TY - GEN
T1 - Analyzing and searching process of internet username and password stored in Random Access Memory (RAM)
AU - Thongjul, Sasithorn
AU - Tritilanunt, Suratose
N1 - Publisher Copyright:
© 2015 IEEE.
PY - 2015/8/24
Y1 - 2015/8/24
N2 - This paper develops a technique to gather and analyze username and password stored in a physical memory or RAM (Random Access Memory). A live memory forensic investigator is able to use this work in order to find the pattern as the 'Searching Criteria' for extending the search to other artifacts. The proposed technique uses a quick search algorithm to find the data in the physical memory. By using a proposed technique to harvest username and password from some popular websites, the experiment has been tested by browsing to social network, webmail, internet banking, and some business online shopping websites. Form the artifacts recovered from the physical memory, we find many useful evidences of username and password that are stored in a plaintext format. Finally, these recover evidences can be linked to other artifact.
AB - This paper develops a technique to gather and analyze username and password stored in a physical memory or RAM (Random Access Memory). A live memory forensic investigator is able to use this work in order to find the pattern as the 'Searching Criteria' for extending the search to other artifacts. The proposed technique uses a quick search algorithm to find the data in the physical memory. By using a proposed technique to harvest username and password from some popular websites, the experiment has been tested by browsing to social network, webmail, internet banking, and some business online shopping websites. Form the artifacts recovered from the physical memory, we find many useful evidences of username and password that are stored in a plaintext format. Finally, these recover evidences can be linked to other artifact.
KW - Random Access Memory
KW - live memory forensic
KW - security of physical memory
KW - volatile data
UR - https://www.scopus.com/pages/publications/84945965141
U2 - 10.1109/JCSSE.2015.7219806
DO - 10.1109/JCSSE.2015.7219806
M3 - Conference contribution
AN - SCOPUS:84945965141
T3 - Proceedings of the 2015 12th International Joint Conference on Computer Science and Software Engineering, JCSSE 2015
SP - 257
EP - 262
BT - Proceedings of the 2015 12th International Joint Conference on Computer Science and Software Engineering, JCSSE 2015
A2 - Duangsuwan, Jarunee
A2 - Vanichayobon, Sirirut
A2 - Preechaveerakul, Ladda
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 12th International Joint Conference on Computer Science and Software Engineering, JCSSE 2015
Y2 - 22 July 2015 through 24 July 2015
ER -