Introducing topic

1. Secure Cloud Log:
Security, Privacy, Admissibility
M A Manazir Ahsan
Supervisor: Dr. Ainuddin Wahid Bin Abdul Wahab
Co supervisor: Dr. Mohd Yamani Idna Bin Idris

3. Malicious users misuse cloud computingIn case of occurence :
Traditional digital forensics: ??Confiscate devices then investigate
Cloud forensics: can not confiscate
Multi tenancy
Out of Jurisdiction

4. Story
Online book shop

5. Story continued…
Competitor turned into evil
Business collapsed
Litigate to court

6. Court issues a subpoena to provide log files
Cloud server provides the log files
Story continued…
Log files

7. Manipulating Verdict
Colludes with

8. Manipulating Verdict continued…
colludes with
To scape from sentence
To cast blame to a scapegoat

9. Manipulating Verdict continued…
may repudiate in court This is not my
log at all ?!

10. Privacy Issue
collaborates to
To get sensitive user data stored in the log
When there is no malicious event

11. Challenges
Modification of log by CSP before publishing
Modification of log by CSP after publishing
Repudiation by cloud user
Privacy demolishing by investigator before investigation
Privacy demolishing by cloud employee investigator collaboration
Modification of log by investigator after publishing

12. Benchmark Paper
S. Zawoad, A. K. Dutta and R. Hasan, "Towards Building Forensics Enabled Cloud Through Secure
Logging-as-a-Service," in IEEE Transactions on Dependable and Secure Computing, vol. 13, no. 2, pp.
148-162, March-April 1 2016.
Modification of log by CSP before publishing
Modification of log by CSP after publishing
Repudiation by cloud user
Privacy demolishing by investigator before investigation
Privacy demolishing by cloud employee and investigator collaboration
Modification of log by investigator after publishing
√
X
√
√
X
X

13. Any Question ?

14. Thank you