Forensic investigation of P2P cloud storage services and backbone for IoT networks: BitTorrent Sync as a case study

Computers and Electrical Engineering

Volumn 58, Issue , 2017, Pages 350-363

  Teing, Yee Yang ^a,b   Dehghantanha, Ali ^b   Choo, Kim Kwang Raymond ^c,d,e   Yang, Laurence T ^f,g  

^a UNIVERSITY PUTRA MALAYSIA   (Malaysia)

^b UNIVERSITY OF SALFORD   (United Kingdom)

^c UNIVERSITY OF TEXAS AT SAN ANTONIO   (United States)

^d UNIVERSITY OF SOUTH AUSTRALIA   (Australia)

^e CHINA UNIVERSITY OF GEOSCIENCES   (China)

^f HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

^g ST FRANCIS XAVIER UNIVERSITY   (Canada)

Author keywords

BitTorrent Sync; Cloud forensics; Computer forensics; Internet of things forensics; Mobile forensics; P2p cloud investigation

Indexed keywords

DIGITAL STORAGE; INTERNET OF THINGS; PEER TO PEER NETWORKS; STORAGE AS A SERVICE (STAAS);

BIT TORRENTS; CLOUD FORENSICS; FORENSIC INVESTIGATION; FORENSIC PRACTITIONER; INTERNET OF THINGS (IOT); MOBILE FORENSICS; P2P CLOUDS; POTENTIAL SOURCES;

COMPUTER FORENSICS;

EID: 84994100951     PISSN: 00457906     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.compeleceng.2016.08.020     Document Type: Article

References (35)

1. [1] International Data Corporation (IDC). Finding success in the new iot ecosystem: market to reach $3.04 trillion and 30 billion connected “things” in 2020, IDC Says 2014. (accessed November 20, 2014) http://www.idc.com/getdoc.jsp?containerId=prUS25.
2. [2] Cahyani, N.D.W., Martini, B., Choo, K.-K.R., Al-Azhar, A.M.N., Forensic data acquisition from cloud-of-things devices: windows Smartphones as a case study. Concurr Comput Pract Exp, 2016, 10.1002/cpe.3855 n/a – n/a.
3. [3] Nepal, S., Ranjan, R., Choo, K.K.R., Trustworthy processing of healthcare big data in hybrid clouds. IEEE Cloud Comput 2 (2015), 78–84, 10.1109/MCC.2015.36.
4. [4] International Data Corporation (IDC). IDC reveals worldwide internet of things predictions for 2015 2014. (accessed November 20, 2014) https://www.idc.com/getdoc.jsp?containerId=prUS25291514.
5. [5] Choo, K.-K.R., Cloud computing: challenges and future directions. 2010.
6. [6] Watson, S., Dehghantanha, A., Digital forensics: the missing piece of the Internet of things promise. Comput Fraud Secur 2016 (2016), 5–8, 10.1016/S1361-3723(15)30045-2.
7. [7] Ashkan, S.B.G., Peterson, A., How we know the NSA had access to internal Google and Yahoo cloud data. Wash Post, 2013.
8. [8] Dehghantanha A., Franke K. Privacy-respecting digital investigation. 2014 twelfth annual international conference on privacy and security trust PST, 2014, p. 129–38. doi: 10.1109/PST.2014.6890932.
9. [9] Martini, B., Choo, K.-K.R., Distributed filesystem forensics: XtreemFS as a case study. Digit Investig 11 (2014), 295–313, 10.1016/j.diin.2014.08.002.
10. [10] Martini B., Choo K.-K.R. Remote programmatic vCloud forensics: a six-step collection process and a proof of concept, IEEE; 2014, p. 935–42. doi: 10.1109/TrustCom.2014.124.
11. [11] Quick, D., Choo, K.-K.R., Dropbox analysis: data remnants on user machines. Digit Investig 10 (2013), 3–18, 10.1016/j.diin.2013.02.003.
12. [12] Quick, D., Choo, K.-K.R., Digital droplets: Microsoft SkyDrive forensic data remnants. Future Gener Comput Syst 29 (2013), 1378–1394, 10.1016/j.future.2013.02.001.
13. [13] Quick, D., Choo, K.-K.R., Google drive: forensic analysis of data remnants. J Netw Comput Appl 40 (2014), 179–193, 10.1016/j.jnca.2013.09.016.
14. [14] Teing Y.-Y., Ali D., Choo K.-K.R., Conti M., Dargahi T. Forensic investigation of cooperative storage cloud service: symform as a case study. J Forensics Sci [In Press].
15. [15] Martini, B., Choo, K.-K.R., Cloud storage forensics: ownCloud as a case study. Digit Investig 10 (2013), 287–299, 10.1016/j.diin.2013.08.005.
16. [16] Martini B., Do Q., Choo K.-K.R. Mobile cloud forensics: an analysis of seven popular android apps. 309–45. doi: 10.1016/B978-0-12-801595-7.00015-X.
17. [17] Daryabar, F., Dehghantanha, A., Eterovic-Soric, B., Choo, K.-K.R., Forensic investigation of OneDrive, Box, GoogleDrive and Dropbox applications on Android and iOS devices. Aust J Forensic Sci 0 (2016), 1–28, 10.1080/00450618.2015.1110620.
18. [18] Daryabar, F., Dehghantanha, A., Choo, K.-K.R., Cloud storage forensics: MEGA as a case study. Aust J Forensic Sci 0 (2016), 1–14, 10.1080/00450618.2016.1153714.
19. [19] Quick, D., Choo, K.-K.R., Forensic collection of cloud storage data: Does the act of collection result in changes to the data or its metadata?. Digit Investig 10 (2013), 266–277, 10.1016/j.diin.2013.07.001.
20. [20] Martini, B., Choo, K.-K.R., An integrated conceptual digital forensic framework for cloud computing. Digit Investig 9 (2012), 71–80, 10.1016/j.diin.2012.07.001.
21. [21] Kent K., Chevalier S., Grance T. Guide to integrating forensic techniques into incident. 2006.
22. [22] McKemmish, R., Australian institute of criminology. What is forensic computing?. 1999, Australian Institute of Criminology, Canberra.
23. [23] Quick, D., Martini, B., Choo, R., Cloud Storage Forensics. 1st ed., 2013, Syngress.
24. [24] Ab Rahman, N.H., Cahyani, N.D.W., Choo, K.-K.R., Cloud incident handling and forensic-by-design: cloud storage as a case study. Concurr Comput Pract Exp, 2016, 10.1002/cpe.3868.
25. [25] Farina, J., Scanlon, M., Kechadi, M.-T., BitTorrent Sync: first impressions and digital forensic implications. Digit Investig 11:Supplement 1 (2014), S77–S86, 10.1016/j.diin.2014.03.010.
26. [26] Scanlon M., Farina J., Kechadi M.-T. Network investigation methodology for BitTorrent Sync: a peer-to-peer based file synchronisation service. Comput Secur 2015. doi: 10.1016/j.cose.2015.05.003.
27. [27] Scanlon M., Farina J., Khac N.A.L., Kechadi T. Leveraging decentralization to extend the digital evidence acquisition window: case study on BitTorrent Sync. ArXiv14098486 Cs 2014.
28. [28] Pounds E. Introducing BitTorrent Sync 1.4: an easier way to share large files 2014. (accessed February 13, 2015) http://blog.bittorrent.com/2014/08/26/introducing-bittorrent-sync-1-4-an-easier-way-to-share-large-files/.
29. [29] BitTorrent Inc. Sync help center 2015. (accessed February 28, 2015) https://help.getsync.com/hc/en-us.
30. [30] Dezfouli FN, Dehghantanha A, Eterovic-Soric B, Choo K-KR. Investigating Social Networking applications on smartphones detecting Facebook, Twitter, LinkedIn and Google+ artefacts on Android and iOS platforms. Aust J Forensic Sci 0:1–20. 10.1080/00450618.2015.1066854.
31. [31] BitTorrent Inc. uTorrent transport protocol 2009. (accessed June 30, 2015) http://www.bittorrent.org/beps/bep_0029.html.
32. [32] Wilkinson S. ACPO good practice guide for digital evidence (2011) 2011.
33. [33] Cahyani, N.D.W., Martini, B., Choo, K.K.R., Using multimedia presentations to enhance the judiciary's technical understanding of digital forensic concepts: an indonesian case study. 2016 49th Hawaii international conference on system and science HICSS, 2016, 5617–5626, 10.1109/HICSS.2016.695.
34. [34] Yang, T.Y., Dehghantanha, A., Choo, K.-K.R., Muda, Z., Windows instant messaging app forensics: facebook and skype as case studies. PLOS ONE, 11, 2016, e0150300, 10.1371/journal.pone.0150300.
35. [35] BitTorrent Inc. Sync API: getting started 2016. (accessed February 28, 2016) https://getsync.com/api/getting-started/#nav-start.