Re-engineering simultaneous Internet sessions process-separated browsers

Abstract

Analysis of contemporary web browser sessions for forensic purposes has one major challenge-that of distinguishing Internet events and sessions across multiple tabs. While some information is contained inside the log files, identifying the coherency and concurrency is necessary to generate "specificity of attribution". In this work, we focus on isolating multiple simultaneous browser sessions using network and browser-related metadata on browsers that deploy a separate process for each browser session, which we term process-separated browser implementation. In a previous work, it was shown that network artifacts can be associated with browser artifacts to relate network stream with browser s..