Digital forensics investigations in the Cloud

Thethi, Neha; Keane, Anthony

doi:10.1109/iadcc.2014.6779543

Cited by 37 publications

(19 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The framework was used to investigate ownCloud [50], Amazon EC2 [51], VMWare [32], and XtreemFS [52]. Quick et al [24] further extended and validated the four-stage framework using SkyDrive, Dropbox, Google Drive, and ownCloud.…”

Section: Related Workmentioning

confidence: 99%

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Teing

Dehghantanha

Choo

et al. 2019

IEEE Trans. Sustain. Comput.

View full text Add to dashboard Cite

Abstract-The pervasive nature of cloud-enabled big data storage solutions introduces new challenges in the identification, collection, analysis, preservation and archiving of digital evidences. Investigation of such complex platforms to locate and recover traces of criminal activities is a time-consuming process. Hence, cyber forensics researchers are moving towards streamlining the investigation process by locating and documenting residual artefacts (evidences) of forensic value of users' activities on cloud-enabled big data platforms in order to reduce the investigation time and resources involved in a real-world investigation. In this paper, we seek to determine the data remnants of forensic value from Syncany private cloud storage service, a popular storage engine for big data platforms. We demonstrate the types and the locations of the artefacts that can be forensically recovered. Findings from this research contribute to an in-depth understanding of cloud-enabled big data storage forensics, which can result in reduced time and resources spent in real-world investigations involving Syncany-based cloud platforms.

show abstract

Section: Related Workmentioning

confidence: 99%

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Teing

Dehghantanha

Choo

et al. 2019

IEEE Trans. Sustain. Comput.

View full text Add to dashboard Cite

show abstract

“…This forensic clustering resolution reduces the search space, permits multi drive correlation and methods a social network of virtual machine instances. N. Thethi and A. Keane [5] address problem by responsible the relationship among acquisition times on the dissimilar storage capacities, expending remote acquisition to get data from virtual machines in the cloud. A hypothetical case study is used to examine the significance of using a partial and full technique for acquisition of data from the cloud and to regulate how every technique affects the duration and accuracy of the forensics investigation and consequence.…”

Section: IImentioning

confidence: 99%

Design and Implementation Hybrid Algorithm Attack Investigation in Cloud Environment

Gupta¹

2018

IJRASET

View full text Add to dashboard Cite

Cloud computing as a wide IT service delivery platform is unique of the greatest hopeful technologies for rapid business improvement and effective productivity development. Unfortunately, numerous of the attractive cloud computing attributes can be developed for cybercrime purposes and illegal activities Cloud acquisition and pre-processing engine handling manifold cloud provider platforms is implemented. The acquired evidence artifacts are pre-processed and investigated. This is used for construction features and values describing evidence files for clustering. To proposed technique privacy conscious cloud forensic investigation process. To proposed hybrid algorithm attack investigation in cloud environment. Keywords: Cloud Forensics, Cloud computing, Digital Forensics, genetic algorithm I.INTRODUCTION Although the cloud influence appear attractive to small as well as to big companies, it does not originate beside devoid of its peculiar unique problems. Outsourcing sensitive corporate data into the cloud increases concerns regarding the privacy and security of data. Security policies , technique , protocol foremost support about security, cannot be simply arranged into distributed, virtualized cloud environments. This condition is additional complicated by the unidentified physical location of the resource or assets. Consider additional with the support of traces after the cloud and state of the servers and machines. Cloud Forensics deals with the process of verifying the presence of past events. The method used for repairing the previous events is capturing the process of the state of the machine. This contains the memory usage, developed applications, consecutively processes, and processer usage. The directly above process is simply and in times of failure, system state can be returned at the preceding set aside point. The attacks has increased along through the benefits of the cloud. The number of attackers continues increasing to Cloud service provider, virtual machine, servers and the network. In the comprehensive classification of the attacks on network and cloud situation usually, if a security incident occurs, the commercial security group requirements to be able to achieve their own investigation deprived of dependency on third parties. In the cloud, this is not conceivable any longer: The CSP acquires completely the power over the environment and thus controls the sources of evidence. In the greatest case, a trusted third party performances as a trustee and assurances for the dependability of the CSP. Motivated by this Challenge and in the concern of emerging current, organised and privacy conscious cloud forensic practice, to proposed technique based on genetic algorithm and cloud forensic investigation have on the cloud entities privacy. Organised with this, we will deliver numerous recommendations that are valuable for acceptance of privacy aware cloud forensic investigation process. We trust that privacy conservation is one of the furthermost significant characteristics for development o...

show abstract

“…Martini and Choo 51 proposed the first cloud forensic investigation framework, which was derived based upon the frameworks of McKemmish 52 and NIST. 49 The framework was used to investigate ownCloud, 53 Amazon EC2, 18 VMWare, 54 and XtreemFS. 55 63 proposed a proactive application-level logging mechanism designed to log information of forensics interest.…”

Section: Andmentioning

confidence: 99%

CloudMe forensics: A case of big data forensic investigation

Teing

Dehghantanha

Choo

2017

Concurrency and Computation

View full text Add to dashboard Cite

The significant increase in the volume, variety, and velocity of data complicates cloud forensic efforts, and such (big) evidential data will, at some point, become too (computationally) expensive to be fully identified, collected, and analysed in a timely manner. Thus, it is important for digital forensic practitioners to have an up-to-date knowledge of relevant data artefacts that could be forensically recovered from the cloud product under investigation. In this paper, CloudMe, a popular cloud storage service, is studied. The types and locations of the artefacts relating to the installation and uninstallation of CloudMe client application, logging in and out, and file synchronization events from the computer desktop and mobile clients are described. Findings from this research will also help inform future development of tools and techniques (e.g., data mining techniques) for cloud-enabled big data endpoint forensics investigation.

show abstract

Digital forensics investigations in the Cloud

Cited by 37 publications

References 11 publications

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study

Design and Implementation Hybrid Algorithm Attack Investigation in Cloud Environment

CloudMe forensics: A case of big data forensic investigation

Contact Info

Product

Resources

About