Logging framework for cloud computing forensic environments

Patrascu, Alecsandru; Patriciu, Victor-Valeriu

doi:10.1109/iccomm.2014.6866662

Cited by 19 publications

(19 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Patrascu et al proposed a cloud architecture to monitor the activities in a cloud environment (Patrascu, 2014). Using the proposed framework, they collected logs from different layers of the cloud.…”

Section: Related Workmentioning

confidence: 99%

Towards Achieving Reliable Digital Forensics in Iaas and Staas Clouds Using the Open Cloud Forensics Model

Zawoad¹,

Hasan²,

Skjellum³

2016

STCC

View full text Add to dashboard Cite

The rapid adoption of cloud computing to meet storage and computation needs has changed the way computing services and resources are used. However, because of the black-box nature and multi-tenant usage models of clouds, existing digital forensics science cannot cope with current state-of-the-art cloud architectures. Because of the fundamental characteristics of such clouds, many assumptions of digital forensics are invalidated. In the digital forensics process involving clouds, the role of cloud service providers (CSPs) is extremely important; a role which needs to be considered in the science of cloud forensics. In this paper, we define cloud forensics while considering the role of the CSP and propose the Open Cloud Forensics (OCF) model. The OCF model focuses on preserving sufficient electronically stored information (ESI) required to investigate cases involving clouds and ensuring the trustworthiness of such ESI. Based on this we propose two cloud architectures: the OCF-supported Infrastructure-asa-Service (IaaS) cloud and the OCF-supported Storage-as-a-Service (StaaS) cloud. We validate our proposed models using a case study, which is inspired from an actual civil lawsuit.

show abstract

Section: Related Workmentioning

confidence: 99%

Towards Achieving Reliable Digital Forensics in Iaas and Staas Clouds Using the Open Cloud Forensics Model

Zawoad¹,

Hasan²,

Skjellum³

2016

STCC

View full text Add to dashboard Cite

show abstract

“…The first layer, as presented in our previous work [4], represents the management layer in a cloud computing deployment. All the modules that are responsible with all cloud specific operations can be found at this level, together with the forensic targeted ones, such as "Cloud Forensic Module".…”

Section: Cloud Logging Architecturementioning

confidence: 99%

“…In our previous research [10] we have also focused on choosing a proper data representation format that will be used between the modules of our framework and between the modules and the central forensic processing core. In the next paragraphs we present a brief comparison of two existing proposals in this directions, that are applicable in our context.…”

Section: Related Workmentioning

confidence: 99%

Logging for Cloud Computing Forensic Systems

Patrascu

Patriciu

2015

INT J COMPUT COMMUN

Self Cite

View full text Add to dashboard Cite

Cloud computing represents a different paradigm in the field of distributed computing that involves more and more researchers. We can see in this context the need to know exactly where, when and how a piece of data is processed or stored. Compared with classic digital forensic, the field of cloud forensic has a lot of difficulties because data is not stored on a single place and furthermore it implies the use of virtualization technologies. In this paper we present a new method of monitoring activity in cloud computing environments and datacenters by running a secure cloud forensic framework. We talk in detail about the capabilities that such system must have and we propose an architecture for it. For testing and results we have implemented this solution to our previous developed cloud computing system.

show abstract

“…The application discussed in this paper will be based on emulator VMware (a software which provide cloud and virtualization services.) [3] The paper also stipulates the requirement of all the clients connected to the server in private cloud setup like static IP address and monitory configuration of the system. The flow of the application goes as below: The proposed technology is discussed on the basis of existing Case studies as mentioned above.…”

Section: Proposed Cloud Virtualized System Architecture and Implmentioning

confidence: 99%

Digital Forensics Technique for Detection of Attack and Previous Data Restoration in Cloud Environment

2017

View full text Add to dashboard Cite

Abstract-Cloud computing recovery issues requirements have been addressed in publications earlier, but it is still difficult to estimate what kinds of requirements have been researched most, and which are still under research. Backing up our databases to the public cloud is an important strategic focus for us going forward in order to save money, scale our backup and DR operations, and to ensure our applications are always available to customers and business users worldwide. Over the past few years, many organizations have started to deploy public cloud for backup and Disaster Recovery (DR). Data recovery approaches with respect to digital forensics can be introduced for the sake of data management after a system encounters with an attack or any disaster like crash of vital data. These approaches often used by organizations to experience the reactive majors after a crash of data. Cloud-based business flexibility can provide an attractive alternative to traditional disaster recovery, offering rapid recovery time associated with a dedicated infrastructure and the reduced costs that are consistent with a data recovery model. This paper discusses one of the techniques to implement application for DR and describes how organizations can use cloud computing to help plan for both the routine interruptions to service-server hardware failures ,cut power lines, and security breaches-as well as more-infrequent disasters. The paper provides key considerations for the transition of replicas once a peer in the system encounters an attack in the private cloud-based business resilience. That is, a machine, once experiences calamity like instance failure of data and so on, DR can be carried out by an application discussed in this paper to recover the data by extracting a last Restore point (RP).

show abstract

Logging framework for cloud computing forensic environments

Cited by 19 publications

References 5 publications

Towards Achieving Reliable Digital Forensics in Iaas and Staas Clouds Using the Open Cloud Forensics Model

Towards Achieving Reliable Digital Forensics in Iaas and Staas Clouds Using the Open Cloud Forensics Model

Logging for Cloud Computing Forensic Systems

Digital Forensics Technique for Detection of Attack and Previous Data Restoration in Cloud Environment

Contact Info

Product

Resources

About