• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.25 no.6
• /
• pp.1377-1383
• /
• 2015

As the cloud services users' increase, there are important files created by individual in cloud storage. Thus, investigation of cloud artifact should be conducted. There are two methods of analyzing cloud service, one is that investigates cloud server provider (CSP), and another is that investigates client. In this paper, we presents an automated framework to detect the altered artifact and developes a tool that detects the cloud artifact. We also developed Cloud Artifact Tool that can investigate client computer. Cloud Artifact Tool provides feature of collection and analysis for the services such as Google Drive, Dropbox, Evernote, NDrive, DaumCloud, Ucloud, LG Cloud, T Cloud and iCloud.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.33 no.5
• /
• pp.737-751
• /
• 2023

The importance of digital forensics in the cloud environment is increasing as businesses and individuals move their data from On-premise to the cloud. Cloud data can be stored on various devices, including mobile devices and desktops, and encompasses a variety of user behavior artifacts, such as information generated from linked accounts and cloud services. However, there are limitations in securing and analyzing digital evidence due to environmental constraints of the cloud, such as distributed storage of data and lack of artifact linkage. One solution to address this is archiving services, and Google's Takeout is prime example. In this paper, user behavior data is analyzed for cloud forensics based on archiving data and necessary items are selected from an investigation perspective. Additionally, we propose the process of analyzing selectively collected data based on time information and utilizing web-based visualization to meaningfully assess artifact associations and multi-behaviors. Through this, we aim to demonstrate the value of utilizing archiving data in response to the increasing significance of evidence collection for cloud data.

• Proceedings of the KSRS Conference
• /
• v.1
• /
• pp.25-28
• /
• 2006

We propose a new method of masking cloud-affected pixels in satellite ocean color imageries such as of GLI. Those pixels, mostly found around cloud pixels or in scattered cloud area, have anomalous features in either in chlorophyll-a estimate or in water reflectance. This artifact is most likely caused by residual error of inter-band registration correction. Our method is to check the pixel-wise 'soundness' of the spectral water reflectance Rw retrieved after the atmospheric correction. First, we define two spectral ratio between water reflectance, IRR1 and IRR2, each defined as RW(B1)/RW (B3) RW (B3) and as RW (B2)/RW(B4) respectively, where $B1{\sim}B4$ stand for 4 consecutive visible bands. We show that an almost linear relation holds over log-scaled IRR1 and IRR2 for shipmeasured RW data of SeaBAM in situ data set and for GLI cloud-free Level 2 sub-scenes. The method we propose is to utilize this nature, identifying those pixels that show significant discrepancy from that relationship. We apply this method to ADEOS-II/GLI ocean color data to evaluate the performance over Level-2 data, which includes different water types such as case 1, turbid case 2 and coccolithophore bloom waters.

• Journal of Internet Computing and Services
• /
• v.23 no.5
• /
• pp.69-78
• /
• 2022

As the use of Internet of Things (IoT) devices has expanded, digital forensics coverage of the National Police Agency has expanded to smart home areas. Accordingly, most of the existing studies conducted to acquire smart home platform data were mainly conducted to analyze local data of mobile devices and analyze network perspectives. However, meaningful data for evidence analysis is mainly stored on cloud storage on smart home platforms. Therefore, in this paper, we study how to acquire stored in the cloud in a Hey Home Air environment by extracting accessToken of user accounts through a cookie database of browsers such as Microsoft Edge, Google Chrome, Mozilia Firefox, and Opera, which are recorded on a PC when users use the Hey Home app-based "Hey Home Square" service. In this paper, the it was configured with smart temperature and humidity sensors, smart door sensors, and smart motion sensors, and artifacts such as temperature and humidity data by date and place, device list used, and motion detection records were collected. Information such as temperature and humidity at the time of the incident can be seen from the results of the artifact analysis and can be used in the forensic investigation process. In addition, the cloud data acquisition method using OpenAPI proposed in this paper excludes the possibility of modulation during the data collection process and uses the API method, so it follows the principle of integrity and reproducibility, which are the principles of digital forensics.

• Journal of the Korean Society of Manufacturing Technology Engineers
• /
• v.24 no.1
• /
• pp.1-6
• /
• 2015

To improve the efficiency of a reverse engineering process, many researches have recently tried to develop efficient, automatic 3D scanning devices. A new automatic 3D scanning device using a spherical coordinate system mechanism is introduced in this study. This device incorporates a guide motion along the spherical coordinate to compound each 3D data point automatically. The experiments correlating the system assembling tolerance with the form accuracy were conducted to verify the efficiency of the system for the scanning of an object, including complex shapes and manifold sections. In addition, the required time and system accuracy, taken during the scanning process of complicated artifact models, were investigated. Further, based on these empirical results, it was ascertained that the superior productivity of this new device offers a more precise and efficient scan when compared to conventional methodologies.