{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,5]],"date-time":"2025-12-05T13:17:04Z","timestamp":1764940624696,"version":"3.46.0"},"reference-count":60,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T00:00:00Z","timestamp":1764547200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T00:00:00Z","timestamp":1764547200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2025,10,23]],"date-time":"2025-10-23T00:00:00Z","timestamp":1761177600000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Forensic Science International: Digital Investigation"],"published-print":{"date-parts":[[2025,12]]},"DOI":"10.1016\/j.fsidi.2025.302023","type":"journal-article","created":{"date-parts":[[2025,11,6]],"date-time":"2025-11-06T01:34:18Z","timestamp":1762392858000},"page":"302023","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Evaluating digital forensic findings in Trojan horse defense cases using Bayesian networks"],"prefix":"10.1016","volume":"55","author":[{"given":"Marouschka","family":"Vink","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ruud","family":"Schramp","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bas","family":"Kokshoorn","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marjan J.","family":"Sjerps","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"issue":"3","key":"10.1016\/j.fsidi.2025.302023_bib0005","doi-asserted-by":"crossref","first-page":"179","DOI":"10.1016\/S0040-5809(03)00004-2","article-title":"A graphical model for the evaluation of cross-transfer evidence in DNA profiles","volume":"63","author":"Aitken","year":"2003","journal-title":"Theor. Popul. Biol."},{"issue":"5","key":"10.1016\/j.fsidi.2025.302023_bib0010","doi-asserted-by":"crossref","first-page":"303","DOI":"10.1016\/S0015-7368(89)73270-9","article-title":"Probabilistic reasoning in evidential assessment","volume":"29","author":"Aitken","year":"1989","journal-title":"J. Forensic Sci. Soc."},{"issue":"5","key":"10.1016\/j.fsidi.2025.302023_bib0015","doi-asserted-by":"crossref","first-page":"388","DOI":"10.1016\/j.scijus.2016.06.005","article-title":"The LR does not exist","volume":"56","author":"Berger","year":"2016","journal-title":"Sci. Justice"},{"issue":"5","key":"10.1016\/j.fsidi.2025.302023_bib0020","doi-asserted-by":"crossref","first-page":"392","DOI":"10.1016\/j.scijus.2016.05.008","article-title":"Reframing the debate: a question of probability, not of likelihood ratio","volume":"56","author":"Biedermann","year":"2016","journal-title":"Sci. Justice"},{"key":"10.1016\/j.fsidi.2025.302023_bib0025","doi-asserted-by":"crossref","DOI":"10.3389\/fgene.2016.00215","article-title":"Evaluation of forensic DNA traces when propositions of interest relate to activities: analysis and discussion of recurrent concerns","volume":"7","author":"Biedermann","year":"2016","journal-title":"Front. Genet."},{"issue":"3","key":"10.1016\/j.fsidi.2025.302023_bib0030","doi-asserted-by":"crossref","first-page":"741","DOI":"10.1111\/1556-4029.13956","article-title":"A multimodal fusion approach for bullet identification systems","volume":"64","author":"Bigdeli","year":"2019","journal-title":"J. Forensic Sci."},{"key":"10.1016\/j.fsidi.2025.302023_bib0035","article-title":"A case study of the challenges of cyber forensics analysis of digital evidence in a child pornography trial","volume":"6","author":"Boddington","year":"2012","journal-title":"Annu. ADFSL Conf. Digit. Forensics, Secur. Law"},{"issue":"1","key":"10.1016\/j.fsidi.2025.302023_bib0040","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1016\/S1361-3723(15)70005-9","article-title":"The first 10 years of the Trojan horse defence","volume":"2015","author":"Bowles","year":"2015","journal-title":"Comput. Fraud Secur."},{"issue":"1","key":"10.1016\/j.fsidi.2025.302023_bib0045","article-title":"The Trojan horse defense in cybercrime cases","volume":"21","author":"Brenner","year":"2004","journal-title":"Santa Clara High Technol. Law J."},{"issue":"2","key":"10.1016\/j.fsidi.2025.302023_bib0050","doi-asserted-by":"crossref","first-page":"69","DOI":"10.1016\/S1355-0306(06)71577-5","article-title":"An extended likelihood ratio framework for interpreting evidence","volume":"46","author":"Buckleton","year":"2006","journal-title":"Sci. Justice"},{"issue":"4","key":"10.1016\/j.fsidi.2025.302023_bib0055","article-title":"The trojan made me do: a first step in statistical based computer forensics event reconstruction","volume":"2","author":"Carney","year":"2004","journal-title":"Int. J. Digit. Evid."},{"issue":"2","key":"10.1016\/j.fsidi.2025.302023_bib0060","article-title":"Getting physical with the digital investigation process","volume":"2","author":"Carrier","year":"2003","journal-title":"Int. J. Digit. Evid."},{"key":"10.1016\/j.fsidi.2025.302023_bib0065","article-title":"Standardization of forming and expressing preliminary evaluative opinions on digital evidence","volume":"32","author":"Casey","year":"2020","journal-title":"Forensic Sci. Int. Digit. Investig."},{"key":"10.1016\/j.fsidi.2025.302023_bib0070","article-title":"Structuring the evaluation of location-related mobile device evidence","volume":"32","author":"Casey","year":"2020","journal-title":"Forensic Sci. Int. Digit. Investig."},{"key":"10.1016\/j.fsidi.2025.302023_bib0075","doi-asserted-by":"crossref","DOI":"10.1016\/j.diin.2019.06.004","article-title":"Standardization of file recovery classification and authentication","volume":"31","author":"Casey","year":"2019","journal-title":"Digit. Investig."},{"issue":"3","key":"10.1016\/j.fsidi.2025.302023_bib0080","first-page":"976","article-title":"Comment on Stockmarr\u2019s \u201clikelihood ratios for evaluating DNA evidence when the suspect is found through a database search\u201d","volume":"57","author":"Dawid","year":"2001","journal-title":"Biometrics"},{"issue":"2","key":"10.1016\/j.fsidi.2025.302023_bib0085","doi-asserted-by":"crossref","first-page":"226","DOI":"10.1520\/JFS14102J","article-title":"Using a graphical method to assist the evaluation of complicated patterns of evidence","volume":"42","author":"Dawid","year":"1997","journal-title":"J. Forensic Sci."},{"key":"10.1016\/j.fsidi.2025.302023_bib0090","doi-asserted-by":"crossref","DOI":"10.1016\/j.fsisyn.2024.100554","article-title":"From understanding to justifying: computational reliabilism for AI-based forensic evidence evaluation","volume":"9","author":"Dur\u00e1n","year":"2024","journal-title":"Forensic Sci. Int. Synergy"},{"issue":"3","key":"10.1016\/j.fsidi.2025.302023_bib0095","doi-asserted-by":"crossref","first-page":"520","DOI":"10.1520\/JFS15291J","article-title":"Interpreting small quantities of DNA: the hierarchy of propositions and the use of Bayesian networks","volume":"47","author":"Evett","year":"2002","journal-title":"J. Forensic Sci."},{"issue":"1","key":"10.1016\/j.fsidi.2025.302023_bib0100","doi-asserted-by":"crossref","first-page":"25","DOI":"10.2307\/2347659","article-title":"A quantitative theory for interpreting transfer evidence in criminal cases","volume":"33","author":"Evett","year":"1984","journal-title":"Appl. Stat."},{"issue":"3","key":"10.1016\/j.fsidi.2025.302023_bib0105","doi-asserted-by":"crossref","first-page":"198","DOI":"10.1016\/S1355-0306(98)72105-7","article-title":"Towards a uniform framework for reporting opinions in forensic science casework","volume":"38","author":"Evett","year":"1998","journal-title":"Sci. Justice"},{"key":"10.1016\/j.fsidi.2025.302023_bib0110","article-title":"Statistical methods for the forensic analysis of geolocated event data","volume":"33","author":"Galbraith","year":"2020","journal-title":"Forensic Sci. Int. Digit. Investig."},{"key":"10.1016\/j.fsidi.2025.302023_bib0115","doi-asserted-by":"crossref","first-page":"149","DOI":"10.1016\/S0379-0738(01)00642-9","article-title":"Evaluation of scientific evidence using Bayesian networks","volume":"125","author":"Garbolino","year":"2002","journal-title":"Forensic Sci. Int."},{"key":"10.1016\/j.fsidi.2025.302023_bib0120","doi-asserted-by":"crossref","DOI":"10.1016\/j.fsigen.2019.102186","article-title":"DNA commission of the international society for forensic genetics: assessing the value of forensic biological evidence-guidelines highlighting the importance of propositions. Part II: Evaluation of biological traces considering activity level propositions","volume":"44","author":"Gill","year":"2020","journal-title":"Forensic Sci. Int. Genet."},{"key":"10.1016\/j.fsidi.2025.302023_bib0125","article-title":"Contamination of digital evidence: understanding an underexposed risk","volume":"44","author":"Gruber","year":"2023","journal-title":"Forensic Sci. Int.: Digit. Investig."},{"issue":"1","key":"10.1016\/j.fsidi.2025.302023_bib0130","doi-asserted-by":"crossref","first-page":"23","DOI":"10.1016\/j.diin.2005.01.010","article-title":"Trojan defence: a forensic view","volume":"2","author":"Haagman","year":"2005","journal-title":"Digit. Investig."},{"key":"10.1016\/j.fsidi.2025.302023_bib0135","doi-asserted-by":"crossref","first-page":"115","DOI":"10.1016\/j.forsciint.2017.06.029","article-title":"Activity level DNA evidence evaluation: on propositions addressing the actor or the activity","volume":"278","author":"Kokshoorn","year":"2017","journal-title":"Forensic Sci. Int."},{"key":"10.1016\/j.fsidi.2025.302023_bib0140","series-title":"Advances in Digital Forensics IV","first-page":"275","article-title":"Reasoning about evidence using Bayesian networks","author":"Kwan","year":"2008"},{"key":"10.1016\/j.fsidi.2025.302023_bib0145","series-title":"Advances in Digital Forensics IV","first-page":"231","article-title":"Sensitivity analysis of Bayesian networks used in forensic investigations","author":"Kwan","year":"2011"},{"year":"2021","series-title":"Explaining the Evidence: How the Mind Investigates the World","author":"Lagnado","key":"10.1016\/j.fsidi.2025.302023_bib0150"},{"key":"10.1016\/j.fsidi.2025.302023_bib0155","series-title":"In 2009 IEEE International Conference on Intelligence and Security Informatics","first-page":"303","article-title":"From digital forensic report to Bayesian network representation","author":"Lee","year":"2009"},{"issue":"5\/6","key":"10.1016\/j.fsidi.2025.302023_bib0160","doi-asserted-by":"crossref","first-page":"1021","DOI":"10.2307\/1288024","article-title":"Modeling relevance","volume":"75","author":"Lempert","year":"1977","journal-title":"Mich. L. Rev."},{"issue":"8","key":"10.1016\/j.fsidi.2025.302023_bib0165","doi-asserted-by":"crossref","first-page":"2083","DOI":"10.1109\/TAI.2025.3537965","article-title":"A multimodal-driven fusion data augmentation framework for emotion recognition","volume":"6","author":"Li","year":"2025","journal-title":"IEEE Trans. Artif. Intell."},{"issue":"2","key":"10.1016\/j.fsidi.2025.302023_bib0170","doi-asserted-by":"crossref","first-page":"207","DOI":"10.1093\/biomet\/64.2.207","article-title":"A problem in forensic science","volume":"64","author":"Lindley","year":"1977","journal-title":"Biometrika"},{"issue":"4","key":"10.1016\/j.fsidi.2025.302023_bib0175","doi-asserted-by":"crossref","first-page":"1169","DOI":"10.1111\/1556-4029.14324","article-title":"Likelihood ratios for deep neural networks in face comparison","volume":"65","author":"Macarulla Rodriguez","year":"2020","journal-title":"J. Forensic Sci."},{"issue":"1","key":"10.1016\/j.fsidi.2025.302023_bib0180","doi-asserted-by":"crossref","first-page":"13","DOI":"10.1080\/20961790.2020.1837429","article-title":"Quantitative evaluation of the results of digital forensic investigations: a review of progress","volume":"6","author":"Overill","year":"2021","journal-title":"Forensic Sci. Res."},{"key":"10.1016\/j.fsidi.2025.302023_bib0185","series-title":"2011 Sixth International Conference on Availability, Reliability and Security","first-page":"764","article-title":"A complexity based forensic analysis of the Trojan horse defence","author":"Overill","year":"2011"},{"year":"2018","series-title":"A Framework for Harmonizing Forensic Science Practices and Digital\/Multimedia Evidence","author":"Pollitt","key":"10.1016\/j.fsidi.2025.302023_bib0190"},{"issue":"3","key":"10.1016\/j.fsidi.2025.302023_bib0195","doi-asserted-by":"crossref","first-page":"798","DOI":"10.1111\/1556-4029.15488","article-title":"Global survey on evaluative reporting on DNA evidence with regard to activity-level propositions","volume":"69","author":"Prinz","year":"2024","journal-title":"J. Forensic Sci."},{"key":"10.1016\/j.fsidi.2025.302023_bib0200","series-title":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","first-page":"3418","article-title":"DE-FAKE: detection and attribution of fake images generated by text-to-image generation models","author":"Sha","year":"2023"},{"issue":"4","key":"10.1016\/j.fsidi.2025.302023_bib0205","doi-asserted-by":"crossref","first-page":"317","DOI":"10.1093\/lpr\/mgs017","article-title":"How clear is transparent? Reporting expert reasoning in legal cases","volume":"11","author":"Sjerps","year":"2012","journal-title":"Law Probab. Risk"},{"key":"10.1016\/j.fsidi.2025.302023_bib0210","doi-asserted-by":"crossref","DOI":"10.15394\/jdfsl.2014.1192","article-title":"Technical soddi defenses: the Trojan horse defense revisited","author":"Steel","year":"2014","journal-title":"J. Digit. Forensics Secur. Law"},{"issue":"5","key":"10.1016\/j.fsidi.2025.302023_bib0215","doi-asserted-by":"crossref","first-page":"586","DOI":"10.1016\/j.scijus.2021.06.010","article-title":"What does a digital forensics opinion look like? A comparative study of digital forensics and forensic science reporting practices","volume":"61","author":"Sunde","year":"2021","journal-title":"Sci. Justice"},{"key":"10.1016\/j.fsidi.2025.302023_bib0220","doi-asserted-by":"crossref","first-page":"101","DOI":"10.1016\/j.diin.2019.03.011","article-title":"Cognitive and human factors in digital forensics: problems, challenges, and the way forward","volume":"29","author":"Sunde","year":"2019","journal-title":"Digit. Investig."},{"key":"10.1016\/j.fsidi.2025.302023_bib0225","article-title":"Adding transparency to uncertainty: an argument-based method for evaluative opinions","volume":"47","author":"Sunde","year":"2023","journal-title":"Forensic Sci. Int. Digit. Investig."},{"year":"2014","series-title":"Bayesian Networks for Probabilistic Inference and Decision Analysis in Forensic Science","author":"Taroni","key":"10.1016\/j.fsidi.2025.302023_bib0230"},{"key":"10.1016\/j.fsidi.2025.302023_bib0235","doi-asserted-by":"crossref","first-page":"136","DOI":"10.1016\/j.fsigen.2017.12.006","article-title":"A template for constructing Bayesian networks in forensic biology cases when considering activity level propositions","volume":"33","author":"Taylor","year":"2018","journal-title":"Forensic Sci. Int.: Genet."},{"issue":"5","key":"10.1016\/j.fsidi.2025.302023_bib0240","doi-asserted-by":"crossref","first-page":"402","DOI":"10.1016\/j.scijus.2016.06.010","article-title":"Using sensitivity analyses in Bayesian networks to highlight the impact of data paucity and direct future analyses: a contribution to the debate on measuring and reporting the precision of likelihood ratios","volume":"56","author":"Taylor","year":"2016","journal-title":"Sci. Justice"},{"year":"2022","series-title":"Forensic DNA Trace Evidence Interpretation: Activity Level Propositions and Likelihood Ratios","author":"Taylor","key":"10.1016\/j.fsidi.2025.302023_bib0245"},{"key":"10.1016\/j.fsidi.2025.302023_bib0250","doi-asserted-by":"crossref","DOI":"10.1016\/j.forsciint.2024.111944","article-title":"A practical treatment of sensitivity analyses in activity level evaluations","volume":"355","author":"Taylor","year":"2024","journal-title":"Forensic Sci. Int."},{"key":"10.1016\/j.fsidi.2025.302023_bib0255","article-title":"Structuring cases into propositions, assumptions, and undisputed case information","volume":"44","author":"Taylor","year":"2020","journal-title":"Forensic Sci. Int.: Genet."},{"key":"10.1016\/j.fsidi.2025.302023_bib0260","unstructured":"van den Hurk, J., Klaar, R.J.A., Mossink, J.J., 2023. Art. 240b Sr. Juridische en digitaal-technische aspecten van strafvervolging wegens gedragingen met digitaal kinderpornografisch materiaal."},{"key":"10.1016\/j.fsidi.2025.302023_bib0265","article-title":"A template Bayesian network for combining forensic evidence on an item with an uncertain relation to the disputed activities","volume":"9","author":"Vink","year":"2024","journal-title":"Forensic Sci. Int.: Synergy"},{"key":"10.1016\/j.fsidi.2025.302023_bib0270","article-title":"Formulating propositions in Trojan horse defense cases","volume":"53","author":"Vink","year":"2025","journal-title":"Forensic Sci. Int. Digit. Investig."},{"key":"10.1016\/j.fsidi.2025.302023_bib0275","article-title":"A collection of idioms for modeling activity level evaluations in forensic science","volume":"6","author":"Vink","year":"2023","journal-title":"Forensic Sci. Int.: Synergy"},{"key":"10.1016\/j.fsidi.2025.302023_bib0280","article-title":"Likelihood ratio method for the interpretation of iPhone Health app data in digital forensics","volume":"41","author":"Vink","year":"2022","journal-title":"Forensic Sci. Int. Digit. Investig."},{"issue":"Icail","key":"10.1016\/j.fsidi.2025.302023_bib0285","first-page":"150","article-title":"Modeling crime scenarios in a Bayesian network","author":"Vlek","year":"2013","journal-title":"Proc. Int. Conf. Artif. Intell. Law"},{"key":"10.1016\/j.fsidi.2025.302023_bib0290","unstructured":"Willis, S., Kenna, L., Dermott, S., Donnell, G., Barrett, A., Rasmusson, B., Nordgaard, A., Berger, C., Sjerps, M., Molina, J., Zadora, G., Aitken, C., Lunt, L., Champod, C., Biedermann, A., Hicks, T., Taroni, F., 2015. ENFSI guideline for evaluative reporting in forensic science."},{"key":"10.1016\/j.fsidi.2025.302023_bib0295","article-title":"Bayesian deep learning: an enhanced AI framework for legal reasoning alignment","volume":"55","author":"Zhang","year":"2024","journal-title":"Comput. Law Secur. Rev."},{"key":"10.1016\/j.fsidi.2025.302023_bib0300","series-title":"ICC 2022-IEEE International Conference on Communications","first-page":"2084","article-title":"A heterogeneous feature ensemble learning based deepfake detection method","author":"Zhang","year":"2022"}],"container-title":["Forensic Science International: Digital Investigation"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2666281725001635?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2666281725001635?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,12,5]],"date-time":"2025-12-05T13:13:16Z","timestamp":1764940396000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2666281725001635"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12]]},"references-count":60,"alternative-id":["S2666281725001635"],"URL":"https:\/\/doi.org\/10.1016\/j.fsidi.2025.302023","relation":{},"ISSN":["2666-2817"],"issn-type":[{"type":"print","value":"2666-2817"}],"subject":[],"published":{"date-parts":[[2025,12]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Evaluating digital forensic findings in Trojan horse defense cases using Bayesian networks","name":"articletitle","label":"Article Title"},{"value":"Forensic Science International: Digital Investigation","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.fsidi.2025.302023","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2025 The Author(s). Published by Elsevier Ltd.","name":"copyright","label":"Copyright"}],"article-number":"302023"}}