<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-03657232</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-19T03:35:24+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Resident Data Pattern Analysis Using Sector Clustering for Storage Drive Forensics</title>
            <author role="aut">
              <persName>
                <forename type="first">Nitesh</forename>
                <surname>Bharadwaj</surname>
              </persName>
              <idno type="halauthorid">2492593-0</idno>
              <affiliation ref="#struct-493661"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Upasna</forename>
                <surname>Singh</surname>
              </persName>
              <idno type="halauthorid">1503756-0</idno>
              <affiliation ref="#struct-493661"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Gaurav</forename>
                <surname>Gupta</surname>
              </persName>
              <email type="md5">6a09d943a07046182b07f39740f3da2b</email>
              <email type="domain">iiitd.ac.in</email>
              <idno type="idhal" notation="numeric">1028693</idno>
              <idno type="halauthorid" notation="string">1078377-1028693</idno>
              <affiliation ref="#struct-1095524"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2022-05-02 17:23:46</date>
              <date type="whenModified">2022-05-03 09:05:53</date>
              <date type="whenReleased">2022-05-03 09:05:27</date>
              <date type="whenProduced">2020-01-06</date>
              <date type="whenEndEmbargoed">2023-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-03657232v1/document">
                <date notBefore="2023-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-03657232v1/file/503209_1_En_8_Chapter.pdf" id="file-3657232-3193348">
                <date notBefore="2023-01-01"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-03657232</idno>
            <idno type="halUri">https://inria.hal.science/hal-03657232</idno>
            <idno type="halBibtex">bharadwaj:hal-03657232</idno>
            <idno type="halRefHtml">&lt;i&gt;16th IFIP International Conference on Digital Forensics (DigitalForensics)&lt;/i&gt;, Jan 2020, New Delhi, India. pp.137-157, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-030-56223-6_8"&gt;&amp;#x27E8;10.1007/978-3-030-56223-6_8&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">16th IFIP International Conference on Digital Forensics (DigitalForensics), Jan 2020, New Delhi, India. pp.137-157, &amp;#x27E8;10.1007/978-3-030-56223-6_8&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-3657232-3193348"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP-LNCS" corresp="IFIP">IFIP - Lecture Notes in Computer Science</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-AICT" corresp="IFIP">IFIP Advances in Information and Communication Technology</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-WG" corresp="IFIP">Working Groups</idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-DF" corresp="IFIP-LNCS">IFIP-DF</idno>
            <idno type="stamp" n="IFIP-WG11-9" corresp="IFIP-WG">IFIP-WG11-9</idno>
            <idno type="stamp" n="IFIP-AICT-589" corresp="IFIP-AICT">Advances in Digital Forensics XVI</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 3: Filesystem Forensics</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Resident Data Pattern Analysis Using Sector Clustering for Storage Drive Forensics</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Nitesh</forename>
                    <surname>Bharadwaj</surname>
                  </persName>
                  <idno type="halauthorid">2492593-0</idno>
                  <affiliation ref="#struct-493661"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Upasna</forename>
                    <surname>Singh</surname>
                  </persName>
                  <idno type="halauthorid">1503756-0</idno>
                  <affiliation ref="#struct-493661"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Gaurav</forename>
                    <surname>Gupta</surname>
                  </persName>
                  <email type="md5">6a09d943a07046182b07f39740f3da2b</email>
                  <email type="domain">iiitd.ac.in</email>
                  <idno type="idhal" notation="numeric">1028693</idno>
                  <idno type="halauthorid" notation="string">1078377-1028693</idno>
                  <affiliation ref="#struct-1095524"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">IFIP Advances in Information and Communication Technology</title>
                <meeting>
                  <title>16th IFIP International Conference on Digital Forensics (DigitalForensics)</title>
                  <date type="start">2020-01-06</date>
                  <date type="end">2020-01-08</date>
                  <settlement>New Delhi</settlement>
                  <country key="IN">India</country>
                </meeting>
                <editor>Gilbert Peterson</editor>
                <editor>Sujeet Shenoi</editor>
                <imprint>
                  <publisher>Springer International Publishing</publisher>
                  <biblScope unit="serie">Advances in Digital Forensics XVI</biblScope>
                  <biblScope unit="volume">AICT-589</biblScope>
                  <biblScope unit="pp">137-157</biblScope>
                  <date type="datePub">2020</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-030-56223-6_8</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">unsupervised clustering</term>
                <term xml:lang="en">random sector sampling</term>
                <term xml:lang="en">Large storage drives</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Storage drives are huge reservoirs of digital evidence. The acquisition and examination of storage drives for evidentiary artifacts require enormous amounts of manual effort and computing resources, leading to huge case backlogs. This chapter describes a forensic triage methodology that leverages random sampling and unsupervised clustering to provide insights about the regions of interest on a storage drive. The number of sector samples to be evaluated during triage for legitimate inferences to be drawn about drive content is also discussed. Experiments involving storage drives of various capacities illustrate the effectiveness and utility of the extracted patterns for rapid drive triage.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
              <org type="consortium">WG 11.9</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-493661" status="VALID">
          <orgName>Defence Institute of Advanced Technology</orgName>
          <desc>
            <address>
              <addrLine>DIAT, KhadakwaslaGirinagar</addrLine>
              <country key="IN"/>
            </address>
            <ref type="url">https://diat.ac.in/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-1095524" status="VALID">
          <orgName>Ministry of Electronics and Information Technology [New Delhi]</orgName>
          <desc>
            <address>
              <country key="IN"/>
            </address>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>