Please use this identifier to cite or link to this item:
https://www.um.edu.mt/library/oar/handle/123456789/99372
Title: | D-Cloud-Collector : admissible forensic evidence from mobile cloud storage |
Authors: | Vella, Mark Joseph Colombo, Christian |
Keywords: | Information storage and retrieval systems Cloud computing Forensic sciences Electronic evidence Privacy, Right of Hardware stores |
Issue Date: | 2022 |
Publisher: | Springer |
Citation: | Vella, M., & Colombo, C. (2022). D-Cloud-Collector : admissible forensic evidence from mobile cloud storage. In IFIP International Conference on ICT Systems Security and Privacy Protection (pp. 161-178). Springer, Cham. |
Abstract: | Difficulties with accessing device content or even the device itself can seriously hamper smartphone forensics. Mobile cloud storage, which extends on-device capacity, provides an avenue for a forensic collection process that does not require physical access to the device. Rather, it is possible to remotely retrieve credentials from a device of interest through undercover operations, followed by live cloud forensics. While technologically appealing, this approach raises concerns with evidence preservation, ranging from the use of malware-like operations, to linking the collected evidence with the physically absent smartphone, and possible mass surveillance accusations. In this paper, we propose a solution to ease these concerns by employing hardware security modules to provide for controlled live cloud forensics and tamper-evident access logs. A Google Drive-based proof of concept, using the SEcube hardware security module, demonstrates that D-Cloud-Collector is feasible whenever the performance penalty incurred is affordable. |
URI: | https://www.um.edu.mt/library/oar/handle/123456789/99372 |
Appears in Collections: | Scholarly Works - FacICTCS |
Files in This Item:
File | Description | Size | Format | |
---|---|---|---|---|
D-Cloud-Collector__Admissible_forensic_evidence_from_mobile_cloud_storage(2022).pdf | 2.04 MB | Adobe PDF | View/Open |
Items in OAR@UM are protected by copyright, with all rights reserved, unless otherwise indicated.