Forensic investigation of OneDrive, Box, GoogleDrive and Dropbox applications on Android and iOS devices

Australian Journal of Forensic Sciences

Volumn 48, Issue 6, 2016, Pages 615-642

  Daryabar, Farid ^a   Dehghantanha, Ali ^b   Eterovic Soric, Brett ^c   Choo, Kim Kwang Raymond ^c  

^a UNIVERSITY PUTRA MALAYSIA   (Malaysia)

^b UNIVERSITY OF SALFORD   (United Kingdom)

^c UNIVERSITY OF SOUTH AUSTRALIA   (Australia)

Author keywords

Android forensic; cloud forensics; cloud storage applications forensics; digital forensics; iOS forensic

Indexed keywords

ARTIFACT; HUMAN; PHYSICIAN;

EID: 84961218182     PISSN: 00450618     EISSN: 1834562X     Source Type: Journal    
DOI: 10.1080/00450618.2015.1110620     Document Type: Article

References (33)

1. B.Martini, K.-K.R.Choo. An integrated conceptual digital forensic framework for cloud computing. Digit Invest. 2012;9(2):71–80.10.1016/j.diin.2012.07.001
2. D.Quick, B.Martini, R.Choo. Cloud storage forensics. Rockland, MA:Syngress, an Imprint of Elsevier; 2014. p. 208.
3. J.S.Hale. Amazon cloud drive forensic analysis. Digit Invest. 2013;10(3):259–265.10.1016/j.diin.2013.04.006
4. Q.Gu, M.Guirguis. High performance cloud auditing and applications. Springer; 2014. Secure mobile cloud computing and security issues; 65–90. Available from:http://link.springer.com/chapter/10.1007/978-1-4614-3296-8_3
5. F.Norouzizadeh Dezfouli, A.Dehghantanha, B.Eterovic-Soric, K.K.R.Choo. Investigating Social Networking applications on smartphones detecting Facebook, Twitter, LinkedIn and Google+ artefacts on Android and iOS platforms. Aust. J. Forensic Sci. 2015:1–20. Available from:doi:10.1080/00450618.2015.1066854
6. B.Martini, Q.Do, K.-K.R.Choo. The cloud security ecosystem. Boston, MA:Syngress; 2015. R.K.-K.R.Choo, editor. Chapter 14 - Conceptual evidence collection and analysis methodology for Android devices; p. 285–307. Available from:http://www.sciencedirect.com/science/article/pii/B978012801595700014810.1016/B978-0-12-801595-7.00014-8
7. B.Martini, Q.Do, K.-K.R.Choo. The cloud security ecosystem. Boston, MA:Syngress; 2015. R.K.-K.R.Choo, editor. Chapter 15 - Mobile cloud forensics:an analysis of seven popular Android apps; p. 309–345. Available from:http://www.sciencedirect.com/science/article/pii/B978012801595700015X10.1016/B978-0-12-801595-7.00015-X
8. M.Shariati, A.Dehghantanha, K.-K.R.Choo. SugarSync forensic analysis. Australian J Forensic Sci. 2015:1–23.10.1080/00450618.2015.1021379
9. M.Shariati, A.Dehghantanha, B.Martini, K.-K.R.Choo. The cloud security ecosystem. Boston, MA:Syngress; 2015. R.K.-K.R.Choo, editor. Chapter 19 - Ubuntu one investigation:detecting evidences on client machines; p. 429–446. Available from:http://www.sciencedirect.com/science/article/pii/B978012801595700019710.1016/B978-0-12-801595-7.00019-7
10. R.Ayers, S.Brothers, W.Jansen. Guidelines on mobile device forensics; 2014. NIST Special Publication 800-101 Revision 1. Available from http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-101r1.pdf10.6028/NIST.SP.800-101r1
11. H.Chung, J.Park, S.Lee, C.Kang. Digital forensic investigation of cloud storage services. Digit Invest. 2012;9(2):81–95.10.1016/j.diin.2012.05.015
12. F.Marturana, G.Me, S.Tacconi. A case study on digital forensics in the cloud. 2012 International conference on cyber-enabled distributed computing and knowledge discovery (CyberC). 2012:111–116.10.1109/CyberC.2012.26
13. J.Dykstra, A.T.Sherman. Acquiring forensic evidence from infrastructure-as-a-service cloud computing:exploring and evaluating tools, trust, and techniques. Digit Invest. 2012;9(SUPPL.):S90–S98.10.1016/j.diin.2012.05.001
14. G.Grispos, W.B.Glisson, T.Storer. Using smartphones as a proxy for forensic evidence contained in cloud storage services. IEEE. 2013:4910–4919. Available from:http://ezproxy.upm.edu.my:2078/xpl/articleDetails.jsp?tp=&arnumber=6480436&matchBoolean%3Dtrue%26searchField%3DSearch_All%26queryText%3D%28%28p_Abstract%3Aforensics%29+AND+p_Abstract%3Aios%29
15. B.Martini, K.-K.R.Choo. Cloud storage forensics:owncloud as a case study. Digit Invest. 2013;10(4):287–299.10.1016/j.diin.2013.08.005
16. Y.Wen, X.Man, K.Le, W.Shi. Forensics-as-a-Service (FaaS):computer forensic workflow management and processing using cloud. 2013. p. 208–214. Available from:http://www.thinkmind.org/index.php?view=article&articleid=cloud_computing_2013_8_40_20185
17. S.Zawoad, A.K.Dutta, R.Hasan. SecLaaS:Secure Logging-as-a-Service for cloud forensics. arXiv:1302.6267 [cs]. 2013 Feb 25 [cited 2015 Apr 22]. Available from:http://arxiv.org/abs/1302.6267
18. B.Martini, K.-K.R.Choo. Remote programmatic vCloud forensics:a six-step collection process and a proof of concept. Proc. 13th IEEE Int’l Conf. Trust, Security and Privacy in Computing and Comm. (TrustCom); 2014. p. 935–942.
19. C.Federici. Cloud data imager:a unified answer to remote acquisition of cloud storage areas. Digit Invest. 2014;11(1):30–42.10.1016/j.diin.2014.02.002
20. D.Quick, K.-K.R.Choo. Google drive:forensic analysis of data remnants. J Netw Comput Appl. 2014;40:179–193.10.1016/j.jnca.2013.09.016
21. D.Quick, K.-K.R.Choo. Digital droplets:Microsoft SkyDrive forensic data remnants. Future Gener Comput Syst. 2013;29(6):1378–1394. (Including Special sections:High Performance Computing in the Cloud & Resource Discovery Mechanisms for P2P Systems).10.1016/j.future.2013.02.001
22. D.Quick, K.-K.R.Choo. Dropbox analysis:data remnants on user machines. Digit Invest. 2013;10(1):3–18.10.1016/j.diin.2013.02.003
23. B.Martini, Q.Do, K.K.R.Choo. Conceptual evidence collection and analysis methodology for Android devices. Cloud Secur. Ecosyst. 2015:285–307. doi:10.1016/B978-0-12-801595-7.00014-8
24. K.-K.R.Choo. Organised crime groups in cyberspace:a typology. Trends in Organized Crime. 2008;11(3):270–295.10.1007/s12117-008-9038-9
25. K.-K.R.Choo, R.G.Smith. Criminal exploitation of online systems by organised crime groups. Trends in Organized Crime. 2008;11(3):270–295.10.1007/s12117-008-9038-9
26. EDRM File Format Data Set 1.0.1. [cited 2015 Jan 17]. Available from:http://www.edrm.net/resources/data-sets/edrm-file-format-data-set
27. S.H.Mohtasebi, A.Dehghantanha. Towards a unified forensic investigation framework of smartphones. Int J Comput Theory Eng. 2013;5(2):351.10.7763/IJCTE.2013.V5.708
28. F.Daryabar, A.Dehghantanha, N.I.Udzir. Investigation of bypassing malware defences and malware detections. Information Assurance and Security (IAS), 2011 7th International Conference on. IEEE; 2011. p. 173–178. Available from:http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=612281510.1109/ISIAS.2011.6122815
29. K.Shaerpour, A.Dehghantanha. Trends in android malware detection. J Digit Forensics, Secur Law. 2013;8(3):21.
30. M.Damshenas, A.Dehghantanha, R.Mahmoud, S.bin Shamsuddin. Cloud computing and conflicts with digital forensic investigation. Int J Digit Content Technol Appl. 2013;7(9):543.
31. M.Damshenas, A.Dehghantanha, K.-K.R.Choo, R.Mahmud. M0Droid:an Android behavioral-based malware detection model. J Inf Privacy Secur. 2015;11(3):141–157.10.1080/15536548.2015.1073510
32. F.Daryabar, A.Dehghantanha, N.I.Udzir, N.F.Sani, S.Shamsuddin. A survey on privacy impacts of digital investigation. JNIT. 2013;4(8):57.
33. A.Dehghantanha, K.Franke. Privacy-respecting digital investigation. Privacy, Security and Trust (PST), 2014 Twelfth Annual International Conference on. IEEE; 2014. p. 129–138. Available from:http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=689093210.1109/PST.2014.6890932