文章基本信息

标题：Evidence and Cloud Computing: The Virtual Machine Introspection Approach
本地全文：下载
作者：Rainer Poisel ; Erich Malzer ; Simon Tjoa 等
期刊名称：Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications
印刷版ISSN：2093-5374
电子版ISSN：2093-5382
出版年度：2013
卷号：4
期号：1
页码：135-152
出版社：Innovative Information Science & Technology Research Group
摘要：Cloud forensics refers to digital forensics investigations performed in cloud computing environments. Nowadays digital investigators face various technical, legal, and organizational challenges to keep up with current developments in the field of cloud computing. But, due to its dynamic nature, cloud com- puting also offers several opportunities to improve digital investigations in cloud environments. The enormous available computing power can be leveraged to process massive amounts of information in order to extract relevant evidence. In the first part of this paper we focus on the current state-of- the-art of affected fields of cloud forensics. The benefit for the reader of this paper is therefore a clear overview of the challenges and opportunities for scientific developments in the field of cloud forensics. As this paper represents an extended version of our paper presented at the ARES 2012 conference, we describe digital forensics investigations at the hypervisor level of virtualized envi- ronments in greater detail. cloud computing setups typically consist of several virtualized computer systems. Therefore we introduce the reader to the topic of evidence correlation within cloud com- puting infrastructures
关键词：Cloud Computing; Digital Forensics; Cloud Forensics; Hypervisor Forensics; Evidence ; Correlation