{"id":4786,"date":"2014-09-16T07:00:05","date_gmt":"2014-09-16T15:00:05","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=4786"},"modified":"2014-08-17T16:03:18","modified_gmt":"2014-08-18T00:03:18","slug":"cloud-forensics-cloud-computing-challenges","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/cloud-forensics-cloud-computing-challenges\/","title":{"rendered":"Cloud Forensics: Cloud Computing Challenges"},"content":{"rendered":"

A report by the National Institute of Standards and Technology <\/a>(NIST) recently identified 65 different issues that are tripping up or blocking forensic analysts from doing their job when data and applications are located in the cloud.<\/p>\n

Some of the challenges are specifically technical ones, like the use of metadata or the way in which deleted data is overwritten. \u00a0Legal issues exist too, like the difficulty in obtaining subpoenas to access data that is stored in physical locations outside the jurisdictions of the investigation.<\/p>\n

Ellen Messmer<\/a>, editor at Network World, asked the question “Any business that anticipates using cloud-based services should be asking the question: What can my cloud provider do for me in terms of providing digital forensics data in the event of any legal dispute, civil or criminal case, cyberattack or data breach?”<\/p>\n

Martin Herman<\/a>, senior adviser for forensics and IT at the National Institute of Standards and Technology,\u00a0echoes that question saying<\/a>\u00a0“the question arises as cloud computing becomes more popular, how do you do forensics for information that\u2019s in the cloud? \u00a0If a criminal uses a laptop and might have files that implicate him, he deletes those files. There are various forensic tools that could be used to recover those. \u00a0But in a cloud situation, because there\u2019s a shared virtual environment, it\u2019s more likely that another user will actually write over those portions of files marked as deleted.”<\/p>\n

One major problem for forensic examiners cited by the NIST report is the location of the servers used by cloud applications. \u00a0Herman said that “If someone’s data was sitting in the European Union, how does U.S. law enforcement get access to it or vice versa? \u00a0They can’t just go in and seize the computer as often is done in traditional forensics.”<\/p>\n

Herman\u00a0said that<\/a>\u00a0“many of the traditional approaches are going to be more difficult to apply, and in some cases they won’t work in the cloud… \u00a0The long-term goal is to build a deeper understanding of, and consensus on, the high-priority challenges so that the public and private sectors can collaborate on effective responses.”<\/p>\n

 <\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

A report by the National Institute of Standards and Technology (NIST) recently identified 65 different issues that are tripping up or blocking forensic analysts from doing their job when data and applications are located in the cloud. Some of the…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"class_list":["post-4786","post","type-post","status-publish","format-standard","hentry","category-discovery"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/4786","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=4786"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/4786\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=4786"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=4786"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=4786"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}