Forensic Analysis to China’s Cloud Storage Services

Abstract

Nowadays, cloud storage is becoming increasingly popular among individuals and businesses. At the same time, there are an increasing number of illegal cases about preserving illegal information or stealing the company's confidential data through cloud storage service. Therefore, a study on digital forensic investigation of cloud storage services is necessary. Using two china’s cloud storage services(360 and Baidu cloud storage service) as case studies, this paper discusses the types of terrestrial artifacts that are likely to remain on a client’s machine and analyses the law of terrestrial artifacts after accessing to the cloud storage. At last the paper proposes a method to investigate and analyze the artifacts for reconstructing the event of user’s activities.