Forensics in cloud computing -- challenges using software as a service model.

摘要

As new technologies emerge in the industry, a set of requirements is demanded in order to support these technologies. Throughout the years forensics investigators had to adapt their methods to adequate to new technologies and be able to acquire data from the customer and accurately perform analyzes of this data. With the proliferation of cloud computing, a new set of challenges are evolving and creating scenarios where forensics investigators will have limited resources to proper handle data that resides in the cloud. Different cloud providers will use different approaches to release data and how detailed this information will be. In addition to these challenges, laws and regulations should also be evaluated by forensics investigators to better handle data, mainly when this data is geographic dispersed and can have multiple jurisdiction bound to it. This research enumerated cloud computing challenges for forensics investigators in a SaaS model. This model is by nature requires more transparency for the end use, however it also cause more vagueness for the investigator, due the amount of abstraction layers involved. The results of this research revealed deficiency in data acquisition practices for SaaS model, lack of accredited tools to perform data acquisition and legal challenges for forensics investigators. By evaluating these challenges, proposing recommendations and future research in the relative areas, this research paper aim to contribute with forensics investigators to have a better framework and tools that are appropriated to be used in forensics for cloud computing with focus in SaaS model.;Keywords: Cybersecurity. Paul Pantani, IaaS, Hash, Storage, Privacy.