Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment

Cloud storage service allows users to store their data online, so that they can remotely access, maintain, manage, and back up data from anywhere via the Internet. Although helpful, this storage creates a challenge to digital forensic investigators and practitioners in collecting, identifying, acqui...

Full description

Bibliographic Details
Main Authors:	Ahmed, Abdulghani Ali, Chua, Xue Li
Format:	Article
Language:	English
Published:	Blackwell Publishing Inc. 2018
Subjects:	QA76 Computer software
Online Access:	http://umpir.ump.edu.my/id/eprint/20097/ http://umpir.ump.edu.my/id/eprint/20097/ http://umpir.ump.edu.my/id/eprint/20097/ http://umpir.ump.edu.my/id/eprint/20097/2/Final%20Draft.pdf

id	ump-20097
recordtype	eprints
spelling	ump-200972018-06-07T01:42:57Z http://umpir.ump.edu.my/id/eprint/20097/ Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment Ahmed, Abdulghani Ali Chua, Xue Li QA76 Computer software Cloud storage service allows users to store their data online, so that they can remotely access, maintain, manage, and back up data from anywhere via the Internet. Although helpful, this storage creates a challenge to digital forensic investigators and practitioners in collecting, identifying, acquiring, and preserving evidential data. This study proposes an investigation scheme for analyzing data remnants and determining probative artifacts in a cloud environment. Using pCloud as a case study, this research collected the data remnants available on end-user device storage following the storing, uploading, and accessing of data in the cloud storage. Data remnants are collected from several sources, including client software files, directory listing, prefetch, registry, network PCAP, browser, and memory and link files. Results demonstrate that the collected remnants data is beneficial in determining a sufficient number of artifacts about the investigated cyber crime. Blackwell Publishing Inc. 2018-01 Article PeerReviewed application/pdf en http://umpir.ump.edu.my/id/eprint/20097/2/Final%20Draft.pdf Ahmed, Abdulghani Ali and Chua, Xue Li (2018) Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment. Journal of Forensic Sciences, 63 (1). pp. 112-121. ISSN 0022-1198 https://doi.org/10.1111/1556-4029.13506 10.1111/1556-4029.13506
repository_type	Digital Repository
institution_category	Local University
institution	Universiti Malaysia Pahang
building	UMP Institutional Repository
collection	Online Access
language	English
topic	QA76 Computer software
spellingShingle	QA76 Computer software Ahmed, Abdulghani Ali Chua, Xue Li Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment
description	Cloud storage service allows users to store their data online, so that they can remotely access, maintain, manage, and back up data from anywhere via the Internet. Although helpful, this storage creates a challenge to digital forensic investigators and practitioners in collecting, identifying, acquiring, and preserving evidential data. This study proposes an investigation scheme for analyzing data remnants and determining probative artifacts in a cloud environment. Using pCloud as a case study, this research collected the data remnants available on end-user device storage following the storing, uploading, and accessing of data in the cloud storage. Data remnants are collected from several sources, including client software files, directory listing, prefetch, registry, network PCAP, browser, and memory and link files. Results demonstrate that the collected remnants data is beneficial in determining a sufficient number of artifacts about the investigated cyber crime.
format	Article
author	Ahmed, Abdulghani Ali Chua, Xue Li
author_facet	Ahmed, Abdulghani Ali Chua, Xue Li
author_sort	Ahmed, Abdulghani Ali
title	Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment
title_short	Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment
title_full	Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment
title_fullStr	Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment
title_full_unstemmed	Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment
title_sort	analyzing data remnant remains on user devices to determine probative artifacts in cloud environment
publisher	Blackwell Publishing Inc.
publishDate	2018
url	http://umpir.ump.edu.my/id/eprint/20097/ http://umpir.ump.edu.my/id/eprint/20097/ http://umpir.ump.edu.my/id/eprint/20097/ http://umpir.ump.edu.my/id/eprint/20097/2/Final%20Draft.pdf
first_indexed	2023-09-18T22:28:48Z
last_indexed	2023-09-18T22:28:48Z
_version_	1777416146273697792

Analyzing Data Remnant Remains on User Devices to Determine Probative Artifacts in Cloud Environment

Similar Items