CloudMe forensics : a case of big-data investigation

Teing, Y-Y; Dehghantanha, A; Raymond Choo, K-K

Abstract

The significant increase in the volume, variety and velocity of data complicates cloud forensic efforts, as such big data will, at some point, become computationally expensive to be fully extracted and analyzed in a timely manner. Thus, it is important for a digital forensic practitioner to have a well-rounded knowledge about the most relevant data artefacts that could be forensically recovered from the cloud product under investigation. In this paper, CloudMe, a popular cloud storage service, is studied. The types and locations of the artefacts relating to the installation and uninstallation of the client application, logging in and out, and file synchronization events from the computer desktop and mobile clients are described. Findings from this research will pave the way towards the development of tools and techniques (e.g. data mining techniques) for cloud-enabled big data endpoint forensics investigation.

Citation

Teing, Y., Dehghantanha, A., & Raymond Choo, K. (2017). CloudMe forensics : a case of big-data investigation. Concurrency and Computation: Practice and Experience, 30(5), https://doi.org/10.1002/cpe.4277

• Journal Article Type: Article
• Acceptance Date: Jul 10, 2017
• Online Publication Date: Jul 31, 2017
• Publication Date: Jul 31, 2017
• Deposit Date: Aug 1, 2017
• Publicly Available Date: Jul 31, 2018
• Journal: Concurrency and Computation: Practice and Experience
• Print ISSN: 1532-0626
• Electronic ISSN: 1532-0634
• Publisher: Wiley
• Volume: 30
• Issue: 5
• DOI: https://doi.org/10.1002/cpe.4277
• Publisher URL: http://dx.doi.org/10.1002/cpe.4277
• Related Public URLs: http://onlinelibrary.wiley.com/journal/10.1002/(ISSN)1532-0634