Digital Forensics Evidence Acquisition In Cloud Storage Service: Examining and Evaluating Tools and Techniques
Project Members
Student: Gilchan Park / Advisor: Simuel Liles
Student: Gilchan Park / Advisor: Simuel Liles
Abstract
Cloud computing has rapidly become the focus of public attention recently. Most of leading companies of information area started to provide a variety of services based on cloud computing. Especially, cloud storage services such as Dropbox, Microsoft SkyDrive, and Google Drive, etc. have become prevalent. As the number of users of cloud storage increases (unprecedentedly), cloud storage has been identified as an emerging challenge to digital forensic researchers and practitioners (in a range of literature). Since cloud services can be utilized in disparate areas, the identification and acquisition (also known as "preservation" in the digital forensic community) of potential data is the difficulty. Crimes on cloud storage services already happened in a many different ways and the number will be quicker in the future. Cloud computing should be enhanced at the aspect of security. In this paper, I provide an evaluation of proposed forensic acquisition tools and discuss the limits of those existing tools. Furthermore, it is suggested that forensic examiners, law enforcement and the court evaluate confidence in evidence from the cloud environment in terms of being forensically sound.