bei Google ScholarTitelangaben
Rückert, Christian ; Busch, Marcel ; Nicolai, Florian ; Fleischer, Fabian ; Safferling, Christoph ; Freiling, Felix:
Make Remote Forensic Investigations Forensic Again : Increasing the Evidential Value of Remote Forensic Investigations.
2020
Veranstaltung: 11th EAI International Conference, ICDF2C 2020
, 15.-16.10.2020
, Boston, MA, USA (Online).
(Veranstaltungsbeitrag: Kongress/Konferenz/Symposium/Tagung
,
Vortrag
)
Abstract
Due to the increasing use of encrypted communication and anonymous services, many countries introduced new regulations that allow law enforcement to perform remote forensic investigations. During such investigations, law enforcement agencies secretly obtain remote access to a suspect’s computer to search for and collect evidence, including full copies of the (unencrypted) communication data. In this paper, we argue that the evidential value of the acquired evidence can be substantially increased by two technical methods: (1) employing integrity verification techniques offered by secure hardware, and (2) exfiltrating the decryption key of encrypted communication only in order to decrypt communication obtained by lawful interception. To prove the practicality of both methods, we design and implement TEE-BI, a solution for Trusted Execution Environment-based introspection. We deploy TEE-BI on an Android-based hardware platform featuring an ARM TrustZone and demonstrate the stealthy extraction of Secure Sockets Layer encryption keys from an Android userland application. We evaluate the effectiveness, performance, and compatibility of our prototype and argue that it provides a much higher level of evidential value than (the known) existing remote forensic software systems.
Weitere Angaben
| Publikationsform: | Veranstaltungsbeitrag (Vortrag) |
|---|---|
| Begutachteter Beitrag: | Ja |
| Institutionen der Universität: | Fakultäten > Rechts- und Wirtschaftswissenschaftliche Fakultät > Fachgruppe Rechtswissenschaften > Lehrstuhl Strafrecht II (Strafrecht, Strafprozessrecht und IT-Strafrecht) Fakultäten > Rechts- und Wirtschaftswissenschaftliche Fakultät > Fachgruppe Rechtswissenschaften > Lehrstuhl Strafrecht II (Strafrecht, Strafprozessrecht und IT-Strafrecht) > Lehrstuhl Strafrecht II (Strafrecht, Strafprozessrecht und IT-Strafrecht) - Univ.-Prof. Dr. Christian Rückert |
| Titel an der UBT entstanden: | Nein |
| Themengebiete aus DDC: | 300 Sozialwissenschaften > 340 Recht |
| Eingestellt am: | 06 Mär 2024 07:58 |
| Letzte Änderung: | 06 Mär 2024 07:58 |
| URI: | https://eref.uni-bayreuth.de/id/eprint/88780 |