{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T02:47:58Z","timestamp":1769914078590,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":48,"publisher":"ACM","license":[{"start":{"date-parts":[[2015,10,12]],"date-time":"2015-10-12T00:00:00Z","timestamp":1444608000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"NSF","award":["1409668"],"award-info":[{"award-number":["1409668"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2015,10,12]]},"DOI":"10.1145\/2810103.2813650","type":"proceedings-article","created":{"date-parts":[[2015,10,6]],"date-time":"2015-10-06T15:22:12Z","timestamp":1444144932000},"page":"120-132","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":24,"title":["GUITAR"],"prefix":"10.1145","author":[{"given":"Brendan","family":"Saltaformaggio","sequence":"first","affiliation":[{"name":"Purdue University, West Lafayette, USA"}]},{"given":"Rohit","family":"Bhatia","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, USA"}]},{"given":"Zhongshu","family":"Gu","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, USA"}]},{"given":"Xiangyu","family":"Zhang","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, USA"}]},{"given":"Dongyan","family":"Xu","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, USA"}]}],"member":"320","published-online":{"date-parts":[[2015,10,12]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"7\n    American Law Reports. 4th 8 2b.  7 American Law Reports. 4th 8 2b."},{"key":"e_1_3_2_1_2_1","volume-title":"v. Jos","author":"Pearl Brewing Co.","year":"1976"},{"key":"e_1_3_2_1_3_1","unstructured":"US v. Scholle. 553 F. 2d 1109 (1977).  US v. Scholle. 553 F. 2d 1109 (1977)."},{"key":"e_1_3_2_1_4_1","volume-title":"v. Matsushita Elec. Indus","author":"Nat. Union Elec. Corp.","year":"1980"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","unstructured":"US v. Vela. 673 F. 2d 86 (1982).  US v. Vela. 673 F. 2d 86 (1982).","DOI":"10.2307\/2043608"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"crossref","unstructured":"US v. Bonallo. 858 F. 2d 1427 (1988).  US v. Bonallo. 858 F. 2d 1427 (1988).","DOI":"10.25291\/VR\/1988-VR-858"},{"key":"e_1_3_2_1_7_1","volume-title":"v. Bando Chemical Industries","author":"Gates Rubber Co.","year":"1993"},{"key":"e_1_3_2_1_8_1","volume-title":"Metro Mark Products","author":"Illinois Tool","year":"1999"},{"key":"e_1_3_2_1_9_1","volume-title":"Quality King Distributors","author":"Mitchell John Paul","year":"2000"},{"key":"e_1_3_2_1_10_1","unstructured":"Schaghticoke Tribal Nation v. Kempthorne. 587 F. Supp. 2d 389 (2008).  Schaghticoke Tribal Nation v. Kempthorne. 587 F. Supp. 2d 389 (2008)."},{"key":"e_1_3_2_1_11_1","volume-title":"https:\/\/github.com\/maandree\/hungarian-algorithm-n3\/blob\/master\/hungarian.c","author":"Hungarian","year":"2014"},{"key":"e_1_3_2_1_12_1","volume-title":"http:\/\/www.504ensics.com\/tools\/dalvik-inspector-di-alpha","author":"Labs ENSICS","year":"2013"},{"key":"e_1_3_2_1_13_1","volume-title":"LiME Linux Memory Extractor. https:\/\/github.com\/504ensicsLabs\/LiME","author":"Labs ENSICS","year":"2013"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1113034.1113070"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37437-1_15"},{"key":"e_1_3_2_1_16_1","volume-title":"NCJ 199408","author":"Ashcroft J.","year":"2004"},{"key":"e_1_3_2_1_17_1","unstructured":"C. Betz. Memparser forensics tool. http:\/\/www.dfrws.org\/2005\/challenge\/memparser.shtml 2005.  C. Betz. Memparser forensics tool. http:\/\/www.dfrws.org\/2005\/challenge\/memparser.shtml 2005."},{"key":"e_1_3_2_1_18_1","volume-title":"Proc. Digital Forensic Research Workshop","author":"Bugcheck C.","year":"2006"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653729"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1113034.1113069"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2003.12.001"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2008.05.008"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/1788524.1788559"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653730"},{"key":"e_1_3_2_1_25_1","volume-title":"Digital Archaeology: The Art and Science of Digital Forensics","author":"Graves M.","year":"2013"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/IMF.2014.8"},{"key":"e_1_3_2_1_27_1","volume-title":"Computer Crime and Intellectual Property Section Criminal Division","author":"Jarrett H. M.","year":"2009"},{"key":"e_1_3_2_1_28_1","volume-title":"Proc. NDSS","author":"Lee J.","year":"2011"},{"key":"e_1_3_2_1_29_1","volume-title":"Proc. NDSS","author":"Lin Z.","year":"2012"},{"key":"e_1_3_2_1_30_1","volume-title":"Proc. NDSS","author":"Lin Z.","year":"2011"},{"key":"e_1_3_2_1_31_1","volume-title":"Proc. NDSS","author":"Lin Z.","year":"2010"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/2072298.2072432"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1459359.1459577"},{"key":"e_1_3_2_1_34_1","volume-title":"Live memory forensics on android with volatility","author":"Macht H.","year":"2013"},{"key":"e_1_3_2_1_35_1","volume-title":"Proc. USENIX Annual Technical Conference, FREENIX Track","author":"Movall P.","year":"2005"},{"key":"e_1_3_2_1_36_1","volume-title":"TextSecure Private Messenger. https:\/\/play.google.com\/store\/apps\/details?id=org.thoughtcrime.securesms","author":"Systems Open Whisper","year":"2015"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2006.10.001"},{"key":"e_1_3_2_1_38_1","volume-title":"University of New Orleans","author":"Saltaformaggio B.","year":"2012"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813720"},{"key":"e_1_3_2_1_40_1","volume-title":"Proc. USENIX Security","author":"Saltaformaggio B.","year":"2014"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2006.06.010"},{"key":"e_1_3_2_1_42_1","volume-title":"Proc. NDSS","author":"Slowinska A.","year":"2011"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11203-9_12"},{"key":"e_1_3_2_1_44_1","first-page":"8","author":"Sylve J.","year":"2012","journal-title":"Digital Investigation"},{"key":"e_1_3_2_1_45_1","unstructured":"The Volatility Framework. https:\/\/www.volatilesystems.com\/default\/volatility.  The Volatility Framework. https:\/\/www.volatilesystems.com\/default\/volatility."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2010.05.010"},{"key":"e_1_3_2_1_47_1","volume-title":"Proc. USENIX Security","author":"Walls R.","year":"2011"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516664"}],"event":{"name":"CCS'15: The 22nd ACM Conference on Computer and Communications Security","location":"Denver Colorado USA","acronym":"CCS'15","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2810103.2813650","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2810103.2813650","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T05:48:24Z","timestamp":1750225704000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2810103.2813650"}},"subtitle":["Piecing Together Android App GUIs from Memory Images"],"short-title":[],"issued":{"date-parts":[[2015,10,12]]},"references-count":48,"alternative-id":["10.1145\/2810103.2813650","10.1145\/2810103"],"URL":"https:\/\/doi.org\/10.1145\/2810103.2813650","relation":{},"subject":[],"published":{"date-parts":[[2015,10,12]]},"assertion":[{"value":"2015-10-12","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}