Change search
Link to record
Permanent link

Direct link
BETA
Holleboom, Thijs JanORCID iD iconorcid.org/0000-0003-0861-2813
Alternative names
Publications (10 of 31) Show all publications
Holleboom, T. J. & Garcia, J. (2010). Fragment Retention Characteristics in Slack Space: Analysis and Measurements. In: Proceedings Security and Communication Networks (IWSCN), 2010 2nd International Workshop on  Security and Communication Networks: . Paper presented at 2nd International Workshop on Security and Communucation Networks Karlstad 26-28 May 2010. IEEE Computer Society
Open this publication in new window or tab >>Fragment Retention Characteristics in Slack Space: Analysis and Measurements
2010 (English)In: Proceedings Security and Communication Networks (IWSCN), 2010 2nd International Workshop on  Security and Communication Networks, IEEE Computer Society, 2010Conference paper, Published paper (Refereed)
Abstract [en]

When files are deleted, their information is not removed from the storage media. This is a well known fact, and there exist numerous undelete utilities to recover newly deleted files. When deleted files have been partly overwritten, the data from the part of the file that remains in unallocated space can be readily extracted by file carving. Such carving is often performed in forensic investigations. Furthermore, as a consequence of file system implementation specifics, there additionally exist small remains of the previous files in the space at the end of new files. In this paper we focus on these small remains of previous files, or micro-fragments, that exist even after all the space allocated to the previous file has been reallocated to new files. We derive expressions for modeling the number of micro-fragments that can be expected to be found, and perform experiments to evaluate the analytical model. The obtained results indicate good correspondence between the analytical predictions and the measured results.

Place, publisher, year, edition, pages
IEEE Computer Society, 2010
Keywords
Computer Foresics, Fragment detection
National Category
Computer Sciences
Research subject
Computer Science
Identifiers
urn:nbn:se:kau:diva-9811 (URN)10.1109/IWSCN.2010.5497996 (DOI)978-1-4244-6938-3 (ISBN)978-1-4244-6939-0 (ISBN)
Conference
2nd International Workshop on Security and Communucation Networks Karlstad 26-28 May 2010
Available from: 2012-02-08 Created: 2012-02-08 Last updated: 2019-07-12Bibliographically approved
Gurnett, M., Holleboom, T., Zhang, H. & Johansson, L. (2009). Photoemission study of the Li/Ge(111)-3×1 reconstruction. Surface Science, 603(4), 727-735
Open this publication in new window or tab >>Photoemission study of the Li/Ge(111)-3×1 reconstruction
2009 (English)In: Surface Science, ISSN 0039-6028, E-ISSN 1879-2758, ISSN 0039-6028, Vol. 603, no 4, p. 727-735Article in journal (Refereed) Published
Abstract [en]

In this article we report our findings on the electronic structure of the Li induced Ge(1 1 1)–3 × 1reconstruction as determined by angle-resolved ultraviolet photoelectron spectroscopy (ARUPS) and core-level spectroscopy using synchrotron radiation. The results are compared to the theoretical honeycomb-chain-channel (HCC) model for the 3 × 1reconstruction as calculated using density functional theory (DFT). ARUPS measurements were performed in both the and directions of the 1 × 1 surface Brillouin zone at photon energies of 17 and 21.2 eV. Three surface related states were observed in the direction. In the direction, at least two surface states were seen. The calculated band structure using the single-domain HCC model for Li/Ge(1 1 1)–3 × 1 was in good agreement with experiment, allowing for the determination of the origin of the experimentally observed surface states. In the Ge core-level spectra, two surface related components were identified, both at lower binding energy with respect to the Ge bulk peak. Our DFT calculations of the surface core-level shifts were found to be in fair agreement with the experimental results. Finally, in contrast to the Li/Si(1 1 1)–3 × 1 case, no double bond between Ge atoms in the top layer was found

Place, publisher, year, edition, pages
Elsevier, 2009
Keywords
Synchrotron radiation photoelectron spectroscopy Angle-resolved photoemission Density functional calculations Surface structure Electronic structure Germanium Lithium
National Category
Physical Sciences Condensed Matter Physics
Research subject
Physics
Identifiers
urn:nbn:se:kau:diva-11009 (URN)10.1016/j.susc.2009.01.019 (DOI)
Funder
Swedish Research Council
Available from: 2012-02-08 Created: 2012-02-08 Last updated: 2019-07-12Bibliographically approved
Garcia, J. & Holleboom, T. J. (2009). Retention of Micro-fragments in Cluster Slack: A First Model. In: First IEEE International Workshop on Information Forensics and Security (WIFS 2009): . Paper presented at IEEE Workshop on Information Forensics and Security (WIFS), 6-9 Dec. 2009 (pp. 31-35). London, UK: IEEE Signal Processing Society
Open this publication in new window or tab >>Retention of Micro-fragments in Cluster Slack: A First Model
2009 (English)In: First IEEE International Workshop on Information Forensics and Security (WIFS 2009), London, UK: IEEE Signal Processing Society, 2009, p. 31-35Conference paper, Published paper (Refereed)
Abstract [en]

In current forensic practice it is regularly needed to determine whether some set of files have been present on a storage medium or not. File carving techniques are readily used as a tool in such examinations. However, if all clusters holding the files searched for have been overwritten, remains of the previous files only resides in the cluster slack. In this work we elaborate on the factors that influence how many such cluster slack ¿micro-fragments¿ that can be expected to be detected. We identify a set of factors that influence the micro-fragment retention characteristics. One such characteristic is the file size distribution of the files overwriting the original files. We derive analytical expressions for three different file size distributions, which allows us to examine the retention characteristics even if the overwriting files come from different sources.

Place, publisher, year, edition, pages
London, UK: IEEE Signal Processing Society, 2009
National Category
Computer Sciences
Research subject
Computer Science
Identifiers
urn:nbn:se:kau:diva-11304 (URN)10.1109/WIFS.2009.5386487 (DOI)978-1-4244-5279-8 (ISBN)978-1-4244-5280-4 (ISBN)
Conference
IEEE Workshop on Information Forensics and Security (WIFS), 6-9 Dec. 2009
Available from: 2012-02-08 Created: 2012-02-08 Last updated: 2019-07-12Bibliographically approved
Lundin, R., Lindskog, S. & Holleboom, T. (2007). On the Relationship between Confidentiality Measures: Entropy and Guesswork. In: Mariemma Inmaculada Yagüe del Valle and Eduardo Fernández-Medina (Ed.), WOSIS. Paper presented at Proceedings of the 5th International Workshop on Security in Information Systems (WOSIS 2007), In conjunction with ICEIS 2007, Funchal, Madeira, Portugal, June 2007 (pp. 135-144). INSTICC Press
Open this publication in new window or tab >>On the Relationship between Confidentiality Measures: Entropy and Guesswork
2007 (English)In: WOSIS / [ed] Mariemma Inmaculada Yagüe del Valle and Eduardo Fernández-Medina, INSTICC Press , 2007, p. 135-144Conference paper, Published paper (Refereed)
Abstract [en]

In this paper, we investigate in detail the relationship between entropy and guesswork. The aim of the study is to lay the ground for future efficiency comparison of guessing strategies. After a short discussion of the two measures, and the differences between them, the formal definitions are given. Then, a redefinition of guesswork is made, since the measure is not completely accurate. The change is a minor modification in the last term of the sum expressing guesswork. Finally, two theorems are stated. The first states that the redefined guesswork is equal to the concept of cross entropy, and the second states, as a consequence of the first theorem, that the redefined guesswork is equal to the sum of the entropy and the relative entropy.

Place, publisher, year, edition, pages
INSTICC Press, 2007
National Category
Computer Sciences
Research subject
Computer Science
Identifiers
urn:nbn:se:kau:diva-1916 (URN)978-972-8865-96-2 (ISBN)
Conference
Proceedings of the 5th International Workshop on Security in Information Systems (WOSIS 2007), In conjunction with ICEIS 2007, Funchal, Madeira, Portugal, June 2007
Available from: 2007-10-09 Created: 2007-10-09 Last updated: 2019-07-12Bibliographically approved
Holleboom, T. J. (2005). Classification and Analysis of Errors in Wide Area Networks. Paper presented at Promote IT 2005, Borlänge, Sweden, May 11-13, 2005. Paper presented at Promote IT 2005, Borlänge, Sweden, May 11-13, 2005.
Open this publication in new window or tab >>Classification and Analysis of Errors in Wide Area Networks
2005 (English)Conference paper, Published paper (Refereed)
Abstract [en]

The error logs of routers in a WAN contain huge amounts of information about the functioning of individual components in the network. Errors may induce other errors and possibly chains

of errors. An attempt is made to classify and analyse certain chains of errors. Such a systematic approach will hopefully lead to improved possibilities for detecting malfunctioning components. Test have been performed on log data generated in SUNET. Results are presented and discussed.

National Category
Computer Sciences
Research subject
Computer Science
Identifiers
urn:nbn:se:kau:diva-17694 (URN)
Conference
Promote IT 2005, Borlänge, Sweden, May 11-13, 2005
Available from: 2013-01-21 Created: 2013-01-21 Last updated: 2019-07-12
Gurnett, M., Gustafsson, J., Holleboom, T. J., Magnusson, K., Widstrand, S., Johansson, L., . . . Gray, S. (2005). Core-level spectroscopy study of the Li/Si(111)-3x1, Na/Si(111)-3x1 and K/Si(111)-3x1 surfaces. Phys. Rev. B 71, 195408 (2005)
Open this publication in new window or tab >>Core-level spectroscopy study of the Li/Si(111)-3x1, Na/Si(111)-3x1 and K/Si(111)-3x1 surfaces
Show others...
2005 (English)In: Phys. Rev. B 71, 195408 (2005)Article in journal (Refereed)
National Category
Computer Sciences Physical Sciences
Research subject
Computer Science; Physics
Identifiers
urn:nbn:se:kau:diva-17889 (URN)
Available from: 2013-01-21 Created: 2013-01-21 Last updated: 2019-07-12
Fischer Hübner, S., Andersson, C. & Holleboom, T. J. (2005). Framework V1: PRIME project deliverable D14.1a.
Open this publication in new window or tab >>Framework V1: PRIME project deliverable D14.1a
2005 (English)Report (Refereed)
Abstract [en]

This document establishes the Framework Version 1 for the PRIME (Privacy and Identity Management

for Europe) project, which is a holistic framework that provides a detailed map of privacy-enhancing

identity management: it defines the problem space, the vision of PRIME, terminology and concepts,

models for users, metaphors, application scenarios, the legal, social and technical options, possible

business cases, and the technical challenges. In particular, the framework also encompasses a technical

architecture that specifically focuses on how the various mechanisms can or must interrelate.

The PRIME Framework V1 describes work in progress and presents first project results that were

achieved after the first year of the project. It will be further elaborated and refined for the next PRIME

Framework versions.

National Category
Computer Sciences
Research subject
Computer Science
Identifiers
urn:nbn:se:kau:diva-19449 (URN)
Available from: 2013-01-21 Created: 2013-01-21 Last updated: 2019-07-12
Stoltz, S., Starnberg, H. & Holleboom, T. J. (2005). Rb deposition on TiSe2 and TiTe2 at 100 K and at room temperature studied by photoelectron spectroscopy. Phys. Rev B 71, 125403 (2005)
Open this publication in new window or tab >>Rb deposition on TiSe2 and TiTe2 at 100 K and at room temperature studied by photoelectron spectroscopy
2005 (English)In: Phys. Rev B 71, 125403 (2005)Article in journal (Refereed)
National Category
Computer Sciences
Research subject
Computer Science
Identifiers
urn:nbn:se:kau:diva-22864 (URN)
Available from: 2013-01-22 Created: 2013-01-22 Last updated: 2019-07-12
Holleboom, T. J., Skantz, H. & Böhm, M. (2004). A Log Archiving System for Wide Area Networks. Paper presented at Promote IT 2004, Karlstad, Sweden, May 5-7, 2004. Paper presented at Promote IT 2004, Karlstad, Sweden, May 5-7, 2004.
Open this publication in new window or tab >>A Log Archiving System for Wide Area Networks
2004 (English)Conference paper, Published paper (Refereed)
Abstract [en]

Monitoring and maintaining modern Wide Area Networks is a complex and time consuming task. These are networks that are owned by different Internet Service Providers all over the world. The demands for accessibility grow hand in hand with the

increasing number of services and users. This makes effective troubleshooting more important than ever.

There is an obvious lack of tools today to support the analysis of the state of these networks. This work is an attempt to make this analysis faster, more accurate, and to reduce the demands on the network technicians. Today a technician has to work his way through a huge amount of log data produced by the routers in the network. Finding the cause of the problems often requires great skill, experience, and intuition.

The goal of this work is to speed up the process of nailing down the source of errors in the network. The basic approach is to store the data in a database. This allows for fast access, for the possibility of combining different methods of analysis, and for filtering out irrelevant information. Furthermore a database

also allows for the possibility of presenting statistics and tracking faults over longer periods of time.

National Category
Computer Sciences
Research subject
Computer Science
Identifiers
urn:nbn:se:kau:diva-16571 (URN)
Conference
Promote IT 2004, Karlstad, Sweden, May 5-7, 2004
Available from: 2013-01-21 Created: 2013-01-21 Last updated: 2019-07-12
Stoltz, S., Starnberg, H. & Holleboom, T. J. (2003). Evidence for Rb intercalation in TiTe2. Europhys. Lett. 64, 816 (2003)
Open this publication in new window or tab >>Evidence for Rb intercalation in TiTe2
2003 (English)In: Europhys. Lett. 64, 816 (2003)Article in journal (Refereed)
National Category
Computer Sciences
Research subject
Computer Science
Identifiers
urn:nbn:se:kau:diva-19082 (URN)
Available from: 2013-01-21 Created: 2013-01-21 Last updated: 2019-07-12
Organisations
Identifiers
ORCID iD: ORCID iD iconorcid.org/0000-0003-0861-2813

Search in DiVA

Show all publications