{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,27]],"date-time":"2025-09-27T22:07:18Z","timestamp":1759010838375},"reference-count":43,"publisher":"Elsevier","isbn-type":[{"type":"print","value":"9780128053034"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1016\/b978-0-12-805303-4.00014-9","type":"book-chapter","created":{"date-parts":[[2017,1,7]],"date-time":"2017-01-07T18:42:19Z","timestamp":1483814539000},"page":"247-283","source":"Crossref","is-referenced-by-count":11,"title":["Residual Cloud Forensics"],"prefix":"10.1016","author":[{"given":"A.","family":"Dehghantanha","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"T.","family":"Dargahi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0010","series-title":"The NIST Definition of Cloud Computing","volume":"NIST Special Publication 800-145","author":"Mell","year":"2011"},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0015","first-page":"381","article-title":"Cloud computing: challenges and future directions","volume":"400","author":"Choo","year":"2010","journal-title":"Trends and Issues in Crime and Criminal Justice"},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0020","doi-asserted-by":"crossref","first-page":"304","DOI":"10.1016\/j.clsr.2010.03.002","article-title":"Digital evidence in cloud computing systems","volume":"26","author":"Taylor","year":"2010","journal-title":"Comput. Law Security Rev."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0025","first-page":"647","article-title":"Data security and privacy protection issues in cloud computing","volume":"1","author":"Chen","year":"2012"},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0030","doi-asserted-by":"crossref","first-page":"373","DOI":"10.1109\/TSC.2014.2304717","article-title":"An anonymous end-to-end communication protocol for mobile cloud environments","volume":"7","author":"Ardagna","year":"2014","journal-title":"IEEE Trans. Services Comput."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0035","series-title":"Proceedings of the 7th International Conference on Cloud Computing Technology and Science, CloudCom\u201915","first-page":"529","article-title":"Security and privacy in cloud computing via obfuscation and diversification: a survey","author":"Hosseinzadeh","year":"2015"},{"year":"2013","series-title":"Cloud storage forensics","author":"Quick","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0040"},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0045","doi-asserted-by":"crossref","first-page":"266","DOI":"10.1016\/j.diin.2013.07.001","article-title":"Forensic collection of cloud storage data: does the act of collection result in changes to the data or its metadata?","volume":"10","author":"Quick","year":"2013","journal-title":"Digit. Invest."},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0050","first-page":"311","article-title":"A survey on privacy issues in digital forensics","volume":"1","author":"Aminnezhad","year":"2012","journal-title":"Int. J. Cyber-Security Digit. Foren."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0055","series-title":"Proceedings of the 12th Annual International Conference on Privacy, Security and Trust, PST\u201914","first-page":"129","article-title":"Privacy-respecting digital investigation","author":"Dehghantanha","year":"2014"},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0060","first-page":"48","article-title":"Digital forensic trends and future","volume":"2","author":"Dezfoli","year":"2013","journal-title":"Int. J. Cyber-Security Digit. Foren."},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0065","first-page":"77","article-title":"A survey about impacts of cloud computing on digital forensics","volume":"2","author":"Daryabar","year":"2013","journal-title":"Int. J. Cyber-Security Digit. Foren."},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0070","first-page":"183","article-title":"A review on impacts of cloud computing and digital forensics","volume":"3","author":"Daryabar","year":"2014","journal-title":"Int. J. Cyber-Security Digit. Foren."},{"issue":"9","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0075","first-page":"543","article-title":"Cloud computing and conflicts with digital forensic investigation","volume":"7","author":"Damshenas","year":"2013","journal-title":"Int. J. Digital Content Tech. Appl."},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0080","first-page":"76","article-title":"Cloud forensics issues and opportunities","volume":"4","author":"Aminnezhad","year":"2013","journal-title":"Int. J. Inform. Process. Manag."},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0085","doi-asserted-by":"crossref","first-page":"287","DOI":"10.1016\/j.diin.2013.08.005","article-title":"Cloud storage forensics: ownCloud as a case study","volume":"10","author":"Martini","year":"2013","journal-title":"Digit. Invest."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0090","series-title":"Cloud Secur. Ecosyst.","first-page":"309","article-title":"Mobile cloud forensics: an analysis of seven popular Android apps","author":"Martini","year":"2015"},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0095","doi-asserted-by":"crossref","first-page":"30","DOI":"10.1016\/j.diin.2014.02.002","article-title":"Cloud data imager: a unified answer to remote acquisition of cloud storage areas","volume":"11","author":"Federici","year":"2014","journal-title":"Digit. Invest."},{"issue":"6","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0100","doi-asserted-by":"crossref","first-page":"1378","DOI":"10.1016\/j.future.2013.02.001","article-title":"Digital droplets: Microsoft SkyDrive forensic data remnants","volume":"29","author":"Quick","year":"2013","journal-title":"Future Generat. Comput. Syst."},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0105","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1016\/j.diin.2012.05.015","article-title":"Digital forensic investigation of cloud storage services","volume":"9","author":"Chung","year":"2012","journal-title":"Digit. Invest."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0110","series-title":"Proceedings of the International Conference on Cyber-Enabled Distributed Computing and Knowledge Discovery, CyberC\u201912","first-page":"111","article-title":"A case study on digital forensics in the cloud","author":"Marturana","year":"2012"},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0115","doi-asserted-by":"crossref","first-page":"179","DOI":"10.1016\/j.jnca.2013.09.016","article-title":"Google drive: forensic analysis of data remnants","volume":"40","author":"Quick","year":"2014","journal-title":"J. Netw. Comput. Appl."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0120","first-page":"1","article-title":"Forensic investigation of OneDrive, Box, GoogleDrive and Dropbox applications on Android and iOS devices","author":"Daryabar","year":"2016","journal-title":"Aust. J. Foren. Sci."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0125","series-title":"Proceedings of the 46th Hawaii International Conference on System Sciences, HICSS","first-page":"4910","article-title":"Using smartphones as a proxy for forensic evidence contained in cloud storage services","author":"Grispos","year":"2013"},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0130","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1016\/j.diin.2013.02.003","article-title":"Dropbox analysis: data remnants on user machines","volume":"10","author":"Quick","year":"2013","journal-title":"Digit. Invest."},{"issue":"1","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0135","doi-asserted-by":"crossref","first-page":"95","DOI":"10.1080\/00450618.2015.1021379","article-title":"SugarSync forensic analysis","volume":"48","author":"Shariati","year":"2016","journal-title":"Aust. J. Foren. Sci."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0140","unstructured":"CloudMe, https:\/\/www.cloudme.com\/en."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0145","unstructured":"360Yunpan, http:\/\/yunpan.360.cn\/."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0150","doi-asserted-by":"crossref","DOI":"10.1080\/00450618.2016.1153714","article-title":"Cloud storage forensics: MEGA as a case study","author":"Daryabar","year":"2016","journal-title":"Aust. J. Foren. Sci."},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0155","doi-asserted-by":"crossref","first-page":"259","DOI":"10.1016\/j.diin.2013.04.006","article-title":"Amazon cloud drive forensic analysis","volume":"10","author":"Hale","year":"2013","journal-title":"Digit. Invest."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0160","doi-asserted-by":"crossref","first-page":"S106","DOI":"10.1016\/j.diin.2014.05.006","article-title":"A forensically robust method for acquisition of iCloud data","volume":"11","author":"Oestreicher","year":"2014","journal-title":"Digit. Invest."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0165","series-title":"Proceedings of the 13th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom\u201914","first-page":"935","article-title":"Remote programmatic vCloud forensics: a six-step collection process and a proof of concept","author":"Martini","year":"2014"},{"issue":"4","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0170","doi-asserted-by":"crossref","first-page":"295","DOI":"10.1016\/j.diin.2014.08.002","article-title":"Distributed file system forensics: XtreemFS as a case study","volume":"11","author":"Martini","year":"2014","journal-title":"Digit. Invest."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0175","series-title":"Proceedings of the ACM Symposium on Applied Computing","first-page":"178","article-title":"Cloud application logging for forensics","author":"Marty","year":"2011"},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0180","doi-asserted-by":"crossref","first-page":"S90","DOI":"10.1016\/j.diin.2012.05.001","article-title":"Acquiring forensic evidence from infrastructure-as-a-service cloud computing: exploring and evaluating tools, trust, and techniques","volume":"9","author":"Dykstra","year":"2012","journal-title":"Digit. Invest."},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0185","first-page":"83","article-title":"Cyber forensic for hadoop based cloud system","volume":"6","author":"Cho","year":"2012","journal-title":"Int. J. Security Appl."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0190","series-title":"Proceedings of the 7th International Conference on Cloud Computing Technology and Science, CloudCom\u201915","first-page":"536","article-title":"Cloud storage forensic: hubiC as a case-study","author":"Blakeley","year":"2015"},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0195","series-title":"Proceedings of the Frontiers of Information Technology, FIT\u201911","first-page":"110","article-title":"Digital forensics for eucalyptus","author":"Anwar","year":"2011"},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0200","series-title":"Cloud Security Ecosystem","first-page":"429","article-title":"Ubuntu One investigation: detecting evidences on client machines","author":"Shariati","year":"2015"},{"issue":"2","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0205","doi-asserted-by":"crossref","first-page":"71","DOI":"10.1016\/j.diin.2012.07.001","article-title":"An integrated conceptual digital forensic framework for cloud computing","volume":"9","author":"Martini","year":"2012","journal-title":"Digit. Invest."},{"key":"10.1016\/B978-0-12-805303-4.00014-9_bb0210","series-title":"Guide to integrating forensic techniques into incident response","volume":"NIST Special Publication","author":"Kent","year":"2006"},{"issue":"3","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0215","doi-asserted-by":"crossref","first-page":"173","DOI":"10.1108\/EUM0000000007249","article-title":"Towards a framework for standardising recordkeeping metadata: the Australian recordkeeping metadata schema","volume":"9","author":"McKemmish","year":"1999","journal-title":"Records Manag. J."},{"year":"2015","series-title":"WebBrowserPassView v1.58","key":"10.1016\/B978-0-12-805303-4.00014-9_bb0220"}],"container-title":["Contemporary Digital Forensic Investigations of Cloud and Mobile Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:B9780128053034000149?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:B9780128053034000149?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2018,9,5]],"date-time":"2018-09-05T02:52:47Z","timestamp":1536115967000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/B9780128053034000149"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9780128053034"],"references-count":43,"URL":"https:\/\/doi.org\/10.1016\/b978-0-12-805303-4.00014-9","relation":{},"subject":[],"published":{"date-parts":[[2017]]}}}