Cloud computing forensics

Cloud computing is a relatively new development in computing which has a significant impact on the examination and analysis of digital evidence. There exists a wide range of cloud service providers who themselves provide a range of services to meet business needs. Each provider will have their own architecture and processes by which data is structured and stored. The foundations of digital forensics are rooted in the examination of devices, whether they be computers, mobile phones or other devices. However, these methods do not translate well to forensic examinations on evidence in the cloud and new approaches will need to be taken. In order to provide reliable test results and testimony to courts, examiners who are responsible for performing digital evidence examinations will need to gain new understanding, knowledge and skills. No matter the challenges presented by cloud forensics, the fundamental principles of forensic science, including sound evidential chain of custody, sound analytical methods and robust approaches to verification need to be met.