开源方案提升云取证响应效率，解决跨国数据调取难题。
Cloud Digital Forensic Readiness: An Open Source Approach to Law Enforcement Request Management
- 设计开源云执法请求管理系统架构，整合多方需求
- 通过两个真实场景验证，降低跨域数据获取延迟
- 适合执法机构与云服务商共同提升取证合规能力
云取证面临多司法管辖区挑战，日益增长的境内与境外执法请求，以及跨境数据获取正式渠道的延迟和复杂性，已成为数字取证调查成功的障碍。本文首先分析主流云服务提供商（CSPs）的透明度报告与执法指南，提出一种云执法请求管理系统（CLERMS）的抽象架构。基于现有开源组件，开发并部署了原型系统，在两个实际场景中进行了验证，并评估了相关成本。该方案旨在提升云端数字取证准备度（CDFR），同时惠及云服务提供商与云服务消费者（CSCs）。
原文摘要 · Abstract (English)
Cloud Forensics presents a multi-jurisdictional challenge that may undermines the success of digital forensic investigations (DFIs). The growing volumes of domiciled and foreign law enforcement (LE) requests, the latency and complexity of formal channels for crossborder data access are challenging issues. In this paper, we first discuss major Cloud Service Providers (CSPs) transparency reports and law enforcement guidelines, then propose an abstract architecture for a Cloud Law Enforcement Requests Management System (CLERMS). A proof of concept of the proposed solution is developed, deployed and validated by two realistic scenarios, in addition to an economic estimation of its associated costs. Based on available open source components, our solution is for the benefit of both CSPs and Cloud Service Consumers (CSCs), and aims to enhance the due Cloud Digital Forensic Readiness (CDFR).
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。