Recovery of Skype application activity data from physical memory

ARES 2010 - 5th International Conference on Availability, Reliability, and Security

Volumn , Issue , 2010, Pages 283-288

  Simon, Matthew ^a   Slay, Jill ^a  

^a UNIVERSITY OF SOUTH AUSTRALIA   (Australia)

Author keywords

Computer forensics; Digital evidence; Digital investigation; Electronic evidence; RAM forensics; Volatile memory forensics

Indexed keywords

COMPUTER FORENSICS; CONTROLLED TESTS; CONVENTIONAL METHODS; DECENTRALISED; DIGITAL EVIDENCE; DIGITAL FORENSIC; DIGITAL INVESTIGATION; FUTURE DIRECTIONS; INTERNET-BASED COMMUNICATION; PHYSICAL MEMORY; TARGET MACHINES; VOLATILE MEMORY;

INTERNET; TARGETS; TECHNOLOGY;

COMPUTER CRIME;

EID: 77952329380     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2010.73     Document Type: Conference Paper

References (9)

1. M. Burdach. (2005). An Introduction to Windows memory forensic. Online]. vailable: http://forensic.seccure.net/pdf/introduction-to-windows-memory- forensic.pdf.
2. M. Burdach. (2005). Digital forensics of the physical memory. [Online]. Available: http://forensic.seccure.net/pdf/mburdach-digital-forensics-of- physical-memory.pdf.
3. H. A. Carvey, Windows Forensic Analysis: Syngress, 2007.
4. A. Schuster, "Searching for processes and threads in Microsoft Windows memory dumps," Digital Investigation, vol. 3 (S), pp. 10-16, 2006.
5. Volatile Systems. (2008). The Volatility Framework: Volatile memory artifact extraction utility framework. [Online]. Available: https://www. volatilesystems.com/default/volatility.
6. M. Simon and J. Slay, "Enhancement of Forensic Computing Investigations through Memory Forensic Techniques," in Availability, Reliability and Security, International Conference on, 2009.
7. S. A. Baset and H. G. Schulzrinne, "An Analysis of the Skype Peer-to-Peer Internet Telephony Protocol," in INFOCOM, Barcelona, Spain, 2006, pp. 1-11.
8. T. Berson. (2005). Skype Security Evaluation. [Online]. Available: http://www.anagram.com/berson/skyeval.pdf.
9. J. A. Halderman, S. D. Schoen, N. Heninger, W. Clarkson, W. Paul, J. A. Calandrino, A. J. Feldman, J. Appelbaum, and E. W. Felten. (2008). Lest We Remember: Cold Boot Attacks on Encryption Keys. [Online]. Available: http://citp.princeton.edu/memory.