A Study on Cloud Forensics and Challenges in SaaS Application Environment

With virtualization technique, cloud computing is developed rapidly. However, aspects of the collecting of digital proofs for forensics in cloud computing environment, certain guideline is not yet. Therefore, cloud forensic researches in progress for reactivating security incidents in cloud computing. In this paper, we analyze forensic issue, challenges, already proposed forensic model in previous researches for adopting cloud forensic. And we suggest a novel model and approach for cloud forensic in SaaS and discuss needs of Service Level Agreements (SLA) and possibilities of Forensic-as-a-Service.

[1]  Dominik Birk.  Technical Challenges of Forensic Investigations in Cloud Computing Environments , 2011 .

[2]  Shams Zawoad,et al.  Digital Forensics in the Cloud , 2013 .

[3]  Raffael Marty,et al.  Cloud application logging for forensics , 2011, SAC.

[4]  Martin S. Olivier,et al.  Isolating a cloud instance for a digital forensic investigation , 2011, ISSA.

[5]  Brian Hay,et al.  Forensics examination of volatile system data using virtual introspection , 2008, OPSR.

[6]  Christoph Wegener,et al.  Technical Issues of Forensic Investigations in Cloud Computing Environments , 2011, 2011 Sixth IEEE International Workshop on Systematic Approaches to Digital Forensic Engineering.

[7]  Alan T. Sherman,et al.  UNDERSTANDING ISSUES IN CLOUD FORENSICS: TWO HYPOTHETICAL CASE STUDIES , 2011 .

[8]  M. Tahar Kechadi,et al.  Cloud forensics definitions and critical criteria for cloud forensic capability: An overview of survey results , 2013, Digit. Investig..

[9]  Hong Guo,et al.  Forensic investigations in Cloud environments , 2012, 2012 International Conference on Computer Science and Information Processing (CSIP).

[10]  Alan T. Sherman,et al.  Acquiring forensic evidence from infrastructure-as-a-service cloud computing: Exploring and evaluating tools, trust, and techniques , 2012, Digit. Investig..

[11]  Diane Barrett,et al.  Virtualization and Forensics: A Digital Forensic Investigator’s Guide to Virtual Environments , 2010 .

[12]  M. Tahar Kechadi,et al.  Key Terms for Service Level Agreements to Support Cloud Forensics , 2012, IFIP Int. Conf. Digital Forensics.

[13]  Stephen D. Wolthusen,et al.  Overcast: Forensic Discovery in Cloud Environments , 2009, 2009 Fifth International Conference on IT Security Incident Management and IT Forensics.

[14]  Ragib Hasan,et al.  Cloud Forensics: A Meta-Study of Challenges, Approaches, and Open Problems , 2013, ArXiv.