BitTorrent Sync: Network Investigation Methodology

The volume of personal information and data most Internet users find themselves amassing is ever increasing and the fast pace of the modern world results in most requiring instant access to their files. Millions of these users turn to cloud based file synchronisation services, such as Dropbox, Microsoft Skydrive, Apple iCloud and Google Drive, to enable "always-on" access to their most up-to-date data from any computer or mobile device with an Internet connection. The prevalence of recent articles covering various invasion of privacy issues and data protection breaches in the media has caused many to review their online security practices with their personal information. To provide an alternative to cloud based file backup and synchronisation, BitTorrent Inc. released an alternative cloudless file backup and synchronisation service, named BitTorrent Sync to alpha testers in April 2013. BitTorrent Sync's popularity rose dramatically throughout 2013, reaching over two million active users by the end of the year. This paper outlines a number of scenarios where the network investigation of the service may prove invaluable as part of a digital forensic investigation. An investigation methodology is proposed outlining the required steps involved in retrieving digital evidence from the network and the results from a proof of concept investigation are presented.Comment: 9th International Conference on Availability, Reliability and Security (ARES 2014

BitTorrent Sync: First Impressions and Digital Forensic Implications

With professional and home Internet users becoming increasingly concerned with data protection and privacy, the privacy afforded by popular cloud file synchronisation services, such as Dropbox, OneDrive and Google Drive, is coming under scrutiny in the press. A number of these services have recently been reported as sharing information with governmental security agencies without warrants. BitTorrent Sync is seen as an alternative by many and has gathered over two million users by December 2013 (doubling since the previous month). The service is completely decentralised, offers much of the same synchronisation functionality of cloud powered services and utilises encryption for data transmission (and optionally for remote storage). The importance of understanding BitTorrent Sync and its resulting digital investigative implications for law enforcement and forensic investigators will be paramount to future investigations. This paper outlines the client application, its detected network traffic and identifies artefacts that may be of value as evidence for future digital investigations.Comment: Proc. of Digtial Forensics Research Workshop (DFRWS EU 2014

Rarefied gas effects on the aerodynamics of high area-to-mass ratio spacecraft in orbit

The aerodynamic situation of a satellite-on-a-chip operating in low Earth orbit bears some resemblance to a classical Crookes radiometer. The large area-to-mass ratio characteristic of a SpaceChip means that very small surface-dependent forces produce non-negligible accelerations that can significantly alter its orbit. When the temperature of a SpaceChip changes, the drag force can be changed: if the temperature increases, the drag increases (and vice versa). Analytical expressions available in the literature that describe the change in drag coefficient with orbit altitude and SpaceChip temperature compare well with our direct simulation Monte Carlo results presented here. It is demonstrated that modifying the temperature of a SpaceChip could be used for relative orbit control of individual SpaceChips in a swarm, with a maximum change in position per orbit of 50 m being achievable at 600 km altitude

A DSMC investigation of gas flows in micro-channels with bends

Pressure-driven, implicit boundary conditions are implemented in an open source direct simulation Monte Carlo (DSMC) solver, and benchmarked against simple micro-channel flow cases found in the literature. DSMC simulations are then carried out of gas flows for varying degrees of rarefaction along micro-channels with both one and two ninety-degree bends. The results are compared to those from the equivalent straight micro-channel geometry. Away from the immediate bend regions, the pressure and Mach number profiles do not differ greatly from those in straight channels, indicating that there are no significant losses introduced when a bend is added to a micro-channel geometry. It is found that the inclusion of a bend in a micro-channel can increase the amount of mass that a channel can carry, and that adding a second bend produces a greater mass flux enhancement. This increase happens within a small range of Knudsen number (0.02 Knin 0.08). Velocity slip and shear stress profiles at the channel walls are presented for the Knudsen showing the largest mass flux enhancement

Project Maelstrom: Forensic Analysis of the BitTorrent-Powered Browser

In April 2015, BitTorrent Inc. released their distributed peer-to-peer powered browser, Project Maelstrom, into public beta. The browser facilitates a new alternative website distribution paradigm to the traditional HTTP-based, client-server model. This decentralised web is powered by each of the visitors accessing each Maelstrom hosted website. Each user shares their copy of the website;s source code and multimedia content with new visitors. As a result, a Maelstrom hosted website cannot be taken offline by law enforcement or any other parties. Due to this open distribution model, a number of interesting censorship, security and privacy considerations are raised. This paper explores the application, its protocol, sharing Maelstrom content and its new visitor powered ``web-hosting\u27\u27 paradigm

EMERGING TECHNOLOGY AND ITS IMPACT ON THE PRODUCTION AND QUALITY OF LOCAL TELEVISION NEWS

Technology is an integral part of journalism. Journalists use computers, IP-based servers, and digital gear as instruments to gather, process, and distribute news regarding events that impact our lives. Beyond the basic tools of the trade, the use of technology can dramatically influence the process of producing news. This project examines how the use of this technology impacts the collection, analysis, production, and quality of local television news. The study also addresses how technology is redefining the role of newsworkers in local television newsrooms. The methods of data collection include a survey and focus group of journalists with experience at local and national news networks, a content analysis of sixty local newscasts, and interviews with television news workers. The research questions address the impact of technology on the production and quality of local television news. I ask, among other questions, whether the increased number of required daily tasks has affected quality and whether news professionals say they see such effects; how, and to what extent, digital technologies such as IP-based store-and-forward technology, smaller portable newsgathering gear, and cellular-based transmission methods have affected production, and whether journalists say they see negative effects; that the use of network-affiliate and subscription-based news services have changed how local television news is produced. Overall, I conclude that the role of a local television journalist has changed and a new hybrid editorial/technical role has emerged. These hybrid journalists are required to perform more technical tasks, resulting in time diverted away from traditional tasks such as story research, news analysis, and script writing. My research aligns with existing literature in proposing that these changes are contributing to a decline of quality in local television news. This is an indirect result of using newer technology. The use of these tools has made the collection and distribution of content more efficient, but the speed and ease of this technology have resulted in more tasks being performed by individual journalists, which leads to less locally generated content. In addition, the increased need to supply original content to station websites and social media platforms has also negatively affected quality

Forensic Analysis and Remote Evidence Recovery from Syncthing: An Open Source Decentralised File Synchronisation Utility

Commercial and home Internet users are becoming increasingly concerned with data protection and privacy. Questions have been raised regarding the privacy afforded by popular cloud-based file synchronisation services such as Dropbox, OneDrive and Google Drive. A number of these services have recently been reported as sharing information with governmental security agencies without the need for warrants to be granted. As a result, many users are opting for decentralised (cloudless) file synchronisation alternatives to the aforementioned cloud solutions. This paper outlines the forensic analysis and applies remote evidence recovery techniques for one such decentralised service, Syncthing