Cloud Forensics is a related subdiscipline of Network Forensics, a subdiscipline of Digital Forensics. Cloud computing is largely operated by networks in various locations as data is stored by cloud service providers (CSPs) in various data centers around the world to ensure its availability. Cloud computing has become an attractive storage solution for many businesses because its use can reduce IT costs and mitigate the risk of data unavailability or loss. Despite these advantages, Grispos, Glisson, and Storer (2012) highlighted several challenges that the cloud environment can pose for digital. forensic investigators during the collection and analysis sentences of the investigation process. Artifacts, or data used as evidence, are often difficult to extract because resources can be redirected and/or disappear destroying the evidence process in the process. During the preparation phase of the investigation, an investigator trained in conventional computer forensic methods will usually obtain a complete history and overview of the crime scene and have an idea of what will be required of the organization to proceed with the investigation. . However, in the case of network forensic investigations, there is no complete history and overview of the suspected crime scene, and there is a lack of a structured environment in which data transmissions between various network points and platforms can be collected as evidence. There may also be a lack of structure in the target environment and there may be no methods of monitoring and reporting broadcast information. The separation of duties and differences in service models that exist between cloud providers and customers...... middle of paper ......in the United States. Since a cloud could potentially span multiple states or even nations, a researcher must be aware of the rules of seizure, privacy, and so on in each location from which he or she will retrieve data. It is common for cybercriminals and insiders to intentionally build their clouds with data stored in jurisdictions with rules and laws that make it difficult or impossible to recover data for forensic purposes. With the growing popularity of cloud computing, these problems are likely to become more common for researchers looking to conduct observational studies and other forms of research in the future. By limiting the research to the United States and creating a virtualized environment limited to data storage centers in the United States, the researcher hopes to prevent any problems with multi-jurisdiction or multi-tenancy.
tags