2013 Symposium Posters

Project Members
Bryan Lee and Dr. Sam Liles

This paper examines the OSCAR network forensic investigation model and attempts to apply it to the realm of infrastructure as a service cloud computing. There are many difficulties within a forensic investigation in the cloud that must be taken into account, such as jurisdiction due to the way information is stored in the cloud and chain of evidence and trust that can be placed in evidence from the cloud. Although a forensic model of investigation cannot solve all the problems faced within an investigation of this type, a standard model can help to ensure that all investigations of this variety are handled in the same manner. This can provide a standard level of trust in evidence discovered during an investigation of this nature and provide for a standard way to deal with problems such as jurisdiction throughout the course of these investigations. The OSCAR investigation model appears to be a fairly robust model when compared with other models, such as Martini and Choo’s implementation of the NIST model for use in cloud forensics.