首页> 外文会议>International Conference on High Performance Computing Simulation >Using network data to improve digital investigation in cloud computing environments
【24h】

Using network data to improve digital investigation in cloud computing environments

机译:使用网络数据来改善云计算环境中的数字调查

获取原文

摘要

With the rise of cloud computing environments and the increasingly ubiquitous utilization of its opportunities, the amount of data analysed in a traditional digital forensic examination is increasing significantly, thus increasing the risk to miss evidence. Without adopting new methodology or different approaches investigators are unable to guarantee a valid digital forensic investigation. Due to the large amount of cloud platforms it is hardly feasible to identify them when investigating a computer. Knowing all different services of cloud computing platforms is impossible for a human. The paper therefore proposes to investigate raw network data in order to improve the complete digital investigation process by correlating network and computer forensic parts. We present a new method to analyse network traffic to find information about the usage of cloud specific data. With the possibility to automate this extraction and the comparison with a cloud service knowledge base, the error rate of a forensic investigation is reduced. It also reduces the risk of human errors.
机译:随着云计算环境的兴起和越来越普遍的利用机会,传统的数字法医检查中分析的数据量显着增加,从而提高了错过证据的风险。不采用新的方法或不同的方法调查人员无法保证有效的数字法医调查。由于大量的云平台,在调查计算机时识别它们几乎无法获得可行的。了解人类的所有不同服务都是不可能的。因此,本文建议调查原始网络数据,以通过关联网络和计算机法医部分来改善完整的数字调查过程。我们提出了一种分析网络流量的新方法,以查找有关云特定数据使用的信息。随着这种提取的可能性和与云服务知识库的比较,减少了法医调查的错误率。它还降低了人类错误的风险。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号