Cloud evidence tracks of storage service linking with iOS systems |
| |
Authors: | Ko Hung-Jui Huang Cheng-Ta Zhuang Zhi-Wei Horng Gwoboa Wang Shiuh-Jeng |
| |
Affiliation: | 1.Department of Computer Science and Engineering, National Chung-Hsing University, Taichung, Taiwan ;2.Department of Information Management, Oriental Institute of Technology, New Taipei City, Taiwan ;3.Department of Information Management, Central Police University, Taoyüan, Taiwan ; |
| |
Abstract: | The increasing usage of mobile cloud computing leads the cloud to become a hotbed of crime. Cloud storage is different from previous data storage in digital forensics. In this paper, we concentrate on gathering evidence from mobile iOS devices and the types of data remnants that can be found on iOS devices for different user scenarios and device states. We develop several steps for experimenting on Google Drive, OneDrive and Dropbox. We found that the evidence collection of power-off state is not the major problem in digital forensics. Different applications of cloud storage show the different statuses of data remnants. The study also shows that thumbnails and cache files are the key of evidence recovery. We present how the digital investigators to collect evidence by examining the data remnants files as well. |
| |
Keywords: | |
本文献已被 SpringerLink 等数据库收录! |
|