Overcast: Forensic discovery in cloud environments

IMF 2009 - 5th International Conference on IT Security Incident Management and IT Forensics - Conference Proceedings

Volumn , Issue , 2009, Pages 3-9

  Wolthusen, Stephen D ^a,b  

^a NORWEGIAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Norway)

^b UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

BEST PRACTICE; COMPLEX SYSTEMS; CORE AREA; DISTRIBUTED SYSTEMS; FORENSIC INVESTIGATION; INTERDISCIPLINARY WORK; RESEARCH AGENDA;

COMPUTER CRIME; NETWORK SECURITY; RESEARCH; SECURITY SYSTEMS;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 71249110127     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IMF.2009.21     Document Type: Conference Paper

References (11)

1. S. Peisert, M. Bishop, S. Karin, and K. Marzullo, "Towards Models for Forensic Analysis," in Proceedings of the Second International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE 2007). Seattle, WA, USA: IEEE Press, apr 2007, pp. 3-15.
2. S. Peisert, M. Bishop, and K. Marzullo, "Computer Forensics in Forensis," Operating Systems Review, vol. 42, no. 3, pp. 112-122, apr 2008.
3. K. Nance, B. Hay, and M. Bishop, "Digital Forensics: Defining a Research Agenda," in Proceedings of the 42nd Hawaii International Conference on System Sciences (HICSS '09). Waikoloa, HI, USA: IEEE Press, Jan. 2009, pp. 1-6.
4. A. Almulhem, "Detection and Analysis of Connection Chains in Network Forensics," Ph.D. dissertation, Department of Electrical and Computer Engineering, University of Victoria, Victoria, BC, Canada, 2007.
5. M. Ponec, P. Giura, H. Brönnimann, and J. Wein, "Highly Efficient Techniques for Network Forensics," in Proceedings of the 14th ACM Conference on Computer and Communications Security. Alexandria, VA, USA: ACM Press, oct 2007, pp. 150-160.
6. J. McHugh, R. McLeod, and V. Nagaonkar, "Passive Network Forensics: Behavioural Classification of Network Hosts Based on Connection Patterns," Operating Systems Review, vol. 42, no. 3, pp. 99-111, apr 2008.
7. B. D. Carrier and J. Grand, "A Hardware-Based Memory Acquisition Procedure for Digital Investigation," Digital Investigation, vol. 1, no. 1, pp. 50-60, feb 2004.
8. E. Huebner, D. Bem, F. A. Henskens, and M. Wallis, "Persistent Systems Techniques in Forensic Acquisition of Memory," Digital Investigation, vol. 4, no. 3-4, pp. 129-137, jun 2007.
9. A. Schuster, "The Impact of Microsoft Windows Pool Allocation Strategies on Memory Forensics," Digital Investigation, vol. 5, no. Supplement, pp. S58-S64, sep 2008.
10. A. Case, A. Cristina, L. Marziale, G. G. Richard, and V. Roussev, "FACE: Automated Digital Evidence Discovery and Correlation," Digital Investigation, vol. 5, no. Supplement, pp. S65-S75, sep 2008.
11. B. Hay, M. Bishop, and K. Nance, "Live Analysis: Progress and Challenges," Security & Privacy, vol. 7, no. 2, pp. 30-37, mar 2009.