Cloud incident handling and forensic‐by‐design: cloud storage as a case study
Cloud incident handling and forensic‐by‐design: cloud storage as a case study
复制标题
DOI：
10.1002/cpe.3868
复制
发表时间：
2017-07
期刊：
影响因子：
--
通讯作者：
N. H. A. Rahman;N. Cahyani;Kim-Kwang Raymond Choo
中科院分区：
文献类型：
--
作者：
N. H. A. Rahman;N. Cahyani;Kim-Kwang Raymond Choo
Information security incident handling strategies or models are important to ensure the security of organisations, particularly in cloud and big data environments. However, existing strategies or models may not adequate as cloud data are generally virtualised, geographically distributed and ephemeral, presenting both technical and jurisdictional challenges. We present an integrated cloud incident handling and forensic‐by‐design model. We then seek to validate the model using a set of controlled experiments on a cloud‐related incident. Three popular cloud storage applications were deployed namely, Dropbox, Google Drive, and OneDrive. This study demonstrates the utility of the model for organisational cloud users to undertake incident investigations (e.g. collect and analyse residual data from cloud storage applications). Copyright © 2016 John Wiley & Sons, Ltd.
