{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T17:47:17Z","timestamp":1743097637635,"version":"3.40.3"},"publisher-location":"Cham","reference-count":29,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030940287"},{"type":"electronic","value":"9783030940294"}],"license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022]]},"DOI":"10.1007\/978-3-030-94029-4_14","type":"book-chapter","created":{"date-parts":[[2022,1,11]],"date-time":"2022-01-11T03:02:48Z","timestamp":1641870168000},"page":"198-215","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["The Analysis and Implication of Data Deduplication in Digital Forensics"],"prefix":"10.1007","author":[{"given":"Izabela","family":"Savi\u0107","sequence":"first","affiliation":[]},{"given":"Xiaodong","family":"Lin","sequence":"additional","affiliation":[]}],"member":"297","published-online":{"date-parts":[[2022,1,11]]},"reference":[{"key":"14_CR1","unstructured":"Official Annual Cybercrime Report. Herjavec Group. https:\/\/www.herjavecgroup.com\/wp-content\/uploads\/2018\/12\/CV-HG-2019-Official-Annual-Cybercrime-Report.pdf. Accessed 17 Feb 2021"},{"key":"14_CR2","unstructured":"Heartbleed. Wikipedia. https:\/\/en.wikipedia.org\/wiki\/Heartbleed. Accessed 17 Feb 2021"},{"key":"14_CR3","unstructured":"Brager, K.: Forensic Sources Part 3: File Systems. https:\/\/www.keirstenbrager.tech\/file-systems. Accessed 17 Feb 2021"},{"key":"14_CR4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00581-8","volume-title":"Introductory Computer Forensics: A Hands-on Practical Approach","author":"X Lin","year":"2018","unstructured":"Lin, X.: Introductory Computer Forensics: A Hands-on Practical Approach. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-00581-8"},{"key":"14_CR5","unstructured":"Changes for data Recovery. UFS Explorer. https:\/\/www.ufsexplorer.com\/articles\/chances-for-data-recovery.php. Accessed 17 Feb 2021"},{"key":"14_CR6","unstructured":"Harrison, A.: Forensic Analysis of Volumes with Data Deduplication Enabled. https:\/\/blog.1234n6.com\/2017\/08\/forensic-analysis-of-volumes-with-data_29.html. Accessed 17 Feb 2021"},{"key":"14_CR7","unstructured":"Harrison, A.: Windows Server Data Deduplication and Forensic Analysis. https:\/\/blog.1234n6.com\/2017\/08\/windows-server-data-dedupliction-and.html. Accessed 17 Feb 2021"},{"key":"14_CR8","doi-asserted-by":"crossref","unstructured":"What is Data Deduplication? NetApp. https:\/\/www.netapp.com\/data-management\/what-is-data-deduplication\/. Accessed 17 Feb 2021","DOI":"10.1016\/B978-0-12-823395-5.00015-X"},{"key":"14_CR9","unstructured":"Adshead, A.: Inline deduplication or post-process: which one is right for your environment? ComputerWeekly. https:\/\/www.computerweekly.com\/tip\/Inline-deduplication-or-post-process-Which-one-is-right-for-your-environment. Accessed 17 Feb 2021"},{"key":"14_CR10","unstructured":"Documentation. OpenDedup. https:\/\/opendedup.org\/odd\/documentation\/. Accessed 17 Feb 2021"},{"key":"14_CR11","unstructured":"Campbell, M.: Byte-Level Versus Block-Level Deduplication and Backup. Unitrend. https:\/\/www.unitrends.com\/blog\/byte-level-versus-block-level-deduplication-backup. Accessed 17 Feb 2021"},{"key":"14_CR12","unstructured":"Whitehouse, L.: Data deduplication methods: block-level versus byte-level dedup. https:\/\/searchdatabackup.techtarget.com\/tip\/Data-deduplication-methods-Block-level-versus-byte-level-dedupe. Accessed 17 Feb 2021"},{"key":"14_CR13","unstructured":"Linux Quickstart Guide. OpenDedup. http:\/\/opendedup.org\/odd\/linux-quickstart-guide\/. Accessed 17 Feb 2021"},{"issue":"supplement","key":"14_CR14","doi-asserted-by":"publisher","first-page":"99","DOI":"10.1016\/j.diin.2017.01.008","volume":"20","author":"D Lanterna","year":"2017","unstructured":"Lanterna, D., Barili, A.: Forensic analysis of deduplicated file systems. Digit. Invest. 20(supplement), 99\u2013106 (2017)","journal-title":"Digit. Invest."},{"key":"14_CR15","unstructured":"What\u2019s New in Data Deduplication. Microsoft. https:\/\/docs.microsoft.com\/en-us\/windows-server\/storage\/data-deduplication\/whats-new. Accessed 03 Mar 2021"},{"key":"14_CR16","unstructured":"Sleuthkit. https:\/\/www.sleuthkit.org\/. Accessed 03 Mar 2021"},{"key":"14_CR17","unstructured":"Exterro. https:\/\/www.exterro.com\/forensic-toolkit. Accessed 03 Mar 2021"},{"key":"14_CR18","unstructured":"Toolsey. https:\/\/www.toolsley.com\/. Accessed 03 Mar 2021"},{"key":"14_CR19","unstructured":"The Sleuth Kit. Cyber Triage. https:\/\/www.cybertriage.com\/integration\/the-sleuth-kit\/. Accessed 14 Apr 2021"},{"key":"14_CR20","unstructured":"Gurram, V.: Introduction to The Sleuth Kit (TSK). Self-Published (2016)"},{"key":"14_CR21","unstructured":"istat. Sleuthkit. http:\/\/www.sleuthkit.org\/sleuthkit\/man\/istat.html. Accessed 14 Apr 2021"},{"key":"14_CR22","unstructured":"qemu-img. https:\/\/linux.die.net\/man\/1\/qemu-img. Accessed 14 Apr 2021"},{"key":"14_CR23","unstructured":"Download VMWare Workstation Player. VMWare. https:\/\/www.vmware.com\/ca\/products\/workstation-player\/workstation-player-evaluation.html. Accessed 14 Apr 2021"},{"key":"14_CR24","unstructured":"Project Gutenberg File. https:\/\/www.gutenberg.org\/files\/1342\/1342-0.txt. Accessed 14 Apr 2021"},{"key":"14_CR25","unstructured":"Learning Container. https:\/\/www.learningcontainer.com\/mp4-sample-video-files-download\/#. Accessed 14 Apr 2021"},{"key":"14_CR26","unstructured":"SmallPdf. https:\/\/smallpdf.com\/edit-pdf. Accessed 14 Apr 2021"},{"key":"14_CR27","unstructured":"FileSamples. https:\/\/filesamples.com\/formats\/mp3. Accessed 14 Apr 2021"},{"key":"14_CR28","unstructured":"FileSamples. https:\/\/filesamples.com\/formats\/mkv. Accessed 14 Apr 2021"},{"key":"14_CR29","unstructured":"Ibarra, P.: Restoring Microsoft Windows Deduplication Volumnes. Jungle Disk. https:\/\/www.jungledisk.com\/blog\/2018\/06\/18\/restoring-windows-deduplication-enabled-volumes\/. Accessed 14 Apr 2021"}],"container-title":["Lecture Notes in Computer Science","Cyberspace Safety and Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-94029-4_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,29]],"date-time":"2022-04-29T12:32:58Z","timestamp":1651235578000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-94029-4_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"ISBN":["9783030940287","9783030940294"],"references-count":29,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-94029-4_14","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2022]]},"assertion":[{"value":"11 January 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CSS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Cyberspace Safety and Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9 November 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 November 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"css2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/css2021.compute.dtu.dk\/index.html","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"35","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"9","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"5","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"26% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}