Security, Privacy, and Digital Forensics in the Cloud

LEI CHEN, PHD, is tenured Associate Professor with the Department of Information Technology at Georgia Southern University, Statesboro, Georgia, USA. HASSAN TAKABI, PHD, is tenure-track Assistant Professor with the Department of Computer Science and Engineering, University of North Texas, Denton, Texas, USA. NHIEN-AN LE-KHAC, PHD, is Lecturer with the School of Computer Science at University College Dublin, Ireland.

• List of Contributors xvPart I Cloud Security and Privacy 11 Introduction to the Cloud and Fundamental Security and Privacy Issues of the Cloud 3Hassan Takabi and Mohammad GhasemiGol1.1 Introduction 31.2 Cloud Computing and Security Issues 41.3 Identity Security in the Cloud 91.4 Information Security in the Cloud 91.5 Cloud Security Standards 161.6 Conclusion 20References 202 Cloud Infrastructure Security 23Mohammad GhasemiGol2.1 Introduction 232.2 Infrastructure Security in the Cloud 242.3 Infrastructure Security Analysis in Some Clouds 312.4 Protecting Cloud Infrastructure 452.5 Conclusion 49References 493 Confidentiality of Data in the Cloud: Conflicts Between Security and Cost 51Nathalie Baracaldo and Joseph Glider3.1 Introduction 513.2 Background 513.3 Confidentiality: Threats and Adversaries 543.4 Achieving Data Confidentiality in Cloud Storage Systems 553.5 Reducing Cloud Storage System Costs through Data‐Reduction Techniques 573.6 Reconciling Data Reduction and Confidentiality 593.7 Trusted Decrypter 623.8 Future Directions for Cloud Storage Confidentiality with Low Cost 743.9 Conclusions 76References 774 Access Control in Cloud IaaS 81Yun Zhang, Ram Krishnan, Farhan Patwa, and Ravi Sandhu4.1 Introduction 814.2 Background 824.3 Access Control in OpenStack Cloud IaaS 834.4 Access Control in AWS Cloud IaaS 904.5 Access Control in Azure Cloud IaaS 994.6 Conclusions 107References 1075 Cloud Security and Privacy Management 109Patrick Kamongi5.1 Introduction and Background 1095.2 Security and Privacy Analysis 1115.3 Best Security Practices and Recommendation 1175.4 Use Case Example: Microsoft Office 365, SaaS Version 1185.5 Current Trends and Future Direction 1255.6 Related Works 1255.7 Conclusion 126Acknowledgments 126References 1266 Hacking and Countermeasures in the Cloud 129Farzaneh Abazari, Hassan Takabi, and Morteza Analoui6.1 Introduction 1296.2 Background 1306.3 Cloud Security Threats 1306.4 Cloud Security Countermeasures 1346.5 Hacking the Cloud: Reality Check 1366.6 Future of Cloud Security 1376.6.1 Cloud Security for the IoT 1386.7 Conclusions 139References 1397 Risk Management and Disaster Recovery in the Cloud 143Saman Zonouz7.1 Introduction 1437.2 Background 1437.3 Consequence‐ Centric Security Assessment 1457.4 Future Directions 1547.5 Conclusions 1558 Cloud Auditing and Compliance 157Paolina Centonze8.1 Introduction 1578.2 Background 1578.3 Cloud Auditing 1628.4 Cloud Compliance 1708.5 Future Research Directions for Cloud Auditing and Compliance 1838.6 Conclusion 184References 185Further Reading 1879 Security‐as‐a‐Service (SECaaS) in the Cloud 189Saman Taghavi Zargar, Hassan Takabi, and Jay Iyer9.1 Introduction 1899.2 Related Work 1929.3 Security‐ as‐a‐Service Framework 1949.4 Conclusions 199References 199Part II Cloud Forensics 20110 Cloud Forensics: Model, Challenges, and Approaches 203Lei Chen, Nhien‐An Le‐Khac, Sebastian Schlepphorst, and Lanchuan Xu10.1 Introduction 20310.2 Background 20410.3 Process and Model of Cloud Forensics 20710.4 Cloud Forensics Methods, Approaches, and Tools 21110.5 Challenges in Cloud Forensics 21310.6 Conclusions 214References 21411 Cyberterrorism in the Cloud: Through a Glass Darkly 217Barry Cartwright, George R. S. Weir, and Richard Frank11.1 Introduction 21711.2 What is Terrorism? 21811.3 Defining Cyberterrorism 22011.4 Cyberterrorism vs. Terrorist Use of Cyberspace 22111.5 Cyberterrorism in the Cloud 22211.6 The Benefits of the Cloud to Cyberterrorists 22511.7 Cyberlaw and Cyberterrorism 22711.8 Conclusion: Through a Glass Darkly 230References 23212 Digital Forensic Process and Model in the Cloud 239Nhien‐An Le‐Khac, James Plunkett, M‐Tahar Kechadi, and Lei Chen12.1 Introduction 23912.2 Digital Forensics Models 24012.3 Cloud Forensics Process and Model 24312.4 Toward a New Cloud Forensics Model 24612.5 Evaluation and Analysis 25112.6 Conclusion 253References 25313 Data Acquisition in the Cloud 257Nhien‐An Le‐Khac, Michel Mollema, Robert Craig, Steven Ryder, and Lei Chen13.1 Introduction 25713.2 Background 25813.3 Data Center as a Source of Evidence 25913.4 Cloud Service Providers: Essential Requirements, Governance, and Challenges 26013.4.1 Business Model 26113.5 Cloud Storage Forensics 26413.6 Case Study 1: Finding Data Centers on the Internet in Data‐Dense Environments 26513.7 Case Study 2: Cloud Forensics for the Amazon Simple Storage Service 27413.8 Conclusion 281References 28114 Digital Evidence Management, Presentation, and Court Preparation in the Cloud: A Forensic Readiness Approach 283Lucia De Marco, Nhien‐An Le‐Khac, and M‐Tahar Kechadi14.1 Introduction 28314.2 Cloud Forensics and Challenges 28414.3 Digital Forensics Readiness 28514.4 Cloud Forensics Readiness 28714.5 Forensics Readiness in Evidence Management, Presentation, and Court Preparation 29114.6 Conclusion 295References 29615 Analysis of Cloud Digital Evidence 301Irfan Ahmed and Vassil Roussev15.1 Introduction 30115.2 Background 30515.3 Current Approaches 30715.4 Proposed Comprehensive Approaches 31215.5 Discussion 31715.6 Conclusions 317References 31816 Forensics‐as‐a‐Service (FaaS) in the State‐of‐the‐Art Cloud 321Avinash Srinivasan and Frank Ferrese16.1 Introduction 32116.2 Background and Motivation 32316.3 State of the Art in Parallel and Distributed Forensic Analysis 32516.4 Conclusion and Future Research Direction 334References 335Index 339