What's Next, Cloud? A Forensic Framework for Analyzing Self-Hosted Cloud Storage Solutions
Fuente:
arXiv
Salvato in:
| Autori principali: | , , , |
|---|---|
| Natura: | Preprint |
| Pubblicazione: |
2025
|
| Soggetti: | |
| Accesso online: | |
| Tags: |
Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
|
| _version_ | 1866911240146649088 |
|---|---|
| author | Külper, Michael Hilgert, Jan-Niclas Breitinger, Frank Lambertz, Martin |
| author_facet | Külper, Michael Hilgert, Jan-Niclas Breitinger, Frank Lambertz, Martin |
| contents | Self-hosted cloud storage platforms like Nextcloud are gaining popularity among individuals and organizations seeking greater control over their data. However, this shift introduces new challenges for digital forensic investigations, particularly in systematically analyzing both client and server components. Despite Nextcloud's widespread use, it has received limited attention in forensic research. In this work, we critically examine existing cloud storage forensic frameworks and highlight their limitations. To address the gaps, we propose an extended forensic framework that incorporates device monitoring and leverages cloud APIs for structured, repeatable evidence acquisition. Using Nextcloud as a case study, we demonstrate how its native APIs can be used to reliably access forensic artifacts, and we introduce an open-source acquisition tool that implements this approach. Our framework equips investigators with a more flexible method for analyzing self-hosted cloud storage systems, and offers a foundation for further development in this evolving area of digital forensics. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2510_21246 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | What's Next, Cloud? A Forensic Framework for Analyzing Self-Hosted Cloud Storage Solutions Külper, Michael Hilgert, Jan-Niclas Breitinger, Frank Lambertz, Martin Cryptography and Security Self-hosted cloud storage platforms like Nextcloud are gaining popularity among individuals and organizations seeking greater control over their data. However, this shift introduces new challenges for digital forensic investigations, particularly in systematically analyzing both client and server components. Despite Nextcloud's widespread use, it has received limited attention in forensic research. In this work, we critically examine existing cloud storage forensic frameworks and highlight their limitations. To address the gaps, we propose an extended forensic framework that incorporates device monitoring and leverages cloud APIs for structured, repeatable evidence acquisition. Using Nextcloud as a case study, we demonstrate how its native APIs can be used to reliably access forensic artifacts, and we introduce an open-source acquisition tool that implements this approach. Our framework equips investigators with a more flexible method for analyzing self-hosted cloud storage systems, and offers a foundation for further development in this evolving area of digital forensics. |
| title | What's Next, Cloud? A Forensic Framework for Analyzing Self-Hosted Cloud Storage Solutions |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2510.21246 |