Research Output
1 - 3 of 3
Publication
Investigation and Automating Extraction of Thumbnails Produced by Image viewers
2017-08-04, Meer, Wybren van der, Choo, Kim-Kwang Raymond, Le-Khac, Nhien-An, Kechadi, Tahar
Data carving is generally used to recover deleted images in digital investigations, but carving time can be significant and the deleted images may have been overwritten.Thus, thumbnails of (deleted) images are an alternative evidence,and can often be found within databases created by either operating systems or image viewers. Existing literature generally focus on the extraction of thumbnails from databases created by the operating system. Understanding thumbnails created by image reviewers is relatively understudied. Therefore, in this paper, we propose a new approach of automating extraction of thumbnails produced by image viewers. We then evaluate the utility of our approach using popular image viewers.
Publication
Digital forensic investigation of two-way radio communication equipment and services
2018-07, Kouwen, Arie, Scanlon, Mark, Choo, Kim-Kwang Raymond, Le-Khac, Nhien-An
Historically, radio-equipment has solely been used as a two-way analogue communication device. Today, the use of radio communication equipment is increasing by numerous organisations and businesses. The functionality of these traditionally short-range devices have expanded to include private call, address book, call-logs, text messages, lone worker, telemetry, data communication, and GPS. Many of these devices also integrate with smartphones, which delivers Push-To-Talk services that make it possible to setup connections between users using a two-way radio and a smartphone. In fact, these devices can be used to connect users only using smartphones. To date, there is little research on the digital traces in modern radio communication equipment. In fact, increasing the knowledge base about these radio communication devices and services can be valuable to law enforcement in a police investigation. In this paper, we investigate what kind of radio communication equipment and services law enforcement digital investigators can encounter at a crime scene or in an investigation. Subsequent to seizure of this radio communication equipment we explore the traces, which may have a forensic interest and how these traces can be acquired. Finally, we test our approach on sample radio communication equipment and services.
Publication
Volkswagen Car Entertainment System Forensics
2017-08-04, Jacobs, Daniel, Choo, Kim-Kwang Raymond, Le-Khac, Nhien-An, Kechadi, Tahar
Vehicles are fast becoming another importantsource of digital evidence in a criminal investigation.Traditionally, when a vehicle is involved in a crime scene (e.g.drink driving), the investigators focus on the acquisition of DNA, fingerprints and other identifying materials, usually non digitalin nature. However, modern day cars, particularly smart ordriverless cars, store a wealth of digital information, such asrecent destinations, favourite locations, routes, personal datasuch as call logs, contact lists, SMS messages, pictures, andvideos. In this paper, we describe some challenges associated withvehicle data forensics, an understudied area. Next, we presentour case study on forensic acquisition and data analysis of anentertainment system on a Volkswagen car.