Full Text Available

Note: Clicking the button above will open the full text document at the original institutional repository in a new window.

Harvesting digital evidence from an operational cloud environment for digital forensic readiness purposes

Mini Dissertation (MIT(Computer Science))--University of Pretoria, 2020

Saved in:
Bibliographic Details
Other Authors: Venter, Hein
Format: Thesis
Language:English
Published: University of Pretoria 2020
Subjects:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1867613610192142336
access_status_str Open Access
author2 Venter, Hein
author_browse Venter, Hein
author_facet Venter, Hein
collection Thesis
dc_rights_str_mv © 2019 University of Pretoria. All rights reserved. The copyright in this work vests in the University of Pretoria. No part of this work may be reproduced or transmitted in any form or by any means, without the prior written permission of the University of Pretoria.
description Mini Dissertation (MIT(Computer Science))--University of Pretoria, 2020
format Thesis
id oai:repository.up.ac.za:2263/74523
institution University of Pretoria (South Africa)
language English
last_indexed 2026-06-10T12:38:53.005Z
license_str Other — see source repository
provenance_str_mv Harvested via OAI-PMH from UPSpace — University of Pretoria Institutional Repository
publishDate 2020
publishDateRange 2020
publishDateSort 2020
publisher University of Pretoria
publisherStr University of Pretoria
record_format dspace
source_str UPSpace — University of Pretoria Institutional Repository
spelling oai:repository.up.ac.za:2263/74523 Harvesting digital evidence from an operational cloud environment for digital forensic readiness purposes Venter, Hein makurasm@tuks.co.za Makura, Sheunesu M. UCTD Cloud computing Digital forensic readiness (DFR) Prototype Operational cloud environment OpenStack Engineering, built environment and information technology theses SDG-09 Engineering, built environment and information technology theses SDG-16 Mini Dissertation (MIT(Computer Science))--University of Pretoria, 2020 An increase in organisations’ use of cloud computing technologies has led to cybercriminals targeting cloud environments in order to orchestrate malicious attacks. This led to the need for proactive approaches through the use of digital forensic readiness(DFR). A prototype developed by Kebande et al. (2016) sought to provide a means toattain DFR in a cloud environment without altering the existing cloud functionality. The prototype is presented as a forensic agent that uses modified botnet functionalities in order to amass digital information in a non-malicious operation. The prototype, which was implemented in a simulated environment, is able to harvest digital data like CPU and RAM usage, and keystrokes which are then hashed and stored as information in a database. However, the prototype was never tested on an operational cloud environment, hence this research study, which sought to implement a modified version of the prototype in an operational cloud environment for the purposes of achieving DFR in the cloud. OpenStack is used to provide the operational cloud environment. The prototype is deployed and executed in cloud instances hosted on OpenStack. The experiments performed in this research study show that it is viable to attain DFR in an operational cloud platform through the use of the prototype. Further observations show that the prototype is capable of harvesting digital data from cloud instances and store digital data in a database. The prototype also prepares the operational cloud environment to be forensically prepared for digital forensic investigations to be performed without alternating the functionality of the OpenStack cloud architecture. bs2026 Computer Science MIT(Computer Science) Unrestricted SDG-09: Industry, innovation and infrastructure SDG-16: Peace, justice and strong institutions 2020-05-11T08:17:19Z 2020-05-11T08:17:19Z 2020-05-06 2020-01 Mini Dissertation *Makura, SM 2020, Harvesting digital evidence from an operational cloud environment for digital forensic readiness purposes, MIT Mini Dissertation, University of Pretoria S2019 http://hdl.handle.net/2263/74523 en © 2019 University of Pretoria. All rights reserved. The copyright in this work vests in the University of Pretoria. No part of this work may be reproduced or transmitted in any form or by any means, without the prior written permission of the University of Pretoria. application/pdf University of Pretoria
spellingShingle UCTD
Cloud computing
Digital forensic readiness (DFR)
Prototype
Operational cloud environment
OpenStack
Engineering, built environment and information technology theses SDG-09
Engineering, built environment and information technology theses SDG-16
Harvesting digital evidence from an operational cloud environment for digital forensic readiness purposes
title Harvesting digital evidence from an operational cloud environment for digital forensic readiness purposes
title_full Harvesting digital evidence from an operational cloud environment for digital forensic readiness purposes
title_fullStr Harvesting digital evidence from an operational cloud environment for digital forensic readiness purposes
title_full_unstemmed Harvesting digital evidence from an operational cloud environment for digital forensic readiness purposes
title_short Harvesting digital evidence from an operational cloud environment for digital forensic readiness purposes
title_sort harvesting digital evidence from an operational cloud environment for digital forensic readiness purposes
topic UCTD
Cloud computing
Digital forensic readiness (DFR)
Prototype
Operational cloud environment
OpenStack
Engineering, built environment and information technology theses SDG-09
Engineering, built environment and information technology theses SDG-16
url http://hdl.handle.net/2263/74523