Original Research Papers · Research Paper P3

Using Smartphones as a Proxy for Forensic Evidence Contained in Cloud Storage Services

George Grispos, William Bradley Glisson, Tim Storer

Forensic Science Seminar · 2013 · Volume 3 · Issue 2 · pp. 108–118

Peer ReviewedISSN 2157-118X Available online 25 June 2013Public PDF

Original Abstract

Abstract

Cloud storage services such as Dropbox, Box and SugarSync have been embraced by both individuals and organizations. This creates an environment that is potentially conducive to security breaches and malicious activities. The investigation of these cloud environments presents new challenges for the digital forensics community. It is anticipated that smartphone devices will retain data from these storage services. Hence, this research presents a preliminary investigation into the residual artifacts created on an iOS and Android device that has accessed a cloud storage service. The contribution of this paper is twofold. First, it provides an initial assessment on the extent to which cloud storage data is stored on these client-side devices. This view acts as a proxy for data stored in the cloud. Secondly, it provides documentation on the artifacts that could be useful in a digital forensics investigation of cloud services.

Keywords: Forensic science; Forensic evidence; Smartphone; Cloud storage; Iphone; HTC

The abstract and keywords are transcribed from the published first page. PDF ligature-extraction artifacts are normalized; the published wording is not editorially rewritten.

Authors & Publication

Article Details

Affiliations
  1. University of Glasgow, Glasgow, UK.

Corresponding author: George Grispos · g.grispos.1@research.gla.ac.uk

Received27 July 2012
Revised21 August 2012
Accepted7 December 2012
Available Online25 June 2013
Source note: The source first page also lists Brad.Glisson@glasgow.ac.uk and timothy.storer@glasgow.ac.uk for the co-authors.

Citation Information

Document codeP3 · Research Paper
JournalForensic Science Seminar
ISSN2157-118X
Volume / Issue3 / 2
Pages108–118
Publication date25 June 2013
Article HTMLhttps://fss.xxyy.info/journal/2013/2157118X.3.2.6.html
Full text PDFhttps://fss.xxyy.info/journal/2013/2157118X.3.2.6.pdf

Metadata Quality

The complete title includes the decorative drop-cap first letter. Only real author names are stored in citation_author; affiliation letters and corresponding-author marks are excluded. The internal R/P/A code controls document classification, not the numeric sequence filename.