Forensic Framework for Skype Communication

Sha, Mohemmed; Manesh, T.; El-atty, Saied M. Abd

doi:10.1007/978-3-319-23258-4_18

Cited by 3 publications

(4 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Network packets are enclosed in a PCAP file with extension -.pcap‖. The -PCAP‖ file is the foremost input for projected architecture where it undergoes succession of modification throughout the forensic processes [14].…”

Section: A Pcap File Crafting Unitmentioning

confidence: 99%

“…The respective RTP packet format with its parameters are given in Fig 3. For a conceptual view. RTP packet payloads will be combined together after extracting it from header section of RTP packet followed by respective session rescheduling to reconstruct actual voice data [13,14]. The proposed set of TCP/UDP reordering algorithms developed and given in this section would accomplish this task of rescheduling and rebuilding VoIP communication stream.…”

Section: ) Rtp Reschedulermentioning

confidence: 99%

“…During the deployment, we consider essential packet parameters and execute packet-processing functions. Thus, this set of algorithm reproduce the actual voice data present in respective VoIP communication session stream [11,14]. The set of three algorithms developed are given below.…”

Section: ) Rtp Reschedulermentioning

confidence: 99%

“…The criminal statement consists of forensic particulars such as IPs, ports, credentials of VoIP clients or parties and period of malicious act along with regenerated digital proofs. This www.ijacsa.thesai.org criminal statement is submitted to concerned cyber cell of a particular region to grab actual malefactors followed by their prosecution [14].…”

Section: Forensic Evidence Recording Unitmentioning

confidence: 99%

See 3 more Smart Citations

VoIP Forensic Analyzer

Sha¹,

Manesh²,

El-atty³

2016

ijacsa

View full text Add to dashboard Cite

Abstract-People have been utilizing Voice over InternetProtocol (VoIP) in most of the conventional communication facilities which has been of assistance in the enormous attenuation of operating costs, as well as the promotion of nextgeneration communication services-based IP. As an intimidating upshot, cyber criminals have correspondingly started interjecting the environment and creating new challenges for the law enforcement system in any Country. This paper presents an idea of a framework for the forensic analysis of the VoIP traffic over the network. This forensic activity includes spotting and scrutinizing the network patterns of VoIP-SIP stream, which is used to initiate a session for the communication, and regenerate the content from VoIP-RTP stream, which is employed to convey the data. Proposed network forensic investigation framework also accentuates on developing an efficient packet restructuring algorithm for tracing the depraved users involved in a conversation. Network forensics is the basis of proposed work, and performs packet level surveillance of VoIP followed by reconstruction of original malicious content or network session between users for their prosecution in the court.

show abstract

Section: A Pcap File Crafting Unitmentioning

confidence: 99%

Section: ) Rtp Reschedulermentioning

confidence: 99%

Section: ) Rtp Reschedulermentioning

confidence: 99%

Section: Forensic Evidence Recording Unitmentioning

confidence: 99%

See 2 more Smart Citations

VoIP Forensic Analyzer

Sha¹,

Manesh²,

El-atty³

2016

ijacsa

View full text Add to dashboard Cite

show abstract

Forensics Data Recovery of Skype Communication from Physical Memory

Ghafarian

Wood

2018

Advances in Intelligent Systems and Computing

View full text Add to dashboard Cite

An Empirical Study of Skype Data Retrieval from Physical Memory

Ghafarian¹,

Mady²,

Wood³

2019

IJCA

View full text Add to dashboard Cite

Instant messaging technology is increasingly becoming popular among individuals, businesses, as well as criminals. Technologies such as Skype is widely used due to its secure and cheap services. Traditional static media computer forensics approach is not effective in retrieving traces of instant messaging activity. This research presents the findings from physical memory forensics examination of Skype communication. We examined both client-based Skype as well as web-based Skype to determine whether the forensics data remnants in memory would be different for each case. For each case, we evaluated the forensics artifacts at both the operating system level and the application level. At the operating system level, we examined active processes, terminated processes, hidden processes and open files related to Skype activity. At the application level, we evaluated Skype activity artifacts such as logins credentials, audio and video conversations, transferred files, emails, and geographical location of the caller. In addition, we found some differences in the client-based and web-based Skype data remnants in memory. Overall, we confirm that physical memory forensics is the most effective technique for retrieving forensics artifacts of instant messaging technology.

show abstract

Forensic Framework for Skype Communication

Cited by 3 publications

References 12 publications

VoIP Forensic Analyzer

VoIP Forensic Analyzer

Forensics Data Recovery of Skype Communication from Physical Memory

An Empirical Study of Skype Data Retrieval from Physical Memory

Contact Info

Product

Resources

About