NDLI: Recovery of Skype Application Activity Data from Physical Memory

Content Provider	IEEE Xplore Digital Library
Author	Simon, M. Slay, J.
Copyright Year	2010
Abstract	The use of Internet based communication technologies has become more prevalent in recent years. Technologies such as Skype provide a highly secure and decentralised method of communication. These technologies may also leave little evidence on static media causing conventional digital forensic processes to be ineffective. This research looks at exploiting physical memory to recover evidence from Internet based communication technologies where conventional methods cannot. The paper first proposes a set of generic target artefacts that defines information that may be targeted for recovery and the meaning that can be inferred from this. A controlled test was then undertaken where Skype was executed and the memory from the target machine collected. The analysis showed that it is feasible to recover the target data as applied to Skype, which would not be otherwise available. As this is the first set of tests of a series, the future direction is also discussed.
Starting Page	283
Ending Page	288
File Size	258573
Page Count	6
File Format	PDF
ISBN	9781424458790
e-ISBN	9781424458806
DOI	10.1109/ARES.2010.73
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-02-15
Publisher Place	Poland
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Availability Computer forensics RAM forensics Data security Digital evidence Digital forensics Communication system security Volatile memory forensics Digital investigation Operating systems Space technology Electronic evidence Communications technology Internet Australia Testing
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Enhancement of Forensic Computing Investigations through Memory Forensic Techniques

Recovery of Pidgin Chat Communication Artefacts from Physical Memory: A Pilot Test to Determine Feasibility

Forensics Data Recovery of Skype Communication from Physical Memory

The Anatomy of Electronic Evidence Quantitative Analysis of Police E-Crime Data

Live digital forensics: Windows XP vs Windows 7

Wi-Fi Network Signals as a Source of Digital Evidence: Wireless Network Forensics

Analyzing and searching process of internet username and password stored in Random Access Memory (RAM)

Volatile memory acquisition using backup for forensic investigation

Looking for digital evidence in Windows

Recovery of Skype Application Activity Data from Physical Memory

Similar Documents

Enhancement of Forensic Computing Investigations through Memory Forensic Techniques

Recovery of Pidgin Chat Communication Artefacts from Physical Memory: A Pilot Test to Determine Feasibility

Forensics Data Recovery of Skype Communication from Physical Memory

The Anatomy of Electronic Evidence  Quantitative Analysis of Police E-Crime Data

Live digital forensics: Windows XP vs Windows 7

Wi-Fi Network Signals as a Source of Digital Evidence: Wireless Network Forensics

Analyzing and searching process of internet username and password stored in Random Access Memory (RAM)

Volatile memory acquisition using backup for forensic investigation

Looking for digital evidence in Windows

Recovery of Skype Application Activity Data from Physical Memory

The Anatomy of Electronic Evidence Quantitative Analysis of Police E-Crime Data