Logging framework for cloud computing forensic environments

Abstract

Cloud computing has emerged as a paradigm that attracts more and more researchers. In this context, the need for knowing where, how and under what conditions data is either processed or stored in datacenters, becomes a prime interest due to the continuously developing field of cloud computing forensics. In this paper we describe in a detailed manner an essential part of our cloud forensic framework that can be built on top of both new and existing datacenters - the logging part. We discuss the problems that must be dealt with in such architectures and we detail our proposed solutions to them. We explain how our architecture and findings can help forensics investigators that conduct investigations in a cloud environment.