Portable web browser forensics: A forensic examination of the privacy benefits of portable web browsers
Portable web browser forensics: A forensic examination of the privacy benefits of portable web browsers
复制标题
便携式网络浏览器取证：对便携式网络浏览器的隐私优势进行取证检查
DOI：
10.1109/iccsii.2012.6454516
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
Ali Al Kaf
中科院分区：
文献类型：
--
作者：
Andrew Marrington;I. Baggili;Talal Al Ismail;Ali Al Kaf
便携式Web浏览器安装在可移动存储设备上，用户可以将其从一台计算机带到另一台计算机。便携式Web浏览器的一个声称的好处是增强隐私，通过最小化浏览活动在主机硬盘上留下的痕迹。基于这种说法，便携式网络浏览器似乎对试图在数字调查的背景下重建过去的网络浏览活动的法医构成了挑战。该研究检查了一种流行的便携式网络浏览器，谷歌Chrome在正常和私人浏览模式下，并将其使用的取证痕迹与同一浏览器安装版本的取证痕迹进行了比较。结果显示，Google Chrome便携式浏览器在主机的硬盘上留下了网页浏览活动的痕迹，并证明有必要对使用便携式网页浏览器所作的隐私声明进行取证测试。
Portable web browsers are installed on removable storage devices which can be taken by a user from computer to computer. One of the claimed benefits of portable web browsers is enhanced privacy, through minimization of the traces of browsing activity left on the host's hard disk. On the basis of this claim, it would appear that portable web browsers pose a challenge to forensic examiners trying to reconstruct past web browsing activity in the context of a digital investigation. The research examines one popular portable web browser, Google Chrome in both normal and private browsing mode, and compares the forensic traces of its use to forensic traces of the installed version of the same browser. The results show that Google Chrome Portable leaves traces of web browsing activity on the host computer's hard disk, and demonstrate a need for forensic testing of the privacy claims made for the use of portable web browsers.