Dropbox analysis: Data remnants on user machines

Quick, Darren; Choo, Kim‐Kwang Raymond

doi:10.1016/j.diin.2013.02.003

Cited by 140 publications

(99 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Similar to our previous approaches [27], [34], [36], [37], [38], [55], our test environments consist of four (4) VMware Workstations (VMs), one (1) for server and three (3) for desktop clients -see were used to create a set of sample files and saved in .RTF, .TXT, .DOCX, .JPG (print screen), .ZIP, and .PDF formats, providing a basis for replication of the experiments in future. The set of sample files were placed in a new directory on the clients' workstations, before being uploaded to the servers, and subsequently downloaded to the corresponding client devices.…”

Section: Methodsmentioning

confidence: 57%

“…These forensics studies located artefacts of client applications from the user settings and application data resided on the media storage through keyword search. Quick and Choo [36], [37], [38] also identified that data erasing tools such as Eraser and CCleaner do not completely remove the data remnants from Dropbox, Google Drive, and Microsoft SkyDrive.…”

Section: Related Workmentioning

confidence: 99%

“…Other cloud applications such as Evernote [35], Amazon S3 [35], Dropbox [35], [36], Google Drive [35], [37], Microsoft Skydrive [38], Amazon Cloud Drive [39], BitTorrent Sync [40], SugarSync [41], Ubuntu One [42], huBic [43], Syncany [27], Symform [34], as well as mobile cloud apps [45], [46] have also been examined. These forensics studies located artefacts of client applications from the user settings and application data resided on the media storage through keyword search.…”

Section: Related Workmentioning

confidence: 99%

See 2 more Smart Citations

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Teing

Dehghantanha

Choo

et al. 2019

IEEE Trans. Sustain. Comput.

Self Cite

View full text Add to dashboard Cite

Abstract-The pervasive nature of cloud-enabled big data storage solutions introduces new challenges in the identification, collection, analysis, preservation and archiving of digital evidences. Investigation of such complex platforms to locate and recover traces of criminal activities is a time-consuming process. Hence, cyber forensics researchers are moving towards streamlining the investigation process by locating and documenting residual artefacts (evidences) of forensic value of users' activities on cloud-enabled big data platforms in order to reduce the investigation time and resources involved in a real-world investigation. In this paper, we seek to determine the data remnants of forensic value from Syncany private cloud storage service, a popular storage engine for big data platforms. We demonstrate the types and the locations of the artefacts that can be forensically recovered. Findings from this research contribute to an in-depth understanding of cloud-enabled big data storage forensics, which can result in reduced time and resources spent in real-world investigations involving Syncany-based cloud platforms.

show abstract

Section: Methodsmentioning

confidence: 57%

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Teing

Dehghantanha

Choo

et al. 2019

IEEE Trans. Sustain. Comput.

Self Cite

View full text Add to dashboard Cite

show abstract

“…Service-oriented computing presents an interesting challenge, as we no longer see unified bodies of evidence aggregated within traditional forensic mediums. Significant research has gone into approaching specific services [7], [8], but little work has gone into establishing a best practice approach to such evidence starting with the initial acquisition of disk-based evidence 2 . Best practices have emerged in the forensic representation of evidence.…”

Section: A a Note On Legalitymentioning

confidence: 99%

Towards Comprehensive and Collaborative Forensics on Email Evidence

Paglierani¹,

Mabey²,

Ahn³

2013

Proceedings of the 9th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing

View full text Add to dashboard Cite

Abstract-The digital forensics community has neglected email forensics as a process, despite the fact that email remains an important tool in the commission of crime. At present, there exists little support for discovering, acquiring, and analyzing webbased email, despite its widespread use. In this paper we present a systematic process for email forensics which we integrate into the normal forensic analysis workflow, and which accommodates the distinct characteristics of email evidence. Our process focuses on detecting the presence of non-obvious artifacts related to email accounts, retrieving the data from the service provider, and representing email in a well-structured format based on existing standards. As a result, developers and organizations can collaboratively create and use analysis tools that can analyze email evidence from any source in the same fashion and the examiner can access additional data relevant to their forensic cases.

show abstract

“…Kim-Kwang Raymond Choo [8] used three popular public cloud storage providers (Dropbox, Google Drive, and Microsoft SkyDrive) as case studies to explore the process of collecting data from a cloud storage account using a browser and also downloading files using client software. Darren Quick [9] used Dropbox as a case study, research was undertaken to determine the data remnants on a Windows 7 computer and an Apple iPhone when a user undertakes a variety of methods to store, upload, and access data in the cloud.…”

Section: Introductionmentioning

confidence: 99%

Forensic Analysis to China’s Cloud Storage Services

Chen¹,

Zhang²

2015

IJMLC

View full text Add to dashboard Cite

Abstract-Nowadays, cloud storage is becoming increasingly popular among individuals and businesses. At the same time, there are an increasing number of illegal cases about preserving illegal information or stealing the company's confidential data through cloud storage service. Therefore, a study on digital forensic investigation of cloud storage services is necessary. Using two china's cloud storage services(360 and Baidu cloud storage service) as case studies, this paper discusses the types of terrestrial artifacts that are likely to remain on a client's machine and analyses the law of terrestrial artifacts after accessing to the cloud storage. At last the paper proposes a method to investigate and analyze the artifacts for reconstructing the event of user's activities.

show abstract

Dropbox analysis: Data remnants on user machines

Cited by 140 publications

References 5 publications

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Towards Comprehensive and Collaborative Forensics on Email Evidence

Forensic Analysis to China’s Cloud Storage Services

Contact Info

Product

Resources

About