Abstract
Cryptocurrency investigations have centered almost entirely around the transfer of value “money” or a cryptocurrency asset. The use of cryptocurrency for illicit purposes, especially Bitcoin, is well documented both in academic writing, media reporting and even film documentaries. The infamous SilkRoad market place in addition to the millions of dollars spent within dark markets on drugs, guns and assassinations have grabbed the headlines. This paper looks at how blockchain is creating new areas of investigation that are yet to be explored in detail. This scenario-based research examines the hosting of stolen data (P.I.I) personal identifiable information on a distributed blockchain host where the data is also accessible. The platform used is based on Ethereum infrastructure but demonstrates just one available platform that poses the paradigm. The paper examines the considerations through the lens of an incident responder /cyber investigator, forensics examiner and data controller. The scenario highlights distinct differences in considerations from a traditional response compared to dealing with the immutable and unstoppable distributed technology. The paper concludes that more is needed to be done to understand digital forensics in the blockchain era and the need to develop beyond track and trace in the cryptocurrency investigative tool box. The discussion also brings forth how data retention and GDPR requires consideration when applying it blockchain systems.
Highlights
Research into cryptocurrency has focused generally on the transfer of value
Law enforcements focus has remained around the large cryptocurrencies the use of smart contract technology and distributed computing and storage creates a new set of problems for investigators and those responding to incidents
This paper sets out a common leak of personally identifiable information (P.I.I) where it is hosted on blockchain technology and how the traditional responses are required to adapt
Summary
The use of cryptocurrency in large scale criminal activities is well documented in cases such as the Silk Road drugs marketplace or in large ransomware campaigns such as Wanacry. Blockchain technology is scaling and developing new features able to support multiple data and communication protocols across its stack. Law enforcements focus has remained around the large cryptocurrencies the use of smart contract technology and distributed computing and storage creates a new set of problems for investigators and those responding to incidents. This paper sets out a common leak of personally identifiable information (P.I.I) where it is hosted on blockchain technology and how the traditional responses are required to adapt. There are a number of cryptocurrency/blockchain assets that can host the data in a similar nature. A distributed blockchain by its design contains properties that are not inherent in traditional hosting services. A blockchain is immutable in general terms so they are unstoppable and have no central authority or body
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have