ISBN":["9783030312381","9783030312398"],"references-count":28,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-31239-8_16","relation":{},"ISSN":["2194-5357","2194-5365"],"issn-type":[{"type":"print","value":"2194-5357"},{"type":"electronic","value":"2194-5365"}],"subject":[],"published":{"date-parts":[[2019,9,25]]},"assertion":[{"value":"25 September 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"NCS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"National Cyber Summit","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Huntsville, AL","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 June 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"6 June 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ncs2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.nationalcybersummit.com\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}