Overview

Topic status: We're looking for students to study this topic.

As with every new technology, cloud computing is not free from its own unique security related problems and concerns as the massive concentrations of resources and data in cloud computing offers a breeding ground for opportunists which can lead to a dramatically increase in the cost of securing the cloud computing. One of the key security challenge introduced by the cloud computing paradigm is the lack of incident monitoring, detection and remediation. This leads to the lack of investigative support in cloud computing systems. This project will establish a cloud computing test environment to support the evaluation of methods to support incident detection and response activities. Current software tools for simulating cloud environments will be evaluated. Requirements of a test-bed for supporting digital forensics researchers will be established and a suitable test environment will be designed and deployed in the Information Security Institute's laboratory.

Aims: understand and evaluate the capabilities of existing open source cloud computing tools; and develop a test-bed cloud computing environment to support digital investigations.

Approach: A review of related literature; Identification of open source tools; Establishment of an experimental environment for evaluating the available tools; Design of suitable experiments for the evaluation; Identification of test-bed requirements; Proposal of a cloud computing test-bed design; and Deployment and evaluation of the deployed test-bed.

References:

  1. Heiser, J. and M. Nicolett, Assessing the security risks of cloud computing. 2008, Garther.
  2. Catteddu, D. and G. Hogben, Cloud Computing: Benefits, risks and recommendations for information security. 2009.
  3. Craig. Security Investigation & Forensics in the Cloud. 2009 [cited; Available from: http://blog.cloud404.com/2009/11/16/security-investigation-forensics-in-the-cloud/.
Study level
Honours
Supervisors
QUT
Organisational unit

Science and Engineering Faculty

Research area

Computer Science

Contact
Please contact the supervisor.