Abstract

The web has evolved into a robust and ubiquitous platform, changing almost every aspect of people’s lives. The unique characteristics of the web pose new challenges to digital forensic investigators. For example, it is much more difficult to gain access to data that is stored online than it is to access data on the hard drive of a laptop. Despite the fact that data from the web is more challenging for forensic investigators to acquire and analyze, web environments continue to store more data than ever on behalf of users. This chapter discusses five critical challenges related to forensic investigations of web environments and explains their significance from a research perspective. It presents a framework for web environment forensics comprising four components: (i) evidence discovery and acquisition; (ii) analysis space reduction; (iii) timeline reconstruction; and (iv) structured formats. The framework components are non-sequential in nature, enabling forensic investigators to readily incorporate the framework in existing workflows. Each component is discussed in terms of how an investigator might use the component, the challenges that remain for the component, approaches related to the component and opportunities for researchers to enhance the component.

Original languageEnglish (US)
Title of host publicationAdvances in Digital Forensics XIV - 14th IFIP WG 11.9 International Conference, 2018
EditorsGilbert Peterson, Sujeet Shenoi
PublisherSpringer New York LLC
Pages11-33
Number of pages23
ISBN (Print)9783319992761
DOIs
StatePublished - Jan 1 2018
Event14th IFIP WG 11.9 International Conference on Digital Forensics, 2018 - New Delhi, India
Duration: Jan 3 2018Jan 5 2018

Publication series

NameIFIP Advances in Information and Communication Technology
Volume532
ISSN (Print)1868-4238

Other

Other14th IFIP WG 11.9 International Conference on Digital Forensics, 2018
CountryIndia
CityNew Delhi
Period1/3/181/5/18

Fingerprint

World Wide Web
Digital forensics

Keywords

  • Forensic framework
  • Storage formats
  • Timelines
  • Web environments

ASJC Scopus subject areas

  • Information Systems
  • Computer Networks and Communications
  • Information Systems and Management

Cite this

Mabey, M., Doupe, A., Zhao, Z., & Ahn, G-J. (2018). Challenges, opportunities and a framework for web environment forensics. In G. Peterson, & S. Shenoi (Eds.), Advances in Digital Forensics XIV - 14th IFIP WG 11.9 International Conference, 2018 (pp. 11-33). (IFIP Advances in Information and Communication Technology; Vol. 532). Springer New York LLC. https://doi.org/10.1007/978-3-319-99277-8_2

Challenges, opportunities and a framework for web environment forensics. / Mabey, Mike; Doupe, Adam; Zhao, Ziming; Ahn, Gail-Joon.

Advances in Digital Forensics XIV - 14th IFIP WG 11.9 International Conference, 2018. ed. / Gilbert Peterson; Sujeet Shenoi. Springer New York LLC, 2018. p. 11-33 (IFIP Advances in Information and Communication Technology; Vol. 532).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Mabey, M, Doupe, A, Zhao, Z & Ahn, G-J 2018, Challenges, opportunities and a framework for web environment forensics. in G Peterson & S Shenoi (eds), Advances in Digital Forensics XIV - 14th IFIP WG 11.9 International Conference, 2018. IFIP Advances in Information and Communication Technology, vol. 532, Springer New York LLC, pp. 11-33, 14th IFIP WG 11.9 International Conference on Digital Forensics, 2018, New Delhi, India, 1/3/18. https://doi.org/10.1007/978-3-319-99277-8_2
Mabey M, Doupe A, Zhao Z, Ahn G-J. Challenges, opportunities and a framework for web environment forensics. In Peterson G, Shenoi S, editors, Advances in Digital Forensics XIV - 14th IFIP WG 11.9 International Conference, 2018. Springer New York LLC. 2018. p. 11-33. (IFIP Advances in Information and Communication Technology). https://doi.org/10.1007/978-3-319-99277-8_2
Mabey, Mike ; Doupe, Adam ; Zhao, Ziming ; Ahn, Gail-Joon. / Challenges, opportunities and a framework for web environment forensics. Advances in Digital Forensics XIV - 14th IFIP WG 11.9 International Conference, 2018. editor / Gilbert Peterson ; Sujeet Shenoi. Springer New York LLC, 2018. pp. 11-33 (IFIP Advances in Information and Communication Technology).
@inproceedings{0cc543caca664dcd9ad28b2a7036b570,
title = "Challenges, opportunities and a framework for web environment forensics",
abstract = "The web has evolved into a robust and ubiquitous platform, changing almost every aspect of people’s lives. The unique characteristics of the web pose new challenges to digital forensic investigators. For example, it is much more difficult to gain access to data that is stored online than it is to access data on the hard drive of a laptop. Despite the fact that data from the web is more challenging for forensic investigators to acquire and analyze, web environments continue to store more data than ever on behalf of users. This chapter discusses five critical challenges related to forensic investigations of web environments and explains their significance from a research perspective. It presents a framework for web environment forensics comprising four components: (i) evidence discovery and acquisition; (ii) analysis space reduction; (iii) timeline reconstruction; and (iv) structured formats. The framework components are non-sequential in nature, enabling forensic investigators to readily incorporate the framework in existing workflows. Each component is discussed in terms of how an investigator might use the component, the challenges that remain for the component, approaches related to the component and opportunities for researchers to enhance the component.",
keywords = "Forensic framework, Storage formats, Timelines, Web environments",
author = "Mike Mabey and Adam Doupe and Ziming Zhao and Gail-Joon Ahn",
year = "2018",
month = "1",
day = "1",
doi = "10.1007/978-3-319-99277-8_2",
language = "English (US)",
isbn = "9783319992761",
series = "IFIP Advances in Information and Communication Technology",
publisher = "Springer New York LLC",
pages = "11--33",
editor = "Gilbert Peterson and Sujeet Shenoi",
booktitle = "Advances in Digital Forensics XIV - 14th IFIP WG 11.9 International Conference, 2018",

}

TY - GEN

T1 - Challenges, opportunities and a framework for web environment forensics

AU - Mabey, Mike

AU - Doupe, Adam

AU - Zhao, Ziming

AU - Ahn, Gail-Joon

PY - 2018/1/1

Y1 - 2018/1/1

N2 - The web has evolved into a robust and ubiquitous platform, changing almost every aspect of people’s lives. The unique characteristics of the web pose new challenges to digital forensic investigators. For example, it is much more difficult to gain access to data that is stored online than it is to access data on the hard drive of a laptop. Despite the fact that data from the web is more challenging for forensic investigators to acquire and analyze, web environments continue to store more data than ever on behalf of users. This chapter discusses five critical challenges related to forensic investigations of web environments and explains their significance from a research perspective. It presents a framework for web environment forensics comprising four components: (i) evidence discovery and acquisition; (ii) analysis space reduction; (iii) timeline reconstruction; and (iv) structured formats. The framework components are non-sequential in nature, enabling forensic investigators to readily incorporate the framework in existing workflows. Each component is discussed in terms of how an investigator might use the component, the challenges that remain for the component, approaches related to the component and opportunities for researchers to enhance the component.

AB - The web has evolved into a robust and ubiquitous platform, changing almost every aspect of people’s lives. The unique characteristics of the web pose new challenges to digital forensic investigators. For example, it is much more difficult to gain access to data that is stored online than it is to access data on the hard drive of a laptop. Despite the fact that data from the web is more challenging for forensic investigators to acquire and analyze, web environments continue to store more data than ever on behalf of users. This chapter discusses five critical challenges related to forensic investigations of web environments and explains their significance from a research perspective. It presents a framework for web environment forensics comprising four components: (i) evidence discovery and acquisition; (ii) analysis space reduction; (iii) timeline reconstruction; and (iv) structured formats. The framework components are non-sequential in nature, enabling forensic investigators to readily incorporate the framework in existing workflows. Each component is discussed in terms of how an investigator might use the component, the challenges that remain for the component, approaches related to the component and opportunities for researchers to enhance the component.

KW - Forensic framework

KW - Storage formats

KW - Timelines

KW - Web environments

UR - http://www.scopus.com/inward/record.url?scp=85053599330&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85053599330&partnerID=8YFLogxK

U2 - 10.1007/978-3-319-99277-8_2

DO - 10.1007/978-3-319-99277-8_2

M3 - Conference contribution

AN - SCOPUS:85053599330

SN - 9783319992761

T3 - IFIP Advances in Information and Communication Technology

SP - 11

EP - 33

BT - Advances in Digital Forensics XIV - 14th IFIP WG 11.9 International Conference, 2018

A2 - Peterson, Gilbert

A2 - Shenoi, Sujeet

PB - Springer New York LLC

ER -