Log Analysis Methods for Cloud Forensics

Three log analysis methods were proposed in this book, to identify, analyze and preserve the potential evidence in a log file. An intrusion detection method based on Bayesian Fuzzy Clustering (BFC) and two levels of Gravitational- Group search based SVNN is proposed to help cloud forensic investigators in identifying potential evidence about an intrusion. A multi-level and mutual log integrity preservation approach using public key infrastructure for cloud forensics is proposed to prevent a criminal or cloud service provider or the forensic investigator himself tampering with the evidence on a log file, to make the log file presentable evidence before law enforcement. A security protocol for evidence integrity preservation in cloud forensics using Blockchain technology is proposed to make the preservation of evidence (log) easy, transparent, and tamperproof, to make it convenient for different entities involved in the investigation and post-investigation process, to interact, retrieve and verify the log files.

Autorentext

Dr. Siva Rama Krishna T. did his Ph.D. in Cloud Forensics from JNTUK, India. He received two best paper awards for his research papers and three national-level awards for his contributions in teaching. His areas of research include Cyber Security and Digital Forensics, Cloud Computing, Blockchain, IoT, and AI.