Copyright
Acquiring Editor:Chris Katsaropoulos
Editorial Project Manager:Benjamin Rearick
Project Manager:Punithavathy Govindaradjane
Designer:Mark Rogers
Syngress is an imprint of Elsevier
225 Wyman Street, Waltham, MA 02451, USA
Copyright 2014 Elsevier Inc. All rights reserved.
No part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or any information storage and retrieval system, without permission in writing from the publisher. Details on how to seek permission, further information about the Publishers permissions policies and our arrangements with organizations such as the Copyright Clearance Center and the Copyright Licensing Agency, can be found at our website: www.elsevier.com/permissions.
This book and the individual contributions contained in it are protected under copyright by the Publisher (other than as may be noted herein).
Notices
Knowledge and best practice in this field are constantly changing. As new research and experience broaden our understanding, changes in research methods or professional practices, may become necessary. Practitioners and researchers must always rely on their own experience and knowledge in evaluating and using any information or methods described herein. In using such information or methods they should be mindful of their own safety and the safety of others, including parties for whom they have a professional responsibility.
To the fullest extent of the law, neither the Publisher nor the authors, contributors, or editors, assume any liability for any injury and/or damage to persons or property as a matter of products liability, negligence or otherwise, or from any use or operation of any methods, products, instructions, or ideas contained in the material herein.
Library of Congress Cataloging-in-Publication Data
Quick, Darren.
Cloud storage forensics/Darren Quick, Ben Martini, Kim-Kwang Raymond Choo.
pages cm
ISBN 978-0-12-419970-5
1. Computer crimes-Investigation. 2. Forensic sciences-Data processing. 3. Cloud computing. 4. Information
storage and retrieval systems. I. Martini, Ben, 1990- II. Choo, Kim-Kwang Raymond. III. Title.
HV8079.C65Q53 2014
363.25028546782--dc23
2013037978
British Library Cataloguing-in-Publication Data
A catalogue record for this book is available from the British Library
For information on all Syngress publications, visit our werbsite at store.elsevier.com/Syngress
ISBN: 978-0-12-419970-5
Printed and bound in the United States of America
14 15 16 17 18 10 9 8 7 6 5 4 3 2 1

Dedication
This book is dedicated to our families for their tireless support and understanding throughout all the time we spent on this research.
Acknowledgments
Darren Quick, Ben Martini and Kim-Kwang Raymond Choo
We would like to acknowledge the support provided by the University of South Australia and South Australia Police, and in particular the first authors supervisor, Detective Senior Sergeant Barry Blundell. The second author is supported by funding from the University of South Australia and the Defence Systems Innovation Centre (DSIC).
We are also grateful to Chris Katsaropoulos, Senior Acquisitions Editor, and Ben Rearick, Editorial Project Manager at Syngress, and the technical reviewer for their support in this project. It is not easy to keep on schedule, but they were relentless in a good way.
The views and opinions expressed in this book are those of the authors alone and not the organizations with whom the authors have been associated or supported. This book was hosted, and some parts written, using cloud storage.
About the Authors
Darren Quick is an Electronic Evidence Specialist with the South Australia Police and a PhD Scholar at the Information Assurance Research Group, Advanced Computing Research Centre at the University of South Australia. He has undertaken over 550 forensic investigations involving thousands of digital evidence items including computers, hard drives, mobile telephones, servers, and portable storage devices. He holds a master of science degree in Cyber Security and Forensic Computing, and has undertaken formal training in a range of forensic software and analysis techniques. In 2012, Darren was awarded membership of the Golden Key International Honour Society. Darren has coauthored a number of publications in relation to digital forensic analysis and cloud storage, and is a member of the Board of Referees for Digital InvestigationThe International Journal of Digital Forensics and Incident Response. He still has his first computer, a VIC20, in the original box.
Ben Martini is the Digital Forensics Research Administrator, a Course Coordinator, and a PhD Scholar at the Information Assurance Research Group, Advanced Computing Research Centre at the University of South Australia. His PhD research focus is in the field of Digital Forensics looking at the implications of cloud computing. He has a broad range of research interests in the information technology sector with a focus on computer security and digital forensics issues. Ben has worked actively in the South Australian IT industry in sectors including government departments, education, and electronics across various organizations and continues to deliver occasional invited presentations to industry organizations in his area of expertise. He holds a masters degree in Business Information Systems and a bachelor degree in Information Technology (Networking and Security). He is supported by scholarships from both the University of South Australia and the Defence Systems Innovation Centre.
Dr Kim-Kwang Raymond Choo is a Fulbright Scholar and Senior Lecturer at the University of South Australia. He has (co)authored a number of publications in the areas of anti-money laundering, cyber and information security, and digital forensics including a book published in Springers Advances in Information Security book series and six Australian Government Australian Institute of Criminology refereed monographs. He has been an invited speaker for a number of events (e.g., 2011 UNODC-ITU Asia-Pacific Regional Workshop on Fighting Cybercrime and 2011 KANZ Broadband Summit 2011) and delivered Keynote/Plenary Speeches at ECPAT Taiwan 2008 Conference on Criminal Problems and Intervention Strategy, 2010 International Conference on Applied Linguistics and 2011 Economic Crime Asia Conference, and 2014 International Conference on Applied Linguistics & Language Teaching, and Invited Lecture at the Bangladesh Institute of International and Strategic Studies. He was one of over 20 international (and one of two Australian) experts consulted by the research team preparing McAfee's commissioned report entitled Virtual Criminology Report 2009: Virtually Here: The Age of Cyber Warfare; and his opinions on cyber crime and cyber security are regularly published in the media. In 2009, he was named one of 10 Emerging Leaders in the Innovation category of The Weekend Australian Magazine/Microsoft's Next 100 series. He is also the recipient of several awards including the 2010 Australian Capital Territory (ACT) Pearcey Award for Taking a risk and making a difference in the development of the Australian ICT industry, 2008 Australia Day Achievement Medallion in recognition of his dedication and contribution to the Australian Institute of Criminology, and through it to the public service of the nation, British Computer Societys Wilkes Award for the best paper published in the 2007 volume of The Computer Journal, and the Best Student Paper Award by the 2005 Australasian Conference on Information Security and Privacy.