Cybercrime forensic system in cloud computing
ChengYan · 2011
The cloud is a virtual computing environment that provides applications, platforms and software support as services. The applications are extended over the Internet domain to the cloud service provider (CSP) with greater flexibility and availability at lower cost. Unfortunately, the cloud computing service also provides a better environment for criminals and increases the difficulties of cybercrime forensics. In this paper, we focus on the security issues of cloud services and present a forensic framework to beat cybercrime. We set an analysis engine in the cloud as a network service and this engine is used to monitor the network behaviors and collect the evidence when network criminal behaviors happen. FTK and Encase are used to help subsequently analyze the acquired evidence and obtain ideal results.