{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,23]],"date-time":"2026-02-23T11:17:20Z","timestamp":1771845440736,"version":"3.50.1"},"publisher-location":"Cham","reference-count":14,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030784270","type":"print"},{"value":"9783030784287","type":"electronic"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-78428-7_6","type":"book-chapter","created":{"date-parts":[[2021,6,13]],"date-time":"2021-06-13T23:03:11Z","timestamp":1623625391000},"page":"67-74","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["An Ontology Engineering Case Study for Advanced Digital Forensic Analysis"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2846-9391","authenticated-orcid":false,"given":"Pavel","family":"Chikul","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8882-4095","authenticated-orcid":false,"given":"Hayretdin","family":"Bahsi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9621-0787","authenticated-orcid":false,"given":"Olaf","family":"Maennel","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,6,14]]},"reference":[{"key":"6_CR1","unstructured":"Plaso documentation. https:\/\/plaso.readthedocs.io\/en\/latest\/"},{"key":"6_CR2","doi-asserted-by":"publisher","first-page":"37","DOI":"10.1016\/j.diin.2006.06.008","volume":"3","author":"A Brinson","year":"2006","unstructured":"Brinson, A., Robinson, A., Rogers, M.: A cyber forensics ontology: creating a new approach to studying cyber forensics. Digit. Invest. 3, 37\u201343 (2006)","journal-title":"Digit. Invest."},{"key":"6_CR3","unstructured":"Carvey, H. https:\/\/windowsir.blogspot.com\/2015\/04\/micro-mini-timelines.html"},{"key":"6_CR4","doi-asserted-by":"publisher","first-page":"S65","DOI":"10.1016\/j.diin.2008.05.008","volume":"5","author":"A Case","year":"2008","unstructured":"Case, A., Cristina, A., Marziale, L., Richard, G.G., Roussev, V.: Face: automated digital evidence discovery and correlation. Digit. Invest. 5, S65\u2013S75 (2008)","journal-title":"Digit. Invest."},{"issue":"6","key":"6_CR5","doi-asserted-by":"publisher","first-page":"649","DOI":"10.1080\/00450618.2018.1554090","volume":"51","author":"E Casey","year":"2019","unstructured":"Casey, E.: The chequered past and risky future of digital forensics. Aust. J. Forensic Sci. 51(6), 649\u2013664 (2019)","journal-title":"Aust. J. Forensic Sci."},{"key":"6_CR6","doi-asserted-by":"publisher","first-page":"83","DOI":"10.1016\/j.diin.2015.07.005","volume":"15","author":"Y Chabot","year":"2015","unstructured":"Chabot, Y., Bertaux, A., Nicolle, C., Kechadi, T.: An ontology-based approach for the reconstruction and analysis of digital incidents timelines. Digit. Invest. 15, 83\u2013100 (2015)","journal-title":"Digit. Invest."},{"key":"6_CR7","doi-asserted-by":"publisher","first-page":"34","DOI":"10.1016\/j.diin.2018.12.004","volume":"28","author":"M Debinski","year":"2019","unstructured":"Debinski, M., Breitinger, F., Mohan, P.: Timeline2GUI: a Log2Timeline CSV parser and training scenarios. Digit. Invest. 28, 34\u201343 (2019)","journal-title":"Digit. Invest."},{"key":"6_CR8","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"135","DOI":"10.1007\/978-3-642-41148-9_9","volume-title":"Advances in Digital Forensics IX","author":"S Esposito","year":"2013","unstructured":"Esposito, S., Peterson, G.: Creating super timelines in windows investigations. In: Peterson, G., Shenoi, S. (eds.) DigitalForensics 2013. IAICT, vol. 410, pp. 135\u2013144. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-41148-9_9"},{"key":"6_CR9","unstructured":"Guj\u00f3nsson, K.: Mastering the super timeline with log2timeline. SANS Institute (2010)"},{"key":"6_CR10","doi-asserted-by":"publisher","first-page":"S69","DOI":"10.1016\/j.diin.2012.05.006","volume":"9","author":"C Hargreaves","year":"2012","unstructured":"Hargreaves, C., Patterson, J.: An automated timeline reconstruction approach for digital forensic investigations. Digit. Invest. 9, S69\u2013S79 (2012)","journal-title":"Digit. Invest."},{"key":"6_CR11","doi-asserted-by":"publisher","first-page":"S23","DOI":"10.1016\/j.diin.2009.06.014","volume":"6","author":"D Kahved\u017ei\u0107","year":"2009","unstructured":"Kahved\u017ei\u0107, D., Kechadi, T.: Dialog: a framework for modeling, analysis and reuse of digital forensic knowledge. Digit. Invest. 6, S23\u2013S33 (2009)","journal-title":"Digit. Invest."},{"issue":"5","key":"6_CR12","doi-asserted-by":"publisher","first-page":"1231","DOI":"10.1111\/1556-4029.12511","volume":"59","author":"NM Karie","year":"2014","unstructured":"Karie, N.M., Venter, H.S.: Toward a general ontology for digital forensic disciplines. J. Forensic Sci. 59(5), 1231\u20131241 (2014)","journal-title":"J. Forensic Sci."},{"issue":"14","key":"6_CR13","first-page":"800","volume":"10","author":"K Kent","year":"2006","unstructured":"Kent, K., Chevalier, S., Grance, T., Dang, H.: Guide to integrating forensic techniques into incident response. NIST Special Publ. 10(14), 800\u201386 (2006)","journal-title":"NIST Special Publ."},{"key":"6_CR14","doi-asserted-by":"publisher","first-page":"e1394","DOI":"10.1002\/wfs2.1394","volume":"3","author":"LF Sikos","year":"2021","unstructured":"Sikos, L.F.: AI in digital forensics: ontology engineering for cybercrime investigations. Wiley Interdiscip. Rev. Forensic Sci. 3, e1394 (2021)","journal-title":"Wiley Interdiscip. Rev. Forensic Sci."}],"container-title":["Lecture Notes in Computer Science","Model and Data Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-78428-7_6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,6,13]],"date-time":"2021-06-13T23:17:25Z","timestamp":1623626245000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-78428-7_6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030784270","9783030784287"],"references-count":14,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-78428-7_6","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"14 June 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"MEDI","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Model and Data Engineering","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Tallinn","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Estonia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 June 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 June 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"10","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"medi2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/cs.ttu.ee\/events\/medi2021\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"47","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"16","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"8","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"34% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Due to the Corona pandemic the event was held virtually.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}