{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,28]],"date-time":"2025-03-28T01:25:01Z","timestamp":1743125101829,"version":"3.40.3"},"publisher-location":"Cham","reference-count":42,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030471309"},{"type":"electronic","value":"9783030471316"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-47131-6_11","type":"book-chapter","created":{"date-parts":[[2020,7,25]],"date-time":"2020-07-25T08:03:54Z","timestamp":1595664234000},"page":"247-275","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["The Bitcoin-Network Protocol from a Forensic Perspective"],"prefix":"10.1007","author":[{"given":"Cornelis Leendert","family":"van Veldhuizen","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Madhusanka","family":"Liyanage","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kim-Kwang Raymond","family":"Choo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nhien-An","family":"Le-Khac","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,7,26]]},"reference":[{"unstructured":"National Cyber Security Centre: Cyber Security Assessment Netherlands 2016. National Cyber Security Centre, The Hague, Tech. Rep. (2015)","key":"11_CR1"},{"unstructured":"WhatsApp Inc.: WhatsApp Encryption Overview. WhatsApp Inc, Tech. Rep. [Online] (2016). Available: \nhttps:\/\/www.whatsapp.com\/security\/WhatsApp-Security-Whitepaper.pdf","key":"11_CR2"},{"doi-asserted-by":"publisher","unstructured":"Herzberg, A., Leibowitz, H.: Can Johnny finally encrypt? evaluating E2E-encryption in popular IM applications. In: STAST \u201816: Proceedings of the 6th Workshop on Socio-Technical Aspects in Security and TrustDecember, pp. 17\u201328 (2016). \nhttps:\/\/doi.org\/10.1145\/3046055.3046059","key":"11_CR3","DOI":"10.1145\/3046055.3046059"},{"unstructured":"Viber: Viber Encryption Overview [Online] (2019). \nhttps:\/\/www.viber.com\/en\/security-overview\n\n. Accessed: 2019-06-02","key":"11_CR4"},{"doi-asserted-by":"publisher","unstructured":"Sgaras, C., Kechadi, T., Le-Khac, N.-A.: Forensics acquisition and analysis of instant messaging and VoIP applications. In: Lecture Notes in Computer Science, vol. 8915, pp. 188\u2013199 (2015). \nhttps:\/\/doi.org\/10.1007\/978-3-319-20125-2_16","key":"11_CR5","DOI":"10.1007\/978-3-319-20125-2_16"},{"unstructured":"Lewis, J.A., Zheng, D.E., Carter, W.A.: The effect of encryption on lawful access to communications and data. CSIS, Tech. Rep., [Online] (2017). Available: \nhttps:\/\/csis-prod.s3.amazonaws.com\/s3fs-public\/publication\/170203_Lewis_EffectOfEncrytion_Web.pdf","key":"11_CR6"},{"doi-asserted-by":"publisher","unstructured":"Ryder, S., Le-Khac, N.-A.: The end of effective law enforcement in the cloud?\u2014to encrypt, or not to encrypt. In: The 9th IEEE International Conference on Cloud Computing, San Francisco, CA USA (2016). \nhttps:\/\/doi.org\/10.1109\/CLOUD.2016.0133","key":"11_CR7","DOI":"10.1109\/CLOUD.2016.0133"},{"unstructured":"Le-Khac, N.-A., Markos, S., Kechadi, M.-T.: Towards a new data mining-based approach for anti money laundering in an international investment bank. In: International Conference on Digital Forensics and Cyber Crime (ICDF2C 2009), Springer, Berlin LNICST 31, 30 Sept\u20132 Oct, Albany, New York, USA (2009)","key":"11_CR8"},{"unstructured":"Nakamoto, S.: Bitcoin: A Peer-to-Peer Electronic Cash System, p. 9 (2008). \nWww.Bitcoin.Org\n\n [Online]. Available: \nhttps:\/\/bitcoin.org\/bitcoin.pdf","key":"11_CR9"},{"doi-asserted-by":"crossref","unstructured":"Bonneau, J., Miller, A., Clark, J., Narayanan, A., Kroll, J.A., Felten, E.W.: SoK: research perspectives and challenges for bitcoin and cryptocurrencies. In: 2015 IEEE Symposium on Security and Privacy, pp. 104\u2013121. IEEE (2015)","key":"11_CR10","DOI":"10.1109\/SP.2015.14"},{"unstructured":"Protocol Documentation: Protocol Documentation\u2014Bitcoin Wiki [Online]. Available: \nhttps:\/\/en.bitcoin.it\/wiki\/Protocol_documentation\n\n. Accessed: 2019-03-17","key":"11_CR11"},{"doi-asserted-by":"crossref","unstructured":"Gervais, A., Capkun, S., Karame, G.O., Gruber, D.: On the privacy provisions of Bloom filters in lightweight bitcoin clients. In: Proceedings of the 30th Annual Computer Security Applications Conference on\u2014ACSAC\u201914, pp. 326\u2013335. ACM Press, New York, USA (2014)","key":"11_CR12","DOI":"10.1145\/2664243.2664267"},{"issue":"1\u20132","key":"11_CR13","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1016\/j.diin.2010.02.003","volume":"7","author":"ES Pilli","year":"2010","unstructured":"Pilli, E.S., Joshi, R.C., Niyogi, R.: Network forensic frameworks: survey and research challenges. Dig. Invest. 7(1\u20132), 14\u201327 (2010)","journal-title":"Dig. Invest."},{"issue":"2","key":"11_CR14","first-page":"19","volume":"1","author":"M Rogers","year":"2006","unstructured":"Rogers, M., Goldman, J., Mislan, R., Wedge, T., Debrota, S.: Computer forensics field triage process model. J. Dig. Forensics Secur. Law 1(2), 19\u201338 (2006)","journal-title":"J. Dig. Forensics Secur. Law"},{"unstructured":"Tafazzoli, T., Salahi, E., Gharaee, H.: A proposed architecture for network forensic system in large-scale networks. Interface (2015) [Online]. Available: \nhttps:\/\/arxiv.org\/ftp\/arxiv\/papers\/1508\/1508","key":"11_CR15"},{"unstructured":"Blockchain Luxembourg S.A.: Bitcoin Block Explorer\u2014Blockchain [Online]. Available: \nhttps:\/\/blockchain.info\/\n\n. Accessed: 2019-07-08","key":"11_CR16"},{"unstructured":"Wondracek, G., Comparetti, P.: Automatic network protocol analysis. In: Proceedings of the 15th Network and Distributed System Security Symposium (NDSS) (2008)","key":"11_CR17"},{"doi-asserted-by":"crossref","unstructured":"Cabaj, K.: Network activity analysis of CryptoWall ransomware. PRZEGLA\u00b8D ELEKTROTECHNICZNY 1(11), 203\u2013206 (2015)","key":"11_CR18","DOI":"10.15199\/48.2015.11.48"},{"doi-asserted-by":"crossref","unstructured":"Andriesse, D., Rossow, C., Stone-Gross, B., Plohmann, D., Bos, H.: Highly resilient peer-to-peer botnets are here: an analysis of Gameover Zeus. In: Proceedings of the 2013 8th International Conference on Malicious and Unwanted Software: The Americas, MALWARE 2013, pp. 116\u2013123 (2013)","key":"11_CR19","DOI":"10.1109\/MALWARE.2013.6703693"},{"doi-asserted-by":"crossref","unstructured":"He, J., Yang, Y., Wang, X., Tang, C., Zeng, Y.: PeerDigger: Digging stealthy P2P hosts through traffic analysis in real-time. In: Proceedings\u201417th IEEE International Conference on Computational Science and Engineering, CSE 2014, Jointly with 13th IEEE International Conference on Ubiquitous Computing and Communications, IUCC 2014, 13th International Symposium on Pervasive Systems, pp. 1528\u20131535 (2015)","key":"11_CR20","DOI":"10.1109\/CSE.2014.283"},{"doi-asserted-by":"crossref","unstructured":"Kato, K., Klyuev, V.: Large-scale network packet analysis for intelligent DDoS attack detection development. In: The 9th International Conference for Internet Technology and Secured Transactions (ICITST-2014), London UK (2014)","key":"11_CR21","DOI":"10.1109\/ICITST.2014.7038838"},{"doi-asserted-by":"crossref","unstructured":"Spagnuolo, M., Maggi, F., Zanero, S.: BitIodine: extracting intelligence from the Bitcoin network. In: Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 8437, pp. 457\u2013468 (2014)","key":"11_CR22","DOI":"10.1007\/978-3-662-45472-5_29"},{"doi-asserted-by":"crossref","unstructured":"Meiklejohn, S., Pomarole, M., Jordan, G., Levchenko, K., McCoy, D., Voelker, G.M., Savage, S.: A fistful of bitcoins. In: Proceedings of the 2013 conference on Internet measurement conference\u2014IMC\u201913, pp. 127\u2013140. ACM Press, New York, USA (2013)","key":"11_CR23","DOI":"10.1145\/2504730.2504747"},{"doi-asserted-by":"crossref","unstructured":"Moser, M., Bohme, R., Breuker, D.: An inquiry into money laundering tools in the Bitcoin ecosystem. In: 2013 APWG eCrime Researchers Summit, pp. 1\u201314. IEEE (2013)","key":"11_CR24","DOI":"10.1109\/eCRS.2013.6805780"},{"doi-asserted-by":"crossref","unstructured":"Barber, S., Boyen, X., Shi, E., Uzun, E.: Bitter to Better\u2014How to Make Bitcoin a Better Currency. In: Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 7397, pp. 399\u2013414. LNCS (2012)","key":"11_CR25","DOI":"10.1007\/978-3-642-32946-3_29"},{"doi-asserted-by":"crossref","unstructured":"Miers, I., Garman, C., Green, M., Rubin, A.D.: Zerocoin: anonymous distributed E-cash from Bitcoin. In: 2013 IEEE Symposium on Security and Privacy, pp. 397\u2013411. IEEE (2013)","key":"11_CR26","DOI":"10.1109\/SP.2013.34"},{"doi-asserted-by":"publisher","unstructured":"Van der Horst, L., Choo, K.K.R., Le-Khac, N.-A.: Process memory investigation of the Bitcoin clients electrum and bitcoin core. IEEE Access 5(1) (2017). \nhttps:\/\/doi.org\/10.1109\/ACCESS.2017.2759766","key":"11_CR27","DOI":"10.1109\/ACCESS.2017.2759766"},{"key":"11_CR28","first-page":"34","volume":"7859","author":"E Androulaki","year":"2013","unstructured":"Androulaki, E., Karame, G.O., Roeschlin, M., Scherer, T., Capkun, S.: Evaluating user privacy in Bitcoin. IACR Cryptol. ePrint Arch. 7859, 34\u201351 (2013)","journal-title":"IACR Cryptol. ePrint Arch."},{"doi-asserted-by":"publisher","unstructured":"Zollner, S., Choo, K.K.R., Le-Khac, N.-A.: An automated live forensic and postmortem analysis tool for bitcoin on windows systems. IEEE Access 7 (2019). \nhttps:\/\/doi.org\/10.1109\/ACCESS.2019.2948774","key":"11_CR29","DOI":"10.1109\/ACCESS.2019.2948774"},{"key":"11_CR30","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2019.200891","author":"W Koerhuis","year":"2020","unstructured":"Koerhuis, W., Kechadi, T., Le-Khac, N.-A.: Forensic analysis of privacy-oriented cryptocurrencies. Elsevier (2020). \nhttps:\/\/doi.org\/10.1016\/j.fsidi.2019.200891","journal-title":"Elsevier"},{"unstructured":"Fantazzini, D., Nigmatullin, E., Sukhanovskaya, V., Ivliev, S.: Everything you always wanted to know about bitcoin modelling but were afraid to ask, p. 49 (2016). [Online]. Available: \nhttps:\/\/mpra.ub.uni-muenchen.de\/71946\/","key":"11_CR31"},{"doi-asserted-by":"crossref","unstructured":"Hurlburt, G.: Might the blockchain outlive Bitcoin? IT Prof. 18(2), 12\u201316 (2016) [Online]. Available: \nhttp:\/\/ieeexplore.ieee.org\/document\/7436669\/","key":"11_CR32","DOI":"10.1109\/MITP.2016.21"},{"unstructured":"Dorri, A., Steger, M., Kanhere, S.S>, Jurdak, R.: BlockChain: A Distributed Solution to Automotive Security and Privacy (2017) [Online]. Available: \nhttp:\/\/arxiv.org\/abs\/1704.00073","key":"11_CR33"},{"doi-asserted-by":"crossref","unstructured":"Biryukov, A., Khovratovich, D., Pustogarov, I.: Deanonymisation of clients in Bitcoin P2P network. In: Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security\u2014CCS \u201914, pp. 15\u201329. ACM Press, New York, USA (2014)","key":"11_CR34","DOI":"10.1145\/2660267.2660379"},{"key":"11_CR35","doi-asserted-by":"publisher","first-page":"1121","DOI":"10.1016\/j.procs.2014.05.542","volume":"32","author":"S Feld","year":"2014","unstructured":"Feld, S., Sch\u00f6nfeld, M., Werner, M.: Analyzing the deployment of Bitcoin\u2019s P2P network under an AS-level perspective. Procedia Comput. Sci. 32, 1121\u20131126 (2014)","journal-title":"Procedia Comput. Sci."},{"doi-asserted-by":"crossref","unstructured":"Koshy, P., Koshy, D., McDaniel, P.: An analysis of anonymity in Bitcoin using P2P network traffic. In: Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 8437, pp. 469\u2013485 (2014)","key":"11_CR36","DOI":"10.1007\/978-3-662-45472-5_30"},{"doi-asserted-by":"crossref","unstructured":"Biryukov, A., Pustogarov, I.: Bitcoin over Tor isn\u2019t a good idea. In: 2015 IEEE Symposium on Security and Privacy, pp. 122\u2013134. IEEE (2015)","key":"11_CR37","DOI":"10.1109\/SP.2015.15"},{"unstructured":"Fanti, G., Viswanath, P.: Anonymity Properties of the Bitcoin P2P Network (2017) [Online]. Available: \nhttps:\/\/arxiv.org\/pdf\/1703.08761.pdf","key":"11_CR38"},{"unstructured":"Wireshark Foundation: Wireshark Go deep, 27.05.2010 (2010). [Online]. Available: \nhttps:\/\/www.wireshark.org\/","key":"11_CR39"},{"unstructured":"NETRESEC: \u201cNetworkMiner\u2014The NSM and Network Forensics Analysis Tool (2017) [Online]. Available: \nhttp:\/\/www.netresec.com\/?page=NetworkMiner","key":"11_CR40"},{"unstructured":"AOL: Moloch (2017) [Online]. Available: \nhttp:\/\/molo.ch\/","key":"11_CR41"},{"unstructured":"BitcoinJ: Bitcoinj [Online]. Available: \nhttps:\/\/bitcoinj.github.io\/","key":"11_CR42"}],"container-title":["Studies in Big Data","Cyber and Digital Forensic Investigations"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-47131-6_11","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,7,25]],"date-time":"2020-07-25T08:15:50Z","timestamp":1595664950000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-47131-6_11"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030471309","9783030471316"],"references-count":42,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-47131-6_11","relation":{},"ISSN":["2197-6503","2197-6511"],"issn-type":[{"type":"print","value":"2197-6503"},{"type":"electronic","value":"2197-6511"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"26 July 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}