디지털포렌식 관점에서의 협업 도구 네이버웍스의 데이터 수집 및 분석 연구
A Study on Data Collection and Analysis of NaverWorks Collaboration Tool from a Digital Forensics Perspective
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
코로나 바이러스에 의한 팬데믹이 종료된 시점에서도 사무 업무와 원격 근무를 연결해 주는 협업 도구는 높은 사용률을 보이고 있다. 이러한 협업 도구는 조직 내 민감한 데이터와 관련이 있으며 개인뿐 아니라 다양한 조직원들의 상호작용을 통해 많은 데이터가 생성된다. 그러나 생성된 데이터는 구조적으로 혼재되어 있고, 암호화되거나, 협업 도구에서 지원하는 안티 포렌식 기능을 통해 삭제되거나 은닉된 형태로 존재한다. 협업 도구를 대상으로 한 디지털 수사를 위해서는 이러한 데이터를 수집하고 주요 데이터를 획득하기 위한 분석 방법이 필요하다. 본 논문에서는 Windows 환경에서의 협업 도구인 네이버웍스를 대상으로 데이터를 수집하고 분석하는 방법을 설명하였다.
Abstract
Even now that the coronavirus pandemic has ended, collaboration tools that connect office work and remote work are showing high usage rates. These collaboration tools are related to sensitive data within an organization, and a lot of data is generated through the interactions of not only individuals but also members of various organizations. However, the generated data is structurally mixed, encrypted, or deleted or hidden through anti-forensic functions supported by collaboration tools. Digital investigations targeting collaboration tools require analysis methods to collect this data and obtain key data. In this paper, we explained how to collect and analyze data using Naver Works, a collaboration tool in the Windows environment.
참고문헌 (12)
- "Global collaboration software market" (2024)[URL]
- "Number of Naver Works users" (2023)[URL]
- "Naver Works usage rate" (2023)[URL]
- Sumin Shin, "Artifacts Analysis and Data Recovery of Collaboration Tools", Journal of Digital Forensics, 15(2), pp.99~123 (2021)
- Gwui-Eun Park, "A Study on Artifacts Analysis and Credential Utilization Method of Collaboration Tools in iOS", Journal of Digital Forensics, 17(2), pp.14~32 (2023)
- Young-hoon Kim, "On Artifact Analysis for User Behaviors in Collaboration Tools-Using differential forensics for distinct operating environments", Journal of The Korea Institute of Information Security & Cryptology, 31(3), pp.353~363 (2021)
- Sung-soo Kim, "A Study on Message Acquisition from Electron Apps : Focused on Collaboration Tools such as Jandi, Slack, and Microsoft Team", Journal of The Korea Institute of Information Security & Cryptology, 32(1), pp.11~23 (2022)
- Sumin Shin, "Artifacts Analysis of Slack and Discord Messenger in Digital Forensic", Journal of Digital Contents Society, 21(4), pp.799~809 (2020)
- Megan Davis, "Forensic investigation of instant messaging services on linux OS: Discord and Slack as case studies", Forensic Science International:Digital Investigation, 42 (2022)
- Furkan Paligu, "Microsoft Teams desktop application forensic investigations utilizing IndexedDB storage", Journal of Forensic Sciences, 67(4), pp.1513~1533 (2022)
- "winPmem" (2023)[URL]
- "NAVER WORKS Audit" (2024)[URL]