Clustering Storage Method for Digital Evidence Storage Using Software Defined Storage

Abstract

The increasing of cybercrime means an increase in the number of digital evidences produced in these criminal activities. Also, to pay attention to the security and integrity of digital data, the construction of digital evidence storage must pay attention to the need for convenience in adding storage and the need for investigators to avoid geographical problems in carrying out their duties. An ideal implementation of the problem is the development of network-based digital evidence storage using the Software-Defined Storage to build a clustered storage system. In this study, we build a clustered storage system using Ceph that will be functioned as digital evidence storage. Ceph is a Software-Defined Storage which is designed to provide excellent performance, reliability and scalability. On the other hand, since digital evidence is fragile, then the security of storage system must also be considered so that the stored digital evidence in the storage system can be accepted in court. The security includes aspects of confidentiality, integrity and availability aspects. We were able to build a storage system using Ceph and as a result, our system storage has met the aforementioned scalability, confidentiality, integrity and availability aspects. The storage system is expected to contribute in terms of digital evidence storage and preservations.

TOSDS: Tenant-centric Object-based Software Defined Storage for Multitenant SaaS Applications

“…The work in [ 26 ] proposes an application for storing network-based digital evidence for crime scenes. For the implementation, authors have used Ceph which is a software defined storage, thus providing reliability, high scalability and security from tampering the digital evidence.…”

Unified Access Management for Digital Evidence Storage: Integrating Attribute-based and Role-based Access Control with XACML

“…Efforts to uncover cybercrime are carried out through a digital investigation process [3] Collecting, storing, and processing digital evidence is part of the investigation and law enforcement process. Existing digital evidence (in the form of text messages, emails, and video recordings) is stored in a storage called digital evidence storage (DES) [4] [5] [6]. One special security measure is to make settings in the access rights section [7].…”