Pre-processing memory dumps to improve similarity score of Windows modules-Reference-Cited by-同舟云学术

Pre-processing memory dumps to improve similarity score of Windows modules

Published:2021-02 Issue: Volume:101 Page:102119
ISSN:0167-4048
Container-title:Computers & Security
language:en
Short-container-title:Computers & Security

Author:

Martín-Pérez Miguel,Rodríguez Ricardo J.,Balzarotti Davide

Publisher

Elsevier BV

Subject

Law,General Computer Science

Reference52 articles.

1. AV-TEST GmbH, 2019. AV-TEST Security Report 2018/19. [Online, https://www.av-test.org/fileadmin/pdf/security_report/AV-TEST_Security_Report_2018-2019.pdf.]. Accessed on April 15, 2020.

2. Security aspects of piecewise hashing in computer forensics;Baier,2011

3. Space/time trade-offs in hash coding with allowable errors;Bloom;Commun. ACM,1970

4. File detection on network traffic using approximate matching;Breitinger;Journal of Digital Forensics, Security and Law,2014

5. Similarity preserving hashing: Eligible properties and a new algorithm mrsh-v2;Breitinger,2012

Cited by 8 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. The effects of document's format, size, and storage media on memory forensics;Forensic Science International: Digital Investigation;2024-03

2. Enhancing Efficiency and Privacy in Memory-Based Malware Classification Through Feature Selection;2023 International Conference on Machine Learning and Applications (ICMLA);2023-12-15

3. Towards the Utilization of Parallel Programming to Speed Up RAM Forensics;2023 Tenth International Conference on Software Defined Systems (SDS);2023-10-23

4. Measuring the Effects of Document Size on RAM Artifacts: A Memory Forensics Approach;2023 3rd Intelligent Cybersecurity Conference (ICSC);2023-10-23

5. Module extraction and DLL hijacking detection via single or multiple memory dumps;Forensic Science International: Digital Investigation;2023-03