Towards a Model-Based Framework for Forensic-Enabled Cloud Information Systems

Simou, Stavros; Kalloniatis, Christos; Mouratidis, Haralambos; Gritzalis, Stefanos

doi:10.1007/978-3-319-44341-6_3

Cited by 6 publications

(9 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Cloud forensics introduces processes for resolving incidents occurring in cloud computing environments. However, designing cloud services capable to assist a cloud investigation process is of vital importance and various research efforts concentrate on these directions [8,9]. In addition, digital forensics methods cannot support an investigation in cloud environments since the particular environments introduce many differences compared to traditional IT environments [1,10].…”

Section: Cloud Forensic Investigationmentioning

confidence: 99%

“…Simou et al [9] presented a comparison framework to merge same or similar stages of the previous proposed frameworks and models that produce the same outcome into one stage. The comparison framework consists of the following four sequential stages: identification, preservation-collection, examination-analysis, and presentation and two concurrent stages, the chain of custody and documentation.…”

Section: Proposed Cloud Forensic Investigation Processmentioning

confidence: 99%

See 1 more Smart Citation

A Revised Forensic Process for Aligning the Investigation Process with the Design of Forensic-Enabled Cloud Services

Simou

Kalloniatis

Gritzalis

et al. 2019

Communications in Computer and Information Science

Self Cite

View full text Add to dashboard Cite

The design and implementation of cloud services, without taking under consideration the forensic requirements and the investigation process, makes the acquisition and examination of data, complex and demanding. The evidence gathered from the cloud may not become acceptable and admissible in the court. A literature gap in supporting software engineers so as to elicit and model forensic-related requirements exists. In order to fill the gap, software engineers should develop cloud services in a forensically sound manner. In this paper, a brief description of the cloud forensic-enabled framework is presented (adding some new elements) so as to understand the role of the design of forensic-enabled cloud services in a cloud forensic investigation. A validation of the forensic requirements is also produced by aligning the stages of cloud forensic investigation process with the framework's forensic requirements. In this way, on one hand, a strong relationship is built between these two elements and emphasis is given to the role of the forensic requirements and their necessity in supporting the investigation process. On the other hand, the alignment assists towards the identification of the degree of the forensic readiness of a cloud service against a forensic investigation.

show abstract

Section: Cloud Forensic Investigationmentioning

confidence: 99%

Section: Proposed Cloud Forensic Investigation Processmentioning

confidence: 99%

A Revised Forensic Process for Aligning the Investigation Process with the Design of Forensic-Enabled Cloud Services

Simou

Kalloniatis

Gritzalis

et al. 2019

Communications in Computer and Information Science

Self Cite

View full text Add to dashboard Cite

show abstract

“…The modelling language is presented in terms of a conceptual model, based on the concepts and the forensic constraints identified for designing a cloud forensic-enabled system. The conceptual model presented in this paper not only includes the concepts that make a system forensic-enabled but also the concepts for a cloud forensic investigation process from our previous work [4]. In this way, an integrated model is produced to assist designers in creating cloud forensic-enabled services considering the respective investigation requirements in the case of an incident.…”

Section: Modelling Language For Designing Cloud Forensic-enabled Servmentioning

confidence: 99%

“…After a thorough analysis of the respective literature, we came to the conclusion that there is a literature gap in supporting software engineers so as to identify forensic-related requirements for information systems [4]. Thus, to fill the aforementioned gap we present a requirements' engineering methodology to support the elicitation of forensic requirements.…”

Section: Introductionmentioning

confidence: 99%

“…The methodology consists of a set of cloud forensic constraints, a modelling language expressed through a conceptual model and a process based on the concepts identified and presented in the conceptual model. The conceptual model presented in this paper not only includes the concepts that make a system forensic-enabled, but also the concepts for cloud forensic investigation identified in [4], raising the importance of the relation between a forensic-enabled system and an investigation process and how the latter is assisted when an incident 3 occurs. In this way, an integrated conceptual model is produced to assist designers in a way that they will be able to design forensicable cloud services.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

A framework for designing cloud forensic-enabled services (CFeS)

et al. 2018

Self Cite

View full text Add to dashboard Cite

Cloud computing is used by consumers to access cloud services. Malicious actors exploit vulnerabilities of cloud services to attack consumers. The link between these two assumptions is the cloud service. Although cloud forensics assists in the direction of investigating and solving cloud-based cyber-crimes, in many cases the design and implementation of cloud services falls back. Software designers and engineers should focus their attention on the design and implementation of cloud services that can be investigated in a forensic sound manner. This paper presents a methodology that aims on assisting designers to design cloud forensic-enabled services. The methodology supports the design of cloud services by implementing a number of steps to make the services cloud forensic-enabled. It consists of a set of cloud forensic constraints, a modelling language expressed through a conceptual model and a process based on the concepts identified and presented in the model. The main advantage of the proposed methodology is the correlation of cloud services' characteristics with the cloud investigation while providing software engineers the ability to design and implement cloud forensic-enabled services via the use of a set of predefined forensic related tasks.

show abstract