Research on forensics of privacy violations in cloud environment

Weifeng LI; Weizhong QIANG; Weiming LI; Deqing ZOU

doi:10.11959/j.issn.2096-109x.2018004

您当前的位置：

首页 >

文章列表页 >

Research on forensics of privacy violations in cloud environment

Papers | 更新时间：2024-06-03

- Research on forensics of privacy violations in cloud environment
- Chinese Journal of Network and Information Security Vol. 4, Issue 1, Pages: 26-35(2018)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2018004
  CLC： TP393
- Online First：2018-01，
  
  Published：15 January 2018
- 稿件说明：
移动端阅览
Weifeng LI, Weizhong QIANG, Weiming LI, et al. Research on forensics of privacy violations in cloud environment[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 26-35.
DOI：

Weifeng LI, Weizhong QIANG, Weiming LI, et al. Research on forensics of privacy violations in cloud environment[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 26-35. DOI： 10.11959/j.issn.2096-109x.2018004.

摘要

云计算是主流的信息系统技术，但是云计算环境下的用户隐私保护和隐私侵犯追踪取证一直是一个挑战。当前主流的云计算取证技术体系和标准并不成熟和完备，距离计算机取证的目标相去甚远。针对云环境下隐私侵犯取证，首先，给出了云取证和云隐私侵犯的研究现状和挑战；其次，着重分析了云环境下隐私取证的研究内容和技术路线；最后，提出了一个具体的面向云环境的隐私侵犯取证系统。

Abstract

Cloud computing is the mainstream information system technology

however

privacy protection of user and privacy violation tracking and forensics in the cloud computing environment have always been a challenge.The current mainstream cloud computing forensics system and standard are not mature and complete

and are far from the target of computer forensics.With the focus on privacy violation and forensics in the cloud environment

status and challenges of cloud forensics and cloud privacy violation were reported firstly.Then

the research content and technical route of privacy forensics in the cloud environments were analyzed.Finally

a specific privacy violation forensics system for cloud environments was presented.

关键词

Keywords

references

NIST cloud computing forensic science chanllengs [EB/OL ] . https://csrc.nist.gov/csrc/media/publications/nistir/8006/draft/documents/draft_nistir_8006.pdf https://csrc.nist.gov/csrc/media/publications/nistir/8006/draft/documents/draft_nistir_8006.pdf .

RUAN K , CARTHY J , KECHADI T , et al . Cloud forensics [C ] // IFIP International Conference on Digital Forensics . 2011 : 35 - 46 .

Mapping the forensic standard ISO/IEC 27037 to Cloud Computing [EB/OL ] . https://downloads.cloudsecurityalliance.org/initiatives/imf/Mapping-the-Forensic-Standard-ISO-IEC-27037-to-Cloud-Computing.pdf https://downloads.cloudsecurityalliance.org/initiatives/imf/Mapping-the-Forensic-Standard-ISO-IEC-27037-to-Cloud-Computing.pdf .

RUAN K , CARTHY J , KECHADI T , et al . Cloud forensics definitions and critical criteria for cloud forensic capability:An overview of survey results [J ] . Digital Investigation , 2013 , 10 ( 1 ): 34 - 43 .

ZARGARI S , BENFORD D . Cloud forensics:concepts,issues,and challenges [C ] // The third Conference on Emerging Intelligent Data and Web Technologies (EIDWT) . 2012 : 236 - 243 .

TAYLOR M , HAGGERTY J , GRESTY D , et al . Forensic investigation of cloud computing systems [J ] . Network Security , 2011 ( 3 ): 4 - 10 .

[EB/OL ] . http://www.guidancesoftware.com/encase-forensic http://www.guidancesoftware.com/encase-forensic .

[EB/OL ] . http://www.accessdata.com/solutions/digital-forensics/forensic-toolkit-ftk http://www.accessdata.com/solutions/digital-forensics/forensic-toolkit-ftk .

ZAWOAD S , HASAN R . Cloud forensics:a meta-study of challenges,approaches,and open problems [EB/OL ] . http://www.cryptome.org/2013/02/cloud-forensics.pdf http://www.cryptome.org/2013/02/cloud-forensics.pdf .

NANDA S , HANSEN R A . Forensics as a service:three-tier architecture for cloud based forensic analysis [C ] // The 15th International Symposium on Parallel and Distributed Computing (ISPDC) . 2016 : 178 - 183 .

谢亚龙 , 丁丽萍 , 林渝淇 , 等 . ICFF:一种IaaS 模式下的云取证框架 [J ] . 通信学报 , 2013 , 34 ( 5 ): 200 - 206 .

XIE Y L , DING L P , LIN Y Q , et al . ICFF:a cloud forensics framework under the IaaS model [J ] . Journal on Communications , 2013 , 34 ( 5 ): 200 - 206 .

周刚 . 云计算环境中面向取证的现场迁移技术研究 [D ] . 武汉:华中科技大学 , 2011 .

ZHOU G . Research on forensics-oriented site migration technology in cloud computing environment [D ] . Wuhan:Huazhong University of Science and Technology , 2011 .

LEE J , UN S . Digital forensics as a service:a case study of forensic indexed search [C ] // The International Conference on ICT Convergence (ICTC) . 2012 : 499 - 503 .

WEN Y , MAN X , LE K , et al . Forensics-as-a-service (faas):computer forensic workflow management and processing using cloud [C ] // The fifth International Conferences on Pervasive Patterns and Applications . 2013 : 1 - 7 .

SANG T , . A log based approach to make digital forensics easier on cloud computing [C ] // Intelligent System Design and Engineering Applications (ISDEA) . 2013 : 91 - 94 .

田庆宜 , 王琳 , 黄道丽 . Vsphere 架构私有云取证方法研究及其实践 [J ] . 信息网络安全 , 2011 , 9 : 44 - 46 .

TIAN Q Y , WANG L , HUANG D L . Research and practice of VSPhere architecture private cloud forensics methods [J ] . Netinfo Security , 2017 , 30 ( 1 ): 31 - 38 .

吴松洋 , 张熙哲 , 王旭鹏 , 等 . 基于 Hadoop 的高效分布式取证:原理与方法 [J ] . 电信科学 , 2017 , 30 ( 1 ): 31 - 38 .

WU S Y , ZHANG X Z , WANG X P , et al . Highly distributed distributed forensics based on hadoop:principles and methods [J ] . Telecommunications Science , 2017 , 30 ( 1 ): 31 - 38 .

ZHOU M , ZHANG R , XIE W , et al . Security and privacy in cloud computing:a survey [C ] // The sixth International Conference on Semantics Knowledge and Grid (SKG) . 2010 : 105 - 112 .

BURNSIDE R S . The electronic communications privacy act of 1986:the challenge of applying ambiguous statutory language to intricate telecommunication technologies [J ] . Rutgers Computer ＆Technology , 1987 , 13 ： 451 . 31 - 38 .

SHELDON J . Fair credit reporting act [J ] . National Consumer Law Center Consumer Credit ＆ Sales Legal Practice , 1994 , 65 ( 2 ): 595 - 609 .

EVideo Privacy Protection Act [EB/OL ] . http://epic.org/privacy/vppa/ http://epic.org/privacy/vppa/ .

GELLMAN R , . Privacy in the clouds:risks to privacy and confidentiality from cloud computing [C ] // The World privacy forum . 2012 .

CAVOUKIAN A . Privacy in the clouds [J ] . Identity in the Information Society , 2008 , 1 ( 1 ): 89 - 108 .

PEARSON S , . Taking account of privacy when designing cloud computing services [C ] // The 2009 ICSE Workshop on Software Engineering Challenges of Cloud Computing . 2009 : 44 - 52 .

PEARSON S , CHARLESWORTH A . Accountability as a way forward for privacy protection in the cloud [C ] // IEEE International Conference on Cloud Computing . 2009 : 131 - 144 .

SADEGHI A R , SCHNEIDER T , WINANDY M . Token-based cloud computing [C ] // The International Conference on Trust and Trustworthy Computing . 2010 : 417 - 429 .

WANG C , REN K , WANG J . Secure and practical outsourcing of linear programming in cloud computing [C ] // INFOCOM . 2011 : 820 - 828 .

XU Z , WANG C , REN K , et al . Proof-carrying cloud computation:the case of convex optimization [J ] . IEEE Transactions on Information Forensics and Security , 2014 , 9 ( 11 ): 1790 - 1803 .

ITANI W , KAYSSI A , CHEHAB A . Privacy as a service:privacy-aware data storage and processing in cloud computing architectures [C ] // Dependable,Autonomic and Secure Computing . 2009 : 711 - 716 .

SQUICCIARINI A , SUNDARESWARAN S , LIN D . Preventing information leakage from indexing in the cloud [C ] // The 3rd International Conference on Cloud Computing (CLOUD) . 2010 : 188 - 195 .

PEARSON S , SHEN Y , MOWBRAY M . A privacy manager for cloud computing [C ] // IEEE International Conference on Cloud Computing . 2009 : 90 - 106 .

MOWBRAY M , PEARSON S . A client-based privacy manager for cloud computing [C ] // The Fourth International ICST Conference on Communication System Software and Middleware . 2009 :5.

Views

3064

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Cloud computing forensic model

Multi-authority based CP-ABE proxy re-encryption scheme for cloud computing

Strategy of container migration and honeypot deployment based on signal game in cloud environment

Trust evaluation optimization mechanism for cloud user behavior based on FANP

Survey on public key encryption with equality test

Related Author

Xi-xi WU

Bing-long LI

Xue-juan LI

Yuan-zhao GAO

Yinzhang GUO

Shang LIU

Jiangxing WU

Lingshu LI

Related Institution

Baicheng Weapon Testing Center

Audit Department of Henan Polytechnic University

State Key Laboratory of Mathematical Engineering and Advanced Computing

Information Engineering University

School of Computer, Qinghai Normal University

⁰