Digital Forensic Framework for a Cloud Environment
George Sibiya, Hein S. Venter, Thomas Fogwill · 2012
The advent of cloud computing provides good opportunities for both good and malicious use. Cloud computing is at its infanc y stage and its security is still an open research issue. Malicious users take advantage of the current lack of advanced security mechanisms in the cloud. Cloud computing paradigm enables users to access computing resources without necessarily owni ng physical infrastructures. It is therefore easy for an attacker who intends to perfo rm malicious activities in the cloud to create a remotely hosted desktop, perform their activities and then destroy the desktop later. With the remotely hosted desktop destroyed, there is very little evidence left that can be collected by forensic exp erts using traditional static digital forensic methods. A scenario such as this therefore requires live digital forensic processes as a large amount of evidence can be gath ered while the system is running. Key issues in cloud forensics include, but are not limited to, identity, encryption, and jurisdiction and data distribution. Digital forensi c investigators currently face a challenge when criminal incidences occur as there a re no well developed tools and procedures for conducting digital forensic investig ations in the cloud. This paper proposes a novel framework that addresses issues of digital forensics in the cloud computing environment.