The DOI matches its Crossref record; 49 of the 50 references it cites were found in a registry or an index.
Novel digital forensic readiness technique in the cloud environment
Open accessAbstract
This paper examines the design and implementation of a feasible technique for performing Digital Forensic Readiness (DFR) in cloud computing environments. The approach employs a modified obfuscated Non-Malicious Botnet (NMB) whose functionality operates as a distributed forensic Agent-Based Solution (ABS) in a cloud environment with capabilities of performing forensic logging for DFR purposes. Under basic Service Level Agreements (SLAs), this proactive technique allows any organization to perform DFR in the cloud without interfering with operations and functionalities of the existing cloud architecture or infrastructure and the collected file metadata. Based on the evaluation discussed, the effectiveness of our approach is presented as the easiest way of conducting DFR in the cloud environment as stipulated in the ISO/IEC 27043: 2015 international standard, which is a standard of information technology, security techniques and incident investigation principles and processes. Through this technique, digital forensic analysts are able to maximize the potential use of digital evidence while minimizing the cost of conducting DFR. As a result of this process, the time and cost needed to conduct a Digital Forensic Investigation (DFI) is saved. As a consequence, the technique helps the law enforcement, forensic analysts and Digital Forensic Investigators (DFIs) during post-event response and in a court of law to develop a hypothesis in order to prove or disprove a fact during an investigative process, if there is an occurrence of a security incident. Experimental results of the developed prototype are described which conclude that the technique is effective in improving the planning and preparation of pre-incident detection during digital crime investigations. In spite of that, a comparison with other existing forensic readiness models has been conducted to show the effectiveness of the previously proposed Cloud Forensic Readiness as a Service (CFRaaS) model.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The NIST definition of cloud computing
Mell, P., & Grance, T. (2011) · doi:10.6028/nist.sp.800-145 · Cited by 12,628
Terra: a virtual machine-based platform for trusted computing
Garfinkel, T., Pfaff, B., Chow, J., Rosenblum, M., & Boneh, D. (2003) · ACM SIGOPS Operating Systems Review · doi:10.1145/1165389.945464 · Cited by 895
Getting Physical with the Digital Investigation Process
Carrier, B. D., & Spafford, E. H. (2003) · Cited by 422
The Characteristics of Cloud Computing
Gong, C., Liu, J., Zhang, Q., Chen, H., & Gong, Z. (2010) · International Conference on Parallel Processing Workshops (ICPPW) · doi:10.1109/icppw.2010.45 · Cited by 400
A hierarchical, objectives-based framework for the digital investigations process
Beebe, N. L., & Clark, J. G. (2005) · Digital Investigation · doi:10.1016/j.diin.2005.04.002 · Cited by 321
Dykstra, J., & Sherman, A. T. (2012) · Digital Investigation · doi:10.1016/j.diin.2012.05.001 · Cited by 278
A Ten Step Process for Forensic Readiness.
Rowlingson, R. (2004) · International journal of digital evidence · Cited by 270
Impacts of increasing volume of digital forensic data: A survey and future research challenges
Quick, D., & Choo, K. R. (2014) · Digital Investigation · doi:10.1016/j.diin.2014.09.002 · Cited by 270
Bloodstain Pattern Analysis with an Introduction to Crime Scene Reconstruction
Erbisti, P. C. F., & Gardner, R. M. (2008) · CRC Press eBooks · doi:10.1201/9781420052725 · Cited by 254
An integrated conceptual digital forensic framework for cloud computing
Martini, B., & Choo, K. R. (2012) · Digital Investigation · doi:10.1016/j.diin.2012.07.001 · Cited by 250
The Enhanced Digital Investigation Process Model
Baryamureeba, V., & Tushabe, F. (2004) · Digital Investigation · Cited by 243
A survey of information security incident handling in the cloud
Rahman, N. H. A., & Choo, K. R. (2014) · Computers & Security · doi:10.1016/j.cose.2014.11.006 · Cited by 201
Google Drive: Forensic analysis of data remnants
Quick, D., & Choo, K. R. (2013) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2013.09.016 · Cited by 176
Collaboration-Based Cloud Computing Security Management Framework
Almorsy, M., Grundy, J., & Ibrahim, A. S. (2011) · IEEE ... International Conference on Cloud Computing · doi:10.1109/cloud.2011.9 · Cited by 176
Dykstra, J., & Sherman, A. T. (2013) · Digital Investigation · doi:10.1016/j.diin.2013.06.010 · Cited by 173
Cloud storage forensics: ownCloud as a case study
Martini, B., & Choo, K. R. (2013) · Digital Investigation · doi:10.1016/j.diin.2013.08.005 · Cited by 163
Cloud computing: Challenges and future directions
Choo, K. R. (2010) · Australian Institute of Criminology eBooks · doi:10.52922/ti281703 · Cited by 120
Quick, D., & Choo, K. R. (2013) · Digital Investigation · doi:10.1016/j.diin.2013.07.001 · Cited by 112
Not-a-Bot: improving service availability in the face of botnet attacks
Gummadi, R., Balakrishnan, H., Maniatis, P., & Ratnasamy, S. (2009) · Cited by 99
Cloud incident handling and forensic‐by‐design: cloud storage as a case study
Rahman, N. H. A., Cahyani, N. D. W., & Choo, K. R. (2016) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.3868 · Cited by 82
Cloud computing and its implications for cybercrime investigations in Australia
Hooper, C., Martini, B., & Choo, K. R. (2013) · Computer law & security review · doi:10.1016/j.clsr.2013.01.006 · Cited by 79
Defining Event Reconstruction of Digital Crime Scenes
Carrier, B. D., & Spafford, E. H. (2004) · Journal of Forensic Sciences · doi:10.1520/jfs2004127 · Cited by 76
Forensic data acquisition from cloud‐of‐things devices: windows Smartphones as a case study
Cahyani, N. D. W., Martini, B., Choo, K. R., & Al‐Azhar, A. M. N. (2016) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.3855 · Cited by 73
A Forensically Sound Adversary Model for Mobile Devices
Do, Q., Martini, B., & Choo, K. R. (2015) · PLoS ONE · doi:10.1371/journal.pone.0138449 · Cited by 71
Categories of digital investigation analysis techniques based on the computer history model
Carrier, B. D., & Spafford, E. H. (2006) · Digital Investigation · doi:10.1016/j.diin.2006.06.011 · Cited by 67
Cloud storage forensics: MEGA as a case study
Daryabar, F., Dehghantanha, A., & Choo, K. R. (2016) · Australian Journal of Forensic Sciences · doi:10.1080/00450618.2016.1153714 · Cited by 64
Daryabar, F., Dehghantanha, A., Eterovic‐Soric, B., & Choo, K. R. (2016) · Australian Journal of Forensic Sciences · doi:10.1080/00450618.2015.1110620 · Cited by 62
Remote Programmatic vCloud Forensics: A Six-Step Collection Process and a Proof of Concept
Martini, B., & Choo, K. R. (2014) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom.2014.124 · Cited by 56
Shariati, M., Dehghantanha, A., & Choo, K. R. (2015) · Australian Journal of Forensic Sciences · doi:10.1080/00450618.2015.1021379 · Cited by 51
Kebande, V. R., & Venter, H. S. (2016) · Australian Journal of Forensic Sciences · doi:10.1080/00450618.2016.1194473 · Cited by 48
Self-citationThe architecture of a digital forensic readiness management system
Reddy, K., & Venter, H. S. (2012) · Computers & Security · doi:10.1016/j.cose.2012.09.008 · Cited by 46
Self-citationMobile Cloud Forensics: An Analysis of Seven Popular Android AppsPreprint
Martini, B., Do, Q., & Choo, K. R. (2015) · arXiv (Cornell University) · doi:10.48550/arxiv.1506.05533 · Cited by 41
An Android Social App Forensics Adversary Model
Azfar, A., Choo, K. R., & Liu, L. (2016) · Hawaii International Conference on System Sciences (HICSS) · doi:10.1109/hicss.2016.693 · Cited by 36
A Cloud Forensic Readiness Model Using a Botnet as a Service
Kebande, V. R., & Venter, H. S. (2014) · doi:10.13140/2.1.4880.2249 · Cited by 36
Self-citationStudy of Botnets and Their Threats to Internet Security
Banday, M. T., Qadri, J. A., & Shah, N. A. (2009) · Cited by 34
Forensics-as-a-Service (FaaS): Computer Forensic Workflow Management and Processing Using Cloud
Wen, Y., Man, X., Le, K., & Shi, W. L. (2013) · Cited by 32
Shariati, M., Dehghantanha, A., Martini, B., & Choo, K. R. (2015) · Elsevier eBooks · doi:10.1016/b978-0-12-801595-7.00019-7 · Cited by 31
Adding event reconstruction to a Cloud Forensic Readiness model
Kebande, V. R., & Venter, H. S. (2015) · Information Security for South Africa · doi:10.1109/issa.2015.7335050 · Cited by 29
Self-citation2015 Information Security for South Africa (ISSA)
(2015) · doi:10.1109/issa35683.2015 · Cited by 28
Martini, B., Do, Q., & Choo, K. R. (2015) · Elsevier eBooks · doi:10.1016/b978-0-12-801595-7.00015-x · Cited by 27
A cognitive approach for botnet detection using Artificial Immune System in the cloud
Kebande, V. R., & Venter, H. S. (2014) · International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec) · doi:10.1109/cybersec.2014.6913971 · Cited by 25
Self-citationI Have the Proof: Providing Proofs of Past Data Possession in Cloud Forensics
Zawoad, S., & Hasan, R. (2012) · doi:10.1109/cybersecurity.2012.17 · Cited by 22
VMI-PL: A monitoring language for virtual platforms using virtual machine introspection
Westphal, F., Axelsson, S., Neuhaus, C., & Polze, A. (2014) · Digital Investigation · doi:10.1016/j.diin.2014.05.016 · Cited by 21
Integrating digital forensic practices in cloud incident handling
Rahman, N. H. A., & Choo, K. R. (2015) · Elsevier eBooks · doi:10.1016/b978-0-12-801595-7.00017-3 · Cited by 13
Introduction of concurrent processes into the digital forensic investigation process
Valjarevic, A., & Venter, H. S. (2015) · Australian Journal of Forensic Sciences · doi:10.1080/00450618.2015.1052754 · Cited by 12
Self-citationPractical Aspects of Criminal & Forensic Investigations
Goldstein, D. M. (2010) · CRC series in practical aspects of criminal and forensic investigations · doi:10.1201/crcpacfinve · Cited by 12
Eccws 2016 - Proceedings of the 15th European Conference on Cyber Warfare and Security
Koch, R. A., & Rodosek, G. D. (2016) · Cited by 7
Ahmad, I., Abbas, H., Raza, A., Choo, K. R., Sajid, A., Pasha, M., & Khan, F. A. (2016) · Australian Journal of Forensic Sciences · doi:10.1080/00450618.2016.1229814 · Cited by 2
Terajima, K. (2014) · 経営論集 · Cited by 2
Research works printed but not linked: 21
- Palmer G . A road map for digital forensic research. Technical Report DTRT0010-01, DFRWS. Report for the First Digital Forensic Research Workshop (DFRWS); 2001.
- Politt MM . Six blind men from Indostan. Digital forensics research workshop (DFRWS); 2004.
- Carrier B, 2003, Int J Digital Evid, 2, 1
- Tan J . Forensic readiness. Cambridge, MA: @ Stake; 2001 Jul 17. p. 1-23.
- Rowlingson R, 2004, Int J Digital Evid, 2, 1
- Casey E . Digital evidence and computer crime. 2nd ed. MA Academic Press: San Diego, CA ; 2000. p. 207–229.
- Kebande VR, 2014, The International Conference on Digital Security and Forensics (DigitalSec2014), 23
- Gummadi R, 2009, NSDI, 9, 307
- 10.1145/1165389 · DOI
- Martini B, 2014, Trust, Security and Privacy in Computing and Communications (TrustCom), 2014 IEEE 13th International Conference on, 935
- Wen Y, 2013, Cloud Computing, 208
- Kebande VR, 2015, Proceedings of the 14th European Conference on Cyber Warfare and Security 2015: ECCWS 2015, 373
- Kebande VR, 2015, Iccsm 2015d-The Proceedings of the 3rd International Conference on Cloud Security and Management
- Kebande VR, 2015, Iccws 2015c-The Proceedings of the 10th International Conference on Cyber Warfare and Security, 434
- Kebande VR, 2016, 11th International Conference on Cyber Warfare and Security: ICCWS2016, 399
- Valjarevic A, 2015, Aust J Forensic Sci, 1
- Baryamureeba V, 2004, Proceedings of the Fourth Digital Forensic Research Workshop, 1
- Cahyani NDW, 2016, Mobile Netw Appl
- Feldman ER, 2001, Criteria for admissibility of expert opinion testimony under Daubert and its progeny
- Shropshire J, 2015, ICCSM2015-3rd International Conference on Cloud Security and Management: ICCSM2015, 86
- Choo KKR, 2010, Trends Issues Crime Crim Just, 400, 1
Cited by
A Survey on the Internet of Things (IoT) Forensics: Challenges, Approaches, and Open Issues
Stoyanova, M., Nikoloudakis, Y., Panagiotakis, S., Pallis, E., & Markakis, E. K. (2020) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2019.2962586 · Cited by 852
Artificial Intelligence Security Threat, Crime, and Forensics: Taxonomy and Open Issues
Jeong, D. (2020) · IEEE Access · doi:10.1109/access.2020.3029280 · Cited by 110
A Review of Mobile Forensic Investigation Process Models
Al-Dhaqm, A., Razak, S. B. A., Ikuesan, R. A., Kebande, V. R., & Siddique, K. (2020) · IEEE Access · doi:10.1109/access.2020.3014615 · Cited by 78
Self-citationCategorization and Organization of Database Forensic Investigation Processes
Al-Dhaqm, A., Razak, S. B. A., Dampier, D. A., Choo, K. R., Siddique, K., Ikuesan, R. A., Alqarni, A., & Kebande, V. R. (2020) · IEEE Access · doi:10.1109/access.2020.3000747 · Cited by 64
Self-citationResearch Challenges and Opportunities in Drone Forensics Models
Al-Dhaqm, A., Ikuesan, R. A., Kebande, V. R., Razak, S. B. A., & Ghabban, F. M. (2021) · Electronics · doi:10.3390/electronics10131519 · Cited by 63
Self-citation
Metadata
- Authors
- Kebande, V. R., & Venter, H. S.
- Affiliations
- University of Pretoria (ZA)
- Corresponding author
- Kebande, Victor R.
- Venue
- Australian Journal of Forensic Sciences
- Publisher
- Informa UK Limited
- Published
- 2017-01-17
- Volume
- 50
- Issue
- 5
- Pages
- 552-591
- ISSN
- 0045-0618 (ISSN-L)
- 1834-562X
- OpenAlex
- W2573841943
- Cited by
- 58
- References
- 50
- Citations by year
- 2026: 2 · 2025: 6 · 2024: 5 · 2023: 3 · 2022: 5 · 2021: 16 · 2020: 14 · 2019: 4 · 2018: 3
- FWCI
- 10.69
- Type
- journal article
- Language
- en
- Open access
- green
- hdl.handle.net
- Locations
- Australian Journal of Forensic Sciences (publishedVersion)
- UpSpace Institutional Repository (University of Pretoria) (submittedVersion)
- Funders
- South African Agency for Science and Technology Advancement (UID85794)
- Topics
- Physical Sciences › Computer Science › Information Systems › Digital and Cyber Forensics
- Social Sciences › Law › Education, Law, and Society
- Physical Sciences › Computer Science › Information Systems › Cloud Data Security Solutions
- Keywords
- digital forensic readiness, cloud computing, forensic evidence collection, digital forensic investigation, cloud forensics, incident response, cybercrime investigation
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
