{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,28]],"date-time":"2025-10-28T18:32:02Z","timestamp":1761676322237,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":37,"publisher":"ACM","license":[{"start":{"date-parts":[[2015,10,12]],"date-time":"2015-10-12T00:00:00Z","timestamp":1444608000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2015,10,12]]},"DOI":"10.1145\/2810103.2813720","type":"proceedings-article","created":{"date-parts":[[2015,10,6]],"date-time":"2015-10-06T15:22:12Z","timestamp":1444144932000},"page":"146-157","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":21,"title":["VCR"],"prefix":"10.1145","author":[{"given":"Brendan","family":"Saltaformaggio","sequence":"first","affiliation":[{"name":"Purdue University, West Lafayette, USA"}]},{"given":"Rohit","family":"Bhatia","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, USA"}]},{"given":"Zhongshu","family":"Gu","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, USA"}]},{"given":"Xiangyu","family":"Zhang","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, USA"}]},{"given":"Dongyan","family":"Xu","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, USA"}]}],"member":"320","published-online":{"date-parts":[[2015,10,12]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"2473","author":"v. California Riley","year":"2014","journal-title":"Ct."},{"volume-title":"http:\/\/www.504ensics.com\/tools\/dalvik-inspector-di-alpha","year":"2013","author":"Labs ENSICS","key":"e_1_3_2_1_2_1"},{"volume-title":"LiME Linux Memory Extractor. https:\/\/github.com\/504ensicsLabs\/LiME","year":"2013","author":"Labs ENSICS","key":"e_1_3_2_1_3_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_4_1","DOI":"10.1145\/1113034.1113070"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_5_1","DOI":"10.1007\/978-3-642-37437-1_15"},{"volume-title":"http:\/\/www.dfrws.org\/2005\/challenge\/memparser.shtml","year":"2005","author":"Betz C.","key":"e_1_3_2_1_6_1"},{"volume-title":"Proc. Digital Forensic Research Workshop","year":"2006","author":"Bugcheck C.","key":"e_1_3_2_1_7_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_8_1","DOI":"10.1145\/1653662.1653729"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_9_1","DOI":"10.1145\/1113034.1113069"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_10_1","DOI":"10.1016\/j.diin.2003.12.001"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_11_1","DOI":"10.1016\/j.diin.2008.05.008"},{"volume-title":"Proc. USENIX Security","year":"2014","author":"Chen Q. A.","key":"e_1_3_2_1_12_1"},{"volume-title":"Proc. Symposium on Operating Systems Design and Implementation","year":"2008","author":"Cozzie A.","key":"e_1_3_2_1_13_1"},{"volume-title":"Euclidean distance mapping. Computer Graphics and image processing, 14(3)","year":"1980","author":"Danielsson P.-E.","key":"e_1_3_2_1_14_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_15_1","DOI":"10.1145\/1653662.1653730"},{"unstructured":"Google Inc. Android dashboards - platform versions. https:\/\/developer.android.com\/about\/dashboards\/index.html 2015.  Google Inc. Android dashboards - platform versions. https:\/\/developer.android.com\/about\/dashboards\/index.html 2015.","key":"e_1_3_2_1_16_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_17_1","DOI":"10.1109\/IMF.2014.8"},{"volume-title":"Proc. NDSS","year":"2011","author":"Lee J.","key":"e_1_3_2_1_18_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_19_1","DOI":"10.14722\/ndss.2014.23049"},{"volume-title":"Proc. NDSS","year":"2012","author":"Lin Z.","key":"e_1_3_2_1_20_1"},{"volume-title":"Proc. NDSS","year":"2011","author":"Lin Z.","key":"e_1_3_2_1_21_1"},{"volume-title":"Proc. NDSS","year":"2010","author":"Lin Z.","key":"e_1_3_2_1_22_1"},{"volume-title":"USENIX Security Symposium","year":"2014","author":"Lopez R. R.","key":"e_1_3_2_1_23_1"},{"volume-title":"Live memory forensics on android with volatility","year":"2013","author":"Macht H.","key":"e_1_3_2_1_24_1"},{"volume-title":"Proc. USENIX Annual Technical Conference, FREENIX Track","year":"2005","author":"Movall P.","key":"e_1_3_2_1_25_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_26_1","DOI":"10.1016\/j.diin.2006.10.001"},{"volume-title":"University of New Orleans","year":"2012","author":"Saltaformaggio B.","key":"e_1_3_2_1_27_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_28_1","DOI":"10.1145\/2810103.2813650"},{"volume-title":"Proc. USENIX Security","year":"2014","author":"Saltaformaggio B.","key":"e_1_3_2_1_29_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_30_1","DOI":"10.1016\/j.diin.2006.06.010"},{"volume-title":"Proc. NDSS","year":"2011","author":"Slowinska A.","key":"e_1_3_2_1_31_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_32_1","DOI":"10.1007\/978-3-319-11203-9_12"},{"key":"e_1_3_2_1_33_1","first-page":"8","author":"Sylve J.","year":"2012","journal-title":"Digital Investigation"},{"unstructured":"The Volatility Framework. https:\/\/www.volatilesystems.com\/default\/volatility.  The Volatility Framework. https:\/\/www.volatilesystems.com\/default\/volatility.","key":"e_1_3_2_1_34_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_35_1","DOI":"10.1016\/j.diin.2010.05.010"},{"volume-title":"Proc. USENIX Security","year":"2011","author":"Walls R.","key":"e_1_3_2_1_36_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_37_1","DOI":"10.1145\/2508859.2516664"}],"event":{"sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"acronym":"CCS'15","name":"CCS'15: The 22nd ACM Conference on Computer and Communications Security","location":"Denver Colorado USA"},"container-title":["Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2810103.2813720","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2810103.2813720","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T05:48:25Z","timestamp":1750225705000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2810103.2813720"}},"subtitle":["App-Agnostic Recovery of Photographic Evidence from Android Device Memory Images"],"short-title":[],"issued":{"date-parts":[[2015,10,12]]},"references-count":37,"alternative-id":["10.1145\/2810103.2813720","10.1145\/2810103"],"URL":"https:\/\/doi.org\/10.1145\/2810103.2813720","relation":{},"subject":[],"published":{"date-parts":[[2015,10,12]]},"assertion":[{"value":"2015-10-12","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}