A Comparison of Cloud Storage Technologies as Sources of Digital Evidence

Please always quote using this URN: urn:nbn:de:bvb:29-opus4-210457
  • Due to their ease of use and their reliability, managed storage services "in the cloud" have become a standard way to store personal files for many users. In fact, many apps on mobile devices use local storage on the client merely as a cache for data that is fully stored on a remote server. Consequently, data from cloud storage services is an increasingly valuable source of digital evidence in forensic investigations. This document presents the results of a student project that was performed at Friedrich-Alexander-Universität Erlangen-Nürnberg in the winter term 2021/22. Six groups of students analyzed the most relevant network storage technologies (Samba, Nextcloud, Dropbox, Google Drive,Due to their ease of use and their reliability, managed storage services "in the cloud" have become a standard way to store personal files for many users. In fact, many apps on mobile devices use local storage on the client merely as a cache for data that is fully stored on a remote server. Consequently, data from cloud storage services is an increasingly valuable source of digital evidence in forensic investigations. This document presents the results of a student project that was performed at Friedrich-Alexander-Universität Erlangen-Nürnberg in the winter term 2021/22. Six groups of students analyzed the most relevant network storage technologies (Samba, Nextcloud, Dropbox, Google Drive, OneDrive, iCloud) regarding two questions: (1) What effect does data acquisition by the client have on the data stored on the server? (2) Does the technology support delayed verification of data acquisition in any way? The two questions refer to critical aspects of forensic evidence collection, namely in what way does evidence collection interfere with the evidence, and how easy is it to prove the provenance of data in a forensic investigation. In the concluding discussion we compare the different technologies and develop a taxonomy of storage services that can be used to assess other cloud storage services with regarding the evidental value of data acquired from them.show moreshow less

Download full text files

Export metadata

Additional Services

Share in Twitter Search Google Scholar Statistics
Metadaten
Author:Regine Büter, German Engst, Kai Esser, Felix Freiling, Kay Friedrich, Tim Friedrich, Andreas Hammer, Lukas Heine, Lukas Heinlein, Oliver Korn, Christian Minuth, Manuel Müller, Nico Müller, Juliane Reithmeier, Nora Ripley, Matti Schulze, Merlin Sievers, Charinee Srikhaolan, Johan Zenk
Persistent identifiers - URN:urn:nbn:de:bvb:29-opus4-210457
Persistent identifiers - DOI:https://doi.org/10.25593/issn.2191-5008/CS-2022-01
ISSN:2191-5008
Series (Volume number):Technical reports / Department Informatik (CS-2022-01)
Document Type:Report
Language:English
Year of publication:2022
Date of online publication (Embargo Date):2022/12/06
Publishing Institution:Friedrich-Alexander-Universität Erlangen-Nürnberg (FAU)
Release Date:2022/12/07
Tag:auditability; cloud forensics; forensic soundness; interference; taxonomy
Length/size:1-75
Institutes:Technische Fakultät
Dewey Decimal Classification:0 Informatik, Informationswissenschaft, allgemeine Werke / 00 Informatik, Wissen, Systeme / 004 Datenverarbeitung; Informatik
open_access (DINI-Set):open_access
Licence (German):Creative Commons - CC BY-ND - Namensnennung - Keine Bearbeitungen 4.0 International
Einverstanden ✔
Diese Webseite verwendet technisch erforderliche Session-Cookies. Durch die weitere Nutzung der Webseite stimmen Sie diesem zu. Unsere Datenschutzerklärung finden Sie hier.