Cloud computing and conflicts with digital forensic investigation

Unfortunately, the nature of the cloud is in conflict with the characteristic of digital forensic investigation approach since many of the common forensic steps are not possible to follow during the inspection of the case. The distribution of cloud resource location in different countries, utilizat...

Full description

Saved in:
Bibliographic Details
Main Authors: Damshenas, Mohsen, Dehghantanha, Ali, Mahmoud, Ramlan, Shamsuddin, Solahuddin
Format: Article
Language:en
Published: Advanced Institute of Convergence Information Technology 2013
Online Access:http://psasir.upm.edu.my/id/eprint/30594/1/Cloud%20computing%20and%20conflicts%20with%20digital%20forensic%20investigation.pdf
http://psasir.upm.edu.my/id/eprint/30594/
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Unfortunately, the nature of the cloud is in conflict with the characteristic of digital forensic investigation approach since many of the common forensic steps are not possible to follow during the inspection of the case. The distribution of cloud resource location in different countries, utilization of numerous storage devices and very limited physical access to the low-level storage devices and physical memories are just some of the reasons caused this conflict. This paper proposes some basic, yet useful, solutions to conquer the described issues. Implementing multi-factor authentication, utilizing Trusted Platform Module (TPM) in Hypervisor and applying specific changes in the Cloud Service Provider (CSP) contract to provide persistent storage to the customer are parts of suggested approaches, capable of making the current digital forensic investigation practices applicable to the cloud computing environments. This is an absolutely essential requirement for CSP’s mainly due to the significance of the clients’ trust which demands the ability for being investigated.