Using Multimedia Presentations to Enhance the Judiciary's Technical Understanding of Digital Forensic Concepts: An Indonesian Case Study

Cahyani, Niken Dwi Wahyu; Martini, Ben; Choo, Kim‐Kwang Raymond

doi:10.1109/hicss.2016.695

Cited by 8 publications

(8 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This final phase relates to the preparation and presentation of the information resulting from the analysis phase. As observed by Cahyani et al [68], [69], [70], it is important for forensics examiners to articulate and explain complex and technical forensic terminologies to the judiciary and juries in order for them to understand "how these crimes were committed, what digital evidence is and where it may exist, and how the process of digital evidence collection was undertaken by the forensic investigators" [71].…”

Section: Methodsmentioning

confidence: 99%

See 1 more Smart Citation

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Teing

Dehghantanha

Choo

et al. 2019

IEEE Trans. Sustain. Comput.

Self Cite

View full text Add to dashboard Cite

Abstract-The pervasive nature of cloud-enabled big data storage solutions introduces new challenges in the identification, collection, analysis, preservation and archiving of digital evidences. Investigation of such complex platforms to locate and recover traces of criminal activities is a time-consuming process. Hence, cyber forensics researchers are moving towards streamlining the investigation process by locating and documenting residual artefacts (evidences) of forensic value of users' activities on cloud-enabled big data platforms in order to reduce the investigation time and resources involved in a real-world investigation. In this paper, we seek to determine the data remnants of forensic value from Syncany private cloud storage service, a popular storage engine for big data platforms. We demonstrate the types and the locations of the artefacts that can be forensically recovered. Findings from this research contribute to an in-depth understanding of cloud-enabled big data storage forensics, which can result in reduced time and resources spent in real-world investigations involving Syncany-based cloud platforms.

show abstract

Section: Methodsmentioning

confidence: 99%

“…The presence of the data remnants in plain text also suggested that it is possible to texts from the files based on the log file entries and tag names for the configuration files. The %.syncany%/config.xml file could also be potentially carved from unstructured datasets, using the header and footer information of "3C 63 6F 6E 66 69…”

Section: F Memory Analysismentioning

confidence: 99%

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Teing

Dehghantanha

Choo

et al. 2019

IEEE Trans. Sustain. Comput.

Self Cite

View full text Add to dashboard Cite

show abstract

“…Results from the evidence analysis such as events reconstruction will then be presented to the judicial authorities. However, experience and training in handling electronic evidence could posed a gap between forensic practitioners and judiciary [14]. This also indicates the need for judicial authorities to be prepared with the growth of digital evidence in both volume and complexity.…”

Section: B Challenges Of Instant Messaging Applications Forensic Anal...mentioning

confidence: 99%

“…This also indicates the need for judicial authorities to be prepared with the growth of digital evidence in both volume and complexity. It also has been pointed out that the application multimedia technology is positively influenced the understanding of digital forensics [14].…”

Section: B Challenges Of Instant Messaging Applications Forensic Anal...mentioning

confidence: 99%

A Forensic Analysis Visualization Tool for Mobile Instant Messaging Apps

Ong¹,

Rahman²

2020

ijoict

View full text Add to dashboard Cite

In this study, we demonstrate the role of visualization to facilitate forensic analysis goal in interpreting metadata of evidence of interest to answer who, what, why, when, where, and how an incident occurred. Two mobile Instant Messaging (IM) applications (i.e. WhatsApp and Line) were deployed as a case study. Subsequently, a tool – W*W Visualizer – was designed and developed with the aims to analyze and visualize the connection of evidence metadata, text frequency and word count, and display report of analysis activities. The tool is developed by adopting Object-Oriented Software Development Model with Visual Studio platform and C# language were used to develop the system. Our findings show that W*W Visualizer could transform the data of the chat database into a visual form, for example graph, chart and word cloud. The tool also allows the user to perform search feature such as searching based on keyword and timestamp from the IM chat history. It is expected that outcomes from this study would significantly influence digital forensics practitioners in analyzing and interpreting evidence data, and judicial authorities in understanding the presentation of evidence.

show abstract

“…A forensic presentation is required to report all findings from previous phases to organisation management and/or court when the incident is regarded as a criminal law. Findings generally contain complex technical terms and concepts, such as forensic terminologies that may be unfamiliar to many stakeholders; thus, it is important to ensure that these complex technical terminologies and concepts are explained using appropriate methods, such as multimedia (see ). All feedback, positive and negative, should be considered and incorporated into future plans in Phase 1.…”

Section: Our Integrated Cloud Incident Handling and Forensic‐by‐desigmentioning

confidence: 99%

Cloud incident handling and forensic‐by‐design: cloud storage as a case study

Rahman

Cahyani

Choo

2016

Concurrency and Computation

Self Cite

View full text Add to dashboard Cite

Summary Information security incident handling strategies or models are important to ensure the security of organisations, particularly in cloud and big data environments. However, existing strategies or models may not adequate as cloud data are generally virtualised, geographically distributed and ephemeral, presenting both technical and jurisdictional challenges. We present an integrated cloud incident handling and forensic‐by‐design model. We then seek to validate the model using a set of controlled experiments on a cloud‐related incident. Three popular cloud storage applications were deployed namely, Dropbox, Google Drive, and OneDrive. This study demonstrates the utility of the model for organisational cloud users to undertake incident investigations (e.g. collect and analyse residual data from cloud storage applications). Copyright © 2016 John Wiley & Sons, Ltd.

show abstract

Using Multimedia Presentations to Enhance the Judiciary's Technical Understanding of Digital Forensic Concepts: An Indonesian Case Study

Cited by 8 publications

References 19 publications

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

A Forensic Analysis Visualization Tool for Mobile Instant Messaging Apps

Cloud incident handling and forensic‐by‐design: cloud storage as a case study

Contact Info

Product

Resources

About