{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,6]],"date-time":"2024-09-06T11:31:00Z","timestamp":1725622260718},"publisher-location":"Berlin, Heidelberg","reference-count":10,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642236013"},{"type":"electronic","value":"9783642236020"}],"license":[{"start":{"date-parts":[[2011,1,1]],"date-time":"2011-01-01T00:00:00Z","timestamp":1293840000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011]]},"DOI":"10.1007\/978-3-642-23602-0_14","type":"book-chapter","created":{"date-parts":[[2011,10,18]],"date-time":"2011-10-18T04:31:35Z","timestamp":1318912295000},"page":"159-167","source":"Crossref","is-referenced-by-count":3,"title":["Live Memory Acquisition through FireWire"],"prefix":"10.1007","author":[{"given":"Lei","family":"Zhang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lianhai","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ruichao","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shuhui","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yang","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"issue":"3","key":"14_CR1","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1145\/1368506.1368519","volume":"42","author":"E. Casey","year":"2008","unstructured":"Casey, E.: The impact of full disk encryption on digital forensics. ACM SIGOPS Operating Systems Review\u00a042(3), 93\u201398 (2008)","journal-title":"ACM SIGOPS Operating Systems Review"},{"key":"14_CR2","volume-title":"Computer Evidence: Collection & Preservation","author":"C.L.. Brown","year":"2005","unstructured":"Brown, C.L.: Computer Evidence: Collection & Preservation. Charles River Media, Hingham (2005)"},{"issue":"2","key":"14_CR3","doi-asserted-by":"publisher","first-page":"83","DOI":"10.1007\/s11416-007-0070-0","volume":"4","author":"N. Ruff","year":"2008","unstructured":"Ruff, N.: Windows memory forensics. Journal in Computer Virology\u00a04(2), 83\u2013100 (2008)","journal-title":"Journal in Computer Virology"},{"key":"14_CR4","doi-asserted-by":"publisher","first-page":"30","DOI":"10.1109\/MSP.2009.43","volume":"7","author":"B. Hay","year":"2009","unstructured":"Hay, B., Bishop, M., Nance, K.: Live Analysis: Progress and Challenges. IEEE Security and Privacy\u00a07, 30\u201337 (2009)","journal-title":"IEEE Security and Privacy"},{"key":"14_CR5","unstructured":"Rutkowska, J.: Beyond The CPU: Defeating Hardware Based RAM Acquisition Tools (Part I: AMD case), \n                  \n                    http:\/\/invisiblethings.org\/papers\/cheating-hardware-memoryacquisition-updated.ppt"},{"issue":"1","key":"14_CR6","doi-asserted-by":"publisher","first-page":"50","DOI":"10.1016\/j.diin.2003.12.001","volume":"1","author":"B. Carrier","year":"2004","unstructured":"Carrier, B., Grand, J.: A Hardware-based Memory Acquisition Procedure for Digital Investigations. Digital Investigation\u00a01(1), 50\u201360 (2004)","journal-title":"Digital Investigation"},{"key":"14_CR7","unstructured":"Dornseif, M.: FireWire - all your memory are belong to us, \n                  \n                    http:\/\/md.hudora.de\/presentations\/"},{"key":"14_CR8","unstructured":"Boileau, A.: Hit by a Bus: Physical Access Attacks with FireWire. Security-Assessment.com, \n                  \n                    http:\/\/www.security-assessment.com\/files\/presentations\/ab_firewire_rux2k6-final.pdf"},{"key":"14_CR9","unstructured":"Upper Memory Area Memory dumping over FireWire\u2014UMA issues, \n                  \n                    http:\/\/ntsecurity.nu\/onmymind\/2006\/2006-09-02.html"},{"key":"14_CR10","doi-asserted-by":"publisher","first-page":"26","DOI":"10.1016\/j.diin.2008.05.003","volume":"5","author":"B. Dolan-Gavitt","year":"2008","unstructured":"Dolan-Gavitt, B.: Forensic analysis of the Windows registry in memory. Digital Investigation\u00a05(supplement 1), 26\u201332 (2008)","journal-title":"Digital Investigation"}],"container-title":["Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","Forensics in Telecommunications, Information, and Multimedia"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-23602-0_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,4,12]],"date-time":"2019-04-12T23:39:46Z","timestamp":1555112386000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-23602-0_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011]]},"ISBN":["9783642236013","9783642236020"],"references-count":10,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-23602-0_14","relation":{},"ISSN":["1867-8211","1867-822X"],"issn-type":[{"type":"print","value":"1867-8211"},{"type":"electronic","value":"1867-822X"}],"subject":[],"published":{"date-parts":[[2011]]}}}