Title: A comparative forensic analysis of privacy enhanced web browsers and private browsing modes of common web browsers

Authors: Ryan M. Gabet; Kathryn C. Seigfried-Spellar; Marcus K. Rogers

Addresses: Cisco Systems, Inc., 7200-10 Kit Creek Rd., Morrisville, NC 27560, USA ' Department of Computer and Information Technology, Purdue University, 401 N. Grant St., West Lafayette, IN 47907, USA ' Department of Computer and Information Technology, Purdue University, 401 N. Grant St., West Lafayette, IN 47907, USA

Abstract: Growing concerns regarding internet privacy has led to the development of enhanced privacy web browsers. The authors conducted a digital forensic examination, to determine the recoverable artefacts of three enhanced privacy web browsers (Dooble, Comodo Dragon and Epic) and three commonly used web browsers in anonymous browsing mode (Chrome, Edge and Firefox). In addition, the authors compared two digital forensic tools (FTK and Autopsy) commonly used by law enforcement to determine differences in recoverable browser artefacts. Results indicated the enhanced privacy browsers performed about the same as the common browsers in anonymous browsing mode. In addition, FTK was the better tool for recovering and viewing browser artefacts for both browser groups. Overall, this study did not produce sufficient evidence to conclude enhanced privacy browsers do indeed provide better privacy.

Keywords: privacy browsers; internet artefacts; digital forensics; forensic toolkit; FTK; anonymous.

DOI: 10.1504/IJESDF.2018.095126

International Journal of Electronic Security and Digital Forensics, 2018 Vol.10 No.4, pp.356 - 371

Received: 05 May 2017
Accepted: 13 Dec 2017
Published online: 01 Oct 2018 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article