The Legal Issues Facing Digital Forensic Investigations In A Cloud Environment Presented by Janice Rafraf 15/05/2015Janice Rafraf1

Background Why is cloud becoming so popular? Issues of digital forensic investigation Issues of jurisdiction for an investigation 15/05/2015Janice Rafraf2

Cloud computing Buzz word Distributed computing Paradigm for modern cost effective computing Accessed over the Internet 15/05/2015Janice Rafraf3

NIST definition “Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction. This cloud model is composed of five essential characteristics, three service models, and four deployment models” 15/05/2015Janice Rafraf4

Characteristics for a cloud environment On demand Ubiquitous network access Resource pooling Rapid elasticity Pay as you go 15/05/2015Janice Rafraf5

Service models in a cloud environment 15/05/2015Janice Rafraf6 Software as a Service (SaaS) Platform as a Service (PaaS) Infrastructure as a Service (IaaS)

Deployment models in a cloud environment Private cloud Community cloud Public cloud Hybrid cloud 15/05/2015Janice Rafraf7

Forensic issues Search authority Chain of custody Imaging/ashing 15/05/2015Janice Rafraf8

Forensic issues Analysis Data integrity Validated tools 15/05/2015Janice Rafraf9

Legislation Data Retention Directive - EU DRIP UK ECPA US 15/05/2015Janice Rafraf10

United States v Microsoft Example of multi jurisdictional legal issue Warrant issued under SCA, requiring Microsoft to hand over data held in Dublin, Ireland US government should have used MLAT to request the data 15/05/2015Janice Rafraf11

Where too next? Streamlining of digital forensic processes Development of legislation A new way of prosecuting cybercrime? 15/05/2015Janice Rafraf12

15/05/2015Janice Rafraf13 Questions ? Contact: