Forensic Artifacts of Facebook's Instant Messaging Service

Document Type

Conference Proceeding

Publication Date

2011

Subject: LCSH

Online social networks, Instant messaging, Unicode (Computer character set)

Disciplines

Computer Engineering | Computer Sciences | Electrical and Computer Engineering | Forensic Science and Technology | Information Security

Abstract

This paper highlights the importance of Facebook's instant messaging service (Facebook Chat) as a potential source of evidence in an investigation. The paper discusses the process of recovering and reconstructing artifacts left by the use of Facebook Chat on a computer's hard disk. The paper describes experiments in which Facebook Chat conversations in Latin and Arabic character sets were conducted using three major web browsers, and then forensically retrieved. The results highlight how Facebook Chat artifacts of Arabic conversations can be difficult to locate with keyword search functions. The paper describes appropriate steps to overcome these difficulties.

Comments

Dr. Baggili was appointed to the University of New Haven's Elder Family Endowed Chair in 2015.

Full proceeding may be purchased here .

Publisher Citation

Al Mutawa, Noora, Al Awadhi, Ibtesam, Baggili, Ibrahim, & Marrington, Andrew (2011, December). Forensic artifacts of Facebook's instant messaging service. In Internet Technology and Secured Transactions (ICITST), 2011 International Conference for (pp. 771-776). Print ISBN: 978-1-4577-0884-8

Link to Full Text

Share

COinS