forensic-enabled security as a service (fesaas) - a readiness framework for cloud forensics

Digital forensics is a process of uncovering and exploring evidence from digital content. a growth in digital data in recent years has made it challenging for forensic investigators to uncover useful information. moreover, the applied use of cloud computing has increased significantly in past few years and has introduced new challenges to forensic experts. cloud forensics assist organizations who exercise due diligence and comply with the requirements related to sensitive information protection, maintain the records required for audits, and notify concerned parties when confidential information is compromised or exposed. one of the problems with cloud forensics is the limitation of cloud forensic models and guidelines. the aim of this project is to propose a new cloud forensic model that will help investigators and cloud service providers achieve digital forensic readiness within the cloud environment. to achieve this goal, we have studied and compared differentforensic process models to determine their limitations. based on results of this comparative study, a new cloud forensic framework– forensicenabled security as a service (fesaas) is presented. the security and forensic layers are aggregated to discover evidence in the proposed framework. compared to other cloud forensic frameworks, our framework deals with live data, reports, and logs. thus, it is sufficient and provides the capability for rapid response.