Cloud computing has gained significant momentum over the last two-to-three years. It provides an attractive solution to outsource data storage and processing, allowing businesses and organizations to concentrate on their core strengths. However, cloud computing provides a dilemma for digital forensics investigations. Such investigations require direct access to computing devices, storage, and other potential sources of digital evidence, which are not readily available in cloud environments. This paper describes the results of a survey that was completed by digital forensic experts and practitioners to highlight the “key fundamental issues of cloud forensics.”

After describing the organization of the survey and considering the questions asked, the authors present an analysis of the responses. The survey questions are arranged into three groups: (1) definitions, (2) challenges and opportunities, and (3) procedures, tools, and policies. The survey is a little slow getting started with basic definitions, but picks up in groups (2) and (3) to consider the more important issues.

It is important that any consideration of cloud forensics considers both sides of the coin in that clouds can provide a dilemma to forensics investigations, but they can also assist such investigations (having all of the digital evidence in one place can be advantageous). The paper does do justice to these alternative viewpoints.

The final sections provide useful insight into current research and development and future ideas, in particular, the concept of forensics-as-a-service.

Digital forensics has risen to address previous challenges, such as mobile and wireless technology, encryption, and live memory analysis. I have no doubt that digital forensics will rise to the challenges of cloud computing. This paper provides useful background information to help address this challenge.