CFaaS: bilaterally agreed evidence collection

Abstract A common cloud forensic model proposed by researchers is ‘Cloud-Forensic-as-a-Service’ where consumers have to access it as a service to collect forensic data from cloud environments. The ‘Cloud-Forensic-as-a-Service’ model raises the question of how it collects digital evidence pertaining...

Full description

Bibliographic Details
Main Authors: Ahmed Nour Moussa, Norafida Ithnin, Anazida Zainal
Format: Article
Language:English
Published: SpringerOpen 2018-01-01
Series:Journal of Cloud Computing: Advances, Systems and Applications
Subjects:
Online Access:http://link.springer.com/article/10.1186/s13677-017-0102-3
_version_ 1818237300021133312
author Ahmed Nour Moussa
Norafida Ithnin
Anazida Zainal
author_facet Ahmed Nour Moussa
Norafida Ithnin
Anazida Zainal
author_sort Ahmed Nour Moussa
collection DOAJ
description Abstract A common cloud forensic model proposed by researchers is ‘Cloud-Forensic-as-a-Service’ where consumers have to access it as a service to collect forensic data from cloud environments. The ‘Cloud-Forensic-as-a-Service’ model raises the question of how it collects digital evidence pertaining to an incident which occurred in the cloud. Currently, types of ‘Cloud-Forensic-as-a-Service’ systems in the literature show that the system is controlled and implemented by the cloud provider, where they unilaterally define the type of evidence that can be collected by the system. A serious limitation of this approach is that it does not offer the consumer sufficient means of performing reasonableness checks to verify that the provider is not accidentally or maliciously contaminating the evidence. To address the problem, the paper proposes a conceptual bilateral Cloud-Forensic-as-a-Service model where both consumers and providers can independently collect, verify the equity of the forensic analysis process and try to resolve potential disputes emerging from the independently collected results. The authors have developed a cloud forensic process model to lead common and significant aspects of a bilateral Cloud-Forensics-as-a-Service model. The paper explicitly discusses the concept of a bilateral Cloud-Forensic-as-a-Service model.
first_indexed 2024-12-12T12:23:34Z
format Article
id doaj.art-1d265a58861143fe8e0a2af4b6e130f7
institution Directory Open Access Journal
issn 2192-113X
language English
last_indexed 2024-12-12T12:23:34Z
publishDate 2018-01-01
publisher SpringerOpen
record_format Article
series Journal of Cloud Computing: Advances, Systems and Applications
spelling doaj.art-1d265a58861143fe8e0a2af4b6e130f72022-12-22T00:24:36ZengSpringerOpenJournal of Cloud Computing: Advances, Systems and Applications2192-113X2018-01-017111910.1186/s13677-017-0102-3CFaaS: bilaterally agreed evidence collectionAhmed Nour Moussa0Norafida Ithnin1Anazida Zainal2Faculty of Computing, Universiti Teknologi MalaysiaFaculty of Computing, Universiti Teknologi MalaysiaFaculty of Computing, Universiti Teknologi MalaysiaAbstract A common cloud forensic model proposed by researchers is ‘Cloud-Forensic-as-a-Service’ where consumers have to access it as a service to collect forensic data from cloud environments. The ‘Cloud-Forensic-as-a-Service’ model raises the question of how it collects digital evidence pertaining to an incident which occurred in the cloud. Currently, types of ‘Cloud-Forensic-as-a-Service’ systems in the literature show that the system is controlled and implemented by the cloud provider, where they unilaterally define the type of evidence that can be collected by the system. A serious limitation of this approach is that it does not offer the consumer sufficient means of performing reasonableness checks to verify that the provider is not accidentally or maliciously contaminating the evidence. To address the problem, the paper proposes a conceptual bilateral Cloud-Forensic-as-a-Service model where both consumers and providers can independently collect, verify the equity of the forensic analysis process and try to resolve potential disputes emerging from the independently collected results. The authors have developed a cloud forensic process model to lead common and significant aspects of a bilateral Cloud-Forensics-as-a-Service model. The paper explicitly discusses the concept of a bilateral Cloud-Forensic-as-a-Service model.http://link.springer.com/article/10.1186/s13677-017-0102-3Cloud forensicsForensics as a serviceTrustModel
spellingShingle Ahmed Nour Moussa
Norafida Ithnin
Anazida Zainal
CFaaS: bilaterally agreed evidence collection
Journal of Cloud Computing: Advances, Systems and Applications
Cloud forensics
Forensics as a service
Trust
Model
title CFaaS: bilaterally agreed evidence collection
title_full CFaaS: bilaterally agreed evidence collection
title_fullStr CFaaS: bilaterally agreed evidence collection
title_full_unstemmed CFaaS: bilaterally agreed evidence collection
title_short CFaaS: bilaterally agreed evidence collection
title_sort cfaas bilaterally agreed evidence collection
topic Cloud forensics
Forensics as a service
Trust
Model
url http://link.springer.com/article/10.1186/s13677-017-0102-3
work_keys_str_mv AT ahmednourmoussa cfaasbilaterallyagreedevidencecollection
AT norafidaithnin cfaasbilaterallyagreedevidencecollection
AT anazidazainal cfaasbilaterallyagreedevidencecollection