A New Era of Digital Forensics in the form of Cloud Forensics: A Review

Fernandes, Rieona; Colaco, Rencita Maria; Shetty, Sharadhi; H, Rama Moorthy

doi:10.1109/icirca48905.2020.9182938

Cited by 6 publications

(2 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It is essential to reconstruct the events in a way that satis es the requirements for resolving the data collection, standardization, and legality challenges such as: data retention policy, type of data sources, data preserved format after normalization, keeping data integrity, keeping customers' data privacy in CSP, and security of transferred data to the third-party. These technical and organizational prerequisites support the legality of multi-jurisdictional cases and multi-tenant environments [30] as follows.…”

Section: Pre-process Phasementioning

confidence: 98%

MsFaaS: Microservices Forensics as a Service

Shehata¹,

Aslan²

2023

Preprint

View full text Add to dashboard Cite

The rapid increase in using cloud services leads to the rise of unlimited cyber threats. Due to the distributed architect nature, services like Software as a Service (SaaS) are hard to be monitored. Consequently, in digital crimes, the investigator faces several forensics challenges. Mainly, in collecting data and presenting acceptable electronic evidence at the court. While most researchers went towards the external investigator’s responsibility, fewer researchers went to the Cloud Service Provider’s (CSP) responsibility. In literature, no complete framework that resolves all challenges and succeeds in presenting trusted evidence to the court has been suggested. In the present paper, we propose a framework named Microservices Forensics as a Service (MsFaaS) that suggests solutions to resolve open challenges. Since the CSP holds the crime scene and there is a global legal responsibility against digital crimes, MsFaaS relies on enforcing international law and putting the responsibility on both CSP and local authorities where the victim/attacker and CSP operate. We collect several data types and use event reconstruction methodology to build a comprehensive crime scene in both live and postmortem scenarios. In addition, MsFaaS provides a validation service against man-in-the-middle attacks microservices. It also triggers a response action to virtual machines incidents and external attacks; finally, the framework is helpful for auditing and recording the external and internal traffic inside the cloud environment. As a result, the service provided by the framework offers an evidence report that is certified by the local authority which can be accepted in a digital crime trial.

show abstract

Section: Pre-process Phasementioning

confidence: 98%

MsFaaS: Microservices Forensics as a Service

Shehata¹,

Aslan²

2023

Preprint

View full text Add to dashboard Cite

show abstract

“…The purpose of this review paper is to establish a more in-depth understanding of the challenges of Cloud and Edge computing in computer forensics. From the technical viewpoint, these include the difficulty in dealing with various data stored in multiple locations (by authorities), limitations in accessing Cloud/Edge resources that build strong evidence, and maintaining the evidence's integrity [29,30]. Further, large amounts of data in the Cloud/Edge cannot be easily handled and processed without the risk of contamination or damage to the evidence's integrity [31].…”

Section: Motivationmentioning

confidence: 99%

Cloud and Edge Computing-Based Computer Forensics: Challenges and Open Problems

et al. 2021

View full text Add to dashboard Cite

In recent years, there has been a dramatic change in attitude towards computers and the use of computer resources in general. Cloud and Edge computing have emerged as the most widely used technologies, including fog computing and the Internet of Things (IoT). There are several benefits in exploiting Cloud and Edge computing paradigms, such as lower costs and higher efficiency. It provides data computation and storage where data are processed, enables better data control, faster understanding and actions, and continuous operation. However, though these benefits seem to be appealing, their effects on computer forensics are somewhat undesirable. The complexity of the Cloud and Edge environments and their key features present many technical challenges from multiple stakeholders. This paper seeks to establish an in-depth understanding of the impact of Cloud and Edge computing-based environmental factors. Software and hardware tools used in the digital forensic process, forensic methods for handling tampered sound files, hidden files, image files, or images with steganography, etc. The technical/legal challenges and the open design problems (such as distributed maintenance, multitasking and practicality) highlight the various challenges for the digital forensics process.

show abstract

A Novel Blockchain Framework for Digital Forensics in Cloud Environment Using Multi-objective Krill Herd Cuckoo Search Optimization Algorithm

Apirajitha,

Devi

2023

Wireless Pers Commun

View full text Add to dashboard Cite

A New Era of Digital Forensics in the form of Cloud Forensics: A Review

Cited by 6 publications

References 3 publications

MsFaaS: Microservices Forensics as a Service

MsFaaS: Microservices Forensics as a Service

Cloud and Edge Computing-Based Computer Forensics: Challenges and Open Problems

A Novel Blockchain Framework for Digital Forensics in Cloud Environment Using Multi-objective Krill Herd Cuckoo Search Optimization Algorithm

Contact Info

Product

Resources

About