Metodología para la recolección de evidencia forense generada durante la utilización de aplicaciones desplegadas en entornos web

Abstract

Nowadays, with the increasing on the use of web applications, the rate of problems and crimes through them has also increased. Therefore, that is the reason for the need of a guide that includes digital forensic techniques manage digital evidence from web environments. The main problem, when users are interacting with web applications, is to know exactly where the information is located, or if is possible to access it because of the geographic jurisdiction; consequently, a viable alternative to perform an adequate computer expertise is to carry out the investigation on the computer (client's side). However, while there are methodologies and case studies that provide guidance and good practices, the majority are focused on specific web applications; that is, they cannot be generalized to cover every possible situation. This investigation presents a literature review of trends and practices in this area of study and proposes a methodology that will enable forensic investigators to conduct an investigation throughout the end of it. For the development of the methodology, in addition to considering guidelines and good practices from experts, emphasis has also been placed on recommendations provided by international standards, also a tool has been implemented to reduce the collection times of the main artefacts coming from interactions with web environments, guaranteeing the integrity of the data collected. At the end, the proposals of this study are evaluated by means of a test of concepts.