Overcoming the Cloud Forensic Challenge
Grazed from BankInfoSecurity. Author: Eric Chabrow.
A big challenge examiners face in conducting forensic investigations in the cloud is that they don’t have access to the servers. That’s just one problem the National Institute of Standards and Technology is addressing. "Many of the traditional approaches are going to be more difficult to apply, and in some cases they won’t work in the cloud," says Martin Herman, senior adviser for forensics and IT at the National Institute of Standards and Technology.
Herman co-chairs NIST’s cloud computing forensic science working group, which has identified scores of challenges forensic experts face in applying their craft in the cloud. NIST has taken 65 of the challenges and published a draft report, NIST Interagency Report 8006: NIST Cloud Computing Forensic Science Challenges. The report aggregates, categorizes and discusses the forensics challenges faced by experts when responding to incidents that have occurred in a cloud-computing ecosystem…


Enterprise adoption of OpenStack is taking off, and value-added security solutions for the open source cloud computing operating system are close behind. This week, Catbird announced version 6.0 of its cloud security platform, which it describes as the channel’s first "security policy automation for private and hybrid cloud environments."