Managing Forensic Recovery in the Cloud

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Weir, George R. S., Aßmuth, Andreas, Jäger, Nicholas
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866910442301947904
author Weir, George R. S.
Aßmuth, Andreas
Jäger, Nicholas
author_facet Weir, George R. S.
Aßmuth, Andreas
Jäger, Nicholas
contents As organisations move away from locally hosted computer services toward Cloud platforms, there is a corresponding need to ensure the forensic integrity of such instances. The primary reasons for concern are (i) the locus of responsibility, and (ii) the associated risk of legal sanction and financial penalty. Building upon previously proposed techniques for intrusion monitoring, we highlight the multi-level interpretation problem, propose enhanced monitoring of Cloud-based systems at diverse operational and data storage level as a basis for review of historical change across the hosted system and afford scope to identify any data impact from hostile action or 'friendly fire'.
format Preprint
id arxiv_https___arxiv_org_abs_2405_06455
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Managing Forensic Recovery in the Cloud
Weir, George R. S.
Aßmuth, Andreas
Jäger, Nicholas
Distributed, Parallel, and Cluster Computing
As organisations move away from locally hosted computer services toward Cloud platforms, there is a corresponding need to ensure the forensic integrity of such instances. The primary reasons for concern are (i) the locus of responsibility, and (ii) the associated risk of legal sanction and financial penalty. Building upon previously proposed techniques for intrusion monitoring, we highlight the multi-level interpretation problem, propose enhanced monitoring of Cloud-based systems at diverse operational and data storage level as a basis for review of historical change across the hosted system and afford scope to identify any data impact from hostile action or 'friendly fire'.
title Managing Forensic Recovery in the Cloud
topic Distributed, Parallel, and Cluster Computing
url https://arxiv.org/abs/2405.06455