• Login
    View Item 
    •   Home
    • IRAC Institute for Research in Applicable Computing - to April 2016
    • Centre for Research in Distributed Technologies (CREDIT)
    • View Item
    •   Home
    • IRAC Institute for Research in Applicable Computing - to April 2016
    • Centre for Research in Distributed Technologies (CREDIT)
    • View Item
    JavaScript is disabled for your browser. Some features of this site may not work without it.

    Browse

    All of UOBREPCommunitiesTitleAuthorsIssue DateSubmit DateSubjectsPublisherJournalDepartmentThis CollectionTitleAuthorsIssue DateSubmit DateSubjectsPublisherJournalDepartment

    My Account

    LoginRegister

    About

    AboutLearning ResourcesResearch Graduate SchoolResearch InstitutesUniversity Website

    Statistics

    Display statistics

    Web browser artefacts in private and portable modes: a forensic investigation

    • CSV
    • RefMan
    • EndNote
    • BibTex
    • RefWorks
    Authors
    Flowers, Cassandra
    Mansour, Ali
    al-Khateeb, Haider
    Affiliation
    Babraham Research Campus
    University of Bedfordshire
    Issue Date
    2016-04
    Subjects
    web browser forensics
    portable applications
    private browsing
    incognito mode
    physical memory
    Windows
    Chrome
    Firefox
    Opera
    OSForensics
    Internet Explorer
    web browsers
    browser artefacts
    portable browsers
    user privacy
    volatile memory
    recoverable artefacts
    record recovery
    evidence recovery
    G400 Computer Science
    Show allShow less
    
    Metadata
    Show full item record
    Abstract
    Web browsers are essential tools for accessing the internet. Extra complexities are added to forensic investigations when recovering browsing artefacts as portable and private browsing are now common and available in popular web browsers. Browsers claim that whilst operating in private mode, no data is stored on the system. This paper investigates whether the claims of web browsers discretion are true by analysing the remnants of browsing left by the latest versions of Internet Explorer, Chrome, Firefox, and Opera when used in a private browsing session, as a portable browser, and when the former is running in private mode. Some of our key findings show how forensic analysis of the file system recovers evidence from IE while running in private mode whereas other browsers seem to maintain better user privacy. We analyse volatile memory and demonstrate how physical memory by means of dump files, hibernate and page files are the key areas where evidence from all browsers will still be recoverable despite their mode or location they run from.
    Citation
    Flowers, C., Mansour, A. and Al-Khateeb, H.M. (2016) ‘Web browser artefacts in private and portable modes: a forensic investigation’, Int. J. Electronic Security and Digital Forensics, 8 (2) pp.99–117
    Publisher
    Inderscience
    Journal
    Int. J. of Electronic Security and Digital Forensics
    URI
    http://hdl.handle.net/10547/603909
    DOI
    10.1504/IJESDF.2016.075583
    Additional Links
    http://www.inderscience.com/info/inarticle.php?artid=75583
    Type
    Article
    Language
    en
    ISSN
    1751-9128
    EISSN
    1751-9128
    ae974a485f413a2113503eed53cd6c53
    10.1504/IJESDF.2016.075583
    Scopus Count
    Collections
    Centre for Research in Distributed Technologies (CREDIT)

    entitlement

     
    DSpace software (copyright © 2002 - 2023)  DuraSpace
    Quick Guide | Contact Us
    Open Repository is a service operated by 
    Atmire NV
     

    Export search results

    The export option will allow you to export the current search results of the entered query to a file. Different formats are available for download. To export the items, click on the button corresponding with the preferred download format.

    By default, clicking on the export buttons will result in a download of the allowed maximum amount of items.

    To select a subset of the search results, click "Selective Export" button and make a selection of the items you want to export. The amount of items that can be exported at once is similarly restricted as the full export.

    After making a selection, click one of the export format buttons. The amount of items that will be exported is indicated in the bubble next to export format.