Pervasive social networking forensics: Intelligence and evidence from mobile device extracts

Journal of Network and Computer Applications

Volumn 86, Issue , 2017, Pages 24-33

  Quick, Darren ^a   Choo, Kim Kwang Raymond ^a,b  

^a UNIVERSITY OF SOUTH AUSTRALIA   (Australia)

^b UNIVERSITY OF TEXAS AT SAN ANTONIO   (United States)

Author keywords

Big forensic data; Digital forensic intelligence analysis cycle; Forensic intelligence analysis; Mobile device forensic extracts; Pervasive social networking forensics; Social communication forensics; Social networking app forensics

Indexed keywords

CELLULAR TELEPHONES; COMPUTER CRIME; COMPUTER FORENSICS; CRIME; DIGITAL STORAGE; ELECTRONIC CRIME COUNTERMEASURES; INFORMATION ANALYSIS; LAW ENFORCEMENT; MOBILE DEVICES; MOBILE PHONES; TELEPHONE SETS;

DEVELOPING TREND; DIGITAL FORENSIC; FORENSIC ANALYSIS; FORENSIC DATA; INTELLIGENCE ANALYSIS; LAW-ENFORCEMENT AGENCIES; PERVASIVE SOCIAL NETWORKINGS; SOCIAL COMMUNICATIONS;

SOCIAL NETWORKING (ONLINE);

EID: 85006997576     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2016.11.018     Document Type: Article

References (48)

1. Bell, C., Concepts and possibilities in forensic intelligence. Forensic Sci. Int. 162:1 (2006), 38–43.
2. Bettini, C., Riboni, D., Privacy protection in pervasive systems: state of the art and technical challenges. Pervasive Mob. Comput. 17 (2015), 159–174.
3. Burke, A., Corpuz, M., Gans, F., 2015. Jury presented with electronic evidence in Tsarnaev trial. 2015 24 March 2015 [cited 2015 4 July]; Available from: 〈http://dailyfreepress.com/2015/03/24/jury-presented-with-electronic-evidence-in-tsarnaev-trial/〉.
4. Choo, K.-K.R., Organised crime groups in cyberspace: a typology. Trends Organ. Crime, 11(3): 270–295.
5. Choo, K.-K.R., 2009. Online child grooming: A literature review on the misuse of social networking sites for grooming children for sexual offences. Research and public policy No 103, A.I.o. Criminology, Editor: Canberra, ACT.
6. Conti, M., et al. Looking ahead in pervasive computing: challenges and opportunities in the era of cyber–physical convergence. Pervasive Mob. Comput. 8:1 (2012), 2–21.
7. Corera, G., 2015. The MI5 spy in your mobile: How 7/7 London attack triggered new data-fed war on terror which led to capture of 21/7 bomb plotters which made ISIS vanish into encrypted web but makes your calls transparent to GCHQ spooks in 'Doughnut'. Daily Mail Australia 2015 14 June 2015; Available from: 〈http://www.dailymail.co.uk/news/article-3122808/How-7-7-London-attack-triggered-new-data-fed-war-terror-led-capture-21-7-bomb-plotters-ISIS-vanish-encrypted-web-makes-calls-transparent-GCHQ-spooks-Doughnut.html〉.
8. Dar, K., et al. A resource oriented integration architecture for the Internet of things: a business process perspective. Pervasive Mob. Comput., 2014.
9. FBI_RCFL, 2003–2013. FBI Regional Computer Forensic Laboratory Annual Reports. 2003–2013; Available from: 〈http://www.rcfl.gov/downloads〉.
10. Garfinkel, S., et al. Bringing science to digital forensics with standardized forensic corpora. Digit. Investig. 6 (2009), S2–S11.
11. Grispos, G., Storer, T., Glisson, W.B., A comparison of forensic evidence recovery techniques for a windows mobile smart phone. Digit. Investig. 8:1 (2011), 23–36.
12. Harrison, W., et al. A Lessons Learned Repository for Computer Forensics. 2002, Computer Science Faculty Publications and Presentations.
13. IDC, 2014. Worldwide Smartphone Shipments Top One Billion Units for the First Time. [cited 201417 August]; Available from: 〈http://www.idc.com/getdoc.jsp?ContainerId=prUS24645514〉.
14. ITU, 2010. The World in 2010, ICT Facts and Figures; Available from: 〈http://www.itu.int/ITU-D/ict/material/FactsFigures2010.pdf〉.
15. ITU, 2014. The World in 2014, ICT Facts and Figures. [cited 2014 17 August]; Available from: 〈http://www.itu.int/en/ITU-D/Statistics/Documents/facts/ICTFactsFigures2014-e.pdf〉.
16. Jansen, W., Ayers, R., Guidelines on Cell Phone Forensics, 800, 2007, NIST Special Publication, 101.
17. Lexar, 2016. Press releases|Lexar. [cited 2016 20 April]; SD Card Release Dates]. Available from: 〈http://www.lexar.com/about/newsroom/press-releases〉.
18. O'Connell, R., A Typology of Child Cybersexploitation and Online Grooming Practices. 2003, University of Central Lancashire, Preston.
19. OpenSignal, 2014. Android Fragmentation Report August 2014. 2014 [cited 2014 23 August]; Available from: 〈http://opensignal.com/reports/2014/android-fragmentation/〉.
20. Oxygen, 2015. Demo Backups. 2015 [cited 2015 15 June]; Available from: 〈http://www.oxygen-forensic.com/en/download/devicebackups〉.
21. Quick, D., Choo, K.-K.R., Forensic collection of cloud storage data: does the act of collection result in changes to the data or its metadata?. Digit. Investig. 10:3 (2013), 266–277.
22. Quick, D., Choo, K.-K.R., Dropbox analysis: data remnants on user machines. Digit. Investig. 10:1 (2013), 3–18.
23. Quick, D., Choo, K.-K.R., Digital droplets: microsoft SkyDrive forensic data remnants. Future Gener. Comput. Syst. 29:6 (2013), 1378–1394.
24. Quick, D., Choo, K.-K.R., Dropbox analysis: data remnants on user machines. Digit. Investig. 10:1 (2013), 3–18.
25. Quick, D., Choo, K.-K.R., Impacts of increasing volume of digital forensic data: a survey and future research challenges. Digit. Investig. 11:4 (2014), 273–294.
26. Quick, D., Choo, K.-K.R., Google drive: forensic analysis of data remnants. J. Netw. Comput. Appl. 40 (2014), 179–193.
27. Quick, D., Choo, K.-K.R., data reduction and data mining framework for digital forensic evidence: storage, intelligence, review and archive. Trends Issues Crime. Crim. Justice 480 (2014), 1–11.
28. Quick, D., Choo, K.-K.R., Big forensic data reduction: digital forensic images and electronic evidence. Clust. Comput. 19:2 (2016), 723–740.
29. Quick, D., Choo, K.-K.R., 2016. Big Forensic Data Management in Heterogeneous Distributed Systems: Quick Analysis of Multimedia Forensic Data. Software: Practice & Experience. (In press) 〈 http://dx.doi.org/10.1002/spe.2429〉.
30. Quick, D., Martini, B., Choo, K.-K.R., Cloud Storage Forensics. 2013, Syngress: An Imprint of Elsevier.
31. Ribaux, O., Margot, P., Case based reasoning in criminal intelligence using forensic case data. Sci. Justice 43:3 (2003), 135–143.
32. Ribaux, O., Walsh, S., Margot, P., The contribution of forensic science to crime analysis and investigation: forensic intelligence. Forensic Sci. Int. 156:2–3 (2006), 171–181.
33. Rogers, M., The role of criminal profiling in the computer forensics process. Comput. Secur. 22:4 (2003), 292–298.
34. SanDisk, 2016. Press Releases. 2016 [cited 2016 20 April]; SD Card Release Information]. Available from: 〈https://www.sandisk.com.au/about/media-center/press-releases〉.
35. Statista, 2016. Number of apps available in leading app stores 2015. 2016 [cited 2016 20 April]; Available from: 〈http://www.statista.com/statistics/276623/number-of-apps-available-in-leading-app-stores/〉.
36. Statista, 2016. Most popular global mobile messenger apps as of April 2016, based on number of monthly active users (in millions). 2016 [cited 2016 20 April]; Available from: 〈http://www.statista.com/statistics/258749/most-popular-global-mobile-messenger-apps/〉.
37. Tassone, C., Martini, C., Choo K.-K., R., Slay, J., Mobile device forensics: A snapshot, Trends Issues Crime. Mobile device forensics: A snapshot, Trends Issues CrimeCrim. Justice 460 (2013), 1–7.
38. The_Australian, 2015. Alleged Anzac Day plotters were groomed from frontline, The Australian 2015; Available from: 〈http://www.theaustralian.com.au/in-depth/terror/alleged-anzac-day-plotters-were-groomed-from-frontline/story-fnpdbcmu-1227311119275〉.
39. The_Guardian, 2015. French terrorism attack: suspect took selfie with severed head, Associated Press 2015 28 June 2015; Available from: 〈http://www.theguardian.com/world/2015/jun/28/french-terrorism-suspect-took-selfie-with-slain-victim〉.
40. Turnbull, B., Taylor, R., Blundell, B., 2009. The Anatomy of Electronic Evidence; Quantitative Analysis of Police E-Crime Data, in ARES '09. International Conference on Availability, Reliability and Security, 2009. p. 143-149.
41. Turner, P., Unification of digital evidence from disparate sources (Digital Evidence Bags). Digit. Investig. 2:3 (2005), 223–228.
42. UNODC, United Nations Office on Drugs and Crime - Criminal Intelligence Manual for Analysts. 2011, United Nations, New York, Vienna, Austria.
43. van Asten, A.C., On the added value of forensic science and grand innovation challenges for the forensic community. Sci. Justice 54:2 (2014), 170–179.
44. Walsh, S., et al. The collation of forensic DNA case data into a multi-dimensional intelligence database. Sci. Justice 42:4 (2002), 205–214.
45. Weiser, M., Biros, D.P., Mosier, G., 2006. Development of a national repository of digital forensic intelligence. in Proceedings of the Conference on Digital Forensics, Security and Law. Association of Digital Forensics, Security and Law.
46. Wiles, J., et al. Forensic Examination in a Terabyte World, in Techno Security's Guide to E-Discovery and Digital Forensics. 2007, Elsevier, 129–146.
47. WMNAGreenwood, 2015. Drug dealer nabbed after posing with wad of cash. 2015 07 June 2015 [cited 2015 4 July]; Available from: 〈http://www.westernmorningnews.co.uk/Drug-dealer-nabbed-posing-wad-cash/story-26651154-detail/story.html〉.
48. Ye, J., Dobson, S., McKeever, S., Situation identification techniques in pervasive computing: a review. Pervasive Mob. Comput. 8:1 (2012), 36–66.