Forensics framework for cloud computing

Alex, M. Edington; Kishore, Rajiv

doi:10.1016/j.compeleceng.2017.02.006

Cited by 67 publications

(38 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Edington Alex, R. Kishore et.al. [5], They highlighted some challenges which is faced by forensic investigator. In most of the research work investigators need to depend on CSP so there may be chance that CSP can alter data and this can affects complete investigation process.…”

Section: Literature Reviewmentioning

confidence: 99%

Review of Cloud Forensics: Challenges, Solutions and Comparative Analysis

Jain¹,

Mahalkari²

2019

IJCA

View full text Add to dashboard Cite

Every technology has some benefits and some limitations. Cloud computing has its own set of them. Cloud computing has various advantages i.e. reliability, cost effective, scalability, fault tolerance, backup. But there are also some security issues in cloud computing because data is stored on worldwide platform. Many attackers can use cloud services to create vulnerability in the cloud system. There are some forensics tools implemented to find information about these attacks in cloud environment. This complete process to find evidence in cloud environment is known as cloud forensics. This paper presents a study about cloud forensics methods, technology used, comparative study to provide awareness of tools, methods, challenges in cloud forensics. This information will help to find new techniques to improve forensics process in cloud forensics.

show abstract

Section: Literature Reviewmentioning

confidence: 99%

Review of Cloud Forensics: Challenges, Solutions and Comparative Analysis

Jain¹,

Mahalkari²

2019

IJCA

View full text Add to dashboard Cite

show abstract

“…The massive amount of possible evidence that are generated by a large number of IoT devices, it will consequently bring new challenges in the aspect of collecting evidence from distributed IoT infrastructures. In addition, since a hacker can monopolize the evidence in IoT devices because the weakness of these devices in term of security, the extracting evidence from them maybe not acceptable in law court [9]. Moreover, because most of IoT data are stored in the Cloud, the Cloud becomes one of the main sources of evidence in IoT.…”

Section: Limitations In the Currently Available Forensic Toolsmentioning

confidence: 99%

“…Hence, investigators will face some of the problems of collecting evidence from the Cloud, because the procedures of digital forensic and tools assume to have physical access to the evidence source. However, in the Cloud, the investigators could find a difficulty to even to know where the data is located [9]. In addition, the physical servers could have many virtual machines that belong to different owners.…”

Section: Limitations In the Currently Available Forensic Toolsmentioning

confidence: 99%

“…However, in Cloud forensics [8], it is a different scenario, the evidence could be separated in multi-location which is rising many challenges in terms of acquisition of data from the Cloud. In addition, in the Cloud, examiners have limited control and access to seize the digital equipment and getting an exact place of evidence could be a challenge [9]. Dykstra also addressed this challenge in one of the case study that provided about child pornography website.…”

mentioning

confidence: 99%

See 1 more Smart Citation

Internet of Things Forensics – Challenges and a Case Study

Alabdulsalam

Schaefer

Kechadi

et al. 2018

IFIP Advances in Information and Communication Technology

View full text Add to dashboard Cite

Today is the era of Internet of Things (IoT), millions of machines such as cars, smoke detectors, watches, glasses, webcams, etc. are being connected to the Internet. The number of machines that possess the ability of remote access to monitor and collect data is continuously increasing. This development makes, on one hand, the human life more comfortable, convenient, but it also raises on other hand issues on security and privacy. However, this development also raises challenges for the digital investigator when IoT devices involve in criminal scenes. Indeed, current research in the literature focuses on security and privacy for IoT environments rather than methods or techniques of forensic acquisition and analysis for IoT devices. Therefore, in this paper, we discuss firstly different aspects related to IoT forensics and then focus on the current challenges. We also describe forensic approaches for a IoT device -smartwatch as a case study. We analyze forensic artifacts retrieved from smartwatch devices and discuss on evidence found aligned with challenges in IoT forensics.

show abstract

“…This DE can be sought in different digital media such as Hard Drive, network traffic, and RAM [2]. Even though it is volatile, RAM embodies important information about perpetrators' activities [3][4][5]; one of which is the files that are currently open.…”

Section: Introductionmentioning

confidence: 99%

Carving and Clustering Files in Ram for Memory Forensics

Al-Sharif¹,

Al-Khalee²,

Al-Saleh³

et al. 2018

FJEC

View full text Add to dashboard Cite

Memory contains vital information about the current state of a system such as processes, network connections and opened files. The contents of a file can be reconstructed from memory either by following the Operating System's data structures (which might not be always available) or by carving data based on the file's internal structure. Unfortunately, the problem gets more complicated when carving several files with the same internal structure that happen to coexist in memory. This paper carves chunks of a certain file type from memory and employs clustering techniques to distribute these chunks into their corresponding files. As a running example, we carve and cluster different PDF files. The paper employs the wording similarities among related portions and shows that the Hierarchical clustering algorithm facilitates grouping of the recovered text pieces within an adequate accuracy.

show abstract

Forensics framework for cloud computing

Cited by 67 publications

References 7 publications

Review of Cloud Forensics: Challenges, Solutions and Comparative Analysis

Review of Cloud Forensics: Challenges, Solutions and Comparative Analysis

Internet of Things Forensics – Challenges and a Case Study

Carving and Clustering Files in Ram for Memory Forensics

Contact Info

Product

Resources

About