Investigation model for locating data remnants on cloud storage

Cloud storage services allow users to store their data online and remotely access, maintain, manage, and back up their data from anywhere through the Internet. Although this storage is helpful, it challenges digital forensic investigators and practitioners in collecting, identifying, acquiring, and...

Full description

Bibliographic Details
Main Authors: Khalid, Abdulrahman, Ahmed, Abdulghani Ali, Mohammed, Muamer N.
Format: Conference or Workshop Item
Language:English
English
Published: Springer Nature Switzerland 2019
Subjects:
Online Access:http://umpir.ump.edu.my/id/eprint/24829/
http://umpir.ump.edu.my/id/eprint/24829/
http://umpir.ump.edu.my/id/eprint/24829/
http://umpir.ump.edu.my/id/eprint/24829/1/22.%20Investigation%20Model%20for%20Locating%20Data%20Remnants%20on%20Cloud%20Storage.pdf
http://umpir.ump.edu.my/id/eprint/24829/2/22.1%20Investigation%20Model%20for%20Locating%20Data%20Remnants%20on%20Cloud%20Storage.pdf
id ump-24829
recordtype eprints
spelling ump-248292019-11-12T03:19:25Z http://umpir.ump.edu.my/id/eprint/24829/ Investigation model for locating data remnants on cloud storage Khalid, Abdulrahman Ahmed, Abdulghani Ali Mohammed, Muamer N. QA76 Computer software Cloud storage services allow users to store their data online and remotely access, maintain, manage, and back up their data from anywhere through the Internet. Although this storage is helpful, it challenges digital forensic investigators and practitioners in collecting, identifying, acquiring, and preserving evidential data. This research proposes an investigation scheme for analyzing data remnants and determining probative artefacts in a cloud environment. Using the Box cloud as a case study, we collect the data remnants available on end-user device storage following the accessing, uploading, and storing of data in the cloud storage. The data remnants are collected from several sources, such as client software files, Prefetch, directory listings, registries, browsers, network PCAP, and memory and link files. Results indicate that the collected data remnants are helpful in determining a sufficient number of artefacts about investigated cybercrimes. Springer Nature Switzerland 2019-09 Conference or Workshop Item PeerReviewed pdf en http://umpir.ump.edu.my/id/eprint/24829/1/22.%20Investigation%20Model%20for%20Locating%20Data%20Remnants%20on%20Cloud%20Storage.pdf pdf en http://umpir.ump.edu.my/id/eprint/24829/2/22.1%20Investigation%20Model%20for%20Locating%20Data%20Remnants%20on%20Cloud%20Storage.pdf Khalid, Abdulrahman and Ahmed, Abdulghani Ali and Mohammed, Muamer N. (2019) Investigation model for locating data remnants on cloud storage. In: ICO 2018: Intelligent Computing & Optimization, 4-5 October 2018 , Pattaya, Thailand. pp. 246-256., 866. ISBN 978-3-030-00979-3 https://doi.org/10.1007/978-3-030-00979-3_25 https://doi.org/10.1007/978-3-030-00979-3_25
repository_type Digital Repository
institution_category Local University
institution Universiti Malaysia Pahang
building UMP Institutional Repository
collection Online Access
language English
English
topic QA76 Computer software
spellingShingle QA76 Computer software
Khalid, Abdulrahman
Ahmed, Abdulghani Ali
Mohammed, Muamer N.
Investigation model for locating data remnants on cloud storage
description Cloud storage services allow users to store their data online and remotely access, maintain, manage, and back up their data from anywhere through the Internet. Although this storage is helpful, it challenges digital forensic investigators and practitioners in collecting, identifying, acquiring, and preserving evidential data. This research proposes an investigation scheme for analyzing data remnants and determining probative artefacts in a cloud environment. Using the Box cloud as a case study, we collect the data remnants available on end-user device storage following the accessing, uploading, and storing of data in the cloud storage. The data remnants are collected from several sources, such as client software files, Prefetch, directory listings, registries, browsers, network PCAP, and memory and link files. Results indicate that the collected data remnants are helpful in determining a sufficient number of artefacts about investigated cybercrimes.
format Conference or Workshop Item
author Khalid, Abdulrahman
Ahmed, Abdulghani Ali
Mohammed, Muamer N.
author_facet Khalid, Abdulrahman
Ahmed, Abdulghani Ali
Mohammed, Muamer N.
author_sort Khalid, Abdulrahman
title Investigation model for locating data remnants on cloud storage
title_short Investigation model for locating data remnants on cloud storage
title_full Investigation model for locating data remnants on cloud storage
title_fullStr Investigation model for locating data remnants on cloud storage
title_full_unstemmed Investigation model for locating data remnants on cloud storage
title_sort investigation model for locating data remnants on cloud storage
publisher Springer Nature Switzerland
publishDate 2019
url http://umpir.ump.edu.my/id/eprint/24829/
http://umpir.ump.edu.my/id/eprint/24829/
http://umpir.ump.edu.my/id/eprint/24829/
http://umpir.ump.edu.my/id/eprint/24829/1/22.%20Investigation%20Model%20for%20Locating%20Data%20Remnants%20on%20Cloud%20Storage.pdf
http://umpir.ump.edu.my/id/eprint/24829/2/22.1%20Investigation%20Model%20for%20Locating%20Data%20Remnants%20on%20Cloud%20Storage.pdf
first_indexed 2023-09-18T22:37:49Z
last_indexed 2023-09-18T22:37:49Z
_version_ 1777416713520807936