Abstract

The web has evolved into a robust and ubiquitous platform, changing almost every aspect of people’s lives. The unique characteristics of the web pose new challenges to digital forensic investigators. For example, it is much more difficult to gain access to data that is stored online than it is to access data on the hard drive of a laptop. Despite the fact that data from the web is more challenging for forensic investigators to acquire and analyze, web environments continue to store more data than ever on behalf of users. This chapter discusses five critical challenges related to forensic investigations of web environments and explains their significance from a research perspective. It presents a framework for web environment forensics comprising four components: (i) evidence discovery and acquisition; (ii) analysis space reduction; (iii) timeline reconstruction; and (iv) structured formats. The framework components are non-sequential in nature, enabling forensic investigators to readily incorporate the framework in existing workflows. Each component is discussed in terms of how an investigator might use the component, the challenges that remain for the component, approaches related to the component and opportunities for researchers to enhance the component.

Original languageEnglish (US)
Title of host publicationAdvances in Digital Forensics XIV - 14th IFIP WG 11.9 International Conference, 2018
EditorsGilbert Peterson, Sujeet Shenoi
PublisherSpringer New York LLC
Pages11-33
Number of pages23
ISBN (Print)9783319992761
DOIs
StatePublished - Jan 1 2018
Event14th IFIP WG 11.9 International Conference on Digital Forensics, 2018 - New Delhi, India
Duration: Jan 3 2018Jan 5 2018

Publication series

NameIFIP Advances in Information and Communication Technology
Volume532
ISSN (Print)1868-4238

Other

Other14th IFIP WG 11.9 International Conference on Digital Forensics, 2018
CountryIndia
CityNew Delhi
Period1/3/181/5/18

Keywords

  • Forensic framework
  • Storage formats
  • Timelines
  • Web environments

ASJC Scopus subject areas

  • Information Systems
  • Computer Networks and Communications
  • Information Systems and Management

Fingerprint Dive into the research topics of 'Challenges, opportunities and a framework for web environment forensics'. Together they form a unique fingerprint.

  • Cite this

    Mabey, M., Doupe, A., Zhao, Z., & Ahn, G-J. (2018). Challenges, opportunities and a framework for web environment forensics. In G. Peterson, & S. Shenoi (Eds.), Advances in Digital Forensics XIV - 14th IFIP WG 11.9 International Conference, 2018 (pp. 11-33). (IFIP Advances in Information and Communication Technology; Vol. 532). Springer New York LLC. https://doi.org/10.1007/978-3-319-99277-8_2