The DOI matches its Crossref record; 49 of the 50 references it cites were found in a registry or an index.
Novel digital forensic readiness technique in the cloud environment
Open accessAbstract
This paper examines the design and implementation of a feasible technique for performing Digital Forensic Readiness (DFR) in cloud computing environments. The approach employs a modified obfuscated Non-Malicious Botnet (NMB) whose functionality operates as a distributed forensic Agent-Based Solution (ABS) in a cloud environment with capabilities of performing forensic logging for DFR purposes. Under basic Service Level Agreements (SLAs), this proactive technique allows any organization to perform DFR in the cloud without interfering with operations and functionalities of the existing cloud architecture or infrastructure and the collected file metadata. Based on the evaluation discussed, the effectiveness of our approach is presented as the easiest way of conducting DFR in the cloud environment as stipulated in the ISO/IEC 27043: 2015 international standard, which is a standard of information technology, security techniques and incident investigation principles and processes. Through this technique, digital forensic analysts are able to maximize the potential use of digital evidence while minimizing the cost of conducting DFR. As a result of this process, the time and cost needed to conduct a Digital Forensic Investigation (DFI) is saved. As a consequence, the technique helps the law enforcement, forensic analysts and Digital Forensic Investigators (DFIs) during post-event response and in a court of law to develop a hypothesis in order to prove or disprove a fact during an investigative process, if there is an occurrence of a security incident. Experimental results of the developed prototype are described which conclude that the technique is effective in improving the planning and preparation of pre-incident detection during digital crime investigations. In spite of that, a comparison with other existing forensic readiness models has been conducted to show the effectiveness of the previously proposed Cloud Forensic Readiness as a Service (CFRaaS) model.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The NIST definition of cloud computing
Mell, P., & Grance, T. (2011) · doi:10.6028/nist.sp.800-145 · Cited by 12,628
Terra: a virtual machine-based platform for trusted computing
Garfinkel, T., Pfaff, B., Chow, J., Rosenblum, M., & Boneh, D. (2003) · ACM SIGOPS Operating Systems Review · doi:10.1145/1165389.945464 · Cited by 895
Getting Physical with the Digital Investigation Process
Carrier, B. D., & Spafford, E. H. (2003) · Cited by 422
The Characteristics of Cloud Computing
Gong, C., Liu, J., Zhang, Q., Chen, H., & Gong, Z. (2010) · International Conference on Parallel Processing Workshops (ICPPW) · doi:10.1109/icppw.2010.45 · Cited by 400
A hierarchical, objectives-based framework for the digital investigations process
Beebe, N. L., & Clark, J. G. (2005) · Digital Investigation · doi:10.1016/j.diin.2005.04.002 · Cited by 321
Dykstra, J., & Sherman, A. T. (2012) · Digital Investigation · doi:10.1016/j.diin.2012.05.001 · Cited by 278
A Ten Step Process for Forensic Readiness.
Rowlingson, R. (2004) · International journal of digital evidence · Cited by 270
Impacts of increasing volume of digital forensic data: A survey and future research challenges
Quick, D., & Choo, K. R. (2014) · Digital Investigation · doi:10.1016/j.diin.2014.09.002 · Cited by 270
Bloodstain Pattern Analysis with an Introduction to Crime Scene Reconstruction
Erbisti, P. C. F., & Gardner, R. M. (2008) · CRC Press eBooks · doi:10.1201/9781420052725 · Cited by 254
An integrated conceptual digital forensic framework for cloud computing
Martini, B., & Choo, K. R. (2012) · Digital Investigation · doi:10.1016/j.diin.2012.07.001 · Cited by 250
Research works printed but not linked: 21
- Palmer G . A road map for digital forensic research. Technical Report DTRT0010-01, DFRWS. Report for the First Digital Forensic Research Workshop (DFRWS); 2001.
- Politt MM . Six blind men from Indostan. Digital forensics research workshop (DFRWS); 2004.
- Carrier B, 2003, Int J Digital Evid, 2, 1
- Tan J . Forensic readiness. Cambridge, MA: @ Stake; 2001 Jul 17. p. 1-23.
- Rowlingson R, 2004, Int J Digital Evid, 2, 1
- Casey E . Digital evidence and computer crime. 2nd ed. MA Academic Press: San Diego, CA ; 2000. p. 207–229.
- Kebande VR, 2014, The International Conference on Digital Security and Forensics (DigitalSec2014), 23
- Gummadi R, 2009, NSDI, 9, 307
- 10.1145/1165389 · DOI
- Martini B, 2014, Trust, Security and Privacy in Computing and Communications (TrustCom), 2014 IEEE 13th International Conference on, 935
- Wen Y, 2013, Cloud Computing, 208
- Kebande VR, 2015, Proceedings of the 14th European Conference on Cyber Warfare and Security 2015: ECCWS 2015, 373
- Kebande VR, 2015, Iccsm 2015d-The Proceedings of the 3rd International Conference on Cloud Security and Management
- Kebande VR, 2015, Iccws 2015c-The Proceedings of the 10th International Conference on Cyber Warfare and Security, 434
- Kebande VR, 2016, 11th International Conference on Cyber Warfare and Security: ICCWS2016, 399
- Valjarevic A, 2015, Aust J Forensic Sci, 1
- Baryamureeba V, 2004, Proceedings of the Fourth Digital Forensic Research Workshop, 1
- Cahyani NDW, 2016, Mobile Netw Appl
- Feldman ER, 2001, Criteria for admissibility of expert opinion testimony under Daubert and its progeny
- Shropshire J, 2015, ICCSM2015-3rd International Conference on Cloud Security and Management: ICCSM2015, 86
- Choo KKR, 2010, Trends Issues Crime Crim Just, 400, 1
Cited by
A Survey on the Internet of Things (IoT) Forensics: Challenges, Approaches, and Open Issues
Stoyanova, M., Nikoloudakis, Y., Panagiotakis, S., Pallis, E., & Markakis, E. K. (2020) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2019.2962586 · Cited by 852
Artificial Intelligence Security Threat, Crime, and Forensics: Taxonomy and Open Issues
Jeong, D. (2020) · IEEE Access · doi:10.1109/access.2020.3029280 · Cited by 110
A Review of Mobile Forensic Investigation Process Models
Al-Dhaqm, A., Razak, S. B. A., Ikuesan, R. A., Kebande, V. R., & Siddique, K. (2020) · IEEE Access · doi:10.1109/access.2020.3014615 · Cited by 78
Self-citationCategorization and Organization of Database Forensic Investigation Processes
Al-Dhaqm, A., Razak, S. B. A., Dampier, D. A., Choo, K. R., Siddique, K., Ikuesan, R. A., Alqarni, A., & Kebande, V. R. (2020) · IEEE Access · doi:10.1109/access.2020.3000747 · Cited by 64
Self-citationResearch Challenges and Opportunities in Drone Forensics Models
Al-Dhaqm, A., Ikuesan, R. A., Kebande, V. R., Razak, S. B. A., & Ghabban, F. M. (2021) · Electronics · doi:10.3390/electronics10131519 · Cited by 63
Self-citationSecure Operations of Connected and Autonomous Vehicles
Han, J., Ju, Z., Chen, X., Yang, M., Zhang, H., & Huai, R. (2023) · IEEE Transactions on Intelligent Vehicles · doi:10.1109/tiv.2023.3304762 · Cited by 57
Holistic digital forensic readiness framework for IoT-enabled organizations
Kebande, V. R., Mudau, P. P., Ikuesan, R. A., Venter, H. S., & Choo, K. R. (2020) · Forensic Science International Reports · doi:10.1016/j.fsir.2020.100117 · Cited by 55
Self-citationKebande, V. R., Karie, N. M., & Ikuesan, R. A. (2020) · International Journal of Information Technology · doi:10.1007/s41870-020-00585-8 · Cited by 49
Self-citationExperts reviews of a cloud forensic readiness framework for organizations
Alenezi, A., Atlam, H. F., & Wills, G. (2019) · Journal of Cloud Computing · doi:10.1186/s13677-019-0133-z · Cited by 41
On the importance of standardising the process of generating digital forensic reports
Karie, N. M., Kebande, V. R., Venter, H. S., & Choo, K. R. (2019) · Forensic Science International Reports · doi:10.1016/j.fsir.2019.100008 · Cited by 42
Self-citationAdding Digital Forensic Readiness as a Security Component to the IoT Domain
Kebande, V. R., Karie, N. M., & Venter, H. S. (2018) · International Journal on Advanced Science Engineering and Information Technology · doi:10.18517/ijaseit.8.1.2115 · Cited by 40
Self-citationA comparative analysis of digital forensic readiness models using CFRaaS as a baseline
Kebande, V. R., & Venter, H. S. (2019) · Wiley Interdisciplinary Reviews Forensic Science · doi:10.1002/wfs2.1350 · Cited by 29
Self-citationResearch on Digital Forensic Readiness Design in a Cloud Computing-Based Smart Work Environment
Park, S., Kim, Y., Park, G., Na, O., & Chang, H. (2018) · Sustainability · doi:10.3390/su10041203 · Cited by 29
Comparative Analysis of Network Forensic Tools and Network Forensics Processes
Ghabban, F. M., Alfadli, I., Ameerbakhsh, O. Z., AbuAli, A. N., Al-Dhaqm, A., & Al‐Khasawneh, M. A. (2021) · International Conference on Smart Computing and Electronic Enterprise (ICSCEE) · doi:10.1109/icscee50312.2021.9498226 · Cited by 27
Ontology‐driven perspective of CFRaaS
Kebande, V. R., Karie, N. M., Ikuesan, R. A., & Venter, H. S. (2020) · Wiley Interdisciplinary Reviews Forensic Science · doi:10.1002/wfs2.1372 · Cited by 26
Self-citationCloud-Based Framework for Performing Digital Forensic Investigations
Prakash, V., Williams, A., Garg, L., Barik, P. K., & Dhanaraj, R. K. (2022) · International Journal of Wireless Information Networks · doi:10.1007/s10776-022-00560-z · Cited by 24
Enabling Digital Forensics Readiness for Internet of Vehicles
Alexakos, C., Katsini, C., Votis, K., Lalas, A. X., Tzovaras, D. K., & Serpanos, D. N. (2021) · Transportation research procedia · doi:10.1016/j.trpro.2021.01.040 · Cited by 24
Makura, S. M., Venter, H. S., Ikuesan, R. A., Kebande, V. R., & Karie, N. M. (2020) · IEEE International Conference on Informatics, IoT, and Enabling Technologies (ICIoT) · doi:10.1109/iciot48696.2020.9089494 · Cited by 20
Self-citationDigital forensics and strong AI: A structured literature review
Fähndrich, J., Honekamp, W., Povalej, R., Rittelmeier, H., Berner, S., & Labudde, D. (2023) · Forensic Science International Digital Investigation · doi:10.1016/j.fsidi.2023.301617 · Cited by 27
Makura, S. M., Venter, H. S., Kebande, V. R., Karie, N. M., Ikuesan, R. A., & Alawadi, S. (2021) · Security and Privacy · doi:10.1002/spy2.149 · Cited by 19
Self-citationA systematic analysis on the readiness of Blockchain integration in IoT forensics
Khanji, S. I. R., Alfandi, O., Ahmad, L. A., Kakkengal, L., & Al-kfairy, M. (2022) · Forensic Science International Digital Investigation · doi:10.1016/j.fsidi.2022.301472 · Cited by 16
Breitinger, F., Studiawan, H., & Hargreaves, C. J. (2025) · Forensic Science International Digital Investigation · doi:10.1016/j.fsidi.2025.301932 · Cited by 15
Akilal, A., & Kechadi, T. (2021) · Forensic Science International Digital Investigation · doi:10.1016/j.fsidi.2021.301315 · Cited by 14
Digital forensic readiness intelligence crime repository
Kebande, V. R., Karie, N. M., Choo, K. R., & Alawadi, S. (2021) · Security and Privacy · doi:10.1002/spy2.151 · Cited by 13
Self-citationResearch Perspective on Digital Forensic Tools and Investigation Process
Barik, K., Abirami, A., Konar, K., & Das, S. (2022) · Lecture notes on data engineering and communications technologies · doi:10.1007/978-3-030-93453-8_4 · Cited by 11
Kebande, V. R., & Ikuesan, R. A. (2020) · International Conference on Intelligent and Innovative Computing Applications · doi:10.1145/3415088.3415117 · Cited by 10
Self-citationMapping digital forensic application requirement specification to an international standard
Kebande, V. R., Baror, S. O., Parizi, R. M., Choo, K. R., & Venter, H. S. (2020) · Forensic Science International Reports · doi:10.1016/j.fsir.2020.100137 · Cited by 10
Self-citationKebande, V. R. (2025) · Wiley Interdisciplinary Reviews Forensic Science · doi:10.1002/wfs2.70013 · Cited by 9
Self-citationDevelopment and Design Strategies of Evidence Collection Framework in Cloud Environment
Khan, Y., & Varma, S. (2020) · Lecture notes in networks and systems · doi:10.1007/978-981-15-2071-6_3 · Cited by 9
Mobile Cloud Forensic Readiness Process Model for Cloud-Based Mobile Applications
Sharma, P., Arora, D., & Sakthivel, T. (2020) · International Journal of Digital Crime and Forensics · doi:10.4018/ijdcf.2020070105 · Cited by 9
Finite state machine for cloud forensic readiness as a service ( CFRaaS ) events
Kebande, V. R., & Choo, K. R. (2021) · Security and Privacy · doi:10.1002/spy2.182 · Cited by 8
Self-citationCIPM: Common Identification Process Model for Database Forensics Field
Alfadli, I., Ghabban, F. M., Ameerbakhsh, O. Z., AbuAli, A. N., Al-Dhaqm, A., & Al‐Khasawneh, M. A. (2021) · International Conference on Smart Computing and Electronic Enterprise (ICSCEE) · doi:10.1109/icscee50312.2021.9498014 · Cited by 7
Raspberry Pi Forensic Investigation and Evidence Preservation using Blockchain
Rekha, G., & Maheswari, B. U. (2021) · International Conference on Forensics, Analytics, Big Data, Security (FABS) · doi:10.1109/fabs52071.2021.9702622 · Cited by 7
A Systematic Review of Log-Based Cloud Forensics
Ghosh, A., De, D., & Majumder, K. (2021) · Lecture notes in networks and systems · doi:10.1007/978-981-33-4305-4_26 · Cited by 7
Kebande, V. R., Karie, N. M., Wario, R. D., & Venter, H. S. (2018) · International Conference on Intelligent and Innovative Computing Applications · doi:10.1109/iconic.2018.8601279 · Cited by 6
Self-citationQuantum-based Rivest–Shamir–Adleman (RSA) approach for digital forensic reports
Jain, J., & Singh, A. P. (2020) · Modern Physics Letters B · doi:10.1142/s0217984920500852 · Cited by 6
Towards a Comprehensive Metaverse Forensic Framework Based on Technology Task Fit Model
AlMutawa, A., Ikuesan, R. A., & Said, H. (2024) · Future Internet · doi:10.3390/fi16120437 · Cited by 5
Establishing forensics capabilities in the presence of superuser insider threats
Manral, B., & Somani, G. (2021) · Forensic Science International Digital Investigation · doi:10.1016/j.fsidi.2021.301263 · Cited by 4
K-FFRaaS: A Generic Model for Financial Forensic Readiness as a Service in Korea
Lee, S.-J., & Kim, G. (2021) · IEEE Access · doi:10.1109/access.2021.3114233 · Cited by 5
A Cloud Forensics Framework to Identify, Gather, and Analyze Cloud Computing Incidents
Al-mugern, ٍ., Othman, S. H., Al-Dhaqm, A., & Ali, A. (2024) · Engineering Technology & Applied Science Research · doi:10.48084/etasr.7185 · Cited by 3
Baror, S. O., Venter, H. S., & Kebande, V. R. (2021) · Lecture notes in networks and systems · doi:10.1007/978-3-030-66840-2_90 · Cited by 3
Self-citationCursory View of IoT-Forensic Readiness Framework Based on ISO/IEC 27043 Recommendations
Mudau, P. P., Venter, H. S., Kebande, V. R., Ikuesan, R. A., & Karie, N. M. (2021) · Lecture notes in networks and systems · doi:10.1007/978-3-030-80216-5_17 · Cited by 2
Self-citationDigital Forensics as a Service Implementation: A Scalable Solution for Cyber Incident Response
Munke, E., & Musuva, P. M. W. (2024) · IST-Africa Conference (IST-Africa) · doi:10.23919/ist-africa63983.2024.10569304 · Cited by 2
Conceptual Model for Crowd-Sourcing Digital Forensic Evidence
Baror, S. O., Venter, H. S., & Kebande, V. R. (2022) · Lecture notes in networks and systems · doi:10.1007/978-3-030-94191-8_88 · Cited by 2
Self-citationAutomated Forensic Analysis: The use of Robotics in Digital Crime Scene Investigation
Pandit, K., & Mahajan, R. (2025) · IEEE International Conference on Advances in Computing Research on Science Engineering and Technology (ACROSET) · doi:10.1109/acroset66531.2025.11281024 · Cited by 1
EMPOWERING DIGITAL FORENSIC READINESS FOR INTERNET OF VEHICLES: A REVIEW
(2023) · International Research Journal of Modernization in Engineering Technology and Science · doi:10.56726/irjmets47944 · Cited by 1
Enhancing Forensic Readiness in IoT-Enabled Organisations: A Real-Time Model
Kuku, O., Chrysikos, A., & Salekzamankhani, S. (2025) · Lecture notes in networks and systems · doi:10.1007/978-981-96-3102-5_16 · Cited by 1
Al-Ghushami, A. H., Karie, N. M., & Kebande, V. R. (2019) · IEEE Conference on Application, Information and Network Security (AINS) · doi:10.1109/ains47559.2019.8968710 · Cited by 1
Self-citationKhidzir, N. Z., Ahmed, S. A.-A.-M., Guan, T. T., & Daud, K. A. M. (2021) · AIP conference proceedings · doi:10.1063/5.0053677 · Cited by 1
IoT Forensics: Interconnection and Sensing Frameworks
Sagarwal, N. (2022) · Wiley eBooks · doi:10.1002/9781119769057.ch14 · Cited by 1
Beyond The Clouds: Investigating Digital Crimes In Cloud EnvironmentsPreprint
Alenezi, A. (2024) · SSRN Electronic Journal · doi:10.2139/ssrn.4977348 · Cited by 1
Yagiz, M. A., Horasan, F., & Yurttakal, A. H. (2026) · arXiv · doi:10.48550/arxiv.2605.00065
“…these logs serve as evidence in forensic investigations, compliance audits, or incident-response workflows, their integrity is not merely desirable; it is a hard prerequisite (Kebande and Venter, 2017; Cichonski et al., 2012; Kent et al., 2006; International Organization for Standardization, 2012).”
Mlotshwa, L., Makura, S. M., Karie, N. M., & Kebande, V. R. (2020) · International Conference on Intelligent and Innovative Computing Applications · doi:10.1145/3415088.3415097
Self-citationCIPM: Common Identification Process Model for Database Forensics FieldPreprint
Alfadli, I., Ghabban, F. M., Ameerbakhsh, O. Z., AbuAli, A. N., Al-Dhaqm, A., & Al‐Khasawneh, M. A. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2108.05571
Ahmed, A.-A.-M. (2024) · Özgür Yayınları eBooks · doi:10.58830/ozgur.pub445
Pooe, A. (2025) · Communications in computer and information science · doi:10.1007/978-3-032-09660-9_13
A Game-Theoretic Approach for Quantification of Strategic Behaviors in Digital Forensic Readiness
Vaseghipanah, M., Jabbehdari, S., & Navidi, H. (2025) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp5040105
Morić, Z., Dakić, V., & Biškupić, I. O. (2026) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp6020057
Database Forensics Readiness: An Examination of Redis
Zia, M. A. M., & Adedayo, O. M. (2026) · International Symposium on Digital Forensics and Security (ISDFS) · doi:10.1109/isdfs69419.2026.11458965
Metadata
- Authors
- Kebande, V. R., & Venter, H. S.
- Affiliations
- University of Pretoria (ZA)
- Corresponding author
- Kebande, Victor R.
- Venue
- Australian Journal of Forensic Sciences
- Publisher
- Informa UK Limited
- Published
- 2017-01-17
- Volume
- 50
- Issue
- 5
- Pages
- 552-591
- ISSN
- 0045-0618 (ISSN-L)
- 1834-562X
- OpenAlex
- W2573841943
- Cited by
- 58
- References
- 50
- Citations by year
- 2026: 2 · 2025: 6 · 2024: 5 · 2023: 3 · 2022: 5 · 2021: 16 · 2020: 14 · 2019: 4 · 2018: 3
- FWCI
- 10.69
- Type
- journal article
- Language
- en
- Open access
- green
- hdl.handle.net
- Locations
- Australian Journal of Forensic Sciences (publishedVersion)
- UpSpace Institutional Repository (University of Pretoria) (submittedVersion)
- Funders
- South African Agency for Science and Technology Advancement (UID85794)
- Topics
- Physical Sciences › Computer Science › Information Systems › Digital and Cyber Forensics
- Social Sciences › Law › Education, Law, and Society
- Physical Sciences › Computer Science › Information Systems › Cloud Data Security Solutions
- Keywords
- digital forensic readiness, cloud computing, forensic evidence collection, digital forensic investigation, cloud forensics, incident response, cybercrime investigation
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
