Toward a Conflict Resolution Protocol for Cloud Forensics Investigation

Abstract

In cloud forensics, both the provider and consumer can independently collect evidence from cloud resources. Any inconsistencies between the forensic data supplied by the provider and that supplied by the client could lead to contentious situations requiring resolution between the involved parties. This work argues that by implementing appropriate mechanisms, it can adjudicate a significant proportion of these disputes electronically. In light of ongoing research into the design of such mechanisms, we propose a protocol that addresses the resolution of online disputes involving forensic evidence. To reconcile the two outputs, whenever possible, the peer-to-peer protocol considers the potential causes of the discrepancy between forensic data from the provider and the consumer. Consequently, disputes pertaining to cloud forensics often give rise to confrontations between the involved parties and have the potential to influence a court's decision. This raises a thought-provoking question regarding the indispensability of a mediation process. This work simulates disputes between providers and consumers by substituting an AI-powered conflict resolution system for a human arbitrator in the role of a mediator. This methodology is implemented in a case study. The participants in the case study demonstrated the efficacy of this protocol.