Gary Audin
Gary Audin is the President of Delphi, Inc. He has more than 40 years of computer, communications and security...
Read Full Bio >>

Gary Audin | January 24, 2013 |


CSI for the Cloud

CSI for the Cloud Cloud computing expands the scale of digital forensic activities. It also creates new cybercrime investigations with new challenges.

Cloud computing expands the scale of digital forensic activities. It also creates new cybercrime investigations with new challenges.

Cloud computing is a service you cannot ignore. Gartner predicts that cloud service revenue will be about $150 billion in 2013. With all of this comes the growing amount of data that will be accumulated, and the implications of the use of the cloud for situations that require forensic analysis. The amount of data that needs to be analyzed can be tens to hundreds of gigabytes in a single investigation.

The forensic professional's goal is to obtain information that can be used in court, and cloud computing expands the scale of digital forensic activities. It also creates new cybercrime investigations with new challenges.

Cloud forensics means new experts with new tools. Cloud forensics is a combination of digital forensics and cloud computing. Cloud computing, by definition, means sharing resources such as networks, storage, servers, applications, and other services. The sharing is performed by the cloud service and it involves multiple enterprises using common solutions.

A major value of cloud computing is its ability to reconfigure resources quickly. This means that resources can change almost instantly, which in turn means that virtualization compounds the forensic data location problem.

XaaS Models and Forensics
The Infrastructure as a Service (IaaS) model produces the fewest obstacles for the forensic expert. It is basically providing a physical data center outside the enterprise, but with all of the enterprise's work performed by enterprise staff. The management of the operating system may be shared.

Platform as a Service (PaaS) adds the management of the runtime and middleware by the service provider. This adds to the complexity faced by the forensic professional.

Software as a Service (SaaS) effectively outsources the entire IT operation. The enterprise becomes a subscriber to the service. SaaS is the most difficult environment for the forensic professional to operate within because most of the control of the applications and data is with the SaaS service provider.

The structure of your cloud provider's business will depend on the business model they are working under. A SaaS provider can easily be running its service on an IaaS or PaaS cloud, therefore you will be really working with two providers, not one for forensic purposes. A third-party reseller may be the face of the cloud service, adding another layer to the arrangement.

Next page: Elements of cloud forensics


Enterprise Connect Orlando 2017
March 27-30 | Orlando, FL
Connect with the Entire Enterprise Communications & Collaboration Ecosystem

Stay Up-to-Date: Hear industry visionaries in Keynotes and General Sessions delivering the latest insight on UC, mobility, collaboration and cloud

Grow Your Network: Connect with the largest gathering of enterprise IT and business leaders and influencers

Learn From Industry Leaders: Attend a full range of Conference Sessions, Free Programs and Special Events

Evaluate All Your Options: Engage with 190+ of the leading equipment, software and service providers

Have Fun! Mingle with sponsors, exhibitors, attendees, guest speakers and industry players during evening receptions

Special Offer - Save $200 Off Advance Rates

Register now with code NOJITTEREB to save $200 Off Advance Rates or get a FREE Expo Pass!

February 22, 2017
Sick of video call technology that make participants look like they're in the witness protection program? Turns out youre not alone. Poor-quality video solutions can give users an unprofessional
February 7, 2017
Securing voice communications used to be very simple since it was generally a closed system. However, with unified communications (UC) you no longer have the walled protection offered by a dedicated v
January 11, 2017
As cloud communications continues to grow and mature, many enterprises are looking to build a hybrid CPE-cloud strategy. Looking out over the next three years, how should enterprises expect the cloud
February 17, 2017
From the most basics of basics to the hidden gotchas, UC consultant Melissa Swartz helps demystify the complex world of SIP trunking.
February 7, 2017
UC&C consultant Kevin Kieller, a partner at enableUC, shares pointers for making the right architectural choices for your Skype for Business deployment.
February 1, 2017
Elka Popova, a Frost & Sullivan program director, shares a status report on the UCaaS market today and offers her perspective on what large enterprises need before committing to UC in the cloud.
January 26, 2017
Andrew Davis, co-founder of Wainhouse Research and chair of the Video track at Enterprise Connect 2017, sorts through the myriad cloud video service options and shares how to tell if your choice is en....
January 23, 2017
Sheila McGee-Smith, Contact Center/Customer Experience track chair for Enterprise Connect 2017, tells us what we need to know about the role cloud software is playing in contact centers today.