Related Papers

This page contains a (probably incomplete) list of papers which I read over the last months and years. Some of them are pretty much related to cloud forensics while others have no direct relationship but also could be of interest to forensics in cloud environments. Searching for the title of the papers will probably lead to the corresponding PDF file. Additionally, to some of them you can find my personal opinion within a posting on this blog.

Web

• Privacy and Artificial Agents, or, Is Google Reading My Email? – S. Chopra, L. White – blog
• Content Cloaking: Preserving Privacy with Google Docs and other Web Applications – D. D’Angelo, F. Vitali, S. Zacchiroli
• An Analysis of Private Browsing Modes in Modern Browsers – G. Aggarwal, E. Bursztein, C. Jackson, D. Boneh
• How Unique Is Your Web Browser – P. Eckersley
• Attacking with HTML 5 – L. Kuppan
• Feasibility and Real-World Implications of Web Browser History Detection – A. Janc, L. Olejnik
• Why Aren’t HTTP-Only Cookies More Widely Deployed – Y. Zhou, D. Evans – blog

Cloud Forensics

• Forensic investigations of cloud computing systems – M. Taylor, J. Haggerty, D. Gresty, D. Lamb – blog
• Digital evidence in cloud computing systems – M. Taylor, J. Haggerty, D. Gresty, R. Hegarty
• Cloud Forensics: An Overview – K. Ruan, J. carthy, T. Kechadi, M. Crosbie
• Survey on cloud forensics and critical criteria for cloud forensics capability: A preliminary analysis – K. Ruan, I. Baggili, J. Carthy, T. Kechadi
• A Digital Investigation Tool based on Data Fusion in Management of Cyber Security Systems – S. Satpathy, S. Pradhan, B. Ray
• Digital forensics research: the next 10 years – S. Garfinkel – blog
• Cloud Application Logging for Forensics – R. Marthy – blog
• Digital Investigations in the Cloud – E. Hobson
• Towards Incident Handling in the Cloud: Challenges and Approaches – B. Grobauer, T. Schreck – blog
• Virtual Machine for Computer Forensics – the Open Source Perspective – D. Bem – blog
• Digital Forensics: Defining a Research Agenda – K. Nance, B. Hay, M. Bishop – blog
• Forensics Examination of Volatile System Data Using Virtual Introspection – B. Hay, K. Nance – blog
• Ghost in the Machine – Forensic Evidence Collection in the Virtual Environment – E. Fittermann, J. Durick – blog
• Cyber Forensics in the Cloud – S. Zimmermann, D. Glavach – blog
• Understanding Issues in Cloud Forensics: Two Hypothetical Case Studies – A. Sherman, J. Dykstra – blog
• Following Incidents into the Cloud – J. Reed, SANS Reading Room
• A Virtual Machine Introspection Based Architecture for Intrusion Detection - T. Garfinkel, M. Rosenblum - blog
• Finding File Fragments in the Cloud – D. Ras, M. Olivier – blog
• Isolating a Cloud Instance for a Digital Forensic Investigation – A. Delport, M. Olivier, M. Köhn
• Investigating the Implications of Virtual Machine Introspection for Digital Forensics – K. Nance, B. Hay, M. Bishop - blog
• The Rising Impact of Virtual Machine Hypervisor Technology on Digital Forensics Investigations – P. Bates
• Cloud Computing and Data Jurisdiction: A New Challenge for Digital Forensics - G. Vaciago – blog
• Leveraging Forensic Tools for Virtual Machine Introspection – B. Dolan-Gavitt, B. Payne, W. Lee – blog
• Cloud computing and computer forensics for business applications – L. Slusky, P. Partow-Navid, M. Doshi
• Cloud Forensics – K. Ruan, J. Carthy, T. Kechadi, M. Crosbie – blog

Provenance

• Provenance for the Cloud – K. Muniswamy-Reddy, P. Macko, M. Seltzer – blog
• Provenance as First Class Cloud Data – K. Muniswamy-Reddy, M. Seltzer – blog
• Secure Provenance: The Essential of Bread and Butter of Data Forensics in Cloud Computing – R. Lu, X. Lin, X. Liang, X. Shen – blog
• The open provenance model core specification – L.Moreau, B. Clifford, J. Freire, Y. Gil et al
• The case for Browser Provenance - Daniel W. Margo, Margo Seltzer – blog
• Provenance-Aware Storage Systems – K. Muniswamy-Reddy, D. Holland, U. Braun, M. Seltzer
• Challenges for Provenance in Cloud Computing - I. Abbadi, John Lyle – blog

Virtualization

• Cloud Security Is Not (Just) Virtualization Security – M. Christodorescu, R. Sailer, D. Schales, D. Sgandurra, D. Zamboni – blog
• Cloud Architectures – J. Varia, AWS – blog
• Accountable Virtual Machines – A. Haeberlen, P. Aditya, R. Rodrigues, P. Druschel

Storage

• Dark Clouds on the Horizon: Using Cloud Storage as Attack Vector and Online Slack Space - M. Mulazzani, S. Schrittwieser, M. Leithner, M. Huber, E. Weippl – blog

Somehow Cloud Related

• Bigtable: A Distributed Storage System for Structured Data – F. Chang, J. Dean, S. Ghemawat, D. Hsieh, D. Wallach, M. Burrows, T. Chandra, A. Fikes, R. Gruber – blog
• Proofs of Ownership in Remote Storage Systems – S. Halevi, D. Harnik, B. Pinkas
• Trusting in the Cloud – C. Cachin, I. Keidar, A. Shrear
• Side Channels in Cloud Services – Deduplication in Cloud Storage – D. Harnik, B. Pinkas, Al. Shulman-Peleg
• A Case for the Accountable Cloud – A. Haeberlen – blog
• The Eucalyptus Open-source Cloud-Computing System – D. Nurmi, R. Wolski, C. Grzegorczyk, G. Obertelli, S. Soman, L. Youseff, D. Zagorodnov
• Security Audits of Multi-Tier Virtual Infrastructures in Public Infrastructure Clouds – S. Bleikertz, M. Schunter, C. Probst, D. Pendarakis, K. Eriksson – blog
• Identifying the security risks associated with governmental use of cloud computing – S. Paquette, P. Jaeger, S. Wilson
• Cryptographic Cloud Storage – S. Kamara, K. Lauter
• Self Hosting vs. Cloud Hosting: Accounting for the security impact of hosting in the cloud – D. Molnar, S. Schechter