{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T16:23:05Z","timestamp":1779207785162,"version":"3.51.4"},"publisher-location":"Cham","reference-count":26,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030235468","type":"print"},{"value":"9783030235475","type":"electronic"}],"license":[{"start":{"date-parts":[[2019,7,25]],"date-time":"2019-07-25T00:00:00Z","timestamp":1564012800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-23547-5_12","type":"book-chapter","created":{"date-parts":[[2019,7,24]],"date-time":"2019-07-24T07:11:56Z","timestamp":1563952316000},"page":"219-241","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":17,"title":["Web Browser Forensics in Google Chrome, Mozilla Firefox, and the Tor Browser Bundle"],"prefix":"10.1007","author":[{"given":"Rebecca","family":"Nelson","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Atul","family":"Shukla","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cory","family":"Smith","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,7,25]]},"reference":[{"key":"12_CR1","unstructured":"Arma.: Obfsproxy: The Next Step in the Censorship Arms Race (2012) Retrieved 19 Nov 2017, from \n                    https:\/\/blog.torproject.org\/obfsproxy-next-step-censorship-arms-race"},{"key":"12_CR2","unstructured":"Bagley, R., Ferguson, R.I., Leimich, P.: Firefox Browser Forensic Analysis via Recovery of SQLite Artefacts from Unallocated Space (2012)"},{"key":"12_CR3","unstructured":"Boggs, R.J., Fenger, T., Sammons, J., Winkler, D.: Online anonymity: forensic analysis of the tor browser bundle (2017)"},{"key":"12_CR4","unstructured":"Clark, E., Koppen, G., Murdoch, S., Perry, M.: The Design and Implementation of the Tor Browser [DRAFT] (2017). Retrieved 19 Nov 2017, from \n                    https:\/\/www.torproject.org\/projects\/torbrowser\/design\/#disk-avoidance"},{"key":"12_CR5","unstructured":"Dcf.: How to Use the \u201cmeek\u201d Pluggable Transport. Retrieved 20 Nov 2017, from \n                    https:\/\/blog.torproject.org\/how-use-meek-pluggable-transport\n                    \n                   (2014)"},{"key":"12_CR6","unstructured":"Epifani, M.: TOR FORENSICS ON WINDOWS OS (2014). Retrieved 16 Nov 2017, from \n                    https:\/\/digital-forensics.sans.org\/summit-archives\/dfirprague14\/Tor_Forensics_On_Windows_OS_Mattia_Epifani.pdf"},{"key":"12_CR7","unstructured":"Gabet, R.M.: A Comparative Forensic Analysis of Privacy Enhanced Web Browsers (Doctoral dissertation, Purdue University) (2016)"},{"issue":"16","key":"12_CR8","doi-asserted-by":"crossref","first-page":"27","DOI":"10.5120\/ijca2015907693","volume":"132","author":"Ahmad Ghafarian","year":"2015","unstructured":"Ghafarian, A., Seno, S.A.H.: Analysis of privacy of private browsing mode through memory forensics. Int. J. Comput. Appl. 132(16) (2015)","journal-title":"International Journal of Computer Applications"},{"key":"12_CR9","unstructured":"Goodin, D.: Browsing in Privacy Mode? Super Cookies can Track you Anyway. Ars Technica (2015)"},{"issue":"6","key":"12_CR10","first-page":"1","volume":"7","author":"G Greenwald","year":"2013","unstructured":"Greenwald, G., MacAskill, E.: NSA Prism program taps into user data of Apple, Google and others. Guardian 7(6), 1\u201343 (2013)","journal-title":"Guardian"},{"key":"12_CR11","unstructured":"HTTPS Everywhere. (n.d.). Retrieved November 16, 2017, from \n                    https:\/\/www.eff.org\n                    \n                  , \n                    https:\/\/www.everywhere"},{"key":"12_CR12","unstructured":"Keller, K.: The Tor browser: A forensic investigation study (Doctoral dissertation, Utica College) (2016, December)"},{"key":"12_CR13","doi-asserted-by":"crossref","unstructured":"Mahaju, S., Atkison, T.: Evaluation of Firefox Browser Forensics Tools. In Proceedings of the SouthEast Conference, pp. 5\u201312. ACM (2017)","DOI":"10.1145\/3077286.3077310"},{"key":"12_CR14","unstructured":"Maone, G. (n.d.). NoScript Security Suite by Giorgio Maone. Retrieved November 20, 2017, from \n                    https:\/\/addons.mozilla.org\/en-US\/firefox\/addon\/noscript\/"},{"key":"12_CR15","unstructured":"Mathews, L.: What Is Private Browsing And Why Should You Use it? Forbes (2017)"},{"key":"12_CR16","unstructured":"Mozilla.: A Better, Faster, Private Browser for Today|Firefox. Mozilla (2017)"},{"key":"12_CR17","doi-asserted-by":"crossref","unstructured":"Nalawade, A., Bharne, S., Mane, V.: Forensic analysis and evidence collection for web browser activity. In: International Conference on Automatic Control and Dynamic Optimization Techniques (ICACDOT), pp. 518\u2013522. IEEE (2016, September)","DOI":"10.1109\/ICACDOT.2016.7877639"},{"key":"12_CR18","unstructured":"Noorulla, E.S.: Web Browser Private Mode Forensics Analysis. Rochester Institute of Technology (2014)"},{"issue":"S62","key":"12_CR19","first-page":"S70","volume":"8","author":"J Oh","year":"2011","unstructured":"Oh, J., Lee, S., Lee, S.: Advanced evidence collection and analysis of web browser activity. Digital Invest. 8(S62), S70 (2011)","journal-title":"Digital Invest."},{"key":"12_CR20","doi-asserted-by":"crossref","unstructured":"Ohana, D.J., Shashidhar, N.: Do private and portable web browsers leave incriminating evidence?: a forensic analysis of residual artifacts from private and portable web browsing sessions. EURASIP J. Inf. Secur. 2013(1), 6 (2013)","DOI":"10.1186\/1687-417X-2013-6"},{"key":"12_CR21","unstructured":"Rathod, D.: Web browser forensics: Google Chrome. Int. J. 8(7) (2017)"},{"key":"12_CR22","unstructured":"Sandvik, R.A.: Forensic Analysis of the Tor Browser Bundle on OS X, Linux, and Windows (2013). Retrieved from \n                    https:\/\/research.torproject.org\/techreports\/tbb-forensic-analysis-2013\u201306-28.pdf"},{"issue":"9","key":"12_CR23","first-page":"123","volume":"16","author":"N Shafqat","year":"2016","unstructured":"Shafqat, N.: Forensic investigation of user\u2019s web activity on Google Chrome using various forensic tools. Int. J. Comput. Sci. Netw. Secur. 16(9), 123\u2013132 (2016)","journal-title":"Int. J. Comput. Sci. Netw. Secur."},{"key":"12_CR24","unstructured":"Tor: Overview. (n.d.). Retrieved 14 Nov 2017, from \n                    https:\/\/www.torproject.org\/about\/overview.html.en"},{"key":"12_CR25","doi-asserted-by":"crossref","first-page":"181","DOI":"10.1016\/j.cose.2017.03.006","volume":"67","author":"Nikolaos Tsalis","year":"2017","unstructured":"Tsalis, N., Mylonas, A., Nisioti, A., Gritzalis, D., Katos, V.: Exploring the protection of private browsing in desktop browsers. Comput. Secur. 67, 181\u2013197 (2017)","journal-title":"Computers & Security"},{"key":"12_CR26","unstructured":"Warren, A.: Tor Browser Artifacts in Windows 10 (2017)"}],"container-title":["Studies in Big Data","Digital Forensic Education"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-23547-5_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,7,24]],"date-time":"2019-07-24T09:33:27Z","timestamp":1563960807000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-23547-5_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,7,25]]},"ISBN":["9783030235468","9783030235475"],"references-count":26,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-23547-5_12","relation":{},"ISSN":["2197-6503","2197-6511"],"issn-type":[{"value":"2197-6503","type":"print"},{"value":"2197-6511","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,7,25]]},"assertion":[{"value":"25 July 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}