{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T22:05:17Z","timestamp":1778105117240,"version":"3.51.4"},"reference-count":14,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011,9]]},"DOI":"10.1109\/idaacs.2011.6072872","type":"proceedings-article","created":{"date-parts":[[2011,11,11]],"date-time":"2011-11-11T18:56:19Z","timestamp":1321037779000},"page":"759-763","source":"Crossref","is-referenced-by-count":8,"title":["Capturing encryption keys for digital analysis"],"prefix":"10.1109","author":[{"given":"Stefan","family":"Balogh","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Matej","family":"Pondelik","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","year":"2010","journal-title":"TRUECRYPT TrueCrypt Documentation Encryption Scheme"},{"key":"ref11","author":"walters","year":"2007","journal-title":"Volatools Integrating Volatile Memory Forensics into the Digital Investigation Process"},{"key":"ref12","author":"carvey","year":"2009","journal-title":"Windows Forensic Analysis Dvd Toolkit"},{"key":"ref13","first-page":"55","volume":"3329 2004","author":"rogaway","year":"2004","journal-title":"Efficient Instantiations of Tweakable Block ciphers and Refinements to Modes OCB and PMAC Asia crypt 2004"},{"key":"ref14","article-title":"Recommendation for Block Cipher Modes of Operation: The XTS-AES Mode for Confidentiality on Storage Devices","author":"dworkin","year":"2010","journal-title":"NIST Special Publication"},{"key":"ref4","volume":"35","year":"2007","journal-title":"Re Boucher 2007"},{"key":"ref3","author":"denning","year":"1997","journal-title":"Cases Involving Encryption in Crime and Terrorism"},{"key":"ref6","author":"mandia","year":"2003","journal-title":"Incident Response and Computer Forensics"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2008.109"},{"key":"ref8","doi-asserted-by":"crossref","first-page":"118","DOI":"10.1007\/3-540-48390-X_9","article-title":"Playing «hidcandscek» with stored keys","volume":"1648","author":"shamir","year":"1999","journal-title":"Lecture Notes in Computer Science"},{"key":"ref7","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1145\/1368506.1368519","article-title":"The impact of full disk encryption on digital forensics","volume":"42","author":"casey","year":"2008","journal-title":"ACM SIGOPS Operating Systems Review"},{"key":"ref2","year":"2007","journal-title":"UK's families put on fraud alert"},{"key":"ref1","year":"2007","journal-title":"A Chronology of Data Breaches"},{"key":"ref9","author":"halderman","year":"2008","journal-title":"Last we remember cold-boot attacks on encryption keys"}],"event":{"name":"2011 IEEE 6th International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS)","location":"Prague, Czech Republic","start":{"date-parts":[[2011,9,15]]},"end":{"date-parts":[[2011,9,17]]}},"container-title":["Proceedings of the 6th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/6063705\/6072809\/06072872.pdf?arnumber=6072872","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,20]],"date-time":"2017-06-20T09:33:26Z","timestamp":1497951206000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6072872\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,9]]},"references-count":14,"URL":"https:\/\/doi.org\/10.1109\/idaacs.2011.6072872","relation":{},"subject":[],"published":{"date-parts":[[2011,9]]}}}