利用去中心化扩展数字证据获取窗口:BitTorrent Sync案例研究
Leveraging Decentralization to Extend the Digital Evidence Acquisition Window: Case Study on BitTorrent Sync
摘要:
Dropbox、Google Drive、Microsoft OneDrive、Apple iCloud等文件同步服务,在当今这个始终连接的世界中越来越受欢迎。上述服务的一个流行替代品是BitTorrent Sync。这是一个分散的/无云的文件同步服务,并获得显着的普及与隐私的关注,他们的数据存储在哪里,谁有能力访问it.The本文的重点是远程恢复的数字证据有关的文件被识别为被访问或存储在嫌疑人的计算机或移动终端。概述了识别、调查、恢复和核实此类远程数字证据的方法。最后,从BitTorrent Sync共享文件夹中进行远程证据恢复的概念验证,突出显示了恢复和验证此类证据的一些潜在场景。
英文摘要:
File synchronization services such as Dropbox, Google Drive, Microsoft OneDrive, Apple iCloud, etc., are becoming increasingly popular in today's always-connected world. A popular alternative to the aforementioned services is BitTorrent Sync. This is a decentralized/cloudless file synchronization service and is gaining significant popularity among Internet users with privacy concerns over where their data is stored and who has the ability to access it. The focus of this paper is the remote recovery of digital evidence pertaining to files identified as being accessed or stored on a suspect's computer or mobile device. A methodology for the identification, investigation, recovery and verification of such remote digital evidence is outlined. Finally, a proof-of-concept remote evidence recovery from BitTorrent Sync shared folder highlighting a number of potential scenarios for the recovery and verification of such evidence.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。