A trigger-based introspection approach for cloud incident handling. (2016)

• Record Type: Journal Article
• Authors: Raju, B.K.S.P. Kumar; Geethakumari, G.
• Is Part Of: International journal of big data intelligence. Volume 3:Number 3(2016)
• Page Start: 163
• Page End: 175
• Publication Date: 2016
• Subjects: cloud computing -- incident handling -- trigger-based introspection -- digital forensics -- virtual memory -- cloud incidents -- cloud security -- trust -- virtual machines -- complex event processing -- CEP; Big data -- Periodicals; 005.705
• Languages: English
• ISSNs: 2053-1389

Abstract

Cloud computing is emerging as one of the most sought after high performance computing environments. Many organisations still hesitate to migrate to cloud due to the security issues and lack of transparency. Enhancing trust on the cloud environment can be done either by improving the existing security mechanisms or by effective digital investigation and incident handling. In this paper, we focus on the latter. Introspection helps us in monitoring the state of a cloud virtual machine from outside of it. This reduces the contamination possibility of the digital evidences. In this paper, we present a model for performing effective introspection of virtual machines. We use complex event processing (CEP) for identifying the root cause of the incident. Our approach would aid in relevant evidence collection from virtual memory and increase the semantic interpretation of introspected data.