•  
  •  
 

Abstract

Dynamic development of IT technology poses new challenges related to the cross-border collection of electronic evidence from the cloud. Many times investigators need to secure data stored on foreign servers directly and then look for solutions on how to turn the data into a legitimate source of evidence. To study the situation and propose solutions, I conducted a survey among Polish representatives of public prosecutors' offices and courts. This paper presents information from digital evidence collection practices across multiple jurisdictions. I stated that representatives from the prosecution and the judiciary in Poland are aware of the issues associated with cross-border acquisition and preservation of cloud-based evidence. In their view, many of the problems are time-consuming and ineffective international cooperation, the voluntary nature of cooperation between foreign cloud service providers, lack of harmonized procedures and guidelines, the diversity of legal systems, and the lack of knowledge held by law enforcement officials and the judiciary. This work should be the beginning of an open discussion with practitioners about existing challenges and an invitation for further research with a larger sample of prosecutors and judges. There are no such studies in literature. The paper shows that it is possible to improve current procedures for the cross-border collection of cloud-based digital evidence.

References

Ahmad, N. H., Ariffin, K. A. Z., Hamid, A. S. S. A., & Shahidan, N. S. S. (2020). Cloud Forensic Analysis on pCloud: From Volatile Memory Perspectives. In M. Ali, M. P. S. Excell, H. Miraz, S. Soomro, & A. Ware (Eds.), Emerging Technologies in Computing. Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, London, UK, August 19–20 (pp. 3-15). Cham: Springer.

Ajayi, E. F. G. (2016). Challenges to Enforcement of Cyber-Crimes Laws and Policy. Journal of Internet and Information Systems, 6(1), 1-12. doi:10.5897/JIIS2015.0089

Albakri, S. H., Maarop, N., Magalingam, P., Perumal, S., Samy, G. N., & Shanmugam, B. (2017). Digital forensic challenges in the cloud computing environment. In N. Gazem, F. Mohammed, S. Patnaik, F. Saeed, & A. S. Saed Balaid (Eds.), Recent Trends in Information and Communication Technology: Proceedings of the 2nd International Conference of Reliable Information and Communication Technology (IRICT 2017). Lecture Notes on Data Engineering and Communications Technologies, Johor Bahru, Malaysia, 23–24 April (669–676). Cham: Springer.

Alex, M. E., Kishore R. (2017). Forensics Framework for Cloud Computing. Computers & Electrical Engineering, 60, 193-205. doi:10.1016/j.compeleceng.2017.02.006

Ali, S. A., Memon, S. & Sahito F. (2018). Challenges and Solutions in Cloud Forensics. In Proceedings of the 2nd International Conference on Cloud and Big Data Computing - ICCBDC’18. Paper presented at 2nd International Conference on Cloud and Big Data Computing (ICCBDC 2018) and its workshop 2018 the 7th International Conference on Intelligent Information Processing (ICIIP 2018), Barcelona, Spain, 3-5 August (pp. 6–10). New York: ACM Press.

Arora, D., Sakthivel, T., & Sharma, P. (2017). Mobile cloud forensic: Legal implications and counter measures. In A. Joshi & S. Satapathy (Eds.), Information and Communication Technology for Intelligent Systems (ICTIS 2017) - Volume 1. Features the proceedings of ICTIS 2017: Second International Conference on Information and Communication Technology for Intelligent Systems, Ahmedabad, India, 25–26 March (pp. 531–542). Cham: Springer.

Barrett, D. (2017). Applying a Contingency Framework to Digital Forensic Processes in Cloud Based Acquisitions. The Journal of Digital Forensics, Security and Law, 12(2), 75-96, doi:10.15394/jdfsl.2017.1473

Barrett, D. (2020). Cloud Based Evidence Acquisitions in Digital Forensic Education. Information Systems Education Journal, 18(6), 46-56.

Bërdufi, N., & Dushi, D. (2017). Law Enforcement and Investigation of Cybercrime in Albania. European Scientific Journal, ESJ, 13(12), 575-592.

Brenner, S. W., Schwerha IV, J. J. (2002), Transnational Evidence Gathering and Local Prosecution of International Cybercrime, Journal of Computer & Information Law, 20(3), 347-396.

Brown, C. S. D. (2015). Investigating And Prosecuting Cyber Crime: Forensic Dependencies And Barriers To Justice. International Journal of Cyber Criminology, 9(1), 55-119. doi:10.5281/ZENODO.22387

Carpenter, V., Hill, R., Montasari, R., & Montaseri, F. (2019). Digital Forensic Investigation of Social Media, Acquisition and Analysis of Digital Evidence. International Journal of Strategic Engineering, 2(1),52-60. doi:10.4018/IJoSE.2019010105

Carthy J., Crosbie M., Kechadi T., & Ruan K. (2011) Cloud Forensics. In: G. Peterson & S. Shenoi (Eds.), Advances in Digital Forensics VII. 7th IFIP WG 11.9 International Conference on Digital Forensics, Orlando, FL, USA, 31 January-2 February (pp. 35-46). Berlin: Springer.

Çela, E. (2015) Situation in Astafur & Braanos in the case of legal representative for victimes, International Criminal Court (ICC) Moot Competition. Retrieved on June 20, 2020 from https://www.academia.edu/12293178/cyber_attacks_case.

Choo, K. K. R., Conti, M., Gaur, M. S., Manral, B., & Somani, G. (2019). A systematic survey on cloud forensics challenges, solutions, and future directions. ACM Computing Surveys (CSUR), 52(6), 1-38. doi:10.1145/3361216

Choo, K. K. R., Dehghantanha, A., & Mohtasebi, S. H. (2017). Cloud storage forensics: analysis of data remnants on SpiderOak, JustCloud, and pCloud. In K. K. R. Choo & A. Dehghantanha (Eds.), Contemporary Digital Forensic Investigations of Cloud and Mobile Applications, (pp. 205-246). Cambridge, United States: Elsevier.

Choo, K. K. R., Dehghantanha, A., & Teing, Y. Y. (2018). CloudMe forensics: A case of big data forensic investigation. Concurrency and Computation: Practice and Experience, 30(5), 1-11. doi:10.1002/cpe.4277

Cole, M. D., Quintel, T. (2018). Transborder Access to e-Evidence by Law Enforcement Agencies, University of Luxembourg Law Working Paper, 10, 1-20, http://dx.doi.org/10.2139/ssrn.3278780.

Conti, M. Dargahi, T., & Dehghantanha, A. (2017). Investigating Storage as a Service Cloud Platform: PCloud as a Case Study. In K. R. Choo & A. Dehghantanha (Eds.), Contemporary Digital Forensic Investigations of Cloud and Mobile Applications (pp. 185-204). Cambridge, United States: Elsevier.

Council of Europe. (2009). The Cybercrime Convention Committee (T-CY). T-CY (2009) 02 INF. Retrieved on June 24, 2020 from http://www.coe.int/t/dghl/cooperation/economiccrime/cybercrime/T-CY/Information_doc_T-CY__2009_ 02 - INF.pdf via the website: https://web.archive.org.

Cybercrime Convention Committee (T-CY). (2017). Assessment report on Mutual Legal Assistance: Follow up given by Parties and Observers, T-CY(2017)2. Retrieved on July 2, 2020 from https://rm.coe.int/t-cy-2017-2-mla-follow-up-rep/168076d55f

Cybercrime Convention Committee. (2014). Transborder access to data and jurisdiction: Options for further action by the T-CY, T-CY(2014)16. Retrieved on June 24, 2020 from https://rm.coe.int/cybercrime-convention-committee-t-cy-transborder-access-to-data-andju/168073dc0b.

Dargahi, T., & Dehghantanha, A. (2017). Residual Cloud Forensics: CloudMe and 360Yunpan as case studies. In K. K. R. Choo & A. Dehghantanha (Eds.), Contemporary Digital Forensic Investigations of Cloud and Mobile Applications, (pp. 247-283). Cambridge, United States: Elsevier.

De, D., Ghosh, A., & Majumder, K (2021). A Systematic Review of Digital, Cloud and IoT Forensics. In M. Chakraborty, M. Singh, V. E. Balas & I. Mukhopadhyay (Eds.), The “Essence” of Network Security: An End-to-End Panorama (pp. 31-74). Singapore: Springer Singapore.

Dharaskar, R., Patil, S., & Thakare, V. (2017). Digital Forensic in Cloud: Critical Analysis of Threats and Security in IaaS, SaaS and PaaS and Role of Cloud Service Providers. In International Conference on Computing, Communication, Control and Automation (ICCUBEA), Pune, India, 17–18 August (pp. 1–7). India: IEEE.

Erlin, E., Lizarti, N., & Sudyana, D. (2013) Forensic Investigation Framework on Server Side of Private Cloud Computing. Lontar Komputer: Jurnal Ilmiah Teknologi Informasi, 181-192.

Gladyshev, P., James, J. I. (2016). A survey of mutual legal assistance involving digital evidence, Digital Investigation, 18, 23–32. doi.org/10.1016/j.diin.2016.06.004

Gritzalis, S., Kalloniatis, C., Katos, V., & Simou, S. (2019). A Revised Forensic Process for Aligning the Investigation Process with the Design of Forensic-Enabled Cloud Services. In K. Sokratis, & V. Zorkadis (Eds.), E-Democracy – Safeguarding Democracy and Human Rights in the Digital Age: 8th International Conference, e-Democracy 2019, Athens, Greece, 12–13 December (161–177). Cham: Springer.

Hurst, M. R., Herman, M., Iorga, M., Jackson, R. H., Leo, R., Salim, A. M., … Sardinas, R. (2020). NIST Cloud Computing Forensic Science Challenges, 1-80, doi:10.6028/NIST.IR.8006

Horsman, G. (2020). What’s in the Cloud - An Examination of the Impact of Cloud Storage Usage on the Browser Cache. The Journal of Digital Forensics, Security and Law, 15(1), 1-16, doi:10.15394/jdfsl.2020.1592

Jõgi, L., Kaldoja, K., Luuk, M., Randma H., (2018). Need for Speed in Mutual Legal Assistance’, European Judicial Training Network – EJTN: 13th edition of the THEMIS Competition. Retrieved on July 7, 2020 from http://www.ejtn.eu/PageFiles/17290/WR%20TH-2018-01%20EE.pdf

Karatysz, M. (2013) Zjawisko cyberprzestępczości a polityka cyberbezpieczeństwa w regulacjach prawnych Rady Europy, Unii Europejskiej i Polski, Refleksje, 7, 139-149.

Karie, N. M., & Karume, S. (2017). Digital Forensic Readiness in Organizations: Issues and Challenges. The Journal of Digital Forensics, Security and Law, 12(4), 43-54. doi:10.15394/jdfsl.2017.1436

Horng, G., Huang CT, Ko, HJ., Wang, SJ., & Zhuang ZW. (2021). Cloud Evidence Tracks of Storage Service Linking with IOS Systems. The Journal of Supercomputing, 77(1), 77-94. doi:10.1007/s11227-020-03255-5

Mohammed, K. H., Mohammed,Y. D. & Solanke A. A. (2019). Cybercrime and Digital Forensics: Bridging the Gap in Legislation, Investigation and Prosecution of Cybercrime in Nigeria. International Journal of Cybersecurity Intelligence & Cybercrime, 2(1), 56-63.

Mahanamahewa, P., & Perera, P. (2017). Analysis of Dependencies & Legal Barriers on Digital Forensic Investigations in Sri Lanka. KDU E – Repository. Retrieved on January 21, 2021 from http://ir.kdu.ac.lk/handle/345/1733.

Mohiddin, S. K., Sharmila S. & Yalavarthi S. B. (2017). A Complete Ontological Survey of Cloud Forensic in the Area of Cloud Computing. In K. Deep, J. C. Bansal, K. N. Das, A. K. Lal, H. Garg, A. K. Nagar & M. Pant (Eds.), Proceedings of Sixth International Conference on Soft Computing for Problem Solving: Advances in Intelligent Systems and Computing 546. Lviv, Ukraine, 6–10 September (pp. 38-47). Singapore: Springer.

Olber, P. 2019. Survey on cross-border collection of digital evidence from cloud computing. Retrieved on June 20, 2020 from https://osf.io/mwxu6

Opitek, P. (2018) Wybrane aspekty pozyskiwania dowodów cyfrowych w sprawach karnych, Prokuratura i Prawo, 7/8, 65-85.

Osula, A. M., Zoetekouw, M. (2017). The notification requirement in transborder remote search and seizure: domestic and international law perspectives, Masaryk University Journal of Law and Technology, 13(2), 103-127, doi.org/10.5817/MUJLT2017-1-6

Seger, A. (2013, November 1). Capacity building on cybercrime – discussion paper. Council of Europe, Strasbourg, pp. 1-29.

Trenwith, P. M., & Venter, H. S. (2019). FReadyPass: a digital forensic ready passport to control access to data across jurisdictional boundaries. Australian Journal of Forensic Sciences, 51(5), 583-595. doi:10.1080/00450618.2018.1444090

Wang, H., He, W., & Wang, F. K. (2012). Enterprise cloud service architectures. Information Technology and Management, 13(4), 445-454. doi:10.1007/s10799-012-0139-4

Download

Share

COinS
 
 

To view the content in your browser, please download Adobe Reader or, alternately,
you may Download the file to your hard drive.

NOTE: The latest versions of Adobe Reader do not support viewing PDF files within Firefox on Mac OS and if you are using a modern (Intel) Mac, there is no official plugin for viewing PDF files within the browser window.