I would be interested in knowing your thoughts and opinions on the topic of “Digital Forensics within Infrastructure-as-a-Service (IaaS) Environments.
For my sins I have chosen this as the subject for my dissertation and although I could happily write thousands upon thousands of words (Plenty of practice writing forensic reports…) of my own opinion and citing quotes from the many articles, journals and papers I am reading I would like to offer some enrichment to the reader (My poor lecturer) and provide some knowledgeable and experienced primary and secondary sources from others in the industry.
So, I would be very grateful if you do have any thoughts (ideally experience) on this subject to get in touch. I will of course cite all contributions to the individual(s) and/or organisations (Chance of free publicity) however, likewise should you or your organisations wish to remain anonymous, this too can be arranged.
I’d be happy to arrange a face to face interview or (What is likely to be easier for everyone) for you to contact me via email at info@forhacsec.com and we can hopefully engage in conversation on the subject.
Current trains of thought on the subject include -
*Is IaaS forensics more Incident Response and readiness than actual methodology at the moment?
*How are Cloud Service Customers prepared for forensics within the cloud? (In your opinion)
*Are appropriate SLA’s and Contracts in place between service providers and customers?
*Are Cloud Service Providers Providers in any position to offer or even comply with digital forensic investigations?
*What do you think of Cloud Service Providers having Cloud Service Providers and cross jurisdiction investigations?
*Where do you think ‘Cloud Forensics’ will go in X amount of time?
*Are the industry suppliers of forensic acquisitions and investigatory tools ready for investigations in ‘Cloud’ environments?
*Is legislation in the UK up to scratch to aide law enforcement inc carrying out such investigations and agreements in place with other countries to assist in working together?
*Will there be a true Digital Forensics investigatory framework/methodology for IaaS Digital Forensics acquisitions.investigations?
These are just a few of my current thoughts, I could go on….
Thanks for your time, ac
My article http//
I appreciate that many of us see these types of requests either on public forums, Twitter or in the form of direct requests via email with questionnaires etc and then see very little, if anything from them, such as the end results of the project.
I need to have this project completed and submitted by the end of April 2013 and would be happy to add you to a mailing list or make the work available for download once completed so you can see the end results and how you have contributed to it.
I am hoping this will enable further work to be carried out in this area in the future.
Thanks, ac