The Legal Issues Facing Digital Forensic Investigations In A Cloud Environment Presented by Janice...
13
The Legal Issues Facing Digital Forensic Investigations In A Cloud Environment Presented by Janice Rafraf 15/05/2015 Janice Rafraf 1
-
Upload
barnaby-davis -
Category
Documents
-
view
219 -
download
4
Transcript of The Legal Issues Facing Digital Forensic Investigations In A Cloud Environment Presented by Janice...
1
The Legal Issues Facing Digital Forensic Investigations In A Cloud EnvironmentPresented by Janice Rafraf
15/05/2015 Janice Rafraf
Janice Rafraf 2
Background
•Why is cloud becoming so popular?
• Issues of digital forensic investigation
• Issues of jurisdiction for an investigation
15/05/2015
Janice Rafraf 3
Cloud computing
• Buzz word
•Distributed computing
• Paradigm for modern cost effective
computing
• Accessed over the Internet
15/05/2015
Janice Rafraf 4
NIST definition“Cloud computing is a model for enabling ubiquitous,
convenient, on-demand network access to a shared pool of
configurable computing resources (e.g., networks, servers,
storage, applications, and services) that can be rapidly
provisioned and released with minimal management effort or
service provider interaction. This cloud model is composed of
five essential characteristics, three service models, and four
deployment models”
15/05/2015
Janice Rafraf 5
Characteristics for a cloud environment •On demand
•Ubiquitous network
access
• Resource pooling
• Rapid elasticity
• Pay as you go15/05/2015
Janice Rafraf 6
Service models in a cloud environment
15/05/2015
• Software as a Service (SaaS)
• Platform as a Service (PaaS)
• Infrastructure as a Service (IaaS)
Janice Rafraf 7
Deployment models in a cloud environment
• Private cloud
• Community cloud
• Public cloud
•Hybrid cloud
15/05/2015
Janice Rafraf 8
Forensic issues
• Search authority
• Chain of custody
• Imaging/ashing
15/05/2015
Janice Rafraf 9
Forensic issues
• Analysis
•Data integrity
• Validated tools
15/05/2015
Janice Rafraf 10
Legislation
•Data Retention Directive - EU
•DRIP 2014 - UK
• ECPA 1986 - US
15/05/2015
Janice Rafraf 11
United States v Microsoft
• Example of multi jurisdictional legal issue
•Warrant issued under SCA, requiring Microsoft
to hand over data held in Dublin, Ireland
•US government should have used MLAT to
request the data
15/05/2015
Janice Rafraf 12
Where too next?
• Streamlining of digital forensic processes
•Development of legislation
• A new way of prosecuting cybercrime?
15/05/2015
