Please use this identifier to cite or link to this item:
Title: D-Cloud-Collector : admissible forensic evidence from mobile cloud storage
Authors: Vella, Mark Joseph
Colombo, Christian
Keywords: Information storage and retrieval systems
Cloud computing
Forensic sciences
Electronic evidence
Privacy, Right of
Hardware stores
Issue Date: 2022
Publisher: Springer
Citation: Vella, M., & Colombo, C. (2022). D-Cloud-Collector : admissible forensic evidence from mobile cloud storage. In IFIP International Conference on ICT Systems Security and Privacy Protection (pp. 161-178). Springer, Cham.
Abstract: Difficulties with accessing device content or even the device itself can seriously hamper smartphone forensics. Mobile cloud storage, which extends on-device capacity, provides an avenue for a forensic collection process that does not require physical access to the device. Rather, it is possible to remotely retrieve credentials from a device of interest through undercover operations, followed by live cloud forensics. While technologically appealing, this approach raises concerns with evidence preservation, ranging from the use of malware-like operations, to linking the collected evidence with the physically absent smartphone, and possible mass surveillance accusations. In this paper, we propose a solution to ease these concerns by employing hardware security modules to provide for controlled live cloud forensics and tamper-evident access logs. A Google Drive-based proof of concept, using the SEcube hardware security module, demonstrates that D-Cloud-Collector is feasible whenever the performance penalty incurred is affordable.
Appears in Collections:Scholarly Works - FacICTCS

Files in This Item:
File Description SizeFormat 
D-Cloud-Collector__Admissible_forensic_evidence_from_mobile_cloud_storage(2022).pdf2.04 MBAdobe PDFView/Open

Items in OAR@UM are protected by copyright, with all rights reserved, unless otherwise indicated.