Forensic Analysis of Internet Protocol Detail Record (IPDR) for Investigative Purposes: Techniques, Challenges and Future Directions
摘要
The rapid adoption of Internet-based messaging applications, such as WhatsApp, Facebook, Instagram etc. has revolutionized communications worldwide. However, these technological advancements have also created additional opportunities for criminals to engage in illicit activities. These messaging services pose challenges for law enforcement agencies while trying to intercept and identify potential actors involved in criminal activities. There is an urgent need to develop new techniques for analyzing internet communication logs and connecting potential criminals who exploit messaging services. Internet Protocol Detail Record (IPDR) contains information about IP-based service usage. Internet service providers store such information for billing, auditing and other purposes. Law Enforcement Agencies use these records as a source of evidence to solve cybercrimes. IPDR contains comprehensive information about internet activity including session details, data transfer volume, device & SIM identification numbers, timestamp of accessing an internet service and tower information. By conducting IPDR analysis, investigators can overcome the limitations of traditional approaches and extract meaningful insights to identify potential crimes and gather evidence for legal proceedings. This paper proposes leveraging IPDR as a valuable source of evidence for forensic investigation and tracking suspects. This paper also explores the benefits of IPDR analysis, the challenges faced by law enforcement agencies in analyzing encrypted messaging services, and the potential of IPDR analysis to enhance forensic investigations.