Amazing technological breakthrough possible @S-Logix pro@slogix.in

Office Address

  • #5, First Floor, 4th Street Dr. Subbarayan Nagar Kodambakkam, Chennai-600 024 Landmark : Samiyar Madam
  • pro@slogix.in
  • +91- 81240 01111

Social List

LogDrive: a proactive data collection and analysis framework for time-traveling forensic investigation in IaaS cloud environments - 2018

LogDrive: a proactive data collection and analysis framework for time-traveling forensic investigation in IaaS cloud environments

Research Area:  Digital Forensics

Abstract:

This paper presents the LogDrive framework for mitigating the following problems of storage forensics in Infrastructure-as-a-Service (IaaS) cloud environments: volatility, increasing volume of forensic data, and anti-forensic attacks that hide traces of incidents in virtual machines. The proposed proactive data collection function of virtual block devices mitigates the problem of volatility within the cloud environments and enables a time-traveling investigation to reveal overwritten or deleted evidence files. We employ a sector-hash-based file detection method with random sampling to search for an evidence file in the record of the write logs of the virtual storage. The problem formulation, the investigation context, and the design with five algorithms are presented. We explore the performance of LogDrive through a detailed evaluation. Finally, security analysis of LogDrive is presented based on the STRIDE (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, and Elevation of privilege) threats model and related work. We posted the source code of LogDrive on GitHub.

Keywords:  

Author(s) Name:  Manabu Hirano, Natsuki Tsuzuki, Seishiro Ikeda & Ryotaro Kobayashi

Journal name:  Journal of Cloud Computing

Conferrence name:  

Publisher name:  Springer

DOI:  10.1186/s13677-018-0119-2

Volume Information:  volume 7, Article number: 18 (2018)