Fuzzy Data Mining-Based Framework for Forensic Analysis and Evidence Generation in Cloud Environment

Abstract

Sensitive organizational data are stored in cloud environment. To protect these data, forensic investigation of different malicious event is desired. Investigating the log records is more desirable since history of every transaction is stored in cloud log. Cloud forensic technique requires identifying the attacked area and analyzing the level of attack and further presenting it in the court of law. This paper proposes expert system architecture for forensic intrusion monitoring, analysis, and evidence generation for cloud logs. Fuzzy data mining technique has been proposed for forensic acquisition. This will reduce the computational effort that would otherwise incur in processing the huge log to identify the attacked area. Further AI techniques are exploited for training and analysis purpose. This helps in identifying various anomalous attacks in cloud environment. A comprehensible evidence format is also designed to be produced in the court of law.