{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,7,12]],"date-time":"2025-07-12T22:46:26Z","timestamp":1752360386760,"version":"3.37.3"},"reference-count":63,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2019,12,1]],"date-time":"2019-12-01T00:00:00Z","timestamp":1575158400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,12,1]],"date-time":"2019-12-01T00:00:00Z","timestamp":1575158400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,12,1]],"date-time":"2019-12-01T00:00:00Z","timestamp":1575158400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Big Data"],"published-print":{"date-parts":[[2019,12,1]]},"DOI":"10.1109\/tbdata.2017.2683521","type":"journal-article","created":{"date-parts":[[2017,3,16]],"date-time":"2017-03-16T23:15:45Z","timestamp":1489706145000},"page":"425-438","source":"Crossref","is-referenced-by-count":11,"title":["A Novel Methodology to Acquire Live Big Data Evidence from the Cloud"],"prefix":"10.1109","volume":"5","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0571-1074","authenticated-orcid":false,"given":"Aniello","family":"Castiglione","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Giuseppe","family":"Cattaneo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Giancarlo","family":"De Maio","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alfredo","family":"De Santis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gianluca","family":"Roscigno","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"year":"2016","key":"ref39","article-title":"Wireshark-go deep"},{"year":"2016","key":"ref38","article-title":"TCPDUMP\/LIBPCAP public repository"},{"journal-title":"Network Forensics Tracking Hackers through Cyberspace","year":"2012","author":"davidoff","key":"ref33"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-84927-0_1"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2006.08.012"},{"article-title":"Hashbot by digital-security.IT","year":"2016","author":"amato","key":"ref30"},{"year":"2014","key":"ref37","article-title":"HTML5"},{"year":"2016","key":"ref36","article-title":"Tor project: Anonymity online"},{"year":"2014","key":"ref35","article-title":"WebCase WebLog"},{"year":"2001","key":"ref34","article-title":"Convention on cybercrime"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2013.2260817"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/INCoS.2011.129"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-32498-7_32"},{"article-title":"Forensic acquisition of websites v. 4.0.0.4","year":"0","author":"bassani","key":"ref63"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2005.08.001"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2015.71"},{"year":"2016","key":"ref29","article-title":"WebCase 2.0 features"},{"year":"2001","key":"ref2","article-title":"Disk imaging tool specification"},{"year":"1999","key":"ref1","article-title":"Good practice guide for computer based evidence"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2014.124"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/INCoS.2011.17"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2014.09.002"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSec.2012.6246092"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2016.2541160"},{"key":"ref26","first-page":"1","article-title":"Data exfiltration from internet of things devices: iOS devices as case studies","volume":"pp","author":"d'orazio","year":"2016","journal-title":"IEEE Internet of Things Journal"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-016-0553-1"},{"year":"2015","key":"ref50","article-title":"DEFT Linux-computer forensics live CD"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/11751595_57"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/IMIS.2012.127"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23300-5_28"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36563-8_13"},{"year":"2016","key":"ref56","article-title":"Squid: Optimising web delivery"},{"year":"2016","key":"ref55","article-title":"Mozilla firefox web browser"},{"year":"2016","key":"ref54","article-title":"About recordMyDesktop"},{"article-title":"XRDP: An open source remote desktop protocol (RDP) server","year":"2016","author":"sorg","key":"ref53"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1155\/2011\/404328"},{"key":"ref10","first-page":"1","article-title":"Cloud infrastructure resource allocation for big data applications","volume":"pp","author":"dai","year":"2016","journal-title":"IEEE Trans Big Data"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom.2015.24"},{"year":"2013","key":"ref40","article-title":"WinPcap-Home"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2015.36"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-015-0512-2"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/B978-0-12-419970-5.00002-8"},{"key":"ref15","article-title":"Cloud incident handling and forensic-by-design: Cloud storage as a case study","author":"ab rahman","year":"2016","journal-title":"Concurrency Comput Practice Experience"},{"key":"ref16","article-title":"Forensic data acquisition from cloud-of-things devices: Windows smartphones as a case study","author":"cahyani","year":"2016","journal-title":"Concurrency Comput Practice Experience"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2014.08.002"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2013.08.005"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2013.07.001"},{"year":"2012","key":"ref4","article-title":"Digital forensics standards and capacity building"},{"year":"2009","key":"ref3","article-title":"Searching and seizing computers and obtaining electronic evidence in criminal investigations"},{"journal-title":"Computer Forensics An Essential Guide for Accountants Lawyers and Managers","year":"2007","author":"sheetz","key":"ref6"},{"journal-title":"Computer Forensics Incident Response Essentials","year":"2001","author":"kruse","key":"ref5"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2013.09.016"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2013.02.001"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23300-5_27"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2016.2557348"},{"article-title":"Xplico-open source network forensic analysis tool (NFAT)","year":"2013","author":"costa","key":"ref46"},{"year":"2016","key":"ref45","article-title":"Page saver"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/BWCCA.2011.60"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2006.05.002"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2016.2587659"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2015.2498156"},{"year":"2016","key":"ref44","article-title":"Internet archive: Digital library of free books, movies, music & wayback machine"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2478741"}],"container-title":["IEEE Transactions on Big Data"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6687317\/8915964\/07879878.pdf?arnumber=7879878","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,13]],"date-time":"2022-07-13T20:55:27Z","timestamp":1657745727000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7879878\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,12,1]]},"references-count":63,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tbdata.2017.2683521","relation":{},"ISSN":["2332-7790","2372-2096"],"issn-type":[{"type":"electronic","value":"2332-7790"},{"type":"electronic","value":"2372-2096"}],"subject":[],"published":{"date-parts":[[2019,12,1]]}}}