{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,6,21]],"date-time":"2024-06-21T17:40:03Z","timestamp":1718991603644},"reference-count":81,"publisher":"Elsevier","isbn-type":[{"value":"9780128053034","type":"print"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1016\/b978-0-12-805303-4.00011-3","type":"book-chapter","created":{"date-parts":[[2017,1,7]],"date-time":"2017-01-07T23:41:45Z","timestamp":1483832505000},"page":"163-184","source":"Crossref","is-referenced-by-count":6,"title":["Forensic Visualization"],"prefix":"10.1016","author":[{"given":"C.","family":"Tassone","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"B.","family":"Martini","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"K.-K.R.","family":"Choo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"issue":"6","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0010","doi-asserted-by":"crossref","first-page":"132","DOI":"10.1145\/1516046.1516080","article-title":"Forensics of computers and handheld devices identical or fraternal twins?","volume":"52","author":"Lim","year":"2009","journal-title":"Commun. ACM"},{"issue":"6","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0015","doi-asserted-by":"crossref","first-page":"1378","DOI":"10.1016\/j.future.2013.02.001","article-title":"Digital droplets: Microsoft Skydrive forensic data remnants","volume":"29","author":"Quick","year":"2013","journal-title":"Futur. Gener. Comput. Syst."},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0020","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1016\/j.diin.2013.02.003","article-title":"Dropbox analysis: data remnants on user machines","volume":"10","author":"Quick","year":"2013","journal-title":"Digit. Investig."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0025","series-title":"Communications Report 2014\u201315","author":"Australian Communications and Media Authority","year":"2015"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0030","series-title":"Smartphone Ownership\u20142013 Update","author":"Smith","year":"2013"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0035","series-title":"Reducing Mobile Phone Theft and Improving Security","author":"Behavioural Insights Team","year":"2014"},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0040","doi-asserted-by":"crossref","first-page":"111","DOI":"10.1080\/0163660X.2013.751651","article-title":"Mobile phones: uplifting weak and failed states","volume":"36","author":"Rotberg","year":"2013","journal-title":"Wash. Q."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0045","series-title":"Community Policing in Australia","first-page":"67","article-title":"Harnessing information and communications technologies in community policing","author":"Choo","year":"2011"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0050","series-title":"What is Forensic Computing?","author":"Mckemmish","year":"1999"},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0055","doi-asserted-by":"crossref","first-page":"273","DOI":"10.1016\/j.diin.2014.09.002","article-title":"Impacts of increasing volume of digital forensic data: a survey and future research challenges","volume":"11","author":"Quick","year":"2014","journal-title":"Digit. Investig."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0060","article-title":"The enhanced digital investigation process model","author":"Baryamureeba","year":"2004"},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0065","first-page":"1","article-title":"An examination of digital forensic models","volume":"1","author":"Reith","year":"2002","journal-title":"Int. J. Digit. Evid."},{"issue":"10","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0070","first-page":"163","article-title":"Mapping process of digital forensic investigation framework","volume":"8","author":"Selamat","year":"2008","journal-title":"Int. J. Comput. Netw. Secur."},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0075","doi-asserted-by":"crossref","first-page":"147","DOI":"10.1016\/j.diin.2005.04.002","article-title":"A hierarchical, objectives-based framework for the digital investigations process","volume":"2","author":"Beebe","year":"2005","journal-title":"Digit. Investig."},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0080","doi-asserted-by":"crossref","first-page":"23","DOI":"10.1016\/j.diin.2011.05.016","article-title":"A comparison of forensic evidence recovery techniques for a windows mobile smart phone","volume":"8","author":"Grispos","year":"2011","journal-title":"Digit. Investig."},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0085","first-page":"1","article-title":"Forensic data recovery from flash memory","volume":"1","author":"Breeuwsma","year":"2007","journal-title":"Small Scale Digit. Device Forensics J."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0090","series-title":"Anti-Forensics and the Digital Investigator","author":"Kessler","year":"2007"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0095","first-page":"483","article-title":"Overcoming impediments to cell phone forensics","author":"Jansen","year":"2008"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0100","doi-asserted-by":"crossref","first-page":"S64","DOI":"10.1016\/j.diin.2010.05.009","article-title":"Digital forensics research: the next 10 years","volume":"7","author":"Garfinkel","year":"2010","journal-title":"Digit. Investig."},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0105","doi-asserted-by":"crossref","first-page":"44","DOI":"10.1016\/j.diin.2013.03.004","article-title":"An empirical comparison of data recovered from mobile forensic toolkits","volume":"10","author":"Glisson","year":"2013","journal-title":"Digit. Investig."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0110","series-title":"Mobile Device Forensics: A Snapshot","author":"Tassone","year":"2013"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0115","first-page":"195","article-title":"Blackberry IPD parsing for open source forensics","author":"Fairbanks","year":"2009"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0120","doi-asserted-by":"crossref","first-page":"S12","DOI":"10.1016\/j.diin.2009.06.015","article-title":"Validation and verification of computer forensic software tools-searching function","volume":"6","author":"Guo","year":"2009","journal-title":"Digit. Investig."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0125","first-page":"163","article-title":"Forensic information acquisition in mobile networks","author":"Irwin","year":"2009"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0130","first-page":"5","article-title":"Mobile forensics: guidelines and challenges in data preservation and acquisition","author":"Raghav","year":"2009"},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0135","doi-asserted-by":"crossref","first-page":"127","DOI":"10.1080\/10618600.1994.10474635","article-title":"Graphically displaying text","volume":"3","author":"Eick","year":"1994","journal-title":"J. Comput. Graph. Stat."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0140","unstructured":"M. Friendly, D.J. Denis, Milestones in the History of Thematic Cartography, Statistical Graphics, and Data Visualization, Retrieved, 5(11), 2001, p. 2011."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0145","series-title":"Illuminating the Path: The Research and Development Agenda for Visual Analytics","author":"Thomas","year":"2005"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0150","first-page":"71","article-title":"A visual tool for forensic analysis of mobile phone traffic","author":"Catanese","year":"2010"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0155","first-page":"155","article-title":"Technical challenges and directions for digital forensics","author":"Mohay","year":"2005"},{"issue":"1-2","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0160","doi-asserted-by":"crossref","first-page":"8","DOI":"10.1016\/j.csi.2007.03.002","article-title":"An open source forensic tool to visualize digital evidence","volume":"30","author":"Vlastos","year":"2008","journal-title":"Comput. Stand. Interfaces"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0165","series-title":"Ubiquitous Information Technologies and Applications","first-page":"453","article-title":"Visual analysis of portable computer forensic data","author":"Kim","year":"2013"},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0170","first-page":"74","article-title":"Visualization techniques for digital forensics: a survey","volume":"2","author":"Chavhan","year":"2012","journal-title":"Int. J. Adv. Comp. Res."},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0175","doi-asserted-by":"crossref","first-page":"71","DOI":"10.1145\/1113034.1113073","article-title":"Improving the computer forensic analysis process through visualization","volume":"49","author":"Teelink","year":"2006","journal-title":"Commun. ACM"},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0180","doi-asserted-by":"crossref","first-page":"24","DOI":"10.1109\/2945.841119","article-title":"Graph visualization and navigation in information visualization: a survey","volume":"6","author":"Herman","year":"2000","journal-title":"IEEE Trans. Vis. Comput. Graph."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0185","first-page":"758","article-title":"A discussion of visualization techniques for the analysis of digital evidence","author":"Schrenk","year":"2011"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0190","first-page":"57","article-title":"Visualization is better! A comparative evaluation","author":"Goodall","year":"2009"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0195","doi-asserted-by":"crossref","DOI":"10.1109\/ARES.2011.36","article-title":"Digital forensics infovis: an implementation of a process for visualisation of digital evidence","author":"Osborne","year":"2011"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0200","doi-asserted-by":"crossref","first-page":"S78","DOI":"10.1016\/j.diin.2009.06.008","article-title":"Computer forensic timeline visualization tool","volume":"6","author":"Olsson","year":"2009","journal-title":"Digit. Investig."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0205","first-page":"1012","article-title":"Enhancing computer forensics investigation through visualization and data exploitation","author":"Osborne","year":"2009"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0210","first-page":"3224","article-title":"The effect of providing visualizations in privacy policies on trust in data privacy and security","author":"Becker","year":"2014"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0215","first-page":"96","article-title":"Visualization and management of digital forensics data","author":"Francia","year":"2006"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0220","first-page":"123","article-title":"Pianola\u2014visualization of multivariate time-series security event data","author":"Thomson","year":"2013"},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0225","doi-asserted-by":"crossref","first-page":"401","DOI":"10.1016\/j.cag.2007.01.030","article-title":"Visualizing time-oriented data\u2014a systematic view","volume":"31","author":"Aigner","year":"2007","journal-title":"Comput. Graph."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0230","first-page":"192","article-title":"Foundations for visual forensic analysis","author":"Teerlink","year":"2006"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0235","first-page":"629","article-title":"The Explore, Investigate and Correlate' (Eic) conceptual framework for digital forensics information visualization","author":"Osborne","year":"2010"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0240","series-title":"The Explore, Investigate and Correlate Process for Information Visualization in Digital Forensics","author":"Osborne","year":"2012"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0245","first-page":"1","article-title":"State-of-the-art report of visual analysis for event detection in text data streams","author":"Wanner","year":"2014"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0250","series-title":"Survey of visualization techniques: visualization of time-oriented data","author":"Aigner","year":"2011"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0255","first-page":"41","article-title":"Visualization of streaming data: observing change and context in information visualization techniques","author":"Krstajic","year":"2013"},{"issue":"7","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0260","doi-asserted-by":"crossref","first-page":"913","DOI":"10.1109\/TVCG.2010.110","article-title":"Visualization of the static aspects of software: a survey","volume":"17","author":"Caserta","year":"2011","journal-title":"IEEE Trans. Vis. Comput. Graph."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0265","article-title":"Evaluation of opinion visualization techniques","author":"Shamim","year":"2014","journal-title":"Inf. Vis."},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0270","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1007\/s00291-012-0297-0","article-title":"Survey of methods to visualize alternatives in multiple criteria decision making problems","volume":"36","author":"Miettinen","year":"2014","journal-title":"OR Spectr."},{"issue":"5","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0275","doi-asserted-by":"crossref","first-page":"852","DOI":"10.1007\/s11390-013-1383-8","article-title":"A survey of visual analytics techniques and applications: state-of-the-art research and future challenges","volume":"28","author":"Sun","year":"2013","journal-title":"J. Comput. Sci. Technol."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0280","article-title":"The use of traditional and computer-based visualization in archaeology: a user survey","author":"Bernardes","year":"2012"},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0285","doi-asserted-by":"crossref","first-page":"393","DOI":"10.1109\/TVCG.2010.79","article-title":"The design space of implicit hierarchy visualization: a survey","volume":"17","author":"Schulz","year":"2011","journal-title":"IEEE Trans. Vis. Comput. Graph."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0290","first-page":"1","article-title":"Visualization techniques for application in interactive product configuration","author":"Pleuss","year":"2011"},{"issue":"6","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0295","doi-asserted-by":"crossref","first-page":"476","DOI":"10.1002\/widm.1071","article-title":"Seeing beyond reading: a survey on visual text analytics","volume":"2","author":"Alencar","year":"2012","journal-title":"WIREs Data Min. Knowl. Discovery"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0300","series-title":"Visualization techniques: which is the most appropriate in the process of knowledge discovery in data base?","author":"Dias","year":"2012"},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0305","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1002\/wics.1285","article-title":"Document visualization: an overview of current research","volume":"6","author":"Gan","year":"2014","journal-title":"Wiley Interdiscip. Rev. Comput. Stat."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0310","article-title":"Survey of multidimensional visualization techniques","author":"Abdelaziz","year":"2012"},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0315","doi-asserted-by":"crossref","first-page":"404","DOI":"10.1002\/sec.324","article-title":"A survey of security visualization for computer network logs","volume":"5","author":"Zhang","year":"2012","journal-title":"Secur. Commun. Netw."},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0320","doi-asserted-by":"crossref","first-page":"87","DOI":"10.1177\/1473871611424815","article-title":"Innovation trajectories for information visualizations: comparing treemaps, cone trees, and hyperbolic trees","volume":"11","author":"Shneiderman","year":"2012","journal-title":"Inf. Vis."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0325","article-title":"Visualizing translation variation of Othello: a survey of text visualization and analysis tools","author":"Geng","year":"2011"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0330","article-title":"What\u2019s going on? How twitter and online news can work in synergy to increase situational awareness","author":"Rohrdantz","year":"2012"},{"issue":"6","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0335","doi-asserted-by":"crossref","first-page":"927","DOI":"10.1109\/TVCG.2010.162","article-title":"Graphical perception of multiple time series","volume":"16","author":"Javed","year":"2010","journal-title":"IEEE Trans. Vis. Comput. Graph."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0340","first-page":"3217","article-title":"Interactive horizon graphs: improving the compact visualization of multiple time series","author":"Perin","year":"2013"},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0345","doi-asserted-by":"crossref","first-page":"28","DOI":"10.1109\/MCG.2015.51","article-title":"Characterizing visualization insights from quantified selfers' personal data presentations","volume":"35","author":"Eun Kyoung","year":"2015","journal-title":"IEEE Comput. Graph. Appl."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0350","first-page":"46","article-title":"A survey on goal-oriented visualization of clone data","author":"Basit","year":"2015"},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0355","doi-asserted-by":"crossref","first-page":"579","DOI":"10.1109\/TVCG.2015.2466992","article-title":"Evaluation of parallel coordinates: overview, categorization and guidelines for future research","volume":"22","author":"Johansson","year":"2016","journal-title":"IEEE Trans. Vis. Comput. Graph."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0360","first-page":"3","article-title":"When is digital evidence forensically sound?","volume":"vol. 285","author":"Mckemmish","year":"2008"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0365","article-title":"An event-based digital forensic investigation framework","author":"Carrier","year":"2004"},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0370","doi-asserted-by":"crossref","first-page":"103","DOI":"10.1002\/jhbs.20078","article-title":"The early origins and development of the scatterplot","volume":"41","author":"Friendly","year":"2005","journal-title":"J. Hist. Behav. Sci."},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0375","doi-asserted-by":"crossref","first-page":"69","DOI":"10.1007\/BF01898350","article-title":"The plane with parallel coordinates","volume":"1","author":"Inselberg","year":"1985","journal-title":"Vis. Comput."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0380","first-page":"297","article-title":"A new metric on parallel coordinates and its application for high-dimensional data visualization","author":"Van Long","year":"2015"},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00011-3_bb0385","doi-asserted-by":"crossref","first-page":"9","DOI":"10.1109\/2945.981848","article-title":"Themeriver: visualizing theme changes over time","volume":"8","author":"Havre","year":"2002","journal-title":"IEEE Trans. Vis. Comput. Graph."},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0390","series-title":"Cone trees: animated 3d visualizations of hierarchical information","author":"Robertson","year":"1991"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0395","first-page":"39","article-title":"Glyph-based visualization: foundations, design guidelines, techniques and applications","author":"Borgo","year":"2013"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0400","first-page":"21","article-title":"A user-centered look at glyph-based security visualization","author":"Komlodi","year":"2005"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0405","series-title":"Docuburst: Visualizing Document Content Using Language Structure","first-page":"1039","author":"Collins","year":"2009"},{"key":"10.1016\/B978-0-12-805303-4.00011-3_bb0410","series-title":"Linked Data and User Interaction","first-page":"66","article-title":"Semantically guided, situation-aware literature research","author":"Heuss","year":"2015"}],"container-title":["Contemporary Digital Forensic Investigations of Cloud and Mobile Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:B9780128053034000113?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:B9780128053034000113?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2024,6,21]],"date-time":"2024-06-21T17:10:06Z","timestamp":1718989806000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/B9780128053034000113"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9780128053034"],"references-count":81,"URL":"https:\/\/doi.org\/10.1016\/b978-0-12-805303-4.00011-3","relation":{},"subject":[],"published":{"date-parts":[[2017]]}}}