Table of Content

Open AccessOpen Access


Forensic Investigation Through Data Remnants on Hadoop Big Data Storage System

Myat Nandar Oo1, Sazia Parvin2, Thandar Thein3

1 University of Computer Studies, Yangon
2 University of New South Wales, Canberra
3 University of Computer Studies, Maubin

Computer Systems Science and Engineering 2018, 33(3), 203-217.


Forensic examiners are in an uninterrupted battle with criminals in the use of Big Data technology. The underlying storage system is the main scene to trace the criminal activities. Big Data Storage System is identified as an emerging challenge to digital forensics. Thus, it requires the development of a sound methodology to investigate Big Data Storage System. Since the use of Hadoop as Big Data Storage System continues to grow rapidly, investigation process model for forensic analysis on Hadoop Storage and attached client devices is compulsory. Moreover, forensic analysis on Hadoop Big Data Storage System may take additional time without knowing where the data remnants can reside. In this paper, a new forensic investigation process model for Hadoop Big Data Storage System is proposed and discovered data remnants are presented. By conducting forensic research on Hadoop Big Data Storage System, the resulting data remnants assist the forensics examiners and practitioners for generating the evidences.


Cite This Article

M. Nandar Oo, S. Parvin and T. Thein, "Forensic investigation through data remnants on hadoop big data storage system," Computer Systems Science and Engineering, vol. 33, no.3, pp. 203–217, 2018.

This work is licensed under a Creative Commons Attribution 4.0 International License , which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
  • 980


  • 1288


  • 0


Share Link

WeChat scan