Digital forensic analysis of attack detection and identification in private cloud environments for databases

Abstract

Today, a growing number of applications are transitioning to the cloud due to its numerous benefits and userfriendly nature. Data plays a pivotal role in the migration, and its security is of paramount importance.Database forensics is a field dedicated to investigating malicious activities carried out by attackers, whether they occur on the front-end or back-end. These activities can be traced through the analysis of various database logs, with network details aiding in the identification of the attacker. In this paper, the authors explore the activity indicators by examining and analysing activity logs, database logs and network packets. Cloud forensics presents the digital investigation for the detection of cyber crimes on cloud. This could include data breaches or identity thefts or modification of databases and attacks on the application server and webserver.