Cloud Forensics

Resource Sharing Computer Networks

In 1968, the ARPA Program Plan No. 723, _____, was initiated to engineer a solution of sharing networked resources.

customer relationship management (CRM)

In 1999, Salesforce.com developed a ______ Web service that applied digital marketing research to business subscribers so that they could do their own market analysis.

Amazon Mechanical Turk

Amazon created ________ in 2002, which provided storage, computations, and human intelligence.

Elastic Compute Cloud (EC2)

It enabled people and small businesses to rent processing time to run their own applications from a centralized source.

Cloud Computing

A computing storage system that provides on-demand network access for multiple users and can allocate storage to users to keep up with changes in their needs.

Software as a service (SaaS)

Means applications are delivered via the Internet. A familiar one is Google Docs, which is similar to office suites such as Microsoft Office or LibreOffice. Data is stored in the cloud, and files can be accessed and shared with others.

Platform as a service (PaaS)

Means an OS has been installed on a cloud server. Users can then install their own applications, settings, and tools in the cloud environment. The cloud provider maintains just the hardware for customers, who are responsible for their own system administration and application support.

Infrastructure as a service (IaaS)

Means customers can rent hardware, such as servers and workstations, and install whatever OSs and applications they need.

Public Cloud

Cloud method that is accessible to anyone and the only identification required is an e-mail address.

Private Cloud

Cloud method wherein it can be accessed only by people who have the necessary credentials.

Community Cloud

Cloud method that brings people together for specific purposes.

Hybrid Cloud

Cloud method that enables a company to keep some information private and designate other files as public or community information.

Cloud Service Providers (CSPs)

Uses a variety of approaches and systems to build their cloud systems, such as servers using distributive processing methods with data farms for storage or mainframes running OSs as virtual machines.

Salesforce

Offers a variety of cloud services, including automation and CRM, cloud application development, and Web site marketing.

IBM Cloud

Provides cloud development and mobile applications for several platforms.

Cisco Cloud Computing

Has cloud applications for a wide assortment of businesses, ranging from enterprise and mid-size businesses to resellers of cloud services.

Amazon EC2

Offers a Web service run from the cloud that allows scalability.

AT&T Synaptic

Provides onsite data storage and the capability of a hybrid cloud system.

Google Cloud Storage

Offers virtual machines with tools for analyzing large data sets.

HP Helion

Provides a hybrid cloud environment with a wide range of products that can integrate into a business’s storage needs.

Microsoft Azure

Offers tiered support for large organizations, including file, disk, blob, and archive.

XenServer and XenCenter Windows Management Console

Has a freeware type 1 hypervisor used for public and private clouds (commercial support provided by Citrix Systems, Inc.)

Atlantic.Net

Provides HIPAA-compliant storage and colocation, hybrid, and private hosting.

Digital Ocean

Offers cloud storage for developers and businesses as well as support for deploying Hadoop and other cloud-based services.

Rackspace

Provides private, hybrid, and multi-cloud solutions along with management options.

Oracle Cloud

Offers a variety of cloud platforms and more than 4000 vendor applications that integrate into its systems.

cloud service agreements (CSAs)

Organizations that sell cloud services have _____ with their customers, which are also called “master service agreements” or “service level agreements.

A _____ is a contract between a CSP and the customer that describes what services are being provided and at what level.

Cloud Standards Customer Council

The ________ has published guidelines to help customers understand their rights and responsibilities in Practical Guide to Cloud Service Agreements.

search warrant

It can be used only in criminal cases, and it must be requested by a law enforcement officer who has evidence of probable cause that a crime was committed and evidence of it can be found at the location specified in the warrant.

Government agency subpoenas

This type of subpoena is used to get information when it’s believed there’s a danger of death or serious physical injury or to get information for the National Center for Missing and Exploited Children.

Non-government and civil litigation subpoenas

These subpoenas are used to produce information from private parties for litigation.

Court orders

These are written by judges to compel someone to do or not do something, such as a CSP producing user logon activities.

Anti-Forensics

Destroys potential evidences.

Atalla Cloud Encryption

Provides trusted key management and data layer encryption that can encrypt virtual disks, databases, files, and more.

Trend Micro SecureCloud

Combines encryption with key management based on an organization’s security policies. It can also wipe data after it’s deleted from cloud storage areas. Knowing about this feature is important when attempting to recover deleted data.

Sophos SafeGuard Encryption and Sophos Mobile Control

Provide automatic encryption and decryption for users’ uploads and downloads of data.

Block chain technology

A way to trace your information while keeping it secure. It is defined as an incorruptible ledger of economical transactions.

unscrupulous person

Person who cracks a user’s cloud password could upload illegal or compromising data to that user’s cloud via the Web.

Forensic Open-Stack Tools (FROST)

It integrates with OpenStack running in IaaS cloud environments and adds forensics response capabilities for a CSP.

OpenStack

It is an open-source computing platform intended for public and private cloud services.

FROST

It is the first known effort to provide a forensics response process for a cloud service.

Management Plane

A tool with application programming interfaces (APIs) that allow reconfiguring a cloud on the fly; it’s accessed through the application’s Web interface.

F-Response

It is a remote access tool that can be applied to cloud forensics.

Magnet AXIOM

_______ has created a Cloud module to go with its Process and Examine modules because most investigations now require collecting information from the cloud as well as from computers, files, and mobile devices.