Digital droplets: Microsoft SkyDrive forensic data remnants

被引：70

作者：

Quick, Darren ^{[1
]}

Choo, Kim-Kwang Raymond ^{[1
]}

机构：

[1] Univ S Australia, Adv Comp Res Ctr, Informat Assurance Res Grp, Mawson Lakes, SA 5095, Australia

来源：

FUTURE GENERATION COMPUTER SYSTEMS-THE INTERNATIONAL JOURNAL OF ESCIENCE | 2013年 / 29卷 / 06期

关键词：

Cloud storage; Cloud forensics; Digital forensic framework; Microsoft SkyDrive analysis;

D O I：

10.1016/j.future.2013.02.001

中图分类号：

TP301 [理论、方法];

学科分类号：

081202 ;

摘要：

Cloud storage services such as the popular Microsoft (c) SkyDrive (c) provide both organisational and individual users a cost-effective, and in some cases free, way of accessing, storing and disseminating data. The identification of digital evidence relating to cloud storage services can, however, be a challenge in a digital forensic investigation. Using SkyDrive as a case study, we identified the types of terrestrial artefacts that are likely to remain on a client's machine (in the context of our experiments; computer hard drive and iPhone), and where the access point(s) for digital forensics examiners are, that will allow them to undertake steps to secure evidence in a timely fashion. (C) 2013 Elsevier E.V. All rights reserved.

引用

页码：1378 / 1394

页数：17