Forensic investigation of P2P cloud storage services and backbone for IoT networks: BitTorrent Sync as a case study. (February 2017)

• Record Type: Journal Article
• Authors: Teing, Yee-Yang; Dehghantanha, Ali; Choo, Kim-Kwang Raymond; Yang, Laurence T
• Is Part Of: Computers & electrical engineering. Volume 58(2017)
• Page Start: 350
• Page End: 363
• Publication Date: 2017-02
• Subjects: Internet of things forensics -- Cloud forensics -- P2p cloud investigation -- Computer forensics -- Mobile forensics -- BitTorrent Sync; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2016.08.020
• Languages: English
• ISSNs: 0045-7906

Abstract

Highlights: Forensic investigation of P2P cloud storage services and backbone for IoT networks. Industrial Internet of things forensics. Peer-to-peer and BitTorrent forensics. Forensically sound investigation methodology for BitTorrent Sync investigations. Abstract: Cloud computing can be generally regarded as the technology enabler for Internet of Things (IoT). To ensure the most effective collection of evidence from cloud-enabled IoT infrastructure, it is vital for forensic practitioners to possess a contemporary understanding of the artefacts from different cloud services and applications. In this paper, we seek to determine the data remnants from the use of the newer BitTorrent Sync applications (version 2.x). Findings from our research using mobile and computer devices running Windows, Mac OS, Ubuntu, iOS, and Android devices suggested that artefacts relating to the installation, uninstallation, log-in, log-off, and file synchronisation could be recovered, which are potential sources of IoT forensics. We also extend the cloud forensics framework of Martini and Choo to provide a forensically sound investigation methodology for the newer BitTorrent Sync applications. Graphical abstract: