Title: A comparative forensic analysis of privacy enhanced web browsers and private browsing modes of common web browsers
Authors: Ryan M. Gabet; Kathryn C. Seigfried-Spellar; Marcus K. Rogers
Addresses: Cisco Systems, Inc., 7200-10 Kit Creek Rd., Morrisville, NC 27560, USA ' Department of Computer and Information Technology, Purdue University, 401 N. Grant St., West Lafayette, IN 47907, USA ' Department of Computer and Information Technology, Purdue University, 401 N. Grant St., West Lafayette, IN 47907, USA
Abstract: Growing concerns regarding internet privacy has led to the development of enhanced privacy web browsers. The authors conducted a digital forensic examination, to determine the recoverable artefacts of three enhanced privacy web browsers (Dooble, Comodo Dragon and Epic) and three commonly used web browsers in anonymous browsing mode (Chrome, Edge and Firefox). In addition, the authors compared two digital forensic tools (FTK and Autopsy) commonly used by law enforcement to determine differences in recoverable browser artefacts. Results indicated the enhanced privacy browsers performed about the same as the common browsers in anonymous browsing mode. In addition, FTK was the better tool for recovering and viewing browser artefacts for both browser groups. Overall, this study did not produce sufficient evidence to conclude enhanced privacy browsers do indeed provide better privacy.
Keywords: privacy browsers; internet artefacts; digital forensics; forensic toolkit; FTK; anonymous.
International Journal of Electronic Security and Digital Forensics, 2018 Vol.10 No.4, pp.356 - 371
Received: 05 May 2017
Accepted: 13 Dec 2017
Published online: 06 Aug 2018 *