Calm before the storm: The challenges of cloud computing in digital forensics

Emerging Digital Forensics Applications for Crime Detection, Prevention, and Security

Volumn , Issue , 2013, Pages 211-233

  Grispos, George ^a   Storer, Tim ^a   Glisson, William Bradley ^a  

^a UNIVERSITY OF GLASGOW   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION PROGRAMS; CLOUD COMPUTING; COMPUTER CRIME; DIGITAL STORAGE; ELECTRONIC CRIME COUNTERMEASURES; INFORMATION MANAGEMENT; VIRTUAL REALITY;

CONTROL AND MANAGEMENT; EQUIPMENT VENDORS; FORENSIC PROCEDURES; IT INFRASTRUCTURES; RESEARCH CHALLENGES; SOFTWARE APPLICATIONS; THIRD PARTIES; VIRTUALIZED ENVIRONMENT;

DIGITAL FORENSICS;

EID: 84944034810     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.4018/978-1-4666-4006-1.ch015     Document Type: Chapter

References (54)

1. Agudo, I., Nuñez, D., Giammatteo, G., Rizomiliotis, P., & Lambrinoudakis, C. (2011). Cryptography goes to the cloud. In Proceedings of the STA Workshops: IWCS and STAVE on Secure and Trust Computing, Data Management, and Applications, Loutraki, Greece (Vol. 187).
2. Amazon Web Services. (2009). Zeus BotNet Controller. Amazon Security Bulletin. Retrieved February 2, 2012, from http://aws.amazon.com/security/security-bulletins/zeus-botnet-controller/
3. Amazon Web Services. (2010). Amazon Cloud- Front - Developer Guide. Retrieved February 2, 2012, from http://s3.amazonaws.com/awsdocs/CF/latest/cf_dg.pdf
4. Association of Chief Police Officers, & 7Safe. (2007). Good practice guide for computer-based electronic evidence. Retrieved February 2, 2012, from http://www.7safe.com/electronic_evidence/ACPO_guidelines_computer_evidence.pdf
5. Baryamureeba, V., & Tushabe, F. (2004). The enhanced digital investigation process. Paper presented at the Digital Forensic Research Workshop, Baltimore, MD.
6. Bessani, A., Correia, M., Quaresma, B., André, F., & Sousa, P. (2011). DepSky: Dependable and secure storage in a cloud-of-clouds. In Proceedings of the Sixth Conference on Computer Systems, Salzburg, Austria (pp. 31-46).
7. Biggs, S., & Vidalis, S. (2009). Cloud computing: The impact on digital forensic investigations. In Proceedings of the 4th International Conference for Internet Technology and Secured Transactions, London, UK (pp. 1-6).
8. Biggs, S., & Vidalis, S. (2010). Cloud computing storms. International Journal of Intelligent Computing Research, 1(1), 63-72.
9. Blumenthal, M. S. (2010). Hide and seek in the cloud. IEEE Security & Privacy, 8(2), 57-58. doi:10.1109/MSP.2010.70.
10. Butler, C. W., Heckman, C., & Thorp, A. (2010). Cloud computing: eDiscovery issues and other risk. Retrieved February 2, 2012, from http://www.orrick.com/fileupload/2740.pdf
11. Carrier, B., & Spafford, E. H. (2003). Getting physical with the digital investigation process. International Journal of Digital Evidence, 2(2).
12. Carrier, B., & Spafford, E. H. (2004). An eventbased digital forensic investigation framework. Paper presented at the Digital Forensic Research Workshop, Baltimore, MD.
13. Detica. (2011, February). The cost of cyber crime. A Detica Report in Partnership with the Office of Cyber Security and Information Assurance in the Cabinet Office. Retrieved February 2, 2012, from http://www.cabinetoffice.gov.uk/sites/default/files/resources/the-cost-of-cyber-crimefull-report.pdf
14. European Union. (2006). Directive 2006/24/EC of the European Parliament and of the Council of 15 March 2006 on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002/58/EC. Official Journal of the European Union, 15(4). Retrieved February 2, 2012, from http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2006:105:0054:0063:EN:PDF
15. Gens, F. (2010). IDC Predictions 2011: Welcome to the New Mainstream (International Data Corporation White Paper, Doc No. 225878). Retrieved February 2, 2012, from http://www.idc.com/research/viewdocsynopsis.jsp?containerId=225878
16. Ghemawat, S., Gobioff, H., & Leung, S. T. (2003). The Google file system. In Proceedings of the 19th ACM Symposium on Operating Systems Principles, Bolton Landing, NY.
17. Google. (2010). Google apps messaging and collaboration products. Retrieved February 2, 2012, from http://static.googleusercontent.com/external_content/untrusted_dlcp/www.google. com/en//a/help/intl/en-GB/admins/pdf/ds_gsa_ apps_whitepaper_0207.pdf
18. Google. (2011). Message security for Google Apps: Administration guide. Retrieved February 2, 2012, from https://ac-s9.postini.com/help/ admin_msd/administration_msd.pdf
19. Google Apps. (2011). Web-based email, calendar, and documents for teams. Retrieved February 2, 2012, from http://www.google.com/apps/intl/en/business/index.html
20. Guo, Y., Slay, J., & Beckett, J. (2009). Validation and verification of computer forensic software tools-Searching function. Digital Investigation, 6, 12-22. doi:10.1016/j.diin.2009.06.015.
21. Hunton, P. (2011). The stages of cybercrime investigations: Bridging the gap between technology examination and law enforcement investigation. Computer Law & Security Report, 27(1), 61-67. doi:10.1016/j.clsr.2010.11.001.
22. Ieong, R. S. C. (2006). FORZA - Digital forensics investigation framework that incorporate legal issues. Digital Investigation, 3, 29-36. doi:10.1016/j.diin.2006.06.004.
23. Kamara, S., & Lauter, K. (2010). Cryptographic cloud storage. In Proceedings of the 14th International Conference on Financial Cryptograpy and Data Security, Tenerife, Canary Islands, Spain (pp. 136-149).
24. Kazarian, B., & Hanlon, B. (2011). SMB cloud adoption study Dec 2010 - Global Report: What will be the impact of cloud services on SMBs in the next 3 years? Retrieved February 2, 2012, from http://www.microsoft.com/Presspass/presskits/commsector/docs/SMBStudy_032011.pdf
25. Khajeh-Hosseini, A., Greenwood, D., & Sommerville, I. (2010). Cloud migration: A case study of migrating an enterprise IT system to IaaS. In Proceedings of the IEEE International Conference on Cloud Computing, Miami, FL (pp. 450-457).
26. Kruse, I., Warren, G., & Jay, G. (2001). Computer forensics: Incident response essentials. Reading, MS: Addison-Wesley.
27. Krutz, R. R., & Vines, R. (2010). Cloud security - A comprehensive guide to secure cloud computing. New York, NY: John Wiley & Sons.
28. Marsico, C. V. (2004). Computer Evidence v. Daubert: The coming conflict. West Lafayette, IN USA: Purdue University, Center for Education and Research in Information Assurance and Security.
29. Marty, R. (2011). Cloud application logging for forensics. In Proceedings of the ACM Symposium on Applied Computing, TaiChung, Taiwan (pp. 178-184).
30. Mell, P., & Grance, T. (2011). The NIST definition of cloud computing. Cambridge, MA: National Institute of Standards and Technology. Retrieved February 2, 2012, from http://csrc.nist.gov/publications/nistpubs/800-145/SP800-145.pdf
31. Owen, P., & Thomas, P. (2011). An analysis of digital forensic examinations: Mobile devices versus hard disk drives utilising ACPO & NIST guidelines. Digital Investigation, 8(2), 135-140. doi:10.1016/j.diin.2011.03.002.
32. Palmer, G. (2001). A road map for digital forensic research - Report from the First Digital Forensic Research Workshop (DFRWS). Utica, NY: Digital Forensic Research Workshop.
33. Pearson, S., & Watson, R. (2010). Digital triage forensics: Processing the digital crime scene. Burlington, MA: Syngress.
34. Pring, B., Brown, R. H., Leong, L., Biscotti, F., Couture, A. W., & Lheureux, B. J.Liu, V. K. (2010). Forecast: Public cloud services, worldwide and regions, industry sectors, 2009-2014.Stamford, CT: Gartner. Retrieved February 2, 2012, from http://www.gartner.com/id=1378513
35. Reilly, D., Wren, C., & Berry, T. (2010). Cloud computing: Forensic challenges for law enforcement. In Proceedings of the 5th International Conference for Internet Technology and Secured Transactions, London, UK (pp. 1-7).
36. Reith, M., Carr, C., & Gunsch, G. (2002). An examination of digital forensic models. International Journal of Digital Evidence, 1(3).
37. Reyes, A., O'Shea, K., Steele, J., Hansen, J. R., Jean, B. R., & Ralph, T. (2007). Seizure of digital information. In Reyes, A., O'Shea, K., Steele, J., Hansen, J. R., Jean, B. R., & Ralph, T. (Eds.), Cyber crime investigations: Bridging the gap between security professionals, law enforcement, and prosecutors. Burlington, MA: Syngress.
38. Richard, G., & Roussev, V. (2006). Next-generation digital forensics. Communications of the ACM, 49(2), 76-80. doi:10.1145/1113034.1113074.
39. Rogers, M. K., Goldman, J., Mislan, R., & Wedge, T. (2006). Computer forensics field triage process model. Journal of Digital Forensics, Security and Law, 1(2).
40. Roschke, S., Cheng, F., & Meinel, C. (2009). Intrusion detection in the cloud. In Proceedings of the Eighth IEEE International Conference on Dependable, Autonomic and Secure Computing, Chengdu, China (pp. 729-734).
41. Roussev, V., Wang, L., Richard, G., & Marziale, L. (2009). A cloud computing platform for largescale forensic computing. In Proceedings of the 5th IFIP WG 11.9 International Conference on Advances in Digital Forensics V, Orlando, FL (Vol. 306, pp. 201-214).
42. Ruan, K., Baggili, I., Carthy, J., & Kechadi, T. (2011). Survey on cloud forensics and critical criteria for cloud forensic capability: A preliminary analysis. In Proceedings of the 6th Annual Conference of the ADFSL Conference on Digital Forensics, Security and Law, Richmond, VA.
43. Ruan, K., Carthy, J., Kechadi, T., & Crosbie, M. (2011). Cloud forensics. In Proceedings of the 7th IFIP WG 11.9 International Conference on Advances in Digital Forensics VII, Orlando, FL. Salgado, R. P. (2005). Fourth amendment search and the power of the hash. Harvard Law Review, 119(38), 38-46.
44. Schubert, L., Jeffery, K., & Neidecker-Lutz, B. (2010). The future of cloud computing: Opportunities for European cloud computing beyond 2010. European Commission Information and Society Theme - Expert Group Report. Retrieved February 2, 2012, from http://cordis.europa.eu/fp7/ict/ssai/docs/cloud-report-final.pdf
45. Sommer, P. (2004). The challenges of large computer evidence cases. Digital Investigation, 1(1), 16-17. doi:10.1016/j.diin.2004.01.005.
46. Tabona, A. Z., & Glisson, W. B. (2011). Exploring solutions put forth to solve computer forensic investigations of large storage media. In Proceedings of the 6th International Annual Workshop on Digital Forensics & Incident Analysis, London, UK.
47. Taylor, M., Haggerty, J., Gresty, D., & Hegarty, R. (2010). Digital evidence in cloud computing systems. Computer Law & Security Report, 26(3), 304-308. doi:10.1016/j.clsr.2010.03.002.
48. The Law Commission. (2009). The admissibility of expert evidence in criminal proceedings in England and Wales - A new approach to the determination of evidentiary reliability (Consultation Paper No. 190). Retrieved February 2, 2012, from http://www.justice.gov.uk/lawcommission/ docs/cp190_Expert_Evidence:Consultation.pdf
49. The Open Cloud Manifesto Consortium. (2009). Open Cloud manifesto. Retrieved February 2, 2012, from http://www.opencloudmanifesto.org/ Open%20Cloud%20Manifesto.pdf
50. Vacca, J. R. (2005). Computer forensics: Computer crime scene investigation (2nd ed.). Hingham, MA: Charles River Media.
51. Vieira, K., Schulter, A., Westphall, C., & Westphall, C. (2010). Intrusion detection for grid and cloud computing. IT Professional, 12(4), 38-43. doi:10.1109/MITP.2009.89.
52. Wang, K. (2010). Using a local search warrant to acquire evidence stored overseas via the Internet. In Proceedings of the 6th IFIP WG 11.9 International Conference on Advances in Digital Forensics VI, Hong Kong (pp. 37-48).
53. Wang, Y., Cannady, J., & Rosenbluth, J. (2005). Foundations of computer forensics: A technology for the fight against computer crime. Computer Law & Security Report, 21(2), 119-127. doi:10.1016/j.clsr.2005.02.007.
54. Wauters, R. (2008). Amazon EC2 now available in Europe. Retrieved February 2, 2012, from http:// techcrunch.com/2008/12/10/amazon-ec2-nowavailable- in-europe/