Reconstructing streamed video content: A case study on YouTube and Facebook Live stream content in the Chrome web browser cache

    Research output: Contribution to journalConference article

    395 Downloads (Pure)

    Abstract

    With the increased popularity of online video streaming comes the risk of this technology's subsequent abuse. With a number of cases noted in 2017 where individuals have engaged with illegal or policy breaching video content, digital forensics practitioners are often tasked with investigating the subsequent ‘fingerprint’ of such acts. This is often to determine both the content of a stream in question, and, how it has been interacted with, typically from an analysis of data residing on a suspect's local device. This article provides an examination of the forensic procedures required to identify and reconstruct cached video stream data using both YouTube and Facebook Live as example case studies. Stream reconstruction methodologies are offered where results show that where a YouTube and Facebook Live video have been played, buffered video stream data can be reassembled to produce a viewable video clip of content.

    Original languageEnglish
    Pages (from-to)S30-S37
    JournalDigital Investigation
    Volume26
    Issue numberSupplement
    Early online date15 Jul 2018
    DOIs
    Publication statusPublished - 31 Jul 2018
    Event8th Annual Digital Forensic Research Workshop USA - Providence, United States
    Duration: 15 Jul 201818 Jul 2018

    Fingerprint Dive into the research topics of 'Reconstructing streamed video content: A case study on YouTube and Facebook Live stream content in the Chrome web browser cache'. Together they form a unique fingerprint.

  • Cite this