The cloud forensics frameworks and tools: A brief review

Abstract

A Cloud is a platform that allows for quick application deployment and dynamic scaling. The cloud differs from on-premise software and data storage in terms of cost, security, scalability, recovery, and mobility which makes more businesses are switching from on-premise to cloud solutions every year. Although cloud computing models have several benefits over on-site models, they are nonetheless vulnerable to both internal and external threats. Even malicious operations can be carried out on the cloud with ease because of the flexible environment. Forensic investigations require the extraction of evidence, and analysis of a cloud system after an intrusion or break-in. It enables investigators to find and retrieve data from a variety of sources in the cloud environment. It is very challenging to find proof of a crime since the distributed nature of the cloud prevents evidence from being retained on a specific physical machine and instead disperses the data over various regions. This paper focuses on current forensic investigation tools used in the Cloud environment and highlights the need for the development of efficient cloud forensic tools.