SugarSync forensic analysis

Shariatia, M; Dehghantanha, A; Choo, K-WR

Abstract

Cloud storage services are popular with both individuals and businesses as they offer cost-effective, large capacity storage and multi-functional services on a wide range of devices such as personal computers (PCs), Mac computers, and smart mobile devices (e.g. iPhones). However, cloud services have also been known to be exploited by criminals, and digital forensics in the cloud remains a challenge, partly due to the diverse range of cloud services and devices that can be used to access such services. Using SugarSync (a popular cloud storage service) as a case
study, research was undertaken to determine the types and nature of volatile and non-volatile data that can be recovered from Windows 8, Mac OS X 10.9, Android 4 and iOS 7 devices when a user has carried out different activities such as upload and download of files and folders. We then document the various digital artefacts that could be recovered from the respective devices.

Citation

Shariatia, M., Dehghantanha, A., & Choo, K. (2015). SugarSync forensic analysis. Australian Journal of Forensic Sciences, 48(1), 95-117. https://doi.org/10.1080/00450618.2015.1021379

• Journal Article Type: Article
• Acceptance Date: Jan 26, 2015
• Publication Date: Apr 8, 2015
• Deposit Date: Apr 27, 2015
• Journal: Australian Journal of Forensic Sciences
• Print ISSN: 0045-0618
• Electronic ISSN: 1834-562X
• Publisher: Taylor and Francis
• Peer Reviewed: Peer Reviewed
• Volume: 48
• Issue: 1
• Pages: 95-117
• DOI: https://doi.org/10.1080/00450618.2015.1021379
• Keywords: cloud forensic; SugarSync; digital forensics; cloud storage forensic
• Publisher URL: http://dx.doi.org/10.1080/00450618.2015.1021379
• Related Public URLs: http://www.tandfonline.com/loi/tajf20#.VT4aPKhdUuc