Forensic Evidence in Apache's CloudStack
Project Members
Will Ellis, Dr. Sam Liles
Will Ellis, Dr. Sam Liles
Abstract
Apache’s CloudStack allows service providers to create Infrastructure as a Service (IaaS) solutions. The open source nature of the software is a draw for organizations wanting to provide low cost solutions either in the form of private clouds or reselling a cloud infrastructure to their clients. As services such as CloudStack grow and compete with offerings from Amazon, Microsoft, or Google there will be a growing need to gather forensic evidence from cloud environments. Law enforcement is able to request information from the major vendors, but an open source platform brought online to solve the needs of a small organization poses a significant problem for local law enforcement. The study will attempt to provide a compendium of forensic evidence locations in Apache’s CloudStack environment. This will enable law enforcement agencies to know where and what to look for in the environment, should they encounter an instance during the course of their investigations.