Google Drive: Forensic analysis of data remnants

Dropbox analysis: Data remnants on user machines

Recent papers have urged the need for new forensic techniques and tools able to investigate anti-forensics methods, and have promoted automation of live investigation Such techniques and tools are called proactive forensic approaches, ie, approaches that can deal with digitally investigating an incident while it occurs To come up with such an approach, a Systematic Literature Review (SLR) was undertaken to identify and map the processes in digital forensics investigation that exist in literature According to the review, there is only one process that explicitly supports proactive forensics, the multicomponent process [1] However, this is a very high-level process and cannot be used to introduce automation and to build a proactive forensics system As a result of our SLR, a derived functional process that can support the implementation of a proactive forensics system is proposed

/pdf/the-proactive-and-reactive-digital-forensics-investigation-45yl5j8wj0.pdf

The Proactive and Reactive Digital Forensics Investigation Process: A Systematic Literature Review

Digital forensics is one of the cornerstones to investigate criminal activities such as fraud, computer security breaches or the distribution of illegal content. The importance and relevance of this research fields attracted various research institutes leading to substantial progress in the area of digital investigations. One essential piece of evidence is multimedia data. For this reason this paper provides an overview of the state-of-the-art in the forensic investigation of multimedia data, the relationship between the various research fields and further potential research activities.

Forensics Investigations of Multimedia Data: A Review of the State-of-the-Art

Digital forensics is a vital part of almost every criminal investigation given the amount of information available and the opportunities offered by electronic data to investigate and evidence a crime. However, in criminal justice proceedings, these electronic pieces of evidence are often considered with the utmost suspicion and uncertainty, although, on occasions are justifiable. Presently, the use of scientifically unproven forensic techniques are highly criticized in legal proceedings. Nevertheless, the exceedingly distinct and dynamic characteristics of electronic data, in addition to the current legislation and privacy laws remain as challenging aspects for systematically attesting evidence in a court of law. This article presents a comprehensive study to examine the issues that are considered essential to discuss and resolve, for the proper acceptance of evidence based on scientific grounds. Moreover, the article explains the state of forensics in emerging sub-fields of digital technology such as, cloud computing, social media, and the Internet of Things (IoT), and reviewing the challenges which may complicate the process of systematic validation of electronic evidence. The study further explores various solutions previously proposed, by researchers and academics, regarding their appropriateness based on their experimental evaluation. Additionally, this article suggests open research areas, highlighting many of the issues and problems associated with the empirical evaluation of these solutions for immediate attention by researchers and practitioners. Notably, academics must react to these challenges with appropriate emphasis on methodical verification. Therefore, for this purpose, the issues in the experiential validation of practices currently available are reviewed in this study. The review also discusses the struggle involved in demonstrating the reliability and validity of these approaches with contemporary evaluation methods. Furthermore, the development of best practices, reliable tools and the formulation of formal testing methods for digital forensic techniques are highlighted which could be extremely useful and of immense value to improve the trustworthiness of electronic evidence in legal proceedings.

https://www.koreascience.or.kr:443/article/JAKO201814442074731.pdf

Digital Forensics: Review of Issues in Scientific Validation of Digital Evidence

While some individuals have referred to digital forensics as an art, the literature of the discipline suggests a trend toward the formalization of digital forensics as a forensic science Questions about the quality of digital evidence and forensic soundness continue to be raised by researchers and practitioners in order to ensure the trustworthiness of digital evidence and its value to the courts This paper reviews the development of digital forensic models, procedures and standards to lay a foundation for the discipline It also points to new work that provides validation models through a complete mapping of the discipline

/pdf/towards-a-formalization-of-digital-forensics-1fh78mnbro.pdf

Towards a Formalization of Digital Forensics

So as to guarantee the fairness of electronic transactions, users may require a Non­Repudiation (NR) service in any type of network. However, most existing NR protocols cannot work properly in a Mobile Ad hoc Network (MANET) due to their characteristics (e.g. limited resources and lack of central authority). The design of the Probabilistic Non­Repudiation Protocol (PNRP) is comparatively suitable for the nature of a MANET, but it still poses some QoS issues. This article points out the QoS issues which are caused by using PNRP in a MANET environment. These issues explain the difficult of performing PNRP in such an infrastructure­less environment.

/pdf/qos-issues-of-using-probabilistic-non-repudiation-protocol-19lkgxot3z.pdf

QoS Issues of Using Probabilistic Non-Repudiation Protocol in Mobile Ad Hoc Network Environment

Within the last decade, the use of wireless technologies has become more prevalent. Wireless networks have flexible architectures with data transferred via radio waves and can be divided into two categories; infrastructure-based wireless networks and mobile ad hoc network. The mobile ad hoc network (MANET) is an autonomous system which can be dynamically built without preexisting infrastructure or a trusted third party (TTP). Due to these infrastructure-less and self-organized characteristics, MANET encounters different problems from infrastructure-based wired network, such as key management, power shortage, and security issues. This paper will further divide MANETs into pure ad hoc networks which do not contain a TTP and organized ad hoc networks which contain an offline TTP, and then focus on the security issues especially the non-repudiation issue between two mobile nodes which communicate in pure ad hoc networks.

/pdf/non-repudiation-in-pure-mobile-ad-hoc-network-58q8jb4mad.pdf

Non-Repudiation in Pure Mobile Ad Hoc Network.

Based on theory gained from the science and culture research domain, this paper considers the relationship between computer forensic science and culture. In order to develop a theoretical relationship between computer forensics and culture, this paper examines computer forensics as science and discusses the universal nature of science. It points to an ongoing cross-cultural work being carried out among computer forensic experts in Australia and Taiwan.

Computer Forensics and Culture

Data encryption is critical for information security. Previous studies show that power analysis is a powerful tool for side-channel attack (SCA) against cryptographic modules. Therefore, it is essential to carry out power analysis to assess the vulnerability of cryptographic modules. The success of power analysis relies on aligned power traces, which is not easy without an external trigger point. In this paper, we propose an automatic power trace alignment method so that operations in power traces and be located without external trigger points. Experimental results show that the proposed method can be applied to various ciphers, including AES and RSA.

Yi-Chi Lin

Papers

Towards a Formalization of Digital Forensics

QoS Issues of Using Probabilistic Non-Repudiation Protocol in Mobile Ad Hoc Network Environment

Non-Repudiation in Pure Mobile Ad Hoc Network.

Computer Forensics and Culture

Automatic Alignment for Side-Channel Attack Against Cryptographic Modules