A closer look at Syncany Windows and Ubuntu clients’ residual artefacts

Yee Yang, T; Dehghantanha, A; Choo, R; Muda, Z; Taufik, A; Wee-Chait, C

Abstract

In this paper, we seek to determine the residual artefacts of forensic value on Windows and Ubuntu client machines of using Syncany private cloud storage service. We demonstrate the types and the locations of the artefacts that can be forensically recovered (e.g. artefacts associated with the installation, uninstallation, log-in, log-off, and file synchronisation actions). Findings from this research contribute to an in-depth understanding of cloud-enabled big data storage forensics related to the collection of big data artefacts from a private cloud storage service, which have real-world implications and impacts (e.g. in criminal investigations and civil litigations). Echoing the observations of Ab Rahman et al. (2006), we reiterated the importance of forensic-by-design in future cloud-enabled big data storage solutions.

Citation

Yee Yang, T., Dehghantanha, A., Choo, R., Muda, Z., Taufik, A., & Wee-Chait, C. (2016). A closer look at Syncany Windows and Ubuntu clients’ residual artefacts. In Security, Privacy and Anonymity in Computation, Communication and Storage (342-357). SpaCCS. https://doi.org/10.1007/978-3-319-49145-5_34

• Online Publication Date: Nov 10, 2016
• Publication Date: Nov 10, 2016
• Deposit Date: Dec 23, 2016
• Pages: 342-357
• Series Title: Lecture Notes in Computer Science
• Series Number: 10067
• Book Title: Security, Privacy and Anonymity in Computation, Communication and Storage
• ISBN: 9783319491448
• DOI: https://doi.org/10.1007/978-3-319-49145-5_34
• Publisher URL: http://dx.doi.org/10.1007/978-3-319-49145-5_34
• Related Public URLs: http://link.springer.com/book/10.1007/978-3-319-49145-5