Improving collection of data type evidence and the integrity of evidence collected using SHA-256 hashing algorithm for web browsers
This study introduces a method to enhance web browser evidence collection in digital forensic investigations. The focus of this study specifically operating 3 evidence collection software forensic toolkits in one developed forensic toolkit called ForenWebSight (FWS). Data is collected from 4 most po...
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Little Lion Scientific R&D
2024
|
| Online Access: | http://psasir.upm.edu.my/id/eprint/118206/ http://psasir.upm.edu.my/id/eprint/118206/1/118206.pdf |
| _version_ | 1848867458599878656 |
|---|---|
| author | Asmawi, Aziah Md Yasin, Sharifah Mohd Shah, Nur Hazierah |
| author_facet | Asmawi, Aziah Md Yasin, Sharifah Mohd Shah, Nur Hazierah |
| author_sort | Asmawi, Aziah |
| building | UPM Institutional Repository |
| collection | Online Access |
| description | This study introduces a method to enhance web browser evidence collection in digital forensic investigations. The focus of this study specifically operating 3 evidence collection software forensic toolkits in one developed forensic toolkit called ForenWebSight (FWS). Data is collected from 4 most popular web browsers, Google Chrome, Mozilla Firefox, Microsoft Edge, and Opera in the Windows 11 environment in the context of evidence collection, emphasizing the significance of 35 data types such as history visits, history search, search keyword, cookies, cache, file, session, bookmarks, downloaded files and many more in digital forensic investigations. The existing tools for evidence collection primarily rely on SHA-1 hashing and using older version windows and software toolkits version. Therefore, this study proposes the addition in toolkits implementation, the latest software tools version and the latest solution, an improvement proof-of-concept utilizes SHA-256 hashing algorithm to improve the collection of evidence and enhance integrity. The use of the SHA-256 hash algorithm currently considered secure and resistant to collision attacks. It offers a higher level of security than SHA-1. The evaluation involves comparing the ForenWebSight (FWS) with previous study shows the importance of robust evidence collection tools and methodologies in combating cybercrimes. |
| first_indexed | 2025-11-15T14:36:49Z |
| format | Article |
| id | upm-118206 |
| institution | Universiti Putra Malaysia |
| institution_category | Local University |
| language | English |
| last_indexed | 2025-11-15T14:36:49Z |
| publishDate | 2024 |
| publisher | Little Lion Scientific R&D |
| recordtype | eprints |
| repository_type | Digital Repository |
| spelling | upm-1182062025-06-30T06:13:36Z http://psasir.upm.edu.my/id/eprint/118206/ Improving collection of data type evidence and the integrity of evidence collected using SHA-256 hashing algorithm for web browsers Asmawi, Aziah Md Yasin, Sharifah Mohd Shah, Nur Hazierah This study introduces a method to enhance web browser evidence collection in digital forensic investigations. The focus of this study specifically operating 3 evidence collection software forensic toolkits in one developed forensic toolkit called ForenWebSight (FWS). Data is collected from 4 most popular web browsers, Google Chrome, Mozilla Firefox, Microsoft Edge, and Opera in the Windows 11 environment in the context of evidence collection, emphasizing the significance of 35 data types such as history visits, history search, search keyword, cookies, cache, file, session, bookmarks, downloaded files and many more in digital forensic investigations. The existing tools for evidence collection primarily rely on SHA-1 hashing and using older version windows and software toolkits version. Therefore, this study proposes the addition in toolkits implementation, the latest software tools version and the latest solution, an improvement proof-of-concept utilizes SHA-256 hashing algorithm to improve the collection of evidence and enhance integrity. The use of the SHA-256 hash algorithm currently considered secure and resistant to collision attacks. It offers a higher level of security than SHA-1. The evaluation involves comparing the ForenWebSight (FWS) with previous study shows the importance of robust evidence collection tools and methodologies in combating cybercrimes. Little Lion Scientific R&D 2024 Article PeerReviewed text en cc_by_nc_nd_4 http://psasir.upm.edu.my/id/eprint/118206/1/118206.pdf Asmawi, Aziah and Md Yasin, Sharifah and Mohd Shah, Nur Hazierah (2024) Improving collection of data type evidence and the integrity of evidence collected using SHA-256 hashing algorithm for web browsers. Journal of Theoretical and Applied Information Technology, 103 (2). pp. 375-383. ISSN 1992-8645; eISSN: 1817-3195 http://www.jatit.org/index.php |
| spellingShingle | Asmawi, Aziah Md Yasin, Sharifah Mohd Shah, Nur Hazierah Improving collection of data type evidence and the integrity of evidence collected using SHA-256 hashing algorithm for web browsers |
| title | Improving collection of data type evidence and the integrity of evidence collected using SHA-256 hashing algorithm for web browsers |
| title_full | Improving collection of data type evidence and the integrity of evidence collected using SHA-256 hashing algorithm for web browsers |
| title_fullStr | Improving collection of data type evidence and the integrity of evidence collected using SHA-256 hashing algorithm for web browsers |
| title_full_unstemmed | Improving collection of data type evidence and the integrity of evidence collected using SHA-256 hashing algorithm for web browsers |
| title_short | Improving collection of data type evidence and the integrity of evidence collected using SHA-256 hashing algorithm for web browsers |
| title_sort | improving collection of data type evidence and the integrity of evidence collected using sha-256 hashing algorithm for web browsers |
| url | http://psasir.upm.edu.my/id/eprint/118206/ http://psasir.upm.edu.my/id/eprint/118206/ http://psasir.upm.edu.my/id/eprint/118206/1/118206.pdf |