Towards comprehensive and collaborative forensics on email evidence

Justin Paglierani, Mike Mabey, Gail-Joon Ahn

Research output: Chapter in Book/Report/Conference proceedingConference contribution

6 Citations (Scopus)

Abstract

The digital forensics community has neglected email forensics as a process, despite the fact that email remains an important tool in the commission of crime. At present, there exists little support for discovering, acquiring, and analyzing web-based email, despite its widespread use. In this paper we present a systematic process for email forensics which we integrate into the normal forensic analysis workflow, and which accommodates the distinct characteristics of email evidence. Our process focuses on detecting the presence of non-obvious artifacts related to email accounts, retrieving the data from the service provider, and representing email in a well-structured format based on existing standards. As a result, developers and organizations can collaboratively create and use analysis tools that can analyze email evidence from any source in the same fashion and the examiner can access additional data relevant to their forensic cases.

Original languageEnglish (US)
Title of host publicationProceedings of the 9th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing, COLLABORATECOM 2013
Pages11-20
Number of pages10
DOIs
StatePublished - 2013
Event9th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing, COLLABORATECOM 2013 - Austin, TX, United States
Duration: Oct 20 2013Oct 23 2013

Other

Other9th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing, COLLABORATECOM 2013
CountryUnited States
CityAustin, TX
Period10/20/1310/23/13

Fingerprint

Electronic mail
Crime

Keywords

  • collaboration
  • Email
  • forensics

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Computer Science Applications

Cite this

Paglierani, J., Mabey, M., & Ahn, G-J. (2013). Towards comprehensive and collaborative forensics on email evidence. In Proceedings of the 9th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing, COLLABORATECOM 2013 (pp. 11-20). [6679965] https://doi.org/10.4108/icst.collaboratecom.2013.254125

Towards comprehensive and collaborative forensics on email evidence. / Paglierani, Justin; Mabey, Mike; Ahn, Gail-Joon.

Proceedings of the 9th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing, COLLABORATECOM 2013. 2013. p. 11-20 6679965.

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Paglierani, J, Mabey, M & Ahn, G-J 2013, Towards comprehensive and collaborative forensics on email evidence. in Proceedings of the 9th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing, COLLABORATECOM 2013., 6679965, pp. 11-20, 9th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing, COLLABORATECOM 2013, Austin, TX, United States, 10/20/13. https://doi.org/10.4108/icst.collaboratecom.2013.254125
Paglierani J, Mabey M, Ahn G-J. Towards comprehensive and collaborative forensics on email evidence. In Proceedings of the 9th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing, COLLABORATECOM 2013. 2013. p. 11-20. 6679965 https://doi.org/10.4108/icst.collaboratecom.2013.254125
Paglierani, Justin ; Mabey, Mike ; Ahn, Gail-Joon. / Towards comprehensive and collaborative forensics on email evidence. Proceedings of the 9th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing, COLLABORATECOM 2013. 2013. pp. 11-20
@inproceedings{2dbf9f2cc93b4a3698d56a768d699d3b,
title = "Towards comprehensive and collaborative forensics on email evidence",
abstract = "The digital forensics community has neglected email forensics as a process, despite the fact that email remains an important tool in the commission of crime. At present, there exists little support for discovering, acquiring, and analyzing web-based email, despite its widespread use. In this paper we present a systematic process for email forensics which we integrate into the normal forensic analysis workflow, and which accommodates the distinct characteristics of email evidence. Our process focuses on detecting the presence of non-obvious artifacts related to email accounts, retrieving the data from the service provider, and representing email in a well-structured format based on existing standards. As a result, developers and organizations can collaboratively create and use analysis tools that can analyze email evidence from any source in the same fashion and the examiner can access additional data relevant to their forensic cases.",
keywords = "collaboration, Email, forensics",
author = "Justin Paglierani and Mike Mabey and Gail-Joon Ahn",
year = "2013",
doi = "10.4108/icst.collaboratecom.2013.254125",
language = "English (US)",
isbn = "9781936968923",
pages = "11--20",
booktitle = "Proceedings of the 9th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing, COLLABORATECOM 2013",

}

TY - GEN

T1 - Towards comprehensive and collaborative forensics on email evidence

AU - Paglierani, Justin

AU - Mabey, Mike

AU - Ahn, Gail-Joon

PY - 2013

Y1 - 2013

N2 - The digital forensics community has neglected email forensics as a process, despite the fact that email remains an important tool in the commission of crime. At present, there exists little support for discovering, acquiring, and analyzing web-based email, despite its widespread use. In this paper we present a systematic process for email forensics which we integrate into the normal forensic analysis workflow, and which accommodates the distinct characteristics of email evidence. Our process focuses on detecting the presence of non-obvious artifacts related to email accounts, retrieving the data from the service provider, and representing email in a well-structured format based on existing standards. As a result, developers and organizations can collaboratively create and use analysis tools that can analyze email evidence from any source in the same fashion and the examiner can access additional data relevant to their forensic cases.

AB - The digital forensics community has neglected email forensics as a process, despite the fact that email remains an important tool in the commission of crime. At present, there exists little support for discovering, acquiring, and analyzing web-based email, despite its widespread use. In this paper we present a systematic process for email forensics which we integrate into the normal forensic analysis workflow, and which accommodates the distinct characteristics of email evidence. Our process focuses on detecting the presence of non-obvious artifacts related to email accounts, retrieving the data from the service provider, and representing email in a well-structured format based on existing standards. As a result, developers and organizations can collaboratively create and use analysis tools that can analyze email evidence from any source in the same fashion and the examiner can access additional data relevant to their forensic cases.

KW - collaboration

KW - Email

KW - forensics

UR - http://www.scopus.com/inward/record.url?scp=84893537100&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84893537100&partnerID=8YFLogxK

U2 - 10.4108/icst.collaboratecom.2013.254125

DO - 10.4108/icst.collaboratecom.2013.254125

M3 - Conference contribution

SN - 9781936968923

SP - 11

EP - 20

BT - Proceedings of the 9th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing, COLLABORATECOM 2013

ER -