Ensuring Cloud Security Through Scalable Network Forensics
摘要
This paper investigates the integration of event log analysis with network forensics, particularly within a cloud environment where scalable resources are essential. A core principle is the ability to harness this power to manage large data that may be overwhelming using traditional methods. While backup and restore features can vary across Windows editions, this research aims to address the challenge cloud providers face in prioritizing logging events. The goal is to develop advanced solutions tailored to a forensic workstation, enabling deep analysis of diverse critical events. We propose a scalable network forensics solution specifically designed for AWS services, as scalability remains crucial within the Infrastructure as a Service model. Our study examines design considerations, technical specifications, and the potential of such systems to manage the centralized logging and analysis within cloud environments.