{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T18:49:31Z","timestamp":1780080571932,"version":"3.54.0"},"publisher-location":"Cham","reference-count":22,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031255373","type":"print"},{"value":"9783031255380","type":"electronic"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-25538-0_26","type":"book-chapter","created":{"date-parts":[[2023,2,3]],"date-time":"2023-02-03T13:03:34Z","timestamp":1675429414000},"page":"491-509","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Forensic Analysis and\u00a0Detection of\u00a0Spoofing Based Email Attack Using Memory Forensics and\u00a0Machine Learning"],"prefix":"10.1007","author":[{"given":"Sanjeev","family":"Shukla","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Manoj","family":"Misra","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gaurav","family":"Varshney","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,2,4]]},"reference":[{"issue":"6","key":"26_CR1","doi-asserted-by":"publisher","first-page":"593","DOI":"10.1016\/j.bushor.2016.08.001","volume":"59","author":"R Lutui","year":"2016","unstructured":"Lutui, R.: A multidisciplinary digital forensic investigation process model. Bus. Horiz. 59(6), 593\u2013604 (2016)","journal-title":"Bus. Horiz."},{"key":"26_CR2","unstructured":"Fruhlinger, J.: Top cybersecurity facts, figures and statistics. CSO Online, IDG (2020)"},{"key":"26_CR3","doi-asserted-by":"publisher","first-page":"499","DOI":"10.1007\/s10207-019-00470-x","volume":"19","author":"M Sheikhalishahi","year":"2020","unstructured":"Sheikhalishahi, M., Saracino, A., Martinelli, F., Marra, A., Mejri, M., Mejri, N.: Digital waste disposal: an automated framework for analysis of spam emails. Int. J. Inf. Secur. 19, 499\u2013522 (2020)","journal-title":"Int. J. Inf. Secur."},{"key":"26_CR4","doi-asserted-by":"publisher","first-page":"247","DOI":"10.1007\/s11235-017-0334-z","volume":"67","author":"BB Gupta","year":"2018","unstructured":"Gupta, B.B., Arachchilage, N.A.G., Psannis, K.: Defending against phishing attacks: taxonomy of methods, current issues and future directions. Telecommun. Syst. J. 67, 247\u2013267 (2018)","journal-title":"Telecommun. Syst. J."},{"key":"26_CR5","doi-asserted-by":"crossref","unstructured":"Mooloo, D., Fowdu, T.P.: An ssl-based client-oriented anti-spoofing email application. Africon, pp. 1\u20135 (2013)","DOI":"10.1109\/AFRCON.2013.6757757"},{"key":"26_CR6","doi-asserted-by":"crossref","unstructured":"Hu, H., Peng, P., Wang, G.: Towards understanding the adoption of anti-spoofing protocols in email systems. In: IEEE Cybersecurity Development (SecDev 2018) (2018)","DOI":"10.1109\/SecDev.2018.00020"},{"issue":"12","key":"26_CR7","doi-asserted-by":"publisher","first-page":"36","DOI":"10.1109\/MC.2012.252","volume":"45","author":"R Hunt","year":"2012","unstructured":"Hunt, R., Zeadally, R.: Network forensics: an analysis of techniques, tools, and trends. IEEE Comput. 45(12), 36\u201343 (2012)","journal-title":"IEEE Comput."},{"issue":"9","key":"26_CR8","first-page":"1","volume":"22","author":"F Pagani","year":"2019","unstructured":"Pagani, F., Fedorov, S., Balzarotti, D.: Introducing the temporal dimension to memory forensics. ACM Trans. Priv. Sec. 22(9), 1\u201321 (2019)","journal-title":"ACM Trans. Priv. Sec."},{"key":"26_CR9","doi-asserted-by":"publisher","first-page":"603","DOI":"10.1007\/s10207-020-00520-9","volume":"20","author":"T Parida","year":"2021","unstructured":"Parida, T., Das, S.: Pagedumper: a mechanism to collect page table manipulation information at run-time. Int. J. Inf. Secur. 20, 603\u2013619 (2021)","journal-title":"Int. J. Inf. Secur."},{"key":"26_CR10","doi-asserted-by":"crossref","unstructured":"Iyer, R., Atrey, P.K., Varshney, G., Misra, M.: Email spoofing detection using volatile memory forensics. In: IEEE Conference on Communications and Network Security (CNS), Las Vegas, NV, pp. 619\u2013625 (2017)","DOI":"10.1109\/CNS.2017.8228692"},{"key":"26_CR11","doi-asserted-by":"crossref","unstructured":"Shukla, S., Misra, M., Varshney, G.: Identification of spoofed emails by applying email forensics and memory forensics. In: Published in Proceeding of ACM Digital Online, 10th International Conference (ICCNS 2020), pp. 109\u2013114 (2020)","DOI":"10.1145\/3442520.3442527"},{"key":"26_CR12","doi-asserted-by":"crossref","unstructured":"Mishra, P., Pilli, E., Joshi, R.: Forensic analysis of e-mail date and time spoofing. In: Third International Conference on Computer and Communication Technology (2013)","DOI":"10.1109\/ICCCT.2012.69"},{"key":"26_CR13","doi-asserted-by":"crossref","unstructured":"Gupta, S., Pilli, E.S., Mishra, P., Pilli, S., Joshi, R.C.: Forensic analysis of e-mail address spoofing. In: 5th IEEE International Conference on the Next Generation Information Technology Summit, pp. 898\u2013904 (2014)","DOI":"10.1109\/CONFLUENCE.2014.6949302"},{"key":"26_CR14","unstructured":"Odunibosi, O.: The classification of email headers using random forest algorithm to detect email spoofing. School of Computing, National College, Ireland (2019)"},{"key":"26_CR15","doi-asserted-by":"crossref","unstructured":"Konno, K., Kitagawa, N., Yamai, N.: False positive detection in sender domain authentication by dmarc by dmarc report analysis. In: 3rd International Conference on Information Science and System ICISS, pp. 38\u201341 (2020)","DOI":"10.1145\/3388176.3388217"},{"key":"26_CR16","doi-asserted-by":"crossref","unstructured":"Maroofi, S., Korczynski, M., H\u00f6lzel, A., Duda, A.: Adoption of email anti-spoofing schemes: A large scale analysis. IEEE Trans. Netw. Service Manage. 1\u20131 (2021)","DOI":"10.1109\/TNSM.2021.3065422"},{"key":"26_CR17","unstructured":"Hu, H., Wang, G.: End-to-end measurements of email spoofing attacks. In: Proceedings of 27th USENIX Security Symposium (2018)"},{"key":"26_CR18","unstructured":"Alexa: Alexa most popular website. http:\/\/www.alexa.com\/topsites"},{"key":"26_CR19","unstructured":"Magnet: Magnet process capture tool. https:\/\/www.magnetforensics.com\/resources\/magnet-process-capture\/"},{"key":"26_CR20","unstructured":"Microsoft: Windows sysinternals strings v2.53. https:\/\/docs.microsoft.com\/en-us\/sysinternals\/downloads\/strings"},{"key":"26_CR21","first-page":"49","volume":"6","author":"MT Banday","year":"2011","unstructured":"Banday, M.T.: Analysing e-mail headers for forensic investigation. J. Digital Foren. Sec. Law 6, 49\u201364 (2011)","journal-title":"J. Digital Foren. Sec. Law"},{"key":"26_CR22","doi-asserted-by":"publisher","first-page":"623","DOI":"10.1007\/s10207-019-00481-8","volume":"19","author":"P Sanchez","year":"2020","unstructured":"Sanchez, P., Tapiador, J., Schneider, G.: After you, please: browser extensions order attacks and countermeasures. Int. J. Inf. Secur. 19, 623\u2013638 (2020)","journal-title":"Int. J. Inf. Secur."}],"container-title":["Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","Security and Privacy in Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-25538-0_26","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,2,3]],"date-time":"2023-02-03T13:14:12Z","timestamp":1675430052000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-25538-0_26"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031255373","9783031255380"],"references-count":22,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-25538-0_26","relation":{},"ISSN":["1867-8211","1867-822X"],"issn-type":[{"value":"1867-8211","type":"print"},{"value":"1867-822X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"4 February 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Compliance with Ethical Standards"}},{"value":"The authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of Interest"}},{"value":"This article does not contain any studies with human participants or animals performed by any of the authors.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical Approval"}},{"value":"SecureComm","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Security and Privacy in Communication Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17 October 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 October 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"securecomm2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/securecomm.eai-conferences.org\/2022\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Confy+","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"130","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"43","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"33% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"7","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}