Doha Declaration

Education for Justice

Cloud Storage Forensics

Full title in original language:

Cloud Storage Forensics

Education level:

University

University (18+ years)

Topic / subtopic:

Cybercrime

Cybercrime investigation

Target audience:

Students, Teachers / Lecturers

Type of resource:

Publication / Article, Publication / Article

Languages:

English

Region of relevance:

Global

Access:

open access

Individual authors:

Darren Quick, Ben Martini, Raymond Choo

Publication year:

2013

Published by:

Elsevier

Copyright holder:

Contact name and address:

Elsevier

Contact website:

https://www.elsevier.com/support

Key themes:

Links:

Publication

Short description:

Cloud Storage Forensics presents the first evidence-based cloud forensic framework. Using three popular cloud storage services and one private cloud storage service as case studies, the authors show you how their framework can be used to undertake research into the data remnants on both cloud storage servers and client devices when a user undertakes a variety of methods to store, upload, and access data in the cloud. By determining the data remnants on client devices, you gain a better understanding of the types of terrestrial artifacts that are likely to remain at the Identification stage of an investigation. Once it is determined that a cloud storage service account has potential evidence of relevance to an investigation, you can communicate this to legal liaison points within service providers to enable them to respond and secure evidence in a timely manner.

Short description:

Cloud Storage Forensics presents the first evidence-based cloud forensic framework. Using three popular cloud storage services and one private cloud storage service as case studies, the authors show you how their framework can be used to undertake research into the data remnants on both cloud storage servers and client devices when a user undertakes a variety of methods to store, upload, and access data in the cloud. By determining the data remnants on client devices, you gain a better understanding of the types of terrestrial artifacts that are likely to remain at the Identification stage of an investigation. Once it is determined that a cloud storage service account has potential evidence of relevance to an investigation, you can communicate this to legal liaison points within service providers to enable them to respond and secure evidence in a timely manner.

Doha Declaration

Education for Justice

Supported by the State of Qatar

60 years Crime Congress