Digital Forensics in Distributed Environment

View Sample PDF

Author(s): Asha Joseph (VIT University, India)and K. John Singh (VIT University, India)
Copyright: 2018
Pages: 20
Source title: Handbook of Research on Network Forensics and Analysis Techniques
Source Author(s)/Editor(s): Gulshan Shrivastava (National Institute of Technology Patna, India), Prabhat Kumar (National Institute of Technology Patna, India), B. B. Gupta (National Institute of Technology Kurukshetra, India), Suman Bala (Orange Labs, France)and Nilanjan Dey (Department of Information Technology, Techno India College of Technology, Kolkata, India)
DOI: 10.4018/978-1-5225-4100-4.ch013

Keywords: Cyber and Network Security / Information Science Reference / Information Security & Privacy / Security & Forensics

Purchase

View Digital Forensics in Distributed Environment on the publisher's website for pricing and purchasing information.

Abstract

This chapter is about an ongoing implementation of a digital forensic framework that could be used with standalone systems as well as in distributed environments, including cloud systems. It is oriented towards combining concepts of cyber forensics and security frameworks in operating systems. The framework consists of kernel mechanisms for data and event monitoring. The system monitoring is done in kernel mode by various kernel modules and forensic model mapping is done in user mode using the data collected by those kernel modules. Further, the authors propose a crime model mapping mechanism that makes use of rule sets that are derived from common cyber/digital crime patterns. The decision-making algorithm can be easily extended from a node in a computing cluster, to a cloud. The authors discuss the challenges to digital forensics in distributed environment and cloud extensions and provide some case studies where the proposed framework is applied.

The IRMA Community

Research IRM

Digital Forensics in Distributed Environment

Purchase

Abstract

Related Content

IRMA Sponsors