论文信息 - UNDERSTANDING ISSUES IN CLOUD FORENSICS: TWO HYPOTHETICAL CASE STUDIES

UNDERSTANDING ISSUES IN CLOUD FORENSICS: TWO HYPOTHETICAL CASE STUDIES

The inevitable vulnerabilities and criminal targeting of cloud environments demand an understanding of how digital forensic investigations of the cloud can be accomplished. We present two hypothetical case studies of cloud crimes; child pornography being hosted in the cloud, and a compromised cloudbased website. Our cases highlight shortcomings of current forensic practices and laws. We describe significant challenges with cloud forensics, including forensic acquisition, evidence preservation and chain of custody, and open problems for continued research.

Alan T. Sherman | Josiah Dykstra

[1] Timothy Grance,et al. Guide to Integrating Forensic Techniques into Incident Response , 2006 .

[2] Shahrin Sahib,et al. Mapping Process of Digital Forensic Investigation Framework , 2008 .

[3] Dc Washington. National Institute of Justice. , 2010 .

[4] Orin S. Kerr. Search Warrants in an Era of Digital Evidence , 2011 .

[5] Stephen D. Wolthusen,et al. Overcast: Forensic Discovery in Cloud Environments , 2009, 2009 Fifth International Conference on IT Security Incident Management and IT Forensics.

[6] Simson L. Garfinkel,et al. Digital forensics research: The next 10 years , 2010, Digit. Investig..

[7] Joseph J. Schwerha,et al. Remote Forensics May Bring the Next Sea Change in E-discovery: Are All Networked Computers Now Readily Accessible Under the Revised Federal Rules of Civil Procedure? , 2008, J. Digit. Forensics Secur. Law.

[8] Orin S. Kerr. Applying the Fourth Amendment to the Internet: A General Approach , 2009 .

[9] Terrence V. Lillard. Digital Forensics for Network, Internet, and Cloud Computing: A Forensic Evidence Guide for Moving Targets and Data , 2010 .

[10] Kim-Kwang Raymond Choo. Cloud computing: Challenges and future directions , 2010 .

[11] Hovav Shacham,et al. Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds , 2009, CCS.