DOI QR코드

DOI QR Code

Practical and Legal Challenges of Cloud Investigations

클라우드 환경에서 수사 실무와 법적 과제

  • James, Joshua I. (Graduate School of Forensic Science, Soonchunhyang University) ;
  • Jang, Yunsik (Graduate School of Forensic Science, Soonchunhyang University)
  • Received : 2014.11.01
  • Accepted : 2014.12.12
  • Published : 2014.12.31

Abstract

An area presenting new opportunities for both legitimate business, as well as criminal organizations, is Cloud computing. This work gives a strong background in current digital forensic science, as well as a basic understanding of the goal of Law Enforcement when conducting digital forensic investigations. These concepts are then applied to digital forensic investigation of cloud environments in both theory and practice, and supplemented with current literature on the subject. Finally, legal challenges with digital forensic investigations in cloud environments are discussed.

클라우드 컴퓨팅 서비스의 확산으로 범죄수사를 위한 증거수집의 관점에서 불확실성으로 인한 다양한 실무적이고 법적인 문제가 제기되고 있다. 이 논문은 클라우드 환경에 대한 일반적인 수사상의 논점을 개관하고, 관할과 국제공조를 비롯한 문제점을 진단한다. 실무적으로 직접적으로 수사관이 접속하는 경우와 서비스제공자의 협조를 받는 경우의 장단점을 비교하여 실무적 개선방안을 논의하고 이에 따른 관할의 중복과 서비스 약정 및 포렌식적으로 무결한 데이터 수집 등 법률적 쟁점을 정리한다.

Keywords

References

  1. Shin, S. S. (2011). The Model Proposal of Mobile Cloud Security Technology. The Journal of The Institute of Internet, Broadcasting and Communication, 11(6), 151-156
  2. Choo, K. K. R. (2010). Cloud computing: challenges and future directions. Trends & Issues in Crime and Criminal Justice, (400), 381-400.
  3. Lallie, H. S., & Pimlott, L. (2012). Challenges in Applying the ACPO Principles in Cloud Forensic Investigations. Journal of Digital Forensics, Security and Law, 7(1). Retrieved from http://ojs.jdfsl.org/index.php/jdfsl/article/view/32
  4. SWGDE (2011). SWGDE/SWGIT Digital & Multimedia Evidence Glossary Version 2.4. Tech. rep. Scientific Working Groups on Digital Evidence and Imaging Technology, p. 18.
  5. Gellman, R. (2009). Privacy in the Clouds: Risks to Privacy and Confidentiality from Cloud Computing. World Privacy Forum. Retrieved from http://www.worldprivacyforum.org/pdf/WPF_Cloud_Privacy_Report.pdf
  6. O'Shaughnessy, S., & Keane, A. (2013). Impact of Cloud Computing on Digital Forensic Investigations. In G. Peterson & S. Shenoi (Eds.), (pp. 291-303). Springer Berlin Heidelberg.
  7. Ruan, Keyun et al. (2013). "Cloud forensics definitions and critical criteria for cloud forensic capability: An overview of survey results". In: Digital Investigation 10.1, pp. 34-43. https://doi.org/10.1016/j.diin.2013.02.004
  8. Saliba, Jad (2012). Finding Evidence in an Online World-Trends and Challenges in Digital Forensics. url:http://www.forensicfocus.com/DF\_Multimedia/page=watch/id=79/d=1/.
  9. Park. C.S. (2011). Study on Security Considerations in the Cloud Computing. Journal of the Korea Academia-Industrial cooperation Society. 12(3): 1408-1416. https://doi.org/10.5762/KAIS.2011.12.3.1408
  10. Saliba, Jad. (2012). Finding Evidence in an Online World-Trends and Challenges in Digital Forensics. url:http://www.forensicfocus.com/DF\_Multimedia/page=watch/id=79/d=1/.
  11. Ruan, Keyun et al. (2011). "Cloud forensics: An overview". In: Advances in Digital Forensics VII 361, pp. 35-46. https://doi.org/10.1007/978-3-642-24212-0_3