{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T14:13:10Z","timestamp":1779372790548,"version":"3.53.1"},"reference-count":39,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Expert Systems with Applications"],"published-print":{"date-parts":[[2026,9]]},"DOI":"10.1016\/j.eswa.2026.132859","type":"journal-article","created":{"date-parts":[[2026,5,14]],"date-time":"2026-05-14T11:25:02Z","timestamp":1778757902000},"page":"132859","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["UFA: An LLM-driven UAV forensic intelligent agent for low-altitude public security"],"prefix":"10.1016","volume":"327","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-0284-2083","authenticated-orcid":false,"given":"Han","family":"Li","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-6574-8193","authenticated-orcid":false,"given":"Jinyu","family":"Ma","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-4681-8572","authenticated-orcid":false,"given":"Zheng","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-5485-5182","authenticated-orcid":false,"given":"Liangfeng","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-0897-6208","authenticated-orcid":false,"given":"Ruiqi","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8982-8503","authenticated-orcid":false,"given":"Jianliang","family":"Ai","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.eswa.2026.132859_bib0001","series-title":"2025\u202fIEEE International workshop on radio frequency and antenna technologies (iWRF&AT)","first-page":"392","article-title":"Intelligent UAV base station placement with generative AI and retrieval-augmented LLMs","author":"Afzal","year":"2025"},{"issue":"17","key":"10.1016\/j.eswa.2026.132859_bib0002","doi-asserted-by":"crossref","first-page":"6486","DOI":"10.3390\/s22176486","article-title":"A comprehensive collection and analysis model for the drone forensics field","volume":"22","author":"Alotaibi","year":"2022","journal-title":"Sensors"},{"key":"10.1016\/j.eswa.2026.132859_bib0003","series-title":"2017 Seventh international conference on emerging security technologies (EST)","first-page":"91","article-title":"Forensic analysis of popular UAV systems","author":"Barton","year":"2017"},{"key":"10.1016\/j.eswa.2026.132859_bib0004","series-title":"Proceedings of the 1st ACM workshop on large AI systems and models with privacy and safety analysis","first-page":"89","article-title":"Towards large language model (LLM) forensics using LLM-based invocation log analysis","author":"Chernyshev","year":"2023"},{"key":"10.1016\/j.eswa.2026.132859_bib0005","unstructured":"Civil Aviation Administration of China (CAAC) (2022). MH\/T 4053-2022: civil unmanned aerial vehicle air traffic management information service system data interface specification. Standard. Available at: https:\/\/www.caac.gov.cn\/XXGK\/XXGK\/BZGF\/HYBZ\/202207\/P020240719348326218103.pdf."},{"key":"10.1016\/j.eswa.2026.132859_bib0006","doi-asserted-by":"crossref","first-page":"S3","DOI":"10.1016\/j.diin.2017.06.013","article-title":"DROP (DRone Open source parser) your drone: forensic analysis of the DJI Phantom III","volume":"22","author":"Clark","year":"2017","journal-title":"Digital Investigation"},{"key":"10.1016\/j.eswa.2026.132859_bib0007","doi-asserted-by":"crossref","first-page":"111505","DOI":"10.1109\/ACCESS.2024.3426028","article-title":"Forensic examination of drones: A comprehensive study of frameworks, challenges, and machine learning applications","volume":"12","author":"Debas","year":"2024","journal-title":"IEEE Access"},{"key":"10.1016\/j.eswa.2026.132859_bib0008","unstructured":"Dubey, A., Jauhri, A., Pandey, A. et al. (2024). The Llama 3 herd of models. 2407.21783."},{"key":"10.1016\/j.eswa.2026.132859_bib0009","unstructured":"Gemma Team, Kamath, A., Ferret, J. et al. (2025). Gemma 3 technical report. 2503.19786."},{"key":"10.1016\/j.eswa.2026.132859_bib0010","unstructured":"General Administration of Sport of China (2024). Model aircraft flight management measures. Available at: https:\/\/www.sport.gov.cn\/gdnps\/files\/c28467306\/28472565.pdf."},{"key":"10.1016\/j.eswa.2026.132859_bib0011","unstructured":"GLM Team, Zeng, A., Xu, B. et al. (2024). ChatGLM: A family of large language models from GLM-130b to GLM-4 all tools. arXiv preprint arXiv:2406.12793."},{"issue":"12","key":"10.1016\/j.eswa.2026.132859_bib0012","doi-asserted-by":"crossref","first-page":"327","DOI":"10.3390\/computers13120327","article-title":"Exploring data analysis methods in generative models: from fine-tuning to RAG implementation","volume":"13","author":"Gu\u0163u","year":"2024","journal-title":"Computers"},{"key":"10.1016\/j.eswa.2026.132859_bib0013","doi-asserted-by":"crossref","first-page":"46171","DOI":"10.1109\/ACCESS.2025.3550145","article-title":"Enhancing the precision and interpretability of retrieval-augmented generation (RAG) in legal technology: A survey","volume":"13","author":"Hindi","year":"2025","journal-title":"IEEE Access"},{"issue":"8044","key":"10.1016\/j.eswa.2026.132859_bib0014","doi-asserted-by":"crossref","first-page":"29","DOI":"10.1038\/d41586-024-04167-7","article-title":"The small-drone revolution is coming-scientists need to ensure it will be safe","volume":"637","author":"Huang","year":"2025","journal-title":"Nature"},{"key":"10.1016\/j.eswa.2026.132859_bib0015","unstructured":"Hui, B., Yang, J., Cui, Z. et al. (2024). Qwen2.5-coder technical report. 2409.12186."},{"key":"10.1016\/j.eswa.2026.132859_bib0016","series-title":"5th EAI international conference on management of manufacturing systems","first-page":"115","article-title":"UAV forensics: DJI Mavic air noninvasive data extraction and analysis","author":"Husnjak","year":"2021"},{"key":"10.1016\/j.eswa.2026.132859_bib0017","series-title":"2025\u202fIEEE 49th annual computers, software, and applications conference (COMPSAC)","first-page":"1067","article-title":"Evaluating the reliability of digital forensic evidence discovered by large language model: A case study","author":"Khatiwala","year":"2025"},{"key":"10.1016\/j.eswa.2026.132859_bib0018","unstructured":"Lei, G., Liang, T., Ping, Y. et al. (2025). Enhancing low-altitude airspace security: MLLM-enabled UAV intent recognition. 2509.06312."},{"key":"10.1016\/j.eswa.2026.132859_bib0019","article-title":"Research on the application of large models for ship navigation decisionmaking","author":"Liu","year":"2024","journal-title":"Chinese Journal of Ship Research"},{"key":"10.1016\/j.eswa.2026.132859_bib0020","series-title":"Advances in information and computer security","first-page":"377","article-title":"GRYPHON: Drone forensics in dataflash and telemetry logs","author":"Mantas","year":"2019"},{"key":"10.1016\/j.eswa.2026.132859_bib0021","doi-asserted-by":"crossref","DOI":"10.1016\/j.jnca.2023.103670","article-title":"A survey of UAV-based data collection: Challenges, solutions and future perspectives","volume":"216","author":"Messaoudi","year":"2023","journal-title":"Journal of Network and Computer Applications"},{"key":"10.1016\/j.eswa.2026.132859_bib0022","unstructured":"Mukherjee, K., & Kantarcioglu, M. (2025). LLM-driven provenance forensics for threat investigation and detection. 2508.21323."},{"key":"10.1016\/j.eswa.2026.132859_bib0023","unstructured":"Ren, Y., & Sutherland, D. J. (2024). Learning dynamics of LLM finetuning. 2407.10490."},{"key":"10.1016\/j.eswa.2026.132859_bib0024","doi-asserted-by":"crossref","first-page":"52","DOI":"10.1016\/j.diin.2019.07.002","article-title":"A comprehensive micro unmanned aerial vehicle (UAV\/drone) forensic framework","volume":"30","author":"Renduchintala","year":"2019","journal-title":"Digital Investigation"},{"key":"10.1016\/j.eswa.2026.132859_bib0025","unstructured":"Roder, A., Choo, K.-K. R., & Le-Khac, N.-A. (2018). Unmanned aerial vehicle forensic investigation process: DJI Phantom 3 drone as a case study. 1804.08649."},{"key":"10.1016\/j.eswa.2026.132859_bib0026","series-title":"Ndss","article-title":"Drone security and the mysterious case of DJI\u2019s DroneID","author":"Schiller","year":"2023"},{"key":"10.1016\/j.eswa.2026.132859_bib0027","series-title":"2022 International conference on data science and its applications (ICoDSA)","first-page":"53","article-title":"Named entity recognition for drone forensic using BERT and DistilBERT","author":"Silalahi","year":"2022"},{"key":"10.1016\/j.eswa.2026.132859_bib0028","unstructured":"State Administration for Market Regulation, & Standardization Administration of China (2023). GB 42590-2023: Safety requirements for civil unmanned aircraft system. Standard. Available at: https:\/\/openstd.samr.gov.cn\/bzgk\/gb\/newGbInfo?hcno=0DC41035BA23EF2C5B94E6482492AF1E."},{"key":"10.1016\/j.eswa.2026.132859_bib0029","unstructured":"State Council of the People\u2019s Republic of China (2023). Provisional regulations on the flight management of unmanned aerial vehicles. Available at: https:\/\/www.gov.cn\/zhengce\/zhengceku\/202306\/content_6888800.htm."},{"key":"10.1016\/j.eswa.2026.132859_bib0030","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103340","article-title":"Unmanned aerial vehicle (UAV) forensics: The good, the bad, and the unaddressed","volume":"132","author":"Studiawan","year":"2023","journal-title":"Computers & Security"},{"key":"10.1016\/j.eswa.2026.132859_bib0031","article-title":"Drone forensics in law enforcement: Assessing utilisation, challenges, and emerging necessities","volume":"55","author":"Thantilage","year":"2025","journal-title":"Forensic Science International: Digital Investigation"},{"key":"10.1016\/j.eswa.2026.132859_bib0032","article-title":"An investigation into unmanned aerial system (UAS) forensics: Data extraction & analysis","volume":"41","author":"Thornton","year":"2022","journal-title":"Forensic Science International: Digital Investigation"},{"key":"10.1016\/j.eswa.2026.132859_bib0033","series-title":"2024 12th international symposium on digital forensics and security (ISDFS)","first-page":"01","article-title":"A framework for integrated digital forensic investigation employing AutoGen AI agents","author":"Wickramasekara","year":"2024"},{"issue":"4","key":"10.1016\/j.eswa.2026.132859_bib0034","doi-asserted-by":"crossref","first-page":"87","DOI":"10.3390\/bdcc9040087","article-title":"LLM fine-tuning: Concepts, opportunities, and challenges","volume":"9","author":"Wu","year":"2025","journal-title":"Big Data and Cognitive Computing"},{"key":"10.1016\/j.eswa.2026.132859_bib0035","series-title":"2024\u202fIEEE International symposium on workload characterization (IISWC)","first-page":"210","article-title":"Understanding the performance and estimating the cost of LLM fine-tuning","author":"Xia","year":"2024"},{"issue":"10","key":"10.1016\/j.eswa.2026.132859_bib0036","doi-asserted-by":"crossref","first-page":"704","DOI":"10.3390\/drones9100704","article-title":"UAV accident forensics via HFACS-LLM reasoning: low-altitude safety insights","volume":"9","author":"Yan","year":"2025","journal-title":"Drones"},{"key":"10.1016\/j.eswa.2026.132859_bib0037","unstructured":"Yang, A., Li, A., Yang, B. et al. (2025). Qwen3 technical report. 2505.09388."},{"key":"10.1016\/j.eswa.2026.132859_bib0038","doi-asserted-by":"crossref","unstructured":"Yin, Z., Wang, Z., Xu, W. et al. (2025). Digital forensics in the age of large language models. 2504.02963.","DOI":"10.1007\/978-3-031-98036-7_3"},{"key":"10.1016\/j.eswa.2026.132859_bib0039","series-title":"34th USENIX security symposium (USENIX security 25)","first-page":"3827","article-title":"PoisonedRAG: Knowledge corruption attacks to retrieval-augmented generation of large language models","author":"Zou","year":"2025"}],"container-title":["Expert Systems with Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0957417426017720?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0957417426017720?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T13:47:58Z","timestamp":1779371278000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0957417426017720"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9]]},"references-count":39,"alternative-id":["S0957417426017720"],"URL":"https:\/\/doi.org\/10.1016\/j.eswa.2026.132859","relation":{},"ISSN":["0957-4174"],"issn-type":[{"value":"0957-4174","type":"print"}],"subject":[],"published":{"date-parts":[[2026,9]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"UFA: An LLM-driven UAV forensic intelligent agent for low-altitude public security","name":"articletitle","label":"Article Title"},{"value":"Expert Systems with Applications","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.eswa.2026.132859","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"132859"}}