Module 1 - Intro to Internet and Cloud Forensics Flashcards

Define cloud-computing Explain differences in current cloud-computing models Compare and contrast different forms of virtualization, including full virtualization, paravirtualization, and hardware assisted virtualization.

1
Q

Traditional Computer Forensics vs Network

A

Dead analysis of media:

  • media that contains user files and system artifacts
  • exam of hard drives, disk arrays, external storage with write blockers and forensic software

Expanding to include:

  • memory analysis
  • live analysis
  • behavioral analysis of malware

Network Exam
- analysis of network traffic as observed by firewalls, IDS, and packet captures (PCAP) from network forensic devices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

issues in cloud computing for traditional forensics (2)

A
  • no direct access to media

- access to deleted files is difficult or impossible

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Definition of Cloud Computing (3)

A

Main characteristics: dynamic assignment of hosted resources

TechTarget: - general term for anything that involves delivering hosted services over the Internet
NIST - model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Categories of Cloud Computing (4 main)

A
  • Infrastructure as a Service (IaaS)
  • Software as a Service (SaaS)
  • Platform as a Service (PaaS)
  • Desktop as a Service (DaaS)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Infrastructure as a Service

A
  • outsource IT department
  • requires reliable Internet connectivity
  • Implementations have dedicated IP addresses
  • Virtualize entire computer
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Platform as a Service

A

Virtualize an operating system

web service or database service as part of the platform.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Desktop as a Service

A

A virtualized desktop delivered to an end user
solves underutilization of hardware resources
solves telework needs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Software as a Service

A

-On demand licensing environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Four (4) Models of SaaS

A

Custom - each user has own application
Configurable - users separate their instances from each other
Configurable, multitenant-efficient - single application to serve all users/customers
Scalable, configurable, multitenant-efficient - same as above with added load-balancing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Additional Cloud Services (7)

A

strange days inform preachers into second mantras.

  • storage as a service (dropbox, iCloud)
  • database as a service
  • information as a service
  • process as a service
  • integration as a service
  • security as a service
  • management as a service
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Benefits of Cloud Computing (3)

A
  • Reduce Total Cost of Ownership
  • Improved availability of resources
  • driven by management initiatives
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Total Cost of Ownership (5)

A
  • hardware costs
  • hardware maintenance costs,
  • software licensing
  • support staff
  • physical space
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Types of Clouds (2)

A
  • Private
  • Public, Cloud Service Providers (CSP)

both rely on virtualization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Name Five (5) Cloud Service Providers

A
  • Microsoft’s Azure
  • Amazon’s Amazon Web Services (AWS)
  • Rackspace
  • Google
  • Dropbox
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Virtualization Types (3)

A
  • Full Virtualization
  • Paravirtualization
  • Hardware assisted
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Characteristics of Virtual Machine Monitor (3)

A

E.g. Hypervisor

  • environment for programs nearly identical to physical computer
  • programs have little speed degradation
  • total control of system resources
17
Q

Full Virtualization

A
  • VME completely simulates underlying hardware
  • Multiple guest OS run simultaneously
  • Binary translation and direct execution

Example: VMware workstation, parallels, virtualbox, Hyper-v

18
Q

Paravirtualization

A
  • modifying OS kernel
  • Nonvirtualizable instructions replaced with hypercalls

Examples: KVM

19
Q

Hardware virtualization

A

privileged and sensitive calls are automatically set to trap to the hypervisor.

20
Q

Load Balanced Applications

A

Web application server traffic distributed based on:

  • Round-robin
  • low-utilized resources gets next request
  • priority to a given server, if it is available