Technical issues of forensic investigations in cloud computing environments

2011 6th IEEE International Workshop on Systematic Approaches to Digital Forensic Engineering, SADFE 2011

Volumn , Issue , 2011, Pages

  Birk, Dominik ^a   Wegener, Christoph ^a  

^a RUHR UNIVERSITY BOCHUM   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

BUSINESS-IT; CLOUD SERVICES; DIGITAL FORENSIC; DIGITAL INVESTIGATION; EVIDENCE COLLECTION; FORENSIC INVESTIGATION; POSSIBLE SOLUTIONS; TECHNICAL ASPECTS;

CLOUD COMPUTING; COMPUTER CRIME; COMPUTER SYSTEMS; CUSTOMER SATISFACTION; DATA PROCESSING; SALES;

INFORMATION TECHNOLOGY;

EID: 84858712240     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SADFE.2011.17     Document Type: Conference Paper

References (42)

1. N. Beebe, Digital Forensic Research: The Good, the Bad and the Unaddressed, Advances in Digital Forensics V, 2009
2. D. Barrett and G. Kipper, Virtualization and Forensics: A Digital Forensic Investigator's Guide to Virtual Environments, Syngress, 2010
3. R. Bares, Hiding in a virtual world: using unconventionally installed operating systems, in Proceedings of the 2009 IEEE International Conference on Intelligence and Security Informatics (ISI'09), 2009
4. R. Meadows, Cisco Router and Switch Forensics: Investigating and Analyzing Malicious Network Activity, Elsevier Science, 2009
5. EC-Council, Computer Forensics: Investigating Network Intrusions and Cyber Crime, Ec-Council Press Series, 2009
6. V. Corey, C. Peterman, S. Shearin, M.S. Greenberg and J. Van Bokkelen, Network Forensics Analysis, IEEE Internet Computing Journal, 2002
7. M. Pereira, Forensic Analysis of the Firefox 3 Internet History and Recovery of Deleted SQLite Records, Digital Investigation Journal, 2009
8. L. Rongxing, L. Xiaodong, L. Xiaohui and S. Sherman, Secure Provenance: The Essential of Bread and Butter of Data Forensics in Cloud Computing, in Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security (ASIACCS '10), 2010
9. L. Kaufman, Data Security in the World of Cloud Computing, IEEE Security and Privacy Journal, IEEE Educational Activities Department, 2009
10. K. Muniswamy-Reddy and M. Seltzer, Provenance as First Class Cloud Data, ACM SIGOPS Operating Systems Review, 2010
11. A. Reyes, R. Brittson, K. O'Shea and J. Steele, Cyber Crime Investigations: Bridging the Gaps Between Security Professionals, Law Enforcement, and Prosecutors, Syngress, 2007
12. T. Ristenpart, E. Tromer, H. Shacham and S. Savage, Hey, You, Get Off of My Cloud! Exploring Information Leakage in Third-Party Compute Clouds, in Proceedings of the 16th ACM Conference on Computer and Communications Security (CCS '09), 2009
13. A. Case, A. Cristina, L. Marziale, G. Richard and V. Roussev, FACE: Automated Digital Evidence Discovery and Correlation, in Proceedings of the Eighth Annual DFRWS Conference, 2008
14. A. Patcha and J.-M. Park, Network Anomaly Detection with Incomplete Audit Data, Computer Networks Journal, 2007
15. E. Eleazar, Anomaly Detection over Noisy Data Using Learned Probability Distributions, in Proceedings of the Seventeenth International Conference on Machine Learning (ICML '00), 2000
16. P. Mell and T. Grance, The NIST Definition of Cloud Computing, Version 15, 2009
17. A. Barth, A. Porter Felt, P. Saxena and A. Boodman Protecting Browsers from Extension Vulnerabilities, in Proceedings of the 17th Network and Distributed System Security Symposium (NDSS), 2010
18. B. Adida, A. Barth and C. Jackson, Rootkits for JavaScript Environments, in Proceedings of the 3rd USENIX Conference on Offensive Technologies, 2009
19. G. Aggrawal, E. Bursztein, C. Jackson and D. Boneh, An Analysis of Private Browsing Modes in Modern Browsers, in Proceedings of 19th Usenix Security Symposium, 2010
20. D. Bem Virtual Machine for Computer Forensics - the Open Source Perspective, Open Source Software for Digital Forensics, Springer, 2010
21. N. Santos, K. P. Gummadi and R. Rodrigues, Towards Trusted Cloud Computing, in Proceedings of the 2009 Conference on Hot Topics in Cloud Computing (HotCloud'09), 2009
22. A. Singhal, M. Gunestas, A. Singhal, D. Wijesekara and D. Gallagher, Forensics Web Services (FWS), NIST Interagency Report Draft, 2010
23. Y. Shi, K. Zhang and Q. Li, A New Data Integrity Verification Mechanism for SaaS, Web Information Systems and Mining, Spinger LNCS, 2010
24. A. Juels and B. Kaliski, PORs: Proofs of Retrievability for Large Files, in Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS '07), 2007
25. B. Hay and K. Nance, Forensics Examination of Volatile System Data using Virtual Introspection, ACM SIGOPS Operating Systems Review, 2008
26. D. Nurmi, R. Wolski, C. Grzegorczyk, G. Obertelli, S. Soman, L. Youseff and D. Zagorodnov, The Eucalyptus Open-Source Cloud-Computing System, in Proceedings of the 9th IEEE/ACM International Symposium on Cluster Computing and the Grid (CCGRID '09), 2009
27. Y. Tang, P. Lee, J. Lui and R. Perlman, FADE: Secure Overlay Cloud Storage with File Assured Deletion, SecureComm, 2010
28. P. Gutmann, Secure Deletion of Data from Magnetic and Solid-State Memory, in Proceedings of the 6th Conference on USENIX Security Symposium, Focusing on Applications of Cryptography, 1996
29. C. Wright, D. Kleiman and S. Sundhar, Overwriting Hard Drive Data: The Great Wiping Controversy, Information Systems Security, LNCS Springer, 2008
30. Q. Wang, C. Wang, J. Li, K. Ren and W. Lou, Enabling Public Verifiability and Data Dynamics for Storage Security in Cloud Computing, Information Systems Security, LNCS Springer, 2008
31. R. Geambasu, T. Kohno, A. Levy and H. Levy, Vanish: Increasing Data Privacy with Self-Destructing Data, in Proceedings of the 18th Conference on USENIX Security Symposium, 2009
32. R. Chow, P. Golle, M. Jakobsson, R. Shi, J. Staddon, R. Masuoka, and J. Molina, Controlling Data in the Cloud: Outsourcing Computation without Outsourcing Control, in Proceedings of the 2009 ACM Cloud Computing Security Workshop (CCSW '09), 2009
33. L. Lamport, R. Shostak and M. Pease, The Byzantine Generals Problem, ACM Transactions on Programming Languages and Systems Journal, 1982
34. A. Haeberlen, A Case for the Accountable Cloud, in Proceedings of the 3rd ACM SIGOPS International Workshop on Large-Scale Distributed Systems and Middleware (LADIS'09), 2009
35. Y. Zhang, A. Juels, A. Oprea and M. Reiter, HomeAlone: Co-Residency Detection in the Cloud via Side-Channel Analysis, to be published at Security and Privacy IEEE Symposium, 2011
36. B. Grobauer and T. Schreck, Towards Incident Handling in the Cloud: Challenges and Approaches, in Proceedings of the 2010 ACM Cloud Computing Security Workshop (CCSW '10), 2010
37. G. Ateniese, R. Burns, R. Curtmola, J. Herring, L. Kissner, Z. Peterson, D. and Song, Provable Data Possession at Untrusted Stores, in Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS '07), 2007
38. S. Mehrotra, Introducing Windows Azure Diagnostics, http://blogs.msdn. com/b/sumitm/archive/2009/11/18/introducing-windows-azure-diagnostics.aspx, 2009
39. S. Satpathy, S. Pradhan and B. Ray, A Digital Investigation Tool based on Data Fusion in Management of Cyber Security Systems, International Journal of Information Technology and Knowledge Management, 2010
40. S.D. Wolthusen, Overcast: Forensic Discovery in Cloud Environments, Fifth International Conference on IT Security Incident Management and IT Forensics (IMF '09), 2009
41. B. Hay, K. Nance and M. Bishop, Live Analysis: Progress and Challenges, IEEE Security & Privacy Journal, 2009
42. Payment Card Industry Data Security Standard (PCI DSS), https://www.pcisecuritystandards.org/security-standards/index.php