Cloud storage forensics : MEGA as a case study

Daryabar, F; Dehghantanha, A; Choo, KR

Abstract

The increasing use of smartphones and cloud storage apps allows users to access their data anywhere, anytime. Due to the potential of mobile devices being used and/or targeted by criminals, such devices are an important source of evidence in investigations of both cybercrime and traditional crimes, such as drug trafficking. In this paper, we study the MEGA cloud client app, an increasingly popular alternative to Google Drive, Dropbox and OneDrive, on both Android and iOS platforms. In our study, we identify a range of artefacts arising from user activities, such as login, uploading, downloading, deletion, and the sharing of files, which could be forensically recovered, as well as findings such as modification of files’ timestamps. Our findings contribute to an up-to-date understanding of cloud storage forensics.

Citation

Daryabar, F., Dehghantanha, A., & Choo, K. (2016). Cloud storage forensics : MEGA as a case study. Australian Journal of Forensic Sciences, 49(3), 344-357. https://doi.org/10.1080/00450618.2016.1153714

• Journal Article Type: Article
• Acceptance Date: Feb 8, 2016
• Online Publication Date: Apr 18, 2016
• Publication Date: Apr 18, 2016
• Deposit Date: Apr 22, 2016
• Journal: Australian Journal of Forensic Sciences
• Print ISSN: 0045-0618
• Electronic ISSN: 1834-562X
• Publisher: Taylor and Francis
• Volume: 49
• Issue: 3
• Pages: 344-357
• DOI: https://doi.org/10.1080/00450618.2016.1153714
• Publisher URL: http://dx.doi.org/10.1080/00450618.2016.1153714
• Related Public URLs: http://www.tandfonline.com/toc/tajf20/current