PlayStation helps paint user's digital footprint

May 6, 2015 by Carys Garland, Science Network WA
Dr Read says discovering a lot of the significant information on a PlayStation cannot be accessed if the internet is disabled, which is standard practice for digital forensics. Credit: Farley Santos

Digital investigators are now able to extract information stored on a PlayStation 4 console thanks to a forensically sound method developed by local researchers.

New web browsing and communication features of gaming consoles could prove valuable to law enforcement investigators, with the idea prompting research into ways of obtaining information.

Edith Cowan University Security Research Institute adjunct professor Iain Sutherland says the PlayStation 4 posed some challenges for data recovery, including its non-standard file system, something that tells the operating system how files are arranged.

Prof Sutherland says the team wanted to avoid simply turning on the console and looking at what was on the screen because of the potential to alter evidence as they explore menus.

"If there are things like a time stamp of when it was last accessed, then because you're accessing it, you're changing the time stamp," Prof Sutherland says.

Instead, researchers tried using a file carving tool; a method that works to find the beginnings and ends of files which are characterised by particular sequences and numbers.

However, this method was unsuccessful in retrieving data, likely due to the console being encrypted.

University of South Wales senior computing lecturer Huw Read says the team used the graphical user interface—the console menu that appears when the PlayStation is turned on—to navigate their way around the system.

PlayStation helps paint user’s digital footprint
A PlayStation 4 with the forensics kit in use. Credit: Carys Garland

"By carefully navigating between the different menus, the logs, the settings, etcetera, we were able to manually extract information useful to forensic examiners," Dr Read says.

A shadow drive was used to ensure any inadvertent changes made to the PlayStation could be restored to the original state.

Prof Sutherland says they used appropriate write-blocking technology to prevent changes to data.

"What we would do was carry out specific activities on the system, then take the drive out, plug the drive into a shadow drive and then analyse what data was present on the disk," he says.

"We were able to check the drive was not altered in any way by this method."

Dr Read says discovering a lot of the significant information on a PlayStation cannot be accessed if the internet is disabled, which is standard practice for digital forensics.

"A lot of the information we recovered was stored on Sony's Cloud, indicating a continuing trend for , in that the evidence is less about the gadget in your hand, but what the gadget lets you access and store online," he says.

Explore further: Sony to launch PlayStation in China after delay

More information: "Forensic analysis of a Sony PlayStation 4: A first look," Digital Investigation, Volume 12, Supplement 1, March 2015, Pages S81-S89, ISSN 1742-2876,

Related Stories

Sony to launch PlayStation in China after delay

March 11, 2015

Japanese electronics giant Sony will launch its PlayStation gaming console in China next week, it said after a more than two-month delay in officially selling its products to Chinese consumers.

Sony PlayStation 4 unveiled NY event Wednesday

February 20, 2013

Sony is unveiled its next-generation gaming system, PlayStation 4, at an event in New York, saying the console will be part of a new ecosystem focused on hardware, software and services.

China finally gets official PlayStations, minus some games

March 20, 2015

Japanese electronics giant Sony on Friday launched its PlayStation gaming console in China, where authorities impose strict controls on content, but some popular titles including "Grand Theft Auto" and "Call of Duty" were ...

Recommended for you

Google braces for huge EU fine over Android

July 18, 2018

Google prepared Wednesday to be hit with huge EU fine for freezing out rivals of its Android mobile phone system in a ruling that could spark new tensions between Brussels and Washington.

EU set to fine Google billions over Android: sources

July 17, 2018

The EU is set to fine US internet giant Google several billion euros this week for freezing out rivals of its Android mobile phone system, sources said, in a ruling that risks fresh tensions with Washington.


Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.