%0 Conference Proceedings
%T Challenges, Opportunities and a Framework for Web Environment Forensics
%+ Arizona State University [Tempe] (ASU)
%+ Center for Cybersecurity and Digital Forensics (CDF)
%+ School of Computing, Informatics and Decision Systems Engineering
%A Mabey, Mike
%A Doupé, Adam
%A Zhao, Ziming
%A Ahn, Gail-Joon
%Z Part 1: Themes and Issues
%< avec comité de lecture
%( IFIP Advances in Information and Communication Technology
%B 14th IFIP International Conference on Digital Forensics (DigitalForensics)
%C New Delhi, India
%Y Gilbert Peterson
%Y Sujeet Shenoi
%I Springer International Publishing
%3 Advances in Digital Forensics XIV
%V AICT-532
%P 11-33
%8 2018-01-03
%D 2018
%R 10.1007/978-3-319-99277-8_2
%K Web environments
%K forensic framework
%K timelines
%K storage formats
%Z Computer Science [cs]Conference papers
%X The web has evolved into a robust and ubiquitous platform, changing almost every aspect of people’s lives. The unique characteristics of the web pose new challenges to digital forensic investigators. For example, it is much more difficult to gain access to data that is stored online than it is to access data on the hard drive of a laptop. Despite the fact that data from the web is more challenging for forensic investigators to acquire and analyze, web environments continue to store more data than ever on behalf of users.This chapter discusses five critical challenges related to forensic investigations of web environments and explains their significance from a research perspective. It presents a framework for web environment forensics comprising four components: (i) evidence discovery and acquisition; (ii) analysis space reduction; (iii) timeline reconstruction; and (iv) structured formats. The framework components are non-sequential in nature, enabling forensic investigators to readily incorporate the framework in existing workflows. Each component is discussed in terms of how an investigator might use the component, the challenges that remain for the component, approaches related to the component and opportunities for researchers to enhance the component.
%G English
%Z TC 11
%Z WG 11.9
%2 https://inria.hal.science/hal-01988837/document
%2 https://inria.hal.science/hal-01988837/file/472401_1_En_2_Chapter.pdf
%L hal-01988837
%U https://inria.hal.science/hal-01988837
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-AICT
%~ IFIP-TC
%~ IFIP-WG
%~ IFIP-TC11
%~ IFIP-DF
%~ IFIP-WG11-9
%~ IFIP-AICT-532