{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,13]],"date-time":"2026-03-13T15:08:00Z","timestamp":1773414480186,"version":"3.50.1"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032006370","type":"print"},{"value":"9783032006356","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-032-00635-6_3","type":"book-chapter","created":{"date-parts":[[2025,8,8]],"date-time":"2025-08-08T13:36:07Z","timestamp":1754660167000},"page":"42-59","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Measuring the\u00a0Effectiveness of\u00a0Keyword Lists in\u00a0Digital Forensics"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5791-3092","authenticated-orcid":false,"given":"Aikaterini","family":"Kanta","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-1088-8302","authenticated-orcid":false,"given":"Christopher","family":"Hargreaves","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,8,9]]},"reference":[{"key":"3_CR1","doi-asserted-by":"crossref","unstructured":"Beckett, J., Slay, J.: digital forensics: validation and verification in a dynamic work environment. In: 2007 40th Annual Hawaii International Conference on System Sciences (HICSS 2007), pp. 266a\u2013266a. IEEE (2007)","DOI":"10.1109\/HICSS.2007.175"},{"key":"3_CR2","doi-asserted-by":"crossref","unstructured":"Beebe, N., Dietrich, G.: A new process model for text string searching. In: Advances in Digital Forensics III, pp. 179\u2013191 (2007)","DOI":"10.1007\/978-0-387-73742-3_12"},{"issue":"4","key":"3_CR3","doi-asserted-by":"publisher","first-page":"732","DOI":"10.1016\/j.dss.2011.01.009","volume":"51","author":"NL Beebe","year":"2011","unstructured":"Beebe, N.L., Clark, J.G., Dietrich, G.B., Ko, M.S., Ko, D.: Post-retrieval search hit clustering to improve information retrieval effectiveness: two digital forensics case studies. Decis. Support Syst. 51(4), 732\u2013744 (2011)","journal-title":"Decis. Support Syst."},{"key":"3_CR4","unstructured":"Bogen, A.C., Dampier, D.A.: Preparing for large-scale investigations with case domain modeling. In: 5th DFRWS Conference Proceedings, pp. 1\u201310 (2005)"},{"key":"3_CR5","doi-asserted-by":"crossref","unstructured":"Breitinger, F., Roussev, V.: Automated evaluation of approximate matching algorithms on real data. Digit. Investig. 11, S10\u2013S17 (2014)","DOI":"10.1016\/j.diin.2014.03.002"},{"key":"3_CR6","unstructured":"Carrier, B.: Open source digital forensics tools: the legal argument (2002)"},{"key":"3_CR7","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1016\/j.diin.2017.08.002","volume":"22","author":"E Casey","year":"2017","unstructured":"Casey, E., Barnum, S., Griffith, R., Snyder, J., van Beek, H., Nelson, A.: Advancing coordinated cyber-investigations and tool interoperability using a community developed specification language. Digit. Investig. 22, 14\u201345 (2017)","journal-title":"Digit. Investig."},{"key":"3_CR8","unstructured":"Forensic Science Regulator, UK: Forensic science providers: validation (FSR-G-201) (2020), https:\/\/www.gov.uk\/government\/publications\/forensic-science-providers-validation"},{"key":"3_CR9","unstructured":"Forensic Science Regulator, UK: Method Validation in Digital Forensics FSR-G-218 (2020), https:\/\/www.gov.uk\/government\/publications\/method-validation-in-digital-forensics"},{"key":"3_CR10","doi-asserted-by":"publisher","first-page":"S2","DOI":"10.1016\/j.diin.2009.06.016","volume":"6","author":"S Garfinkel","year":"2009","unstructured":"Garfinkel, S., Farrell, P., Roussev, V., Dinolt, G.: Bringing science to digital forensics with standardized forensic corpora. Digit. Investig. 6, S2\u2013S11 (2009)","journal-title":"Digit. Investig."},{"key":"3_CR11","doi-asserted-by":"publisher","first-page":"S64","DOI":"10.1016\/j.diin.2010.05.009","volume":"7","author":"SL Garfinkel","year":"2010","unstructured":"Garfinkel, S.L.: Digital forensics research: the next 10 years. Digit. Investig. 7, S64\u2013S73 (2010)","journal-title":"Digit. Investig."},{"key":"3_CR12","doi-asserted-by":"crossref","unstructured":"Garfinkel, S.L.: Digital media triage with bulk data analysis and bulk_extractor. Comput. Secur. 32(C), 56\u201372 (2013)","DOI":"10.1016\/j.cose.2012.09.011"},{"key":"3_CR13","doi-asserted-by":"publisher","first-page":"S12","DOI":"10.1016\/j.diin.2009.06.015","volume":"6","author":"Y Guo","year":"2009","unstructured":"Guo, Y., Slay, J., Beckett, J.: Validation and verification of computer forensic software tools\u2014searching function. Digit. Investig. 6, S12\u2013S22 (2009)","journal-title":"Digit. Investig."},{"key":"3_CR14","unstructured":"Hansen, J.: The study of keyword search in open source search engines and digital forensics tools with respect to the needs of cyber crime investigations. Master\u2019s thesis, NTNU (2017)"},{"key":"3_CR15","unstructured":"Hansen, J., Porter, K., Shalaginov, A., Franke, K.: Comparing open source search engine functionality, efficiency and effectiveness with respect to digital forensic search. In: Proceedings of the 11th Norwegian Information Security Conference, 19\u201320, September 2018. NISK Journal, e-ISSN 1894-7735 (2018)"},{"key":"3_CR16","doi-asserted-by":"crossref","unstructured":"Hargreaves, C., van Beek, H., Casey, E.: SOLVE-IT: a proposed digital forensic knowledge base inspired by MITRE ATT &CK. FSI: Digit. Investig. 52 (2025)","DOI":"10.1016\/j.fsidi.2025.301864"},{"key":"3_CR17","doi-asserted-by":"crossref","unstructured":"Hargreaves, C., Breitinger, F., Dowthwaite, L., Webb, H., Scanlon, M.: Dfpulse: the 2024 digital forensic practitioner survey. FSI: Digit. Investig. 51 (2024)","DOI":"10.1016\/j.fsidi.2024.301844"},{"key":"3_CR18","doi-asserted-by":"crossref","unstructured":"Hargreaves, C., Nelson, A., Casey, E.: An abstract model for digital forensic analysis tools-a foundation for systematic error mitigation analysis. FSI: Digit. Investig. 48 (2024)","DOI":"10.1016\/j.fsidi.2023.301679"},{"key":"3_CR19","doi-asserted-by":"publisher","first-page":"S69","DOI":"10.1016\/j.diin.2012.05.006","volume":"9","author":"C Hargreaves","year":"2012","unstructured":"Hargreaves, C., Patterson, J.: An automated timeline reconstruction approach for digital forensic investigations. Digit. Investig. 9, S69\u2013S79 (2012)","journal-title":"Digit. Investig."},{"key":"3_CR20","doi-asserted-by":"crossref","unstructured":"Imhof, G., Kanta, A., Scanlon, M.: Context-based password cracking dictionary expansion using generative pre-trained transformers. In: 2024 Cyber Research Conference - Ireland (Cyber-RCI), pp.\u00a01\u20136 (2024)","DOI":"10.1109\/Cyber-RCI60769.2024.10939663"},{"key":"3_CR21","doi-asserted-by":"crossref","unstructured":"Kanta, A., Coisel, I., Scanlon, M.: PCWQ: a framework for evaluating password cracking wordlist quality. In: Gladyshev, P., Goel, S., James, J., Markowsky, G., Johnson, D. (eds.) Digital Forensics and Cyber Crime, pp. 159\u2013175. Springer, Cham (2022)","DOI":"10.1007\/978-3-031-06365-7_10"},{"key":"3_CR22","doi-asserted-by":"crossref","unstructured":"Kanta, A., Coisel, I., Scanlon, M.: Harder, better, faster, stronger: Optimising the performance of context-based password cracking dictionaries. FSI: Digit. Investig. 44 (2023)","DOI":"10.1016\/j.fsidi.2023.301507"},{"key":"3_CR23","first-page":"103809","volume":"84","author":"A Kanta","year":"2024","unstructured":"Kanta, A., Coisel, I., Scanlon, M.: A comprehensive evaluation on the benefits of context based password cracking for digital forensics. J. Inf. Secur. Appl. 84, 103809 (2024)","journal-title":"J. Inf. Secur. Appl."},{"key":"3_CR24","unstructured":"Klimt, B., Yang, Y.: Introducing the Enron Corpus. In: CEAS, vol.\u00a045 (2004)"},{"key":"3_CR25","doi-asserted-by":"crossref","unstructured":"Nizam, S.H.S., Ab\u00a0Rahman, N.H., Cahyani, N.D.W.: Keyword indexing and searching tool (kist). IJoICT 6(1), 23\u201330 (2020)","DOI":"10.21108\/IJOICT.2020.61.481"},{"key":"3_CR26","doi-asserted-by":"publisher","first-page":"47566","DOI":"10.1109\/ACCESS.2018.2867466","volume":"6","author":"D Quick","year":"2018","unstructured":"Quick, D., Choo, K.K.R.: IoT device forensics and data reduction. IEEE Access 6, 47566\u201347574 (2018)","journal-title":"IEEE Access"},{"key":"3_CR27","doi-asserted-by":"crossref","unstructured":"Richard, I., Roussev, V.: Digital forensic tools: the next generation. In: Digital Crime and Forensic Science in Cyberspace, pp. 75\u201390. IGI Global (2006)","DOI":"10.4018\/978-1-59140-872-7.ch004"},{"key":"3_CR28","doi-asserted-by":"publisher","first-page":"S34","DOI":"10.1016\/j.diin.2011.05.005","volume":"8","author":"V Roussev","year":"2011","unstructured":"Roussev, V.: An evaluation of forensic similarity hashes. Digit. Investig. 8, S34\u2013S41 (2011)","journal-title":"Digit. Investig."},{"key":"3_CR29","doi-asserted-by":"crossref","unstructured":"Scanlon, M., Breitinger, F., Hargreaves, C., Hilgert, J.N., Sheppard, J.: ChatGPT for digital forensic investigation: the good, the bad, and the unknown. FSI: Digit. Investig. October 2023","DOI":"10.20944\/preprints202307.0766.v1"},{"issue":"2","key":"3_CR30","doi-asserted-by":"publisher","first-page":"116","DOI":"10.1016\/j.diin.2013.04.003","volume":"10","author":"A Shaw","year":"2013","unstructured":"Shaw, A., Browne, A.: A practical and robust approach to coping with large volumes of data submitted for digital forensic examination. Digit. Investig. 10(2), 116\u2013128 (2013)","journal-title":"Digit. Investig."},{"key":"3_CR31","unstructured":"Ur, B., et al.: Measuring real-world accuracies and biases in modeling password Guessability. In: 24th USENIX Conference Proceedings, pp. 463\u2013481 (2015)"},{"key":"3_CR32","unstructured":"Webber, W.: Evaluating the effectiveness of keyword search. IEEE Data Eng. Bull. 33, 54\u201359 (2010)"}],"container-title":["Lecture Notes in Computer Science","Availability, Reliability and Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-00635-6_3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T19:18:41Z","timestamp":1757359121000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-00635-6_3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783032006370","9783032006356"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-00635-6_3","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"9 August 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ARES","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Availability, Reliability and Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Ghent","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Belgium","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 August 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 August 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ares-12025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/2025.ares-conference.eu","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}