A Study on Image Acquisition and Usage Trace Analysis of Stick-PC


KIPS Transactions on Computer and Communication Systems, Vol. 6, No. 7, pp. 307-314, Jul. 2017
10.3745/KTCCS.2017.6.7.307,   PDF Download:
Keywords: Peripheral Device, Digital Forensic, Stick-PC, Connection Trace, Image Acquisition
Abstract

Stick-PC is small and portable, So it can be used like a desktop if you connect it to a display device such as a monitor or TV anytime and anywhere. Accordingly, Stick-PC can related to various crimes, and various evidence may remain. Stick-PC uses the same Windows version of the operating system as the regular Desktop, the artifacts to be analyzed are the same. However, unlike the Desktop, it can be used as a meaningful information for forensic investigation if it is possible to identify the actual user and trace the usage by finding the traces of peripheral devices before analyzing the system due to the mobility. In this paper, We presents a method of collecting images using Bootable OS, which is one of the image collection methods of Stick-PC. In addition, we show how to analyze the trace of peripheral connection and network connection trace such as Display, Bluetooth through the registry and event log, and suggest the application method from the forensic point of view through experimental scenario.


Statistics
Show / Hide Statistics

Statistics (Cumulative Counts from September 1st, 2017)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.


Cite this article
[IEEE Style]
H. H. Lee, S. G. Bang, H. W. Ba다, D. W. Jeong, S. J. Lee, "A Study on Image Acquisition and Usage Trace Analysis of Stick-PC," KIPS Transactions on Computer and Communication Systems, vol. 6, no. 7, pp. 307-314, 2017. DOI: 10.3745/KTCCS.2017.6.7.307.

[ACM Style]
Han Hyoung Lee, Seung Gyu Bang, Hyun Woo Ba다, Doo Won Jeong, and Sang Jin Lee. 2017. A Study on Image Acquisition and Usage Trace Analysis of Stick-PC. KIPS Transactions on Computer and Communication Systems, 6, 7, (2017), 307-314. DOI: 10.3745/KTCCS.2017.6.7.307.