Recovering residual forensic data from smartphone interactions with cloud storage providers

The Cloud Security Ecosystem: Technical, Legal, Business and Management Issues

Volumn , Issue , 2015, Pages 347-382

  Grispos, George ^a   Glisson, William Bradley ^b   Storer, Tim ^a  

^a UNIVERSITY OF GLASGOW   (United Kingdom)

^b University of South Alabama   (United States)

Author keywords

Cloud; Digital Forensics; Residual data; Smartphone

Indexed keywords

EID: 85013192181     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1016/B978-0-12-801595-7.00016-1     Document Type: Chapter

References (61)

1. Armbrust, M., Fox, A., Griffith, R., Joseph, A.D., Katz, R., Konwinski, A., Lee, G., Patterson, D., Rabkin, A., Stoica, I., Zaharia, M., 2009. Above the clouds: a Berkeley view of cloud computing. Technical report no. UCB/EECS-2009-28, University of California, Berkeley.
2. Grispos G., Storer T., Glisson W.B. Calm before the storm: the challenges of cloud computing in digital forensics. Int. J. Digit. Crime Forensics 2012, 4(2):28-48.
3. Mager T., Biersack E., Michiardi P. A measurement study of the Wuala on-line storage service 2012.
4. Mulazzani M., Schrittwieser S., Leithner M., Huber M., Weippl E. Dark clouds on the horizon: using cloud storage as attack vector and online slack space 2011.
5. Hunsinger D.S., Corley J.K. An examination of the factors influencing student usage of Dropbox, a file hosting service 2012.
6. Hong K. Dropbox reaches 300m users, adding on 100m users in just six months Available from:. http://thenextweb.com/insider/2014/05/29/dropbox-reaches-300m-users-adding-100m-users-just-six-months/.
7. Constine J. Dropbox is now the data fabric tying together devices for 100M registered users who save 1B files a Day Available from:. http://techcrunch.com/2012/11/13/dropbox-100-million/.
8. MarketWire Box Triples Enterprise Revenue in 2011 2012, Available from: Box Triples Enterprise Revenue in 2011. http://www.marketwire.com/press-release/box-triples-enterprise-revenue-in-2011-1605187.htm.
9. Mozy Mozy-About Us 2014, Available from. http://mozy.com/about/about-mozy.
10. Forrester Consulting, 2012. Personal Cloud Services Emerge to Orchestrate Our Mobile Computing Lives. A Forrester Consulting Thought Leadership Paper Commissioned By SugarSync. https://www.sugarsync.com/media/sugarsync-forrester-report.pdf.
11. CRN Box Triples Enterprise Cloud Storage Revenue 2012, Available from: Box Triples Enterprise Cloud Storage Revenue. http://www.crn.com/news/cloud/232400190/box-triples-enterprise-cloud-storage-revenue.htm.
12. MarketWire Box Sees 70 percent growth in legal services cloud adoption 2012, Available from:. http://www.marketwire.com/press-release/Box-Sees-70-Percent-Growth-in-Legal-Services-Cloud-Adoption-1749461.htm.
13. Subashini S., Kavitha V. A survey on security issues in service delivery models of cloud computing. J. Netw. Comput. Appl. 2011, 34(1):1-11.
14. Ibrahim A.S., Hamlyn-Harris J.H., Grundy J. Emerging security challenges of cloud virtual infrastructure 2010.
15. Jansen W., Grance T. Guidelines on Security and Privacy in Public Cloud Computing. NIST Special Publication 800-144 2011, National Institute of Standards and Technology, Gaithersburg, Maryland, USA.
16. Grispos G., Glisson W.B., Pardue J.H., Dickson M. Identifying user behavior from residual data in cloud-based synchronized apps 2014.
17. Grispos G., Glisson W.B., Storer T. Cloud security challenges: investigating policies, standards, and guidelines in a fortune 500 organization 2013.
18. Zissis D., Lekkas D. Addressing cloud computing security issues. Futur. Gener. Comput. Syst. 2012, 28(3):583-592.
19. Kaufman L.M. Data security in the world of cloud computing. IEEE Secur. Priv. 2009, 7(4):61-64.
20. Hay B., Nance K., Bishop M., et al. Storm clouds rising: security challenges for IaaS cloud computing 2011, 1-7.
21. Hay B., Nance K., Bishop M., McDaniel L. Are your papers in order? Developing and enforcing multi-tenancy and migration policies in the cloud 2012, 5473-5479.
22. TrendMicro Cloud Security Survey Global Executive Summary 2011, http://www.trendmicro.com/cloud-content/us/pdfs/about/presentation-global-cloud-survey_exec-summary.pdf.
23. Kholia D., Wegrzyn P. Looking inside the (Drop) box 2013.
24. Reilly D., Wren C., Berry T. Cloud computing: forensic challenges for law enforcement 2010, 1-7.
25. Ruan K., Carthy J., Kechadi T., Crosbie M. Cloud forensics. Advances in Digital Forensics VII 2011, 35-46. Springer, Boston. G. Peterson, S. Shenoi (Eds.).
26. Taylor M., Haggerty J., Gresty D., Hegarty R. Digital evidence in cloud computing systems. Comput. Law Secur. Rev. 2010, 26(3):304-308.
27. Brodkin J. Gartner-Seven Cloud-Computing Security Risks Available from: Gartner: Seven cloud-computing security risks. http://www.infoworld.com/d/security-central/gartner-seven-cloud-computing-security-risks-853.
28. Jansen W., Ayers R. Guidelines on Cell Phone Forensics. NIST Special Publication 800-101 2007, National Institute of Standards and Technology, Gaithersburg, Maryland, USA.
29. Grispos G., Glisson W.B., Storer T. Using smartphones as a proxy for forensic evidence contained in cloud storage services 2013.
30. Biggs S., Vidalis S. Cloud computing: the impact on digital forensic investigations 2009.
31. Google Security Whitepaper: Google Apps Messaging and Collaboration Products 2011, Available from: Google. "Google Security Whitepaper: Google Apps Messaging and Collaboration Products". https://www.google.co.uk/work/apps/business/resources/docs/security-whitepaper.html.
32. Dykstra J., Sherman A.T. Acquiring forensic evidence from infrastructure-as-a-service cloud computing: exploring and evaluating tools, trust, and techniques 2012, S90-S98.
33. Delport W., Olivier M.S., Kohn M. Isolating a cloud instance for a digital forensic investigation 2011, H.S. Venter, M. Coetzee, M. Loock (Eds.).
34. Amazon Web Services About AWS Security Credentials 2011, Available from: Amazon Web Services. "About AWS Security Credentials". http://docs.aws.amazon.com/AWSSecurityCredentials/1.0/AboutAWSCredentials.html.
35. Amazon Web Services Amazon Elastic Compute Cloud Microsoft Windows Guide 2014, http://awsdocs.s3.amazonaws.com/EC2/2014-05-01/ec2-wg-2014-05-01.pdf.
36. Chung H., Park J., Lee S., Kang C. Digital forensic investigation of cloud storage services. Digit. Investig. 2012, 9(2):81-95.
37. Lee J., Chung H., Lee C., Lee S. Methodology for digital forensic investigation of iCloud. Information Technology Convergence, Secure and Trust Computing, and Data Management 2012, 197-206. Springer, Netherlands. J.H. Park (Ed.).
38. Quick D., Choo K.-K.R. Dropbox analysis: data remnants on user machines. Digit. Investig. 2013, 10(1):3-18.
39. Quick D., Choo K.-K.R. Digital droplets: Microsoft SkyDrive forensic data remnants. Futur. Gener. Comput. Syst. 2013, 29(6):1378-1394.
40. Quick D., Choo K.-K.R. Google drive: forensic analysis of data remnants. J. Netw. Comput. Appl. 2014, 40:179-193.
41. Quick D., Martini B., Choo R. Cloud Storage Forensics 2013, Syngress, Amsterdam, the Netherlands.
42. Quick D., Choo K.-K.R. Forensic collection of cloud storage data: does the act of collection result in changes to the data or its metadata?. Digit. Investig. 2013, 10(3):266-277.
43. Martini B., Choo K.-K.R. Cloud storage forensics: ownCloud as a case study. Digit. Investig. 2013, 10(4):287-299.
44. Martini B., Choo K.-K.R. Distributed filesystem forensics: XtreemFS as a case study. Digit. Investig. 2014, 11(4):295-313.
45. Biggs S., Vidalis S. Cloud computing storms. Int. J. Intell. Comput. Res. 2010, 1(1/2):61-68.
46. Phillips A. E-evidence and international jurisdictions: creating laws for the 21st century 2011, 1-5.
47. Grispos G., Storer T., Glisson W.B. A comparison of forensic evidence recovery techniques for a windows mobile smart phone. Digit. Investig. 2011, 8(1):23-36.
48. Glisson W., Storer T., Mayall G., Moug I., Grispos G. Electronic retention: what does your mobile phone reveal about you?. Int. J. Inf. Secur. 2011, 10(6):337-349.
49. Hoog A. Android Forensics-Investigation, Analysis and Mobile Security for Google Android 2011, Syngress, Waltham, MA.
50. Levinson A., Stackpole B., Johnson D. Third party application forensics on apple mobile devices 2011, 1-9.
51. Morrissey S. iOS Forensic Analysis: for iPhone, iPad, and iPod Touch 2010, Apress, New York.
52. Cellebrite. Cellebrite UFED. Available from: Cellebrite UFED,. http://www.cellebrite.com/mobile-forensics-products/forensics-products.html.
53. Micro Systemation. What is XRY?. Available from: What is XRY?,. http://www.msab.com/xry/what-is-xry.
54. Distefano A., Me G. An overall assessment of mobile internal acquisition tool. Digit. Investig. 2008, 5(Suppl.):S121-S127.
55. Paraben, n.d. Device Seizure. Available from: Device Seizure,. http://www.paraben.com/device-seizure.html.
56. Hengeveld W.J. RAPI Tools Available from: RAPI Tools. http://itsme.home.xs4all.nl/projects/xda/tools.html.
57. Gartner Gartner says worldwide sales of mobile phones declined 2 percent in first quarter of 2012; previous year-over-year decline occurred in second quarter of 2009 Available from: Gartner Says Worldwide Sales of Mobile Phones Declined 2 Percent in First Quarter of 2012; Previous Year-over-Year Decline Occurred in Second Quarter of 2009. http://www.gartner.com/it/page.jsp?id=2017015.
58. Department of Defense Computer Forensics Lab. dcfldd. 2006; Available from:. http://dcfldd.sourceforge.net/.
59. Lessard J., Kessler G. Android forensics: simplifying cell phone examinations. Small Scale Digit. Dev. Forensics J. 2010, 4(1):1-12.
60. Zdziarski J. iPhone Forensics: Recovering Evidence, Personal Data, and Corporate Assets 2008, O'Reilly Media, Incorporated, Sebastopol, California, USA.
61. Box Developer Documentation, 2015. Get Started with the Box API. Available from:. https://developers.box.com/get-started/.