Cloud storage forensics: ownCloud as a case study

Martini, Ben; Choo, Kim‐Kwang Raymond

doi:10.1016/j.diin.2013.08.005

Cited by 136 publications

(53 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…In 2013, Martini and Choo published the results of a cloud storage forensics investigation on the ownCloud service from both the perspective of the client and the server elements of the service [14]. They found that artefacts were found on both the client machine and on the server facilitating the identification of files stored by different users.…”

Section: Client-side Synchronisation Tool Forensicsmentioning

confidence: 99%

Network investigation methodology for BitTorrent Sync: A Peer-to-Peer based file synchronisation service

Scanlon

Farina

Kechadi

2015

Computers & Security

View full text Add to dashboard Cite

High availability is no longer just a business continuity concern. Users are increasingly dependant on devices that consume and produce data in ever in- One option is BitTorrent Sync, a cloudless synchronisation utility provides data availability and redundancy. This utility replicates files stored in shares to remote peers with access controlled by keys and permissions. While lacking the economies brought about by scale, complete control over data access has made this a popular solution. The ability to replicate data without oversight introduces risk of abuse by users as well as difficulties for forensic investigators. This paper suggests a methodology for investigation and analysis of the protocol to assist in the control of data flow across security perimeters.

show abstract

Section: Client-side Synchronisation Tool Forensicsmentioning

confidence: 99%

Network investigation methodology for BitTorrent Sync: A Peer-to-Peer based file synchronisation service

Scanlon

Farina

Kechadi

2015

Computers & Security

View full text Add to dashboard Cite

show abstract

“…One such configuration is described by Martini and Choo [22], where they analyse the forensic process of investigating ownCloud, an open source cloud system intended to be deployed as a private StaaS. In their analysis they modify the accepted forensic model to include a stage where the client used to access the ownCloud system is used to enumerate the contents of the StaaS share provided and access to the cloud storage service is managed through a controlled utilisation of the client under investigation.…”

Section: B Private Cloud Forensicsmentioning

confidence: 99%

Overview of the Forensic Investigation of Cloud Services

Farina

Scanlon

Le-Khac

et al. 2015

2015 10th International Conference on Availability, Reliability and Security

View full text Add to dashboard Cite

Abstract-Cloud Computing is a commonly used, yet ambiguous term, which can be used to refer to a multitude of differing dynamically allocated services. From a law enforcement and forensic investigation perspective, cloud computing can be thought of as a double edged sword. While on one hand, the gathering of digital evidence from cloud sources can bring with it complicated technical and cross-jurisdictional legal challenges. On the other, the employment of cloud storage and processing capabilities can expedite the forensics process and focus the investigation onto pertinent data earlier in an investigation. This paper examines the state-of-the-art in cloud-focused, digital forensic practises for the collection and analysis of evidence and an overview of the potential use of cloud technologies to provide Digital Forensics as a Service.

show abstract

“…The framework was used to investigate ownCloud [50], Amazon EC2 [51], VMWare [32], and XtreemFS [52]. Quick et al [24] further extended and validated the four-stage framework using SkyDrive, Dropbox, Google Drive, and ownCloud.…”

Section: Related Workmentioning

confidence: 99%

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Teing

Dehghantanha

Choo

et al. 2019

IEEE Trans. Sustain. Comput.

Self Cite

View full text Add to dashboard Cite

Abstract-The pervasive nature of cloud-enabled big data storage solutions introduces new challenges in the identification, collection, analysis, preservation and archiving of digital evidences. Investigation of such complex platforms to locate and recover traces of criminal activities is a time-consuming process. Hence, cyber forensics researchers are moving towards streamlining the investigation process by locating and documenting residual artefacts (evidences) of forensic value of users' activities on cloud-enabled big data platforms in order to reduce the investigation time and resources involved in a real-world investigation. In this paper, we seek to determine the data remnants of forensic value from Syncany private cloud storage service, a popular storage engine for big data platforms. We demonstrate the types and the locations of the artefacts that can be forensically recovered. Findings from this research contribute to an in-depth understanding of cloud-enabled big data storage forensics, which can result in reduced time and resources spent in real-world investigations involving Syncany-based cloud platforms.

show abstract

Cloud storage forensics: ownCloud as a case study

Cited by 136 publications

References 6 publications

Network investigation methodology for BitTorrent Sync: A Peer-to-Peer based file synchronisation service

Network investigation methodology for BitTorrent Sync: A Peer-to-Peer based file synchronisation service

Overview of the Forensic Investigation of Cloud Services

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Contact Info

Product

Resources

About