Design And Development Of Multi Stream Cloud Forensic Technique
A proposed multi stream forensic technique for performing forensic investigations in an electronic system includes capturing and associating multiple streams of information. The multi streams refer network stream, storage stream, and virtual stream. The network stream contains a record of network activities such as traffic data, server logs, host activities details, and firewall data so on. A storage stream refers to data of storage media such as hard disk, memory, flash drive, and network area storages which record both read and write activities. A virtual stream refers to data of virtual machines, virtual servers, virtual memory, virtual drives and related sources. A comprehensive summary logs can be obtained with each network, storage, and virtual activities coordinated during particular time. To enable investigation for finding the suspicious events across network, storage, and virtual domains multi stream forensic technique has been proposed. It achieves cloud security breach investigation and recovery. Proposed framework refers multiple stream sources and logs for investigation through identifying the footprint and recovering the data.