Key extraction-based lawful access to encrypted data: Taxonomy and survey

Lindenmeier, Christian; Hammer, Andreas; Gruber, Jan; Röckl, Jonas; Freiling, Felix

doi:10.1016/j.fsidi.2024.301796

Forensic Science International: Digital Investigation

2024

DOI: 10.1016/j.fsidi.2024.301796

|View full text |Cite

Key extraction-based lawful access to encrypted data: Taxonomy and survey

Christian Lindenmeier,

Andreas Hammer,

Jan Gruber

et al.

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2024

Publication Types

Select...

Article1

Relationship

Self Cite0

Independent1

Authors

Journals

Cited by 1 publication

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

InvesTEE: A TEE-supported Framework for Lawful Remote Forensic Investigations

Lindenmeier,

Gruber,

Freiling

2024

Digital Threats

View full text Add to dashboard Cite

Remote forensic investigations, i.e., the covert lawful infiltration of computing devices, are a generic method to acquire evidence in the presence of strong defensive security. A precondition for such investigations is the ability to execute software with sufficient privileges on target devices. The standard way to achieve such remote access is by exploiting yet unpatched software vulnerabilities. This in turn puts other users at risk, resulting in a dilemma for state authorities that aim to protect the general public (by patching such vulnerabilities) and those that need remote access in criminal investigations. As a partial solution, we present a framework that enables privileged remote forensic access without using privileged exploits. The idea is to separate the remote forensic software into two parts: a Forensic Software, designed by law enforcement agencies to execute investigative actions, and a (privileged) Control Software, provided by the device vendor to selectively grant privileges to the Forensic Software based on a court warrant within the rules of criminal procedure. By leveraging trusted execution environments for running the Control Software in a tamper-proof manner, we enable trustful deployment and operation of remote forensic software. We provide a proof-of-concept implementation of InvesTEE that is based on ARMv8-A TrustZone.

show abstract

InvesTEE: A TEE-supported Framework for Lawful Remote Forensic Investigations

Lindenmeier,

Gruber,

Freiling

2024

Digital Threats

View full text Add to dashboard Cite

show abstract

scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.

Contact Info

customersupport@researchsolutions.com

10624 S. Eastern Ave., Ste. A-614

Henderson, NV 89052, USA

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Blog Terms and Conditions API Terms Privacy Policy Contact Cookie Preferences Do Not Sell or Share My Personal Information

Made with 💙 for researchers

Part of the Research Solutions Family.

Key extraction-based lawful access to encrypted data: Taxonomy and survey

Cited by 1 publication

References 19 publications

InvesTEE: A TEE-supported Framework for Lawful Remote Forensic Investigations

InvesTEE: A TEE-supported Framework for Lawful Remote Forensic Investigations

Contact Info

Product

Resources

About