Topic 10

Question 1

What are the 3 service levels for cloud computing?

Answer 1

-SaaS - Software as a service, applications delivered via the Internet - Google Docs
Paas - Platform as a service - an OS installed on the cloud server
IaaS Infrastructure as a service - customers can rent hardware, such as servers and workstation, and install whatever OSs and applications they need.

Question 2

What features should forensics tools have for using to acquire data from a cloud?

Answer 2

Forensic data collection - identify, label, record and acquire data from the cloud.

• Elastic, static and live forensics
• Evidence segregation - must be able to separate customers’ data
• Investigations in virtualized environments

Question 3

Name some legal issues involved with Cloud Forensics (5)

Answer 3

Multi jurisdictional issues
commingling of people's data together
applicability of laws to the cloud
applicability of privacy laws
search warrants - seizing data not property - location

Question 4

What are some technical challenges in cloud forensics?

Answer 4

Architecture - where data is stored
Data Collection
Analysis of cloud forensic data - verify w’ network logs
Anti-forensics - can hack in and modify data
Incident first responders - CSP response team
Role management
standards and training

Question 5

Where might you find evidence of cloud use on a computer?

Answer 5

If the CSP’s application is installed, under the applications folder
also C:\Windows\Prefetch - application data