Forensic investigation of OneDrive, Box, GoogleDrive and Dropbox applications on Android and iOS devices

In today’s Internet-connected world, mobile devices are increasingly used to access cloud storage services, which allow users to access data anywhere, anytime. Mobile devices have, however, been known to be used and/or targeted by cyber criminals to conduct malicious activities, such as data exfiltr...

Full description

Bibliographic Details
Main Authors: Daryabar, Farid, Dehghantanha, Ali, Eterovic-Soric, Brett, Choo, Raymond Kim-Kwang
Format: Article
Language:English
Published: Taylor & Francis 2016
Online Access:http://psasir.upm.edu.my/id/eprint/56561/1/Forensic%20investigation%20of%20OneDrive%2C%20Box%2C%20GoogleDrive%20and%20Dropbox%20applications%20on%20Android%20and%20iOS%20devices.pdf
_version_ 1796976503960895488
author Daryabar, Farid
Dehghantanha, Ali
Eterovic-Soric, Brett
Choo, Raymond Kim-Kwang
author_facet Daryabar, Farid
Dehghantanha, Ali
Eterovic-Soric, Brett
Choo, Raymond Kim-Kwang
author_sort Daryabar, Farid
collection UPM
description In today’s Internet-connected world, mobile devices are increasingly used to access cloud storage services, which allow users to access data anywhere, anytime. Mobile devices have, however, been known to be used and/or targeted by cyber criminals to conduct malicious activities, such as data exfiltration, malware, identity theft, piracy, illegal trading, sexual harassment, cyber stalking and cyber terrorism. Consequently, mobile devices are an increasing important source of evidence in digital investigations. In this paper, we examine four popular cloud client apps, namely OneDrive, Box, GoogleDrive, and Dropbox, on both Android and iOS platforms (two of the most popular mobile operating systems). We identify artefacts of forensic interest, such as information generated during login, uploading, downloading, deletion, and the sharing of files. These findings may assist forensic examiners and practitioners in real-world examination of cloud client applications on Android and iOS platforms.
first_indexed 2024-03-06T09:26:46Z
format Article
id upm.eprints-56561
institution Universiti Putra Malaysia
language English
last_indexed 2024-03-06T09:26:46Z
publishDate 2016
publisher Taylor & Francis
record_format dspace
spelling upm.eprints-565612017-08-03T04:04:26Z http://psasir.upm.edu.my/id/eprint/56561/ Forensic investigation of OneDrive, Box, GoogleDrive and Dropbox applications on Android and iOS devices Daryabar, Farid Dehghantanha, Ali Eterovic-Soric, Brett Choo, Raymond Kim-Kwang In today’s Internet-connected world, mobile devices are increasingly used to access cloud storage services, which allow users to access data anywhere, anytime. Mobile devices have, however, been known to be used and/or targeted by cyber criminals to conduct malicious activities, such as data exfiltration, malware, identity theft, piracy, illegal trading, sexual harassment, cyber stalking and cyber terrorism. Consequently, mobile devices are an increasing important source of evidence in digital investigations. In this paper, we examine four popular cloud client apps, namely OneDrive, Box, GoogleDrive, and Dropbox, on both Android and iOS platforms (two of the most popular mobile operating systems). We identify artefacts of forensic interest, such as information generated during login, uploading, downloading, deletion, and the sharing of files. These findings may assist forensic examiners and practitioners in real-world examination of cloud client applications on Android and iOS platforms. Taylor & Francis 2016 Article PeerReviewed application/pdf en http://psasir.upm.edu.my/id/eprint/56561/1/Forensic%20investigation%20of%20OneDrive%2C%20Box%2C%20GoogleDrive%20and%20Dropbox%20applications%20on%20Android%20and%20iOS%20devices.pdf Daryabar, Farid and Dehghantanha, Ali and Eterovic-Soric, Brett and Choo, Raymond Kim-Kwang (2016) Forensic investigation of OneDrive, Box, GoogleDrive and Dropbox applications on Android and iOS devices. Australian Journal of Forensic Sciences, 48 (6). pp. 615-642. ISSN 0045-0618; ESSN: 1834-562X http://www.tandfonline.com/doi/abs/10.1080/00450618.2015.1110620?journalCode=tajf20 10.1080/00450618.2015.1110620
spellingShingle Daryabar, Farid
Dehghantanha, Ali
Eterovic-Soric, Brett
Choo, Raymond Kim-Kwang
Forensic investigation of OneDrive, Box, GoogleDrive and Dropbox applications on Android and iOS devices
title Forensic investigation of OneDrive, Box, GoogleDrive and Dropbox applications on Android and iOS devices
title_full Forensic investigation of OneDrive, Box, GoogleDrive and Dropbox applications on Android and iOS devices
title_fullStr Forensic investigation of OneDrive, Box, GoogleDrive and Dropbox applications on Android and iOS devices
title_full_unstemmed Forensic investigation of OneDrive, Box, GoogleDrive and Dropbox applications on Android and iOS devices
title_short Forensic investigation of OneDrive, Box, GoogleDrive and Dropbox applications on Android and iOS devices
title_sort forensic investigation of onedrive box googledrive and dropbox applications on android and ios devices
url http://psasir.upm.edu.my/id/eprint/56561/1/Forensic%20investigation%20of%20OneDrive%2C%20Box%2C%20GoogleDrive%20and%20Dropbox%20applications%20on%20Android%20and%20iOS%20devices.pdf
work_keys_str_mv AT daryabarfarid forensicinvestigationofonedriveboxgoogledriveanddropboxapplicationsonandroidandiosdevices
AT dehghantanhaali forensicinvestigationofonedriveboxgoogledriveanddropboxapplicationsonandroidandiosdevices
AT eterovicsoricbrett forensicinvestigationofonedriveboxgoogledriveanddropboxapplicationsonandroidandiosdevices
AT chooraymondkimkwang forensicinvestigationofonedriveboxgoogledriveanddropboxapplicationsonandroidandiosdevices