Live Forensics for Anti-Forensics Analysis on Private Portable Web Browser

Abstract

Almost all aspects of life already use the internet, to be able to access the Internet one of them using a web browser. For security, some web browser features to develop private mode. Unfortunately, from this feature, by some unscrupulous used for criminal activities by the anti-forensics. An anti-forensics process such as by using a portable web browser and delete registry. Motivation use of anti-forensics is to minimize or inhibit the discovery of digital evidence in criminal cases. So that, be an obstacle for investigators to uncover internet crimes that have been carried out. This paper proposes a framework for analysis phases of the web browser in private mode and anti-forensics. The purpose of this study is to provide solutions in forensic investigations effectively and efficiently using live forensics. This study uses a live forensics to get more detailed 3 evidence information on the computer with the condition is still on. So this method is suitable to be applied to the handling of incidents more quickly and allows getting the data in RAM. General TermsBrowser Security, Digital Forensic.

Comparative analysis of Forensic Tools on Twitter applications using the DFRWS method

“…Kejahatan dunia maya semakin meningkat setiap tahunnya [3] [4]. Internet juga telah merubah gaya hidup masyarakat baik dari sosial, Pendidikan bahkan pemerintah [5]. Dampak buruk yang dihasilkan dari penggunaan teknologi ini adalah penyalahgunaan dalam melakukan kejahatan.…”

Live Forensics Analysis of Line App on Proprietary Operating System

“…RAM is a temporary storage place when the computer system is running and can be accessed quickly [7] [8]. Therefore handling data and information on RAM must be done quickly and carefully because the data and information will be lost if the system dies [9]. This quick and careful handling is done so that the data and information contained in RAM that has the potential to become digital evidence can be obtained [10].…”

“…Other research conducted by Tri Rochmadi, Imam Riadi and Yudi Prayudi [9] who used anti-forensics to complicate investigators in the investigation process. The anti-forensics process is carried out such as using a portable web browser that provides private mode features and deletes the registry.…”

Detection of Metasploit Attacks Using RAM Forensic on Proprietary Operating Systems

“…On the other hand, Rochmadi, et al conducted research on the theme of the live forensics method in RAM for anti-forensic analysis in portable web browser private mode [20]. Other research on RAM extraction in Windows 7 was conducted by Thomas, et al The research explained the methodology for listing running processes, loading DLLs, and extracting memory processes from running processes [21].…”