1、hadoop分布式存储平台外文翻译文献hadoop 分布式存储平台外文翻译文献(文档含中英文对照即英文原文和中文翻译)原文:Technical Issues of Forensic Investigations in C loud Computing EnvironmentsDominik BirkRuhr-University BochumHorst Goertz Institute for IT Security Bochum, GermanyRuhr-University BochumHorst Goertz Institute for IT Security Bochum, Germa
2、nyAbstractCloud Computing is arguably one of the most discussed information technologies today. It presents many promising technological andeconomical opportunities. However, many customers remain reluctant to move their business IT infrastructure completely to the cloud. One of their main concerns
3、is Cloud Security and the threat of the unknown. Cloud Service Providers(CSP) encourage this perception by not letting their customers see what is behind their virtual curtain. A seldomly discussed, but in this regard highly relevant open issue is the ability to perform digital investigations. This
4、continues to fuel insecurity on the sides of both providers and customers. Cloud Forensics constitutes a new and disruptive challenge for investigators. Due to the decentralized nature of data processing in the cloud, traditional approaches to evidence collection and recovery are no longer practical
5、. This paper focuses on the technical aspects of digital forensics in distributed cloud environments. We contribute by assessing whether it is possible for the customer of cloud computing services to perform a traditional digital investigation from a technical point of view. Furthermore we discuss p
6、ossible solutions and possible new methodologies helping customers to perform such investigations.I. INTRODUCTIONAlthough the cloud might appear attractive to small as well as to large companies, it does not come along without its own unique problems. Outsourcing sensitive corporate data into the cl
7、oud raises concerns regarding the privacy and security of data. Security policies, companies main pillar concerning security, cannot be easily deployed into distributed, virtualized cloud environments. This situation is further complicated by the unknown physical location of the companies assets. No
8、rmally, if a security incident occurs, the corporate security team wants to be able to perform their own investigation without dependency on third parties. In the cloud, this is not possible anymore: The CSP obtains all the power over the environmentand thus controls the sources of evidence. In the
9、best case, a trusted third party acts as a trustee and guarantees for the trustworthiness of the CS P. Furthermore, the implementation of the technical architecture and circumstances within cloud computing environments bias the way an investigation may be processed. In detail, evidence data has to b
10、e interpreted by an investigator in a We would like to thank the reviewers for the helpful comments and Dennis Heinson (Center for Advanced Security Research Darmstadt - CASED) for the profound discussions regarding the legal aspects of cloud forensics. proper manner which is hardly be possible due
11、to the lack of circumstantial information. For auditors, this situation does not change:Questions who accessed specific data and information cannot be answered by the customers, if no corresponding logs are available. With the increasing demand for using the power of the cloud for processing also se
12、nsible information and data, enterprises face the issue of Data and Process Provenance in the cloud 10. Digital provenance, meaning meta-data that describes the ancestry or history of a digital object, is a crucial feature for forensic investigations. In combination with a suitable authentication sc
13、heme, it provides information about who created and who modified what kind of data in the cloud. These are crucial aspects for digital investigations in distributed environments such as the cloud. Unfortunately, the aspects of forensic investigations in distributed environment have so far been mostl
14、y neglected by the research community. Current discussion centers mostly around security, privacy and data protection issues 35, 9, 12. The impact of forensic investigations on cloud environments was little noticed albeit mentioned by the authors of 1 in 2009: ”. to our knowledge, no research has be
15、en published on how cloud computing environments affect digital artifacts,and on acquisition logistics and legal issues related to cloud computing environments.”This statement is also confirmed by other authors 34, 36, 40 stressing that further research on incident handling, evidence tracking and ac
16、countability in cloud environments has to be done. At the same time, massive investments are being made in cloud technology. Combined with the fact that information technology increasingly transcendents peoplesprivate and professional life, thus mirroring more and more of peoplesactions, it becomes apparent that evidence gathered from cloud environments will be of high significance to litigation or criminal proceedi
copyright@ 2008-2022 冰豆网网站版权所有
经营许可证编号:鄂ICP备2022015515号-1