Forensics Examination of Google Drive Cloud Storage Client Based on Windows 10 and Android

碩士 === 中央警察大學 === 資訊管理研究所 === 104 === As people’s life has changed in the wake of the technology, criminal behaviors have evolved along with the technology. Traditional detective techniques investigate cases through the crime scenes and means of crime scene investigation, evidence collecting, crimin...

Full description

Bibliographic Details
Main Author: 汪景倫
Other Authors: 張明桑
Format: Others
Language:zh-TW
Published: 2016
Online Access:http://ndltd.ncl.edu.tw/handle/m7h7pb
Description
Summary:碩士 === 中央警察大學 === 資訊管理研究所 === 104 === As people’s life has changed in the wake of the technology, criminal behaviors have evolved along with the technology. Traditional detective techniques investigate cases through the crime scenes and means of crime scene investigation, evidence collecting, criminal profiling and reasoning, intelligence consulting and communication surveillance; however, the traditional detective techniques face unprecedented challenges due to the development of the technology. Nowadays, many criminal behaviors indirectly facilitate the addition of cases by computers and mobile devices, and cases as cyber(child and youth) pornography, fraud, gambling and hacking have caused people inestimable loss and digital evidences of these cases have multiplied the difficulties of the criminal detection. Digital evidences possess characteristics as unlimited and indistinctive replications, difficulties of identifying additions and deletions and recovering, difficulties of proving resources of evidences and the dependence of format, and etc. , and modi operandi may include situations of professionalism, cross-jurisdictional nature, behavior(perpetrator) invisibility, easy loss of evidences, and etc. Cloud services technology has become more mature along with the promotion of connecting speed of the Internet. Service servers like Google Drive, Dropbox, iCloud, OneDrive and Amazon Cloud Drive own broad market occupancy and users in the market, and possess characteristics as cross platform feature, self-service of demands at any time, elasticity, sharing and measurable service, and etc. Criminals operate tools like computers or mobile devices to commit crimes through wired or wireless network, making the police have difficulties proving the time and the spots that crimes were committed during the detection. Therefore, this article uses digital forensic tools to extract digital evidences from Windows 10 and smart phones, discusses and analyses probable problems of using Google Drive cloud storage’s users forensics to detect the crimes and develops reliable and accurate means of digital forensics. The goal of the article is to find ways of implementing efficient criminal investigation via quarrying probative evidences as proofs of crimes and time records through digital forensics focused on detained criminal instruments.