Question: Describe cloud storage and explain its importance to investigators; How can investigators preserve and gain access to cloud data?

Describe two ethical dilemmas that may be encountered by a digital forensic practitioner and what steps they should take to ensure their integrity isn’t called into question.
 

1. Describe cloud storage and explain its importance to investigators.
2. How can investigators preserve and gain access to cloud data?
3. Do investigators need legal authorization to access the data? Why or why not?
4. Research and describe three IoT devices. What are their functions and what problems are they designed to solve for the user? You must use the provided course materials for at least one of the examples.
5. What data valuable to an investigation is created by each device?
6. Other than the device itself, where might data from the IoT device be stored and how can it be acquired?
7. How are drones being used by criminals and terrorists and what can law enforcement do to combat the use of drones in illegal activities?
8. Where do drones store their data and what types of valuable information can be found?
9. Research new and developing technologies to determine what devices, software, or capabilities are emerging. Select two. Describe this new technology, how it can be used by criminal or terrorist networks, and how authorities can combat the threat.

DRAFT / STUDY TIPS:

Ethical Dilemmas in Digital Forensics:

1. Confidentiality vs. Public Interest: Imagine a case where a digital forensic practitioner discovers evidence of illegal activities on a suspect's device, but it also contains sensitive personal information unrelated to the case, such as medical records or private correspondence. The dilemma here is whether to disclose only the relevant evidence to law enforcement or include the personal information, which could potentially harm the individual's privacy rights. In such cases, the practitioner must carefully weigh the public interest in prosecuting criminal activity against the individual's right to privacy. They should follow established protocols for handling sensitive information, such as redacting irrelevant data and obtaining proper authorization for disclosure.

2. Objectivity vs. Bias: Another common dilemma arises when a digital forensic practitioner has preconceived notions about a suspect's guilt or innocence, leading to biased analysis of the evidence. This bias can manifest in various ways, such as selectively interpreting data to support a particular narrative or overlooking contradictory evidence. To ensure integrity, practitioners must strive for objectivity in their analysis, adhering strictly to scientific principles and avoiding any undue influence from external factors. They should document their procedures meticulously and be prepared to justify their findings based on the evidence alone.

Cloud Storage:

Cloud storage refers to the practice of storing data on remote servers accessed via the internet, offering scalability, accessibility, and cost-effectiveness. It's crucial for investigators as it often contains valuable evidence relevant to digital forensic investigations, including documents, emails, chat logs, and multimedia files.

To preserve and access cloud data, investigators typically follow these steps:

1. Legal Authorization: Investigators need legal authorization, such as a warrant or subpoena, to access cloud data. This ensures compliance with privacy laws and protects individuals' rights.
2. Requesting Data: Investigators can request data directly from the cloud service provider through legal channels, specifying the relevant timeframe and types of data required.
3. Preservation: Investigators must ensure the preservation of cloud data to prevent tampering or loss of evidence. This may involve making forensic copies of data or securing access to the cloud account.

IoT Devices:

1. Smart Thermostat: Functions: A smart thermostat allows users to remotely control their home's heating and cooling systems via a smartphone app or voice commands. It is designed to provide convenience, energy savings, and improved comfort for users by optimizing temperature settings based on occupancy and usage patterns.

   Data for Investigation: Usage logs, temperature settings, occupancy patterns, and device activity can provide insights into occupants' behavior and potentially establish timelines or alibis in criminal investigations.

   Data Storage: Data from smart thermostats is typically stored in the cloud or on the manufacturer's servers, accessible through the associated mobile app or web portal.

2. Fitness Tracker: Functions: A fitness tracker monitors various health metrics such as steps taken, heart rate, sleep patterns, and calorie expenditure. It is designed to promote physical activity, track fitness goals, and provide personalized health insights to users.

   Data for Investigation: Fitness trackers can store detailed activity logs, GPS location data, and biometric information, which can be valuable in criminal investigations for corroborating alibis, tracking movements, or identifying suspects.

   Data Storage: Fitness tracker data is usually synchronized with a companion mobile app or stored on the manufacturer's cloud servers, accessible through user accounts.

3. Smart Doorbell Camera (Ring Doorbell): Functions: A smart doorbell camera integrates a doorbell with a video camera, allowing users to remotely monitor and interact with visitors at their doorstep via a mobile app. It is designed to enhance home security, deter burglaries, and provide peace of mind to homeowners.

   Data for Investigation: Smart doorbell cameras capture video footage of visitors, package deliveries, and suspicious activities around the user's property, serving as potential evidence in criminal investigations, such as thefts, vandalism, or trespassing.

   Data Storage: Video footage from smart doorbell cameras is typically stored in the cloud or on local storage devices (e.g., SD cards), accessible through the manufacturer's app or web portal.

Drones in Criminal Activities:

Drones are increasingly used by criminals and terrorists for various illicit activities, including:

1. Smuggling Contraband: Criminal organizations use drones to smuggle drugs, weapons, and other contraband across borders or into prisons, exploiting the drones' ability to fly undetected over security barriers.

2. Surveillance and Reconnaissance: Terrorist groups use drones for reconnaissance missions, scouting potential targets, gathering intelligence, and monitoring security forces' movements, enabling them to plan and execute attacks more effectively.

To combat the misuse of drones in illegal activities, law enforcement agencies employ various strategies, including:

1. Detection and Interception: Utilizing radar systems, acoustic sensors, and drone detection technologies to identify unauthorized drones in restricted airspace and intercept them using jamming or net-capturing devices.

2. Legislation and Regulation: Enacting laws and regulations to restrict drone operations in sensitive areas, such as airports, government facilities, and public events, and imposing penalties for unauthorized drone flights or misuse.

Data Storage and Information from Drones:

Drones typically store data, such as flight logs, GPS coordinates, camera footage, and telemetry data, on onboard memory cards or internal storage devices. This data can provide valuable information to investigators, including:

1. Flight Logs: Records of flight paths, altitude, speed, and maneuvers can help reconstruct the drone's movements and identify its operator or mission objectives.

2. Camera Footage: Video or photographic evidence captured by onboard cameras can document criminal activities, identify suspects or accomplices, and provide situational awareness for law enforcement operations.

Emerging Technologies and Threats:

1. Artificial Intelligence (AI) for Cyberattacks: Cybercriminals are increasingly leveraging AI and machine learning algorithms to automate and enhance their attacks, such as generating sophisticated phishing emails, evading detection by security systems, and identifying vulnerabilities in target networks.

   Countermeasures: Authorities can combat AI-driven cyber threats by developing advanced threat detection algorithms, deploying AI-powered security solutions, and investing in cybersecurity training and education to mitigate the human factor in cyberattacks.

2. Quantum Computing: The advent of quantum computing poses a significant threat to traditional encryption algorithms and cryptographic protocols, potentially rendering current cybersecurity defenses obsolete and enabling adversaries to decrypt sensitive data or launch quantum-enabled cyber attacks.

   Countermeasures: To address the threat of quantum computing, researchers are exploring post-quantum cryptography algorithms resistant to quantum attacks, developing quantum-safe encryption standards, and deploying quantum-resistant cryptographic solutions to secure critical infrastructure and sensitive information assets.