Overcoming the Cloud Forensic Challenge

Grazed from BankInfoSecurity. Author: Eric Chabrow.

A big challenge examiners face in conducting forensic investigations in the cloud is that they don’t have access to the servers. That’s just one problem the National Institute of Standards and Technology is addressing. "Many of the traditional approaches are going to be more difficult to apply, and in some cases they won’t work in the cloud," says Martin Herman, senior adviser for forensics and IT at the National Institute of Standards and Technology.

Herman co-chairs NIST’s cloud computing forensic science working group, which has identified scores of challenges forensic experts face in applying their craft in the cloud. NIST has taken 65 of the challenges and published a draft report, NIST Interagency Report 8006: NIST Cloud Computing Forensic Science Challenges. The report aggregates, categorizes and discusses the forensics challenges faced by experts when responding to incidents that have occurred in a cloud-computing ecosystem…

The immediate goal of the draft report is to begin a dialogue on forensic science concerns in cloud computing ecosystems. The long-term goal is to gain a deeper understanding of those concerns and to identify technologies and standards that can mitigate them…

Read more from the source @ http://www.bankinfosecurity.com/overcoming-cloud-forensic-challenge-a-7088