Greening Digital Forensics: Opportunities and Challenges

TzeTzuen, Yap; Dehghantanha, Ali; Seddon, Andy; Mohtasebi, Seyed Hossein

doi:10.1007/978-3-642-32573-1_18

Cited by 4 publications

(3 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Tzuen et.al. [26], discussed about opportunities and challenges in streamlining digital investigation by referring to research that identified and documented residual artefacts.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Teing

Dehghantanha

Choo

et al. 2019

IEEE Trans. Sustain. Comput.

Self Cite

View full text Add to dashboard Cite

Abstract-The pervasive nature of cloud-enabled big data storage solutions introduces new challenges in the identification, collection, analysis, preservation and archiving of digital evidences. Investigation of such complex platforms to locate and recover traces of criminal activities is a time-consuming process. Hence, cyber forensics researchers are moving towards streamlining the investigation process by locating and documenting residual artefacts (evidences) of forensic value of users' activities on cloud-enabled big data platforms in order to reduce the investigation time and resources involved in a real-world investigation. In this paper, we seek to determine the data remnants of forensic value from Syncany private cloud storage service, a popular storage engine for big data platforms. We demonstrate the types and the locations of the artefacts that can be forensically recovered. Findings from this research contribute to an in-depth understanding of cloud-enabled big data storage forensics, which can result in reduced time and resources spent in real-world investigations involving Syncany-based cloud platforms.

show abstract

“…Tzuen et.al. [26], discussed about opportunities and challenges in streamlining digital investigation by referring to research that identified and documented residual artefacts.…”

Section: Related Workmentioning

confidence: 99%

“…These challenges are compounded in cross-jurisdictional investigations, which could prohibit the transfer of evidential data due to the lack of cross-nation legislative agreements in place [22], [23], [24], [25]. Overcoming these investigation challenges demands significant time and resources of an investigation team [26].…”

Section: Introductionmentioning

confidence: 99%

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Teing

Dehghantanha

Choo

et al. 2019

IEEE Trans. Sustain. Comput.

Self Cite

View full text Add to dashboard Cite

show abstract

“…As stated by [23], virtualization can promote utilization of hardware by 5 to 20 times and can decrease the number of servers in organizations, therefore reduce the power consumption. Virtual machines are used to test software compatibility on different operating system.…”

Section: Secure Virtual Machinementioning

confidence: 99%

A Framework of TPM, SVM and Boot Control for Securing Forensic Logs

Borhan¹,

Mahmod²,

Dehghantanha³

2012

IJCA

Self Cite

View full text Add to dashboard Cite

Computer logs files contain the crucial information that is stored and can be an important forensics evidence of attacks and actions of a system. Cyber forensics can be one of the important solutions to systematically gather, process, interpret and utilize digital evidence and log of the activities and events of a system is one of the most important resources of analyzing the evidence for researchers, therefore a secure storage of forensic log is our main focus. In this paper, we propose a Trusted Module Platform (TPM)-based solution along with using Secure Virtual Machines (SVM) to secure the storage of forensic logs of the system for cyber forensics investigation. Since TPM provides protection before system boot process, it heavily limits the number of attacks that may bypass. Also SVM provide a secure environment to test software before installing on the client-machine. To ensure a secure logging system, our model will be using a smart combination of TPM, SVM and secure boot control to provide maximum log protection.

show abstract