Study on the tracking revision history of MS Word files for forensic investigation
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Jeong, Doowon | - |
dc.contributor.author | Lee, Sangjin | - |
dc.date.accessioned | 2021-09-02T22:19:09Z | - |
dc.date.available | 2021-09-02T22:19:09Z | - |
dc.date.created | 2021-06-16 | - |
dc.date.issued | 2017-12 | - |
dc.identifier.issn | 1742-2876 | - |
dc.identifier.uri | https://scholar.korea.ac.kr/handle/2021.sw.korea/81321 | - |
dc.description.abstract | Document forensics remains an important field of digital forensics. To date, previously existing methods focused on the last saved version of the document file stored on the PC; however, the drawback of this approach is that this provides no indication as to how the contents have been modified. This paper provides a novel method for document forensics based on tracking the revision history of a Microsoft Word file. The proposed method concentrates on the TMP file created when the author saves the file and the ASD file created periodically by Microsoft Word during editing. A process whereby the revision history lists are generated based on metadata of the Word, TMP, and ASD files is presented. Furthermore, we describe a technique developed to link the revision history lists based on similarity. These outcomes can provide considerable assistance to a forensic investigator trying to establish the extent to which document file contents have been changed and when the file was created, modified, deleted, and copied. (c) 2017 Elsevier Ltd. All rights reserved. | - |
dc.language | English | - |
dc.language.iso | en | - |
dc.publisher | ELSEVIER SCI LTD | - |
dc.title | Study on the tracking revision history of MS Word files for forensic investigation | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Lee, Sangjin | - |
dc.identifier.doi | 10.1016/j.diin.2017.08.003 | - |
dc.identifier.scopusid | 2-s2.0-85029421285 | - |
dc.identifier.wosid | 000418050200002 | - |
dc.identifier.bibliographicCitation | DIGITAL INVESTIGATION, v.23, pp.3 - 10 | - |
dc.relation.isPartOf | DIGITAL INVESTIGATION | - |
dc.citation.title | DIGITAL INVESTIGATION | - |
dc.citation.volume | 23 | - |
dc.citation.startPage | 3 | - |
dc.citation.endPage | 10 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Interdisciplinary Applications | - |
dc.subject.keywordAuthor | Document forensic | - |
dc.subject.keywordAuthor | Microsoft word file | - |
dc.subject.keywordAuthor | Temporary file | - |
dc.subject.keywordAuthor | Revision history | - |
dc.subject.keywordAuthor | Forensic investigation | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
145 Anam-ro, Seongbuk-gu, Seoul, 02841, Korea+82-2-3290-2963
COPYRIGHT © 2021 Korea University. All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.