{"meta":{"page":1,"per_page":50,"max_per_page":100,"total":13,"total_is_capped":false,"direct_labels_cover":0,"predictions_cover":13,"direct_label_status":"direct model label, unvalidated","prediction_status":"machine_predicted_unvalidated (Codex and Gemma teacher distillation)","score_status":"score_only:v0-immature-baseline (scores rank; they never assert a category)","snapshot":{"source":"OpenAlex, pinned release, all 482 partitions","release":"2026-06-24","frame_built":"2026-07-12","author_layer_release":"2026-06-26"},"query_hash":"2c1bc47393e7","filters":{"venue":"Digital Investigation"}},"results":[{"id":"W2125962012","doi":"10.1016/j.diin.2010.03.003","title":"Mining writeprints from anonymous e-mails for forensic investigation","year":2010,"lang":"en","type":"article","venue":"Digital Investigation","topic":"Authorship Attribution and Profiling","field":"Computer Science","cited_by":146,"is_retracted":false,"has_abstract":false,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; Exploit; Cluster analysis; Stylometry; Anonymity; Identification (biology); Classifier (UML); Cybercrime; Focus (optics); Writing style; Information retrieval; World Wide Web; Data science; Data mining; Artificial intelligence; Computer security; The Internet","authors":[{"name":"Farkhund Iqbal","is_ca":true},{"name":"Hamad Binsalleeh","is_ca":true},{"name":"Benjamin C. M. Fung","is_ca":true},{"name":"Mourad Debbabi","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.04413737110212299,"gpt":0.2634196282676218,"spread":0.2192822571654988,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002736854,0.0007698136,0.000697794,0.01348977,0.001373236,0.002439719,0.0008922673,0.001409183,0.003144258],"category_scores_gemma":[0.02955322,0.0003559741,0.0004821336,0.008154401,0.0005021053,0.002376371,0.00164747,0.0008320834,0.005449221],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000383343,"about_ca_system_score_gemma":0.001221121,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000434737,"about_ca_topic_score_gemma":0.0009384266,"domain_scores_codex":[0.994091,0.001228553,0.0009818757,0.0007595256,0.002370002,0.0005690475],"domain_scores_gemma":[0.9504859,0.01921589,0.01176661,0.008107142,0.008720583,0.001704051],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.001261488,0.0006632371,0.3534002,0.001039289,0.0001781805,0.004060037,0.003596753,0.003100144,0.03670503,0.006260365,0.02593942,0.563796],"study_design_scores_gemma":[0.0001058108,0.001097546,0.4096667,0.001001475,0.0007170813,0.01817424,0.01643811,0.1300568,0.203346,0.03048776,0.1886107,0.0002977234],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9057133,0.001623818,0.06044876,0.001000734,0.0004663545,0.0004299869,0.01647409,0.002294646,0.01154833],"genre_scores_gemma":[0.9261526,0.0008444351,0.0465415,0.0001481763,0.000454444,0.0002153361,0.01505832,0.0002181424,0.01036699],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.01348977,"threshold_uncertainty_score":0.01447403,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2123407642","doi":"10.1016/j.diin.2008.05.001","title":"A novel approach of mining write-prints for authorship attribution in e-mail forensics","year":2008,"lang":"en","type":"article","venue":"Digital Investigation","topic":"Authorship Attribution and Profiling","field":"Computer Science","cited_by":131,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University","funders":"","keywords":"Authorship attribution; Suspect; Computer science; Attribution; Decision tree; Support vector machine; Quality (philosophy); Information retrieval; Data mining; Data science; Computer security; Artificial intelligence; Psychology","authors":[{"name":"Farkhund Iqbal","is_ca":true},{"name":"Rachid Hadjidj","is_ca":true},{"name":"Benjamin C. M. Fung","is_ca":true},{"name":"Mourad Debbabi","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.1382981898189501,"gpt":0.2774152743910965,"spread":0.1391170845721464,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001634958,0.000696854,0.001029288,0.006485504,0.0009063369,0.001676474,0.001412654,0.001477657,0.0007330155],"category_scores_gemma":[0.009291749,0.0003982355,0.000802186,0.004088483,0.0006974593,0.00242967,0.001044763,0.0009566247,0.0005856178],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000350546,"about_ca_system_score_gemma":0.000889021,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0007252286,"about_ca_topic_score_gemma":0.00113516,"domain_scores_codex":[0.9974917,0.0005328101,0.0003192521,0.0007190591,0.0007566535,0.0001805432],"domain_scores_gemma":[0.9945996,0.0019844,0.001152905,0.0008477832,0.001200244,0.0002150589],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0003824673,0.001132561,0.06326223,0.000430859,0.0002197101,0.0006944423,0.0009081998,0.02191262,0.0218417,0.006278247,0.003272608,0.8796643],"study_design_scores_gemma":[0.00006647349,0.0003894044,0.02734105,0.00009325144,0.0001384559,0.002219816,0.0006872435,0.9183375,0.02710585,0.01631269,0.007204607,0.0001036541],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.2062648,0.0007668533,0.7882147,0.000609567,0.0001499778,0.0002528717,0.00075967,0.001386467,0.001595044],"genre_scores_gemma":[0.6039976,0.000315137,0.3925392,0.00008255549,0.0001730242,0.0001752187,0.0008403155,0.00004245376,0.001834571],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.006485504,"threshold_uncertainty_score":0.008646548,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2085509246","doi":"10.1016/j.diin.2009.01.004","title":"Towards an integrated e-mail forensic analysis framework","year":2009,"lang":"en","type":"article","venue":"Digital Investigation","topic":"Authorship Attribution and Profiling","field":"Computer Science","cited_by":86,"is_retracted":false,"has_abstract":false,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; Phishing; Spamming; Law enforcement; Harassment; Computer security; Context (archaeology); Child pornography; Cybercrime; Digital forensics; The Internet; Internet privacy; World Wide Web; Data science","authors":[{"name":"Rachid Hadjidj","is_ca":true},{"name":"Mourad Debbabi","is_ca":true},{"name":"Hakim Lounis","is_ca":true},{"name":"Farkhund Iqbal","is_ca":true},{"name":"Adam Szporer","is_ca":true},{"name":"Djamel Benredjem","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.03798295588258519,"gpt":0.2880873846024712,"spread":0.250104428719886,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.007012168,0.001231271,0.001531556,0.005885012,0.001747084,0.009114946,0.003617381,0.002551292,0.002163807],"category_scores_gemma":[0.009473628,0.0009438525,0.002195224,0.002596828,0.001499407,0.008689633,0.006469801,0.002790518,0.001679728],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001248939,"about_ca_system_score_gemma":0.004266826,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002839852,"about_ca_topic_score_gemma":0.004614846,"domain_scores_codex":[0.9947795,0.001201555,0.0005785894,0.0007977075,0.00231806,0.0003247407],"domain_scores_gemma":[0.9933124,0.001494894,0.0006290728,0.001873494,0.002244938,0.0004451262],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0003024941,0.001209923,0.008035474,0.0005452886,0.0005741271,0.0009185857,0.001408703,0.06595964,0.02392375,0.3295059,0.01425098,0.5533652],"study_design_scores_gemma":[0.00003292141,0.00009135954,0.001324461,0.0002020215,0.0002877275,0.0005841674,0.0005655433,0.7630568,0.0236903,0.1817719,0.02830014,0.00009264102],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.00212757,0.00006980805,0.9940034,0.0001734799,0.00001541514,0.0001065855,0.00008485108,0.002716714,0.0007022418],"genre_scores_gemma":[0.07274595,0.0001687316,0.924455,0.0001349725,0.00004995695,0.0001421494,0.0005141214,0.0002475034,0.001541615],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.009114946,"threshold_uncertainty_score":0.03708434,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2465152470","doi":"10.1016/j.diin.2016.07.001","title":"Detecting predatory conversations in social media by deep Convolutional Neural Networks","year":2016,"lang":"en","type":"article","venue":"Digital Investigation","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":75,"is_retracted":false,"has_abstract":false,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Computer science; Convolutional neural network; Artificial intelligence; Support vector machine; Classifier (UML); Deep learning; Identification (biology); Machine learning; Domain (mathematical analysis)","authors":[{"name":"Mohammadreza Ebrahimi","is_ca":true},{"name":"Ching Y. Suen","is_ca":true},{"name":"Olga Ormandjieva","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01804575148769443,"gpt":0.2084786305199205,"spread":0.1904328790322261,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.000554258,0.0009870441,0.0004419665,0.002023712,0.0004581792,0.0008742249,0.0005783356,0.001068021,0.001282043],"category_scores_gemma":[0.002141363,0.0003500951,0.0004403277,0.0007917016,0.0003480545,0.001461465,0.001067121,0.001197104,0.0008630679],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006644533,"about_ca_system_score_gemma":0.0004775351,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.006875437,"about_ca_topic_score_gemma":0.0121871,"domain_scores_codex":[0.9995571,0.0001010071,0.00001858828,0.00009178067,0.0001084622,0.000123137],"domain_scores_gemma":[0.9987766,0.0006452805,0.0002212495,0.00008404422,0.0001951962,0.00007773229],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001395277,0.001560255,0.1565941,0.0003810967,0.0004551312,0.001303011,0.001129155,0.06040564,0.07289783,0.004992,0.017063,0.6818235],"study_design_scores_gemma":[0.000008343316,0.00007636798,0.0170365,0.00003091203,0.00005012085,0.0001498373,0.0002432459,0.9678331,0.009938573,0.002957915,0.001654069,0.00002105707],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.862143,0.001874764,0.1223953,0.001139031,0.0003123249,0.0001238378,0.001633786,0.001765777,0.008612147],"genre_scores_gemma":[0.9808598,0.0003429909,0.01440574,0.0001303185,0.0001140561,0.00002794863,0.0008402668,0.00002925982,0.003249713],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.006875437,"threshold_uncertainty_score":0.0136708,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2129364433","doi":"10.1016/j.diin.2014.03.012","title":"OBA2: An Onion approach to Binary code Authorship Attribution","year":2014,"lang":"en","type":"article","venue":"Digital Investigation","topic":"Authorship Attribution and Profiling","field":"Computer Science","cited_by":73,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; Authorship attribution; Code (set theory); Binary number; Attribution; Information retrieval; World Wide Web; Programming language; Natural language processing; Arithmetic; Mathematics","authors":[{"name":"Saed Alrabaee","is_ca":true},{"name":"Noman Saleem","is_ca":true},{"name":"Stere Preda","is_ca":true},{"name":"Lingyu Wang","is_ca":true},{"name":"Mourad Debbabi","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.07222085393703048,"gpt":0.2798793971174146,"spread":0.2076585431803841,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.005638445,0.002344837,0.0019313,0.01347886,0.002167991,0.005595443,0.003432627,0.002495188,0.01061486],"category_scores_gemma":[0.02030686,0.001037473,0.002515738,0.005578621,0.001900244,0.009082415,0.009773344,0.00299408,0.005661183],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001559914,"about_ca_system_score_gemma":0.002383099,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003724997,"about_ca_topic_score_gemma":0.006826123,"domain_scores_codex":[0.9919528,0.001628775,0.0006049283,0.001755853,0.003197209,0.0008602796],"domain_scores_gemma":[0.9883562,0.003182909,0.001566611,0.004519201,0.001800593,0.0005744665],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.0009929063,0.0005501937,0.02241216,0.0003882967,0.0003887706,0.001081411,0.0016366,0.01940351,0.009106222,0.06278166,0.04051956,0.8407387],"study_design_scores_gemma":[0.00009099083,0.0002228888,0.005759291,0.0002429025,0.0001644539,0.001197484,0.0008105217,0.7247509,0.02076602,0.1558158,0.09002583,0.0001528805],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.02230486,0.0007239009,0.9254867,0.001162862,0.0005043003,0.0006452354,0.00226637,0.03005123,0.01685464],"genre_scores_gemma":[0.2817112,0.000617424,0.6764323,0.00099894,0.0005968587,0.0007754001,0.00717754,0.003853606,0.02783695],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.01347886,"threshold_uncertainty_score":0.03551018,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W1779974843","doi":"10.1016/j.diin.2015.05.015","title":"BinComp: A stratified approach to compiler provenance Attribution","year":2015,"lang":"en","type":"article","venue":"Digital Investigation","topic":"Software Engineering Research","field":"Computer Science","cited_by":57,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University","funders":"","keywords":"Compiler; Computer science; Compiler correctness; Compiler construction; Optimizing compiler; Interprocedural optimization; Programming language; Loop optimization; Semantics (computer science)","authors":[{"name":"Ashkan Rahimian","is_ca":true},{"name":"Paria Shirani","is_ca":true},{"name":"Saed Alrbaee","is_ca":true},{"name":"Lingyu Wang","is_ca":true},{"name":"Mourad Debbabi","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.07929534497281193,"gpt":0.2663574744014908,"spread":0.1870621294286789,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.004095411,0.0009880832,0.001027878,0.003162626,0.001564778,0.003354972,0.002560927,0.001257328,0.002226873],"category_scores_gemma":[0.01379532,0.001258986,0.001657175,0.003004954,0.001590521,0.005581862,0.005218673,0.002336308,0.001787725],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00138941,"about_ca_system_score_gemma":0.004451753,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.006805953,"about_ca_topic_score_gemma":0.01020712,"domain_scores_codex":[0.9948827,0.00112731,0.0004137622,0.001020314,0.002221696,0.0003341324],"domain_scores_gemma":[0.9878799,0.002434472,0.001066873,0.006342024,0.001983392,0.0002933474],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.001393145,0.0005494907,0.02660721,0.0005731304,0.0004203335,0.0009945959,0.002083255,0.07782666,0.05780361,0.1325643,0.02387737,0.675307],"study_design_scores_gemma":[0.00005968594,0.000154758,0.00442428,0.000104221,0.000117441,0.0006290384,0.0002280385,0.737279,0.0907713,0.1182769,0.04778986,0.0001654594],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.009430369,0.000106276,0.9705632,0.00009934854,0.00003264008,0.0001464798,0.0005304998,0.01784722,0.001243965],"genre_scores_gemma":[0.1109917,0.0001242454,0.881237,0.0001332801,0.00003319275,0.0001768222,0.002616794,0.002602882,0.002084019],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.006805953,"threshold_uncertainty_score":0.02165884,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W1982623151","doi":"10.1016/j.diin.2009.06.003","title":"Extraction of forensically sensitive information from windows physical memory","year":2009,"lang":"en","type":"article","venue":"Digital Investigation","topic":"Digital and Cyber Forensics","field":"Computer Science","cited_by":48,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; String searching algorithm; Focus (optics); String (physics); Matching (statistics); Protocol (science); Data mining; Pattern matching; Information retrieval; Artificial intelligence","authors":[{"name":"Seyyed Mahmood Hejazi","is_ca":true},{"name":"Chamseddine Talhi","is_ca":true},{"name":"Mourad Debbabi","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.008646516644480599,"gpt":0.2095923998710739,"spread":0.2009458832265933,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003901022,0.0003751513,0.0003514329,0.003362502,0.0003850561,0.0009229743,0.0004906646,0.000680153,0.001320295],"category_scores_gemma":[0.003255133,0.0002544437,0.0002033122,0.001823307,0.0003782481,0.001528769,0.0008973894,0.0005500498,0.0007264138],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001410043,"about_ca_system_score_gemma":0.0003818199,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00018566,"about_ca_topic_score_gemma":0.0002452766,"domain_scores_codex":[0.9996173,0.00004065677,0.00003951043,0.00005597545,0.000199546,0.00004678244],"domain_scores_gemma":[0.998229,0.0004230509,0.0003417874,0.0005927085,0.0003639031,0.00004958595],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.0005273793,0.0001043477,0.009990716,0.0004816467,0.00004936755,0.003277997,0.001381581,0.002992187,0.3813826,0.00859358,0.003003133,0.5882156],"study_design_scores_gemma":[0.00003155581,0.0003628481,0.03004866,0.0002855528,0.0001620246,0.00827236,0.001587524,0.05559532,0.8488223,0.01670809,0.03800081,0.0001228382],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5640455,0.001996731,0.4189822,0.000499895,0.0002533992,0.0002450771,0.001394771,0.003486212,0.009096136],"genre_scores_gemma":[0.8265469,0.000989037,0.1677734,0.000100471,0.00006093916,0.00007811018,0.0008791428,0.0002138288,0.003358298],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.003362502,"threshold_uncertainty_score":0.004416823,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2297444916","doi":"10.1016/j.diin.2016.01.010","title":"Tiered forensic methodology model for Digital Field Triage by non-digital evidence specialists","year":2016,"lang":"en","type":"article","venue":"Digital Investigation","topic":"Digital and Cyber Forensics","field":"Computer Science","cited_by":47,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Royal Canadian Mounted Police","funders":"","keywords":"Triage; Digital forensics; Process (computing); Premise; Field (mathematics); Computer forensics","authors":[],"retraction":null,"screen_n_in":null,"score":{"opus":0.1057336178204691,"gpt":0.2896694294360085,"spread":0.1839358116155393,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.01093972,0.000813477,0.000401922,0.002440722,0.001186171,0.003657543,0.002335367,0.001664944,0.006028717],"category_scores_gemma":[0.01191895,0.0004315657,0.001168132,0.001313596,0.001562029,0.003127103,0.002286475,0.001407374,0.002267838],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.003067751,"about_ca_system_score_gemma":0.008855098,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.004009505,"about_ca_topic_score_gemma":0.005676129,"domain_scores_codex":[0.9892532,0.005663854,0.0007968511,0.001054752,0.002787675,0.0004436193],"domain_scores_gemma":[0.9902805,0.003829951,0.000980729,0.001674753,0.002816985,0.0004169055],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.000333616,0.0007266364,0.008368338,0.0008288589,0.0001614035,0.0006342252,0.003836538,0.1380933,0.01247186,0.4430614,0.006172155,0.3853116],"study_design_scores_gemma":[0.0001177238,0.0007218005,0.002088008,0.000365917,0.0001040324,0.0008597029,0.001100547,0.7442629,0.00646091,0.1873326,0.05646678,0.0001190561],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":"theoretical_or_conceptual","genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.002769389,0.0000855484,0.9924784,0.00032043,0.00002758492,0.0004899318,0.00005193709,0.0003026124,0.00347421],"genre_scores_gemma":[0.06597104,0.0001795937,0.9300154,0.0002056795,0.00002568397,0.0007279831,0.0001602292,0.00004088047,0.002673531],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.01093972,"threshold_uncertainty_score":0.05785543,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2884079571","doi":"10.1016/j.diin.2018.04.012","title":"Automated forensic analysis of mobile applications on Android devices","year":2018,"lang":"en","type":"article","venue":"Digital Investigation","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":42,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false},"ca_institutions":"Wilfrid Laurier University","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Computer science; Android (operating system); Taint checking; Digital forensics; Static analysis; Scalability; Mobile device; Bytecode; Parsing; SQL injection; Database; Java; Operating system; World Wide Web; Programming language; Search engine","authors":[{"name":"Xiaodong Lin","is_ca":true},{"name":"Ting Chen","is_ca":false},{"name":"Tong Zhu","is_ca":false},{"name":"Kun Yang","is_ca":false},{"name":"Fengguo Wei","is_ca":false}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01451430542398359,"gpt":0.2762935327133167,"spread":0.2617792272893331,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0006932948,0.0007952763,0.0004180617,0.003137031,0.0005360032,0.0006633764,0.0006411127,0.0004722153,0.0008805773],"category_scores_gemma":[0.005420574,0.000319399,0.0005547492,0.0009417277,0.0003739763,0.001181944,0.001135505,0.0003964065,0.0005905117],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0003564075,"about_ca_system_score_gemma":0.0008658676,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00189094,"about_ca_topic_score_gemma":0.002446011,"domain_scores_codex":[0.9989022,0.0002116754,0.00009448778,0.0002081186,0.0004467129,0.0001368891],"domain_scores_gemma":[0.9961929,0.00145707,0.0005230015,0.0008327468,0.0009128654,0.00008135148],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.00100149,0.0003045335,0.06320271,0.0009000418,0.0001777346,0.004259152,0.002157554,0.0236577,0.1213361,0.006020171,0.01512603,0.7618568],"study_design_scores_gemma":[0.0001428929,0.0009183537,0.1436671,0.0004956308,0.0003608096,0.007512517,0.002255998,0.5340241,0.2532961,0.01544984,0.04158631,0.000290468],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.8814383,0.001440126,0.09636258,0.000388664,0.0001034342,0.0003357551,0.001549569,0.01314984,0.005231825],"genre_scores_gemma":[0.940616,0.0003875028,0.05591683,0.0001116834,0.00002177385,0.00009168727,0.001213457,0.0003144186,0.00132657],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.003137031,"threshold_uncertainty_score":0.003759921,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2516577067","doi":"10.1016/j.diin.2016.04.002","title":"BinGold: Towards robust binary analysis by extracting the semantics of binary code as semantic flow graphs (SFGs)","year":2016,"lang":"en","type":"article","venue":"Digital Investigation","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":41,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; Code refactoring; Control flow graph; Data-flow analysis; Obfuscation; Theoretical computer science; Binary code; Compiler; Static program analysis; Programming language; Binary number; Malware; Semantics (computer science); Data flow diagram; Software; Database; Software development","authors":[{"name":"Saed Alrabaee","is_ca":true},{"name":"Lingyu Wang","is_ca":true},{"name":"Mourad Debbabi","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.02176898801439601,"gpt":0.2510651739241297,"spread":0.2292961859097337,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001254513,0.001443321,0.0006579194,0.00459632,0.0006795417,0.001221875,0.001055691,0.0009207574,0.002479701],"category_scores_gemma":[0.006869507,0.0005904377,0.001250021,0.001631045,0.001308484,0.00313617,0.001572545,0.001235115,0.001342997],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008345732,"about_ca_system_score_gemma":0.001580093,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003735804,"about_ca_topic_score_gemma":0.004407742,"domain_scores_codex":[0.9985347,0.0002493623,0.0001149238,0.0002981033,0.0006809988,0.0001219816],"domain_scores_gemma":[0.9967518,0.00130453,0.000604916,0.0006422263,0.0006382803,0.00005830475],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0008319977,0.0002952081,0.01117675,0.001551867,0.000189237,0.0005842931,0.001171205,0.0445676,0.1091402,0.04551791,0.02065873,0.764315],"study_design_scores_gemma":[0.00009833127,0.000302229,0.006675863,0.0003208209,0.0001505261,0.0008370362,0.0004015623,0.6442687,0.1640423,0.1392621,0.04347272,0.0001678348],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.034419,0.0004472143,0.9123102,0.0001857237,0.00006434875,0.0002165457,0.001409908,0.04833538,0.002611658],"genre_scores_gemma":[0.2432462,0.0003644238,0.7418364,0.0003163124,0.00004245318,0.0002553366,0.005411224,0.006100492,0.002426994],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.00459632,"threshold_uncertainty_score":0.008295417,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W2118558829","doi":"10.1016/j.diin.2007.06.010","title":"Forensic memory analysis: From stack and code to execution history","year":2007,"lang":"en","type":"article","venue":"Digital Investigation","topic":"Security and Verification in Computing","field":"Computer Science","cited_by":34,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; Thread (computing); Call stack; Stack (abstract data type); Process (computing); Virtual memory; Operating system; Programming language; Parallel computing; Memory management; Overlay","authors":[{"name":"Ali Reza Arasteh","is_ca":true},{"name":"Mourad Debbabi","is_ca":true}],"retraction":null,"screen_n_in":null,"score":{"opus":0.03766217992191722,"gpt":0.2444065722086764,"spread":0.2067443922867592,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001795747,0.000796774,0.0005651176,0.003828235,0.0007532024,0.003113632,0.001410913,0.001147656,0.001979275],"category_scores_gemma":[0.009806622,0.0006110737,0.0009880272,0.001457697,0.003664023,0.00688668,0.002245011,0.001214459,0.0004313785],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001118082,"about_ca_system_score_gemma":0.001679679,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003024624,"about_ca_topic_score_gemma":0.001435071,"domain_scores_codex":[0.9985523,0.0003275185,0.00009655095,0.000266676,0.0005615996,0.0001954086],"domain_scores_gemma":[0.9953716,0.001839842,0.0007768631,0.001308127,0.0006085034,0.00009504913],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0004710339,0.0001935309,0.01853928,0.0005892846,0.0001816218,0.001898517,0.002452133,0.136765,0.0439361,0.4956001,0.002867717,0.2965057],"study_design_scores_gemma":[0.00003206467,0.0001635616,0.003829462,0.0002843259,0.0001463194,0.001174364,0.0007484286,0.5457341,0.06158458,0.3735794,0.01261055,0.0001128737],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.08352719,0.001082392,0.9090225,0.0004982635,0.00003591845,0.0001010867,0.0002961661,0.002153784,0.003282823],"genre_scores_gemma":[0.7855122,0.001089043,0.2093779,0.0001822391,0.000083138,0.0001335207,0.0004425516,0.000473709,0.002705664],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.003828235,"threshold_uncertainty_score":0.009496987,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W1419517020","doi":"10.1016/j.diin.2015.05.002","title":"Graph-theoretic characterization of cyber-threat infrastructures","year":2015,"lang":"en","type":"article","venue":"Digital Investigation","topic":"Complex Network Analysis Techniques","field":"Physics and Astronomy","cited_by":27,"is_retracted":false,"has_abstract":true,"routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false},"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; Computer security; Malware; PageRank; Cyber threats; Centrality; Key (lock); Critical infrastructure; Data science; Malware analysis; World Wide Web","authors":[{"name":"Amine Boukhtouta","is_ca":true},{"name":"Djedjiga Mouheb","is_ca":true},{"name":"Mourad Debbabi","is_ca":true},{"name":"Omar Alfandi","is_ca":false},{"name":"Farkhund Iqbal","is_ca":false},{"name":"May El Barachi","is_ca":false}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01633270437152233,"gpt":0.2333326084999213,"spread":0.216999904128399,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0008279723,0.000576941,0.0004678792,0.006854056,0.0006967069,0.00201655,0.0007605723,0.000803152,0.002091802],"category_scores_gemma":[0.007035837,0.0002786897,0.0004803973,0.003468035,0.001445118,0.00454099,0.0008862223,0.0008468679,0.0002471445],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001489577,"about_ca_system_score_gemma":0.000618362,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002346656,"about_ca_topic_score_gemma":0.002340811,"domain_scores_codex":[0.9992218,0.0002460002,0.00004418321,0.0001902061,0.0002216468,0.00007608189],"domain_scores_gemma":[0.9927143,0.003758928,0.0019205,0.0006410517,0.0005653125,0.0003997496],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0001283369,0.0002591225,0.06976051,0.0005912436,0.000262386,0.0005378397,0.001001142,0.3107497,0.007994126,0.5407506,0.006910476,0.06105454],"study_design_scores_gemma":[0.00001601338,0.00006931764,0.02459337,0.00006650147,0.00006623974,0.0006259661,0.0006978576,0.6297808,0.00160023,0.3318241,0.01062514,0.00003456087],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5680949,0.001968822,0.4058864,0.002199947,0.00005554983,0.0002309384,0.003775598,0.0005187797,0.01726904],"genre_scores_gemma":[0.9622882,0.0006575963,0.03396107,0.00009667031,0.00006314945,0.00008581226,0.001886973,0.00003811835,0.0009224205],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.006854056,"threshold_uncertainty_score":0.01080769,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null},{"id":"W285492148","doi":"","title":"Steve Anson and Steve Bunting, Mastering Windows network forensics and investigations , Sybex (an imprint of Wiley Publishing Inc.), US and Canada (2007) ISBN 978-0-4700-9762-5 530 pp.","year":2009,"lang":"en","type":"article","venue":"Digital Investigation","topic":"Digital and Cyber Forensics","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":false,"routes":{"ca_aff":false,"ca_fund":false,"ca_venue":false,"about_ca":true},"ca_institutions":"","funders":"","keywords":"Bunting; Computer science; Network forensics; Operating system; Geology; Digital forensics; Paleontology","authors":[{"name":"Peter F.R. Forster","is_ca":false}],"retraction":null,"screen_n_in":null,"score":{"opus":0.01252887328574015,"gpt":0.1884366597431249,"spread":0.1759077864573848,"validation_status":"score_only:v0-immature-baseline"},"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.003133611,0.001162532,0.000672037,0.003235742,0.001557621,0.003778803,0.001644955,0.005040266,0.01942233],"category_scores_gemma":[0.009406154,0.0008345422,0.0003231846,0.00175932,0.002622233,0.007488558,0.002294742,0.003714354,0.02343606],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008714782,"about_ca_system_score_gemma":0.001154056,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.004809321,"about_ca_topic_score_gemma":0.008369721,"domain_scores_codex":[0.9979175,0.0003436056,0.0001172262,0.0002360549,0.001311906,0.00007375604],"domain_scores_gemma":[0.9957557,0.002173319,0.0002629989,0.0001991413,0.001236639,0.0003721741],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"not_applicable","study_design_gemma":"not_applicable","study_design_scores_codex":[0.00003932973,0.00002689433,0.0003266346,0.000502318,0.00001094318,0.0001549847,0.000418457,0.000294068,0.0006000837,0.008221391,0.7906202,0.1987846],"study_design_scores_gemma":[0.000009308702,0.00002103807,0.0005161447,0.0004819747,0.000007398626,0.001071064,0.0005321537,0.0004388247,0.001147993,0.01339368,0.9823417,0.00003866184],"study_design_candidate":"not_applicable","study_design_consensus":"not_applicable","genre_codex":"review","genre_gemma":"review","genre_scores_codex":[0.002101259,0.6536974,0.0807788,0.1694944,0.02075516,0.0002135967,0.0006128287,0.002007765,0.07033883],"genre_scores_gemma":[0.02040551,0.6903223,0.0621484,0.02876636,0.01112145,0.0002089782,0.0007918098,0.0007693653,0.1854658],"genre_candidate":"review","genre_consensus":"review","teacher_disagreement_score":0.01942233,"threshold_uncertainty_score":0.06497413,"prediction_status":"machine_predicted_unvalidated"},"labels":[],"label_agreement":null}]}