Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso...
Transcript of Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso...
![Page 1: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/1.jpg)
Cloud Forensics
Carlo Dumit
Erick Sousa
Rafael Padilha
Ricardo Menzer
![Page 2: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/2.jpg)
Lab
Seminar Series
MO447 - Digital Forensics
Prof. Dr. Anderson Rocha [email protected]
http://www.ic.unicamp.br/~rocha
![Page 3: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/3.jpg)
Outline
![Page 4: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/4.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 4
Outline
• Introduction
• Aspects of Cloud Forensics
• Challenges
• Opportunities
• Conclusions
• References
![Page 5: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/5.jpg)
Introduction
![Page 6: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/6.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 6
Cloud Computing • A model that enables convenient, on-demand network
acess to a shared poll of configurable computing
resources (e.g., networks, servers, storage, applications,
services) that can be rapidly provisioned and released
with minimal Cloud Service Provider (CSP) interaction
• Examples:
![Page 7: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/7.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 7
• Worldwide spending on public IT cloud services is
predicted to reach $107 billion in 2017
© International Data Corporation (http://www.idc.com/getdoc.jsp?containerId=prUS24298013)
![Page 8: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/8.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 8
Cybercrimes and Cloud Crimes
• Cybercrimes involving the cloud increase just like
the investments on cloud services
• Cybercrimes has outgrown Drug Dealling as a
global crime, costing U$ 105 billion per year
• Hacker may use a Cloud Server to do a DoS attack or to
share child pornography. Whose fault is it?
• What if the hacker lives somewhere where what he is
doing is not considered a crime, but where the CS is
located it is?
![Page 9: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/9.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 9
• Cloud Forensics is a multi-dimensional issue,
instead of merely a technical one
© Keyun Ruan (http://www.ruankeyun.com)
![Page 10: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/10.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 1
0
Technical Dimension
• Procedures and tools needed to perform the
forensic process in a cloud computing
environment
• E.g., data collection, evidence segregation, live
forensics and proactive measures
![Page 11: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/11.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 1
1
Organizational Dimension
• A forensic investigation in a cloud computing
environment involves at least two entities:
• Cloud Service Provider (CSP)
• Cloud Costumer
• The CSP may outsource services to other parties,
widening the scope of the investigation
![Page 12: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/12.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 1
2
© Keyun Ruan (http://www.ruankeyun.com)
![Page 13: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/13.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 1
3
Legal Dimension
• Multi-jurisdictional and multi-tenancy challenges
are the top legal concerns
• Forensic activities must not breach laws and
regulations in the jurisdictions where the data
resides
• Also the confidentiality of other tenants that share
the same infrastructure should be preserved
• Defined by the Service Level Agreements (SLAs)
![Page 14: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/14.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 1
4
Cloud Services
• SaaS (Software)
• PaaS (Platform)
• IaaS (Infrastructure)
[Zawoad 2009]
![Page 15: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/15.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919)
SaaS – Software as a
Service • “on-demand software”
• Ex: Google Mail, Office 365
• Customer does not have any control of the
underlying operating system
• Forensic Data:
• Logs provided by CSP
• Client Browser
1
5
![Page 16: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/16.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919)
PaaS – Platform as a
Service • Environments to deploy applications
• Ex: Google App Engine, Heroku
• Customer has no control over underlying
environment
• Forensic Data:
• Logs provided by CSP
• Recommended: encrypt logs and tranfer to third
party storage
1
6
![Page 17: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/17.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919)
IaaS – Infrastructure as a
Service • Customer has control of Virtual Machine provided
by CSP
• Ex: AWS EC2, Windows Azure, Rackspace
• Forensic Data:
• Snapshots (forensic images)
• Volatile Data
• Virtual Introspection
1
7
![Page 18: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/18.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919)
Possible problems
• Loss of data
• User makes ilegal use of Cloud Service (i.e.
Spam)
• Shutdown VM
• Cancel contract with CSP
• Lack of evidence
• User claims VM was compromised
1
8
![Page 19: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/19.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919)
Challenges
![Page 20: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/20.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919)
Forensic Data Collection
• Process of identifying, labeling, recording and
acquiring forensic data.
• Should not breach laws or regulations in the
jurisdictions where data is collected
• Should preserve the segregation between tenants
2
0
![Page 21: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/21.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919)
Forensic Data Collection
• Varies according to cloud model, but highly
dependent on CSP.
• CSP hide data location to facilitate data movement
and replication.
• Many CSP do not provide tools to help forensic
investigations
• IP Logs of client access
• Virtual Machine and Disk Images
2
1
![Page 22: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/22.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919)
Live Forensics
• Issues:
• Mobile endpoints and time/geographical
differences difficult timeline reconstruction
• Huge volume of different log formats
• How to handle deleted data
• Challenges: to recover the deleted data, identify
and use it for event reconstruction in the cloud
2
2
![Page 23: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/23.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919)
Evidence Segregation • Different instances running on a single physical
machine are isolated from each other via
virtualization
• Need to separate “neighbors”
• Logs collect data from multiple tenants
• Challenge for CSPs and law enforcement agencies
to segregate resources during investigations
without breaching the confidentiality of other
tenants
2
3
![Page 24: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/24.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919)
Evidence Segregation
• Easy-to-use feature of cloud models contributes to
a weak registration system (anonymity)
• Lack of standards when dealing with encryption
• Need for agreement between CSP, consumers and
law enforcement agencies.
2
4
![Page 25: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/25.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 2
5
Virtualized Environments
• Data and computational redundancy
• Redundancy is achieved using virtualization
(virtual machines – VM)
• Instances of serves running as VMs monitored by
Hypervisors (can be SW, FW or HW)
![Page 26: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/26.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 2
6
Virtualized Environments
• Hypervisors:
• Targets of attacks
• Lack of policies, procedures and techniques
for forensics investigations
![Page 27: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/27.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 2
7
Virtualized Environments
• Data mirroring in different jurisdictions
• Lack of transparent, real-time information of data
locations => Law and regulations violation
• CSPs cannot provide a precise location of a piece
of data.
• Need of strong international cooperation
![Page 28: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/28.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 2
8
Internal Staffing
• Conventional networking techniques used in
cloud forensics
• Lack of technical and legal expertise makes
cloud forensics a big challenge
• Cloud technology evolves much faster than
forensics research, laws and regulations
![Page 29: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/29.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 2
9
External Dependency Chains
• CSPs have dependencies on other CSPs
• Cloud Forensics investigations needs to
investigate every link in the dependency chain
• Procedures, policies and agreements related to
cross-provider forensic investigations are virtually
nonexistent
![Page 30: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/30.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 3
0
Service Level Agreements
• SLAs omit important terms regarding forensic
investigations: low customer awareness, limited
CSP transparency and lack of international
regulation.
![Page 31: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/31.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 3
1
Multiple Jurisdictions and
Tenancy
• Multiple jurisdictions and multi-tenancy are a
significant challenge to cloud forensic
investigations
• Different requirements regarding data access and
retrieval, evidence recovery, admissibility and
chain of custody
• Absence of a world wide regulatory entity impacts
cloud forensics investigations
![Page 32: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/32.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919)
Opportunities
![Page 33: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/33.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 3
3
• Reduces IT costs
• Very attractive to small and medium enterprises
Cost Effectiveness
![Page 34: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/34.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 3
4
• Data is replicated through many servers
• Reduces data degradation (e.g. bit rot) and data
loss
• Very unlikely that a vital data is completely
destroyed
Data Abundance
![Page 35: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/35.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 3
5
• Common techniques are applied to increase data
robustness:
• MD5 hash
• Versioning
• Log access
Overall Robustness
![Page 36: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/36.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 3
6
• Cloud Services provides an almost unlimited
storage
• More information is stored inside logs
Scalability and Flexibility
![Page 37: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/37.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 3
7
• Cloud Computing is a new field of opportunity
• Great time to lay foundations
Policies and Standards
![Page 38: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/38.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 3
8
• Specialized services to aid on investigating, and
crime solving
• Anti-Virus in the Cloud
Forensics as a Service
![Page 39: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/39.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 3
9
• Challenging field
• Requires creative solutions
Personal Motivations
![Page 40: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/40.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 4
0
• Challenging field
• Requires creative solutions
• … And very profitable!
Personal Motivations
![Page 41: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/41.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 4
1
• Average salaries (year wage):
• USA: $43.000 - $100.000 (U.S. Dollars)
• UK: $44.000 - $117.000 (U.S. Dollars)
• Brazilian Federal Police: R$ 168.000
Personal Motivations
![Page 42: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/42.jpg)
Conclusions
![Page 43: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/43.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 4
3
• Cloud Forensics is a very recent field that some
describe as a ticking-time bomb
• It still requires a lot of research and, more
importantly, an international effort between
countries and their law enforcers
• However, it also provides great opportunities that
Digital Forensic may take advantage of
• Besides being very profitable for those interested
in it
Conclusions
![Page 44: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/44.jpg)
References
![Page 45: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/45.jpg)
2013 Seminar Series – Digital Forensics (MO447/MC919) 4
5
References
● P.Mell and T. Grance, The NIST Definition of Cloud Computing, Version 15, 2009.
● Federal Bureau of Investigation, Regional Computer Forensics Laboratory, Annual Report for fiscal Year
2007, Washington, DC (www.refl.gov/downloads/documents/RCFL_Nat_Anuual07.pdf), 2007
● Jon Shiring, Respawn Entertainment. Let’s talk about the Xbox Live Cloud
(http://www.respawn.com/news/lets-talk-about-the-xbox-live-cloud/), 2013
● Zawoad, S., Hasan, R (2013). Digital Forensics in the Cloud (CrossTalk Magazine)
● Birk, D., Wegener, C (2011). Technical Issues of Forensic Investigations in Cloud Computing Environments
● Ryan Corey, TrainACE. The Average Salary of a Computer Forensics Career and the EC-Council CHFI
Certification(http://www.trainace.com/the-average-salary-of-a-computer-forensics-career-and-the-ec-council-
chfi-certification/)
● Centro de Seleção e Promoção de Eventos, UnB. Concurso Público para Perito Criminal
(http://www.cespe.unb.br//concursos/dpf_12_perito/)
![Page 46: Análise Forense de Documentos Digitaisrocha/teaching/2014s2/mo447/classes/2014-mo447...Concurso Público para Perito Criminal ( Thank You! Obrigado! Title: Análise Forense de Documentos](https://reader031.fdocuments.us/reader031/viewer/2022021820/5ae392e27f8b9ad47c8e7819/html5/thumbnails/46.jpg)
Thank You! Obrigado!