THE CONCEPT OF CLOUD FORENSICS AND THE FORENSIC PRINCIPLES OF HANDLING DIGITAL EVIDENCE
Authors/Creators
- 1. Independent Researcher Law Enforcement Academy of the Republic of Uzbekistan
- 2. Worldly Knowledge Publishing Centre
Description
The article analyzes the content of cloud forensics, its differences from traditional digital forensics and international principles of handling digital evidence in the cloud environment. The approaches of NIJ, the National Police Agency of Japan, INTERPOL, NIST and foreign scholars are compared. The possibilities of adapting the ACPO principles to the cloud environment are shown, and measures for national practice are proposed: the use of hash sums, maintaining a chain of custody and introducing unified forensic standards.
Files
171-176(1).pdf
Additional details
References
- 1.National Institute of Justice (NIJ). Digital Forensics. U.S. Department of Justice, Office of Justice Programs. Available at: https://nij.ojp.gov/topics/articles/digital-forensics
- 2.National Police Agency of Japan. Digital Forensics. Tokyo: National Police Agency. Available at: https://www.npa.go.jp/bureau/cyber/what-we-do/digitalforensics.html
- 3.INTERPOL. Global Guidelines for Digital Forensics Laboratories. INTERPOL, Digital Forensics Laboratory. Pp. 11–12. Available at: https://www.interpol.int/How-we-work/Innovation/Digital-forensics
- 4.Nelson, B., Phillips, A., & Steuart, C. Guide to Computer Forensics and Investigations. 6th ed. Cengage Learning, 2019. Available at: https://klikitscripts.com/toddbooks/files/computer%20forensics%20file.pdf
- 5.Mell, P., & Grance, T. The NIST Definition of Cloud Computing. NIST Special Publication 800-145. U.S. Department of Commerce, 2011. Available at: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-145.pdf