{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T15:19:01Z","timestamp":1781104741452,"version":"3.54.1"},"reference-count":57,"publisher":"IGI Global Scientific Publishing","issue":"2","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012,4,1]]},"abstract":"<p>Cloud computing is a rapidly evolving information technology (IT) phenomenon. Rather than procure, deploy, and manage a physical IT infrastructure to host their software applications, organizations are increasingly deploying their infrastructure into remote, virtualized environments, often hosted and managed by third parties. This development has significant implications for digital forensic investigators, equipment vendors, law enforcement, as well as corporate compliance and audit departments, amongst other organizations. Much of digital forensic practice assumes careful control and management of IT assets (particularly data storage) during the conduct of an investigation. This paper summarises the key aspects of cloud computing and analyses how established digital forensic procedures will be invalidated in this new environment, as well as discussing and identifying several new research challenges addressing this changing context.<\/p>","DOI":"10.4018\/jdcf.2012040103","type":"journal-article","created":{"date-parts":[[2012,6,14]],"date-time":"2012-06-14T13:41:49Z","timestamp":1339681309000},"page":"28-48","source":"Crossref","is-referenced-by-count":88,"title":["Calm Before the Storm"],"prefix":"10.4018","volume":"4","author":[{"given":"George","family":"Grispos","sequence":"first","affiliation":[{"name":"University of Glasgow, Scotland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tim","family":"Storer","sequence":"additional","affiliation":[{"name":"University of Glasgow, Scotland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"William Bradley","family":"Glisson","sequence":"additional","affiliation":[{"name":"University of Glasgow, Scotland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"2432","reference":[{"key":"jdcf.2012040103-0","doi-asserted-by":"crossref","unstructured":"Agudo, I., Nu\u00f1ez, D., Giammatteo, G., Rizomiliotis, P., & Lambrinoudakis, C. (2011). Cryptography goes to the cloud. In Proceedings of the STA Workshops: IWCS and STAVE on Secure and Trust Computing, Data Management, and Applications, Loutraki, Greece (Vol. 187).","DOI":"10.1007\/978-3-642-22365-5_23"},{"key":"jdcf.2012040103-1","unstructured":"Amazon Web Services. (2009). Zeus BotNet Controller. Amazon Security Bulletin. Retrieved February 2, 2012, from http:\/\/aws.amazon.com\/security\/security-bulletins\/zeus-botnet-controller\/"},{"key":"jdcf.2012040103-2","unstructured":"Amazon Web Services. (2010). Amazon CloudFront - Developer Guide. Retrieved February 2, 2012, from http:\/\/s3.amazonaws.com\/awsdocs\/CF\/latest\/cf_dg.pdf"},{"key":"jdcf.2012040103-3","unstructured":"Association of Chief Police Officers, & 7Safe. (2007). Good practice guide for computer-based electronic evidence. Retrieved February 2, 2012, from http:\/\/www.7safe.com\/electronic_evidence\/ACPO_guidelines_computer_evidence.pdf"},{"key":"jdcf.2012040103-4","unstructured":"Baryamureeba, V., & Tushabe, F. (2004). The enhanced digital investigation process. Paper presented at the Digital Forensic Research Workshop, Baltimore, MD."},{"key":"jdcf.2012040103-5","doi-asserted-by":"crossref","unstructured":"Bessani, A., Correia, M., Quaresma, B., Andr\u00e9, F., & Sousa, P. (2011). DepSky: Dependable and secure storage in a cloud-of-clouds. In Proceedings of the Sixth Conference on Computer Systems, Salzburg, Austria (pp. 31-46).","DOI":"10.1145\/1966445.1966449"},{"key":"jdcf.2012040103-6","doi-asserted-by":"crossref","unstructured":"Biggs, S., & Vidalis, S. (2009). Cloud computing: The impact on digital forensic investigations. In Proceedings of the 4th International Conference for Internet Technology and Secured Transactions, London, UK (pp. 1-6).","DOI":"10.1109\/ICITST.2009.5402561"},{"issue":"1","key":"jdcf.2012040103-7","first-page":"63","article-title":"Cloud computing storms.","volume":"1","author":"S.Biggs","year":"2010","journal-title":"International Journal of Intelligent Computing Research"},{"key":"jdcf.2012040103-8","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.70"},{"key":"jdcf.2012040103-9","unstructured":"Butler, C. W., Heckman, C., & Thorp, A. (2010). Cloud computing: eDiscovery issues and other risk. Retrieved February 2, 2012, from http:\/\/www.orrick.com\/fileupload\/2740.pdf"},{"issue":"2","key":"jdcf.2012040103-10","article-title":"Getting physical with the digital investigation process.","volume":"2","author":"B.Carrier","year":"2003","journal-title":"International Journal of Digital Evidence"},{"key":"jdcf.2012040103-11","unstructured":"Carrier, B., & Spafford, E. H. (2004). An event-based digital forensic investigation framework. Paper presented at the Digital Forensic Research Workshop, Baltimore, MD."},{"key":"jdcf.2012040103-12","unstructured":"Detica. (2011, February). The cost of cyber crime. A Detica Report in Partnership with the Office of Cyber Security and Information Assurance in the Cabinet Office. Retrieved February 2, 2012, from http:\/\/www.cabinetoffice.gov.uk\/sites\/default\/files\/resources\/the-cost-of-cyber-crime-full-report.pdf"},{"key":"jdcf.2012040103-13","unstructured":"European Union. (2006). Directive 2006\/24\/EC of the European Parliament and of the Council of 15 March 2006 on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002\/58\/EC. Official Journal of the European Union, 15(4). Retrieved February 2, 2012, from http:\/\/eur-lex.europa.eu\/LexUriServ\/LexUriServ.do?uri=OJ:L:2006:105:0054:0063:EN:PDF"},{"key":"jdcf.2012040103-14","unstructured":"Gens, F. (2010). IDC Predictions 2011: Welcome to the New Mainstream (International Data Corporation White Paper, Doc No. 225878). Retrieved February 2, 2012, from http:\/\/www.idc.com\/research\/viewdocsynopsis.jsp?containerId=225878"},{"key":"jdcf.2012040103-15","doi-asserted-by":"crossref","unstructured":"Ghemawat, S., Gobioff, H., & Leung, S. T. (2003). The Google file system. In Proceedings of the 19th ACM Symposium on Operating Systems Principles, Bolton Landing, NY.","DOI":"10.1145\/945445.945450"},{"key":"jdcf.2012040103-16","unstructured":"Google. (2010). Google apps messaging and collaboration products. Retrieved February 2, 2012, from http:\/\/static.googleusercontent.com\/external_content\/untrusted_dlcp\/www.google.com\/en\/\/a\/help\/intl\/en-GB\/admins\/pdf\/ds_gsa_apps_whitepaper_0207.pdf"},{"key":"jdcf.2012040103-17","unstructured":"Google. (2011). Message security for Google Apps: Administration guide. Retrieved February 2, 2012, from https:\/\/ac-s9.postini.com\/help\/admin_msd\/administration_msd.pdf"},{"key":"jdcf.2012040103-18","unstructured":"Google Apps. (2011). Web-based email, calendar, and documents for teams. Retrieved February 2, 2012, from http:\/\/www.google.com\/apps\/intl\/en\/business\/index.html"},{"key":"jdcf.2012040103-19","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2009.06.015"},{"key":"jdcf.2012040103-20","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2010.11.001"},{"key":"jdcf.2012040103-21","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2006.06.004"},{"key":"jdcf.2012040103-22","doi-asserted-by":"crossref","unstructured":"Kamara, S., & Lauter, K. (2010). Cryptographic cloud storage. In Proceedings of the 14th International Conference on Financial Cryptograpy and Data Security, Tenerife, Canary Islands, Spain (pp. 136-149).","DOI":"10.1007\/978-3-642-14992-4_13"},{"key":"jdcf.2012040103-23","unstructured":"Kazarian, B., & Hanlon, B. (2011). SMB cloud adoption study Dec 2010 - Global Report: What will be the impact of cloud services on SMBs in the next 3 years? Retrieved February 2, 2012, from http:\/\/www.microsoft.com\/Presspass\/presskits\/commsector\/docs\/SMBStudy_032011.pdf"},{"key":"jdcf.2012040103-24","doi-asserted-by":"crossref","unstructured":"Khajeh-Hosseini, A., Greenwood, D., & Sommerville, I. (2010). Cloud migration: A case study of migrating an enterprise IT system to IaaS. In Proceedings of the IEEE International Conference on Cloud Computing, Miami, FL (pp. 450-457).","DOI":"10.1109\/CLOUD.2010.37"},{"key":"jdcf.2012040103-25","author":"I.Kruse","year":"2001","journal-title":"Computer forensics: Incident response essentials"},{"key":"jdcf.2012040103-26","author":"R. R.Krutz","year":"2010","journal-title":"Cloud security - A comprehensive guide to secure cloud computing"},{"key":"jdcf.2012040103-27","unstructured":"Marsico, C. V. (2004). Computer Evidence v. Daubert: The coming conflict. West Lafayette, IN USA: Purdue University, Center for Education and Research in Information Assurance and Security."},{"key":"jdcf.2012040103-28","doi-asserted-by":"crossref","unstructured":"Marty, R. (2011). Cloud application logging for forensics. In Proceedings of the ACM Symposium on Applied Computing, TaiChung, Taiwan (pp. 178-184).","DOI":"10.1145\/1982185.1982226"},{"key":"jdcf.2012040103-29","doi-asserted-by":"crossref","unstructured":"Mell, P., & Grance, T. (2011). The NIST definition of cloud computing. Cambridge, MA: National Institute of Standards and Technology. Retrieved February 2, 2012, from http:\/\/csrc.nist.gov\/publications\/nistpubs\/800-145\/SP800-145.pdf","DOI":"10.6028\/NIST.SP.800-145"},{"key":"jdcf.2012040103-30","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2011.03.002"},{"key":"jdcf.2012040103-31","unstructured":"Palmer, G. (2001). A road map for digital forensic research - Report from the First Digital Forensic Research Workshop (DFRWS). Utica, NY: Digital Forensic Research Workshop."},{"key":"jdcf.2012040103-32","author":"S.Pearson","year":"2010","journal-title":"Digital triage forensics: Processing the digital crime scene"},{"key":"jdcf.2012040103-33","unstructured":"Pring, B., Brown, R. H., Leong, L., Biscotti, F., Couture, A. W., & Lheureux, B. J. \u2026Liu, V. K. (2010). Forecast: Public cloud services, worldwide and regions, industry sectors, 2009-2014. Stamford, CT: Gartner. Retrieved February 2, 2012, from http:\/\/www.gartner.com\/id=1378513"},{"key":"jdcf.2012040103-34","unstructured":"Reilly, D., Wren, C., & Berry, T. (2010). Cloud computing: Forensic challenges for law enforcement. In Proceedings of the 5th International Conference for Internet Technology and Secured Transactions, London, UK (pp. 1-7)."},{"issue":"3","key":"jdcf.2012040103-35","article-title":"An examination of digital forensic models.","volume":"1","author":"M.Reith","year":"2002","journal-title":"International Journal of Digital Evidence"},{"key":"jdcf.2012040103-36","doi-asserted-by":"crossref","DOI":"10.1016\/B978-159749133-4\/50008-5","article-title":"Seizure of digital information","author":"A.Reyes","year":"2007","journal-title":"Cyber crime investigations: Bridging the gap between security professionals, law enforcement, and prosecutors"},{"key":"jdcf.2012040103-37","doi-asserted-by":"publisher","DOI":"10.1145\/1113034.1113074"},{"key":"jdcf.2012040103-38","doi-asserted-by":"crossref","unstructured":"Rogers, M. K., Goldman, J., Mislan, R., & Wedge, T. (2006). Computer forensics field triage process model. Journal of Digital Forensics, Security and Law, 1(2).","DOI":"10.15394\/jdfsl.2006.1004"},{"key":"jdcf.2012040103-39","doi-asserted-by":"crossref","unstructured":"Roschke, S., Cheng, F., & Meinel, C. (2009). Intrusion detection in the cloud. In Proceedings of the Eighth IEEE International Conference on Dependable, Autonomic and Secure Computing, Chengdu, China (pp. 729-734).","DOI":"10.1109\/DASC.2009.94"},{"key":"jdcf.2012040103-40","doi-asserted-by":"crossref","unstructured":"Roussev, V., Wang, L., Richard, G., & Marziale, L. (2009). A cloud computing platform for large-scale forensic computing. In Proceedings of the 5th IFIP WG 11.9 International Conference on Advances in Digital Forensics V, Orlando, FL (Vol. 306, pp. 201-214).","DOI":"10.1007\/978-3-642-04155-6_15"},{"key":"jdcf.2012040103-41","unstructured":"Ruan, K., Baggili, I., Carthy, J., & Kechadi, T. (2011). Survey on cloud forensics and critical criteria for cloud forensic capability: A preliminary analysis. In Proceedings of the 6th Annual Conference of the ADFSL Conference on Digital Forensics, Security and Law, Richmond, VA."},{"key":"jdcf.2012040103-42","doi-asserted-by":"crossref","unstructured":"Ruan, K., Carthy, J., Kechadi, T., & Crosbie, M. (2011). Cloud forensics. In Proceedings of the 7th IFIP WG 11.9 International Conference on Advances in Digital Forensics VII, Orlando, FL.","DOI":"10.1007\/978-3-642-24212-0_3"},{"issue":"38","key":"jdcf.2012040103-43","first-page":"38","article-title":"Fourth amendment search and the power of the hash.","volume":"119","author":"R. P.Salgado","year":"2005","journal-title":"Harvard Law Review"},{"key":"jdcf.2012040103-44","unstructured":"Schubert, L., Jeffery, K., & Neidecker-Lutz, B. (2010). The future of cloud computing: Opportunities for European cloud computing beyond 2010. European Commission Information and Society Theme - Expert Group Report. Retrieved February 2, 2012, from http:\/\/cordis.europa.eu\/fp7\/ict\/ssai\/docs\/cloud-report-final.pdf"},{"key":"jdcf.2012040103-45","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2004.01.005"},{"key":"jdcf.2012040103-46","unstructured":"Tabona, A. Z., & Glisson, W. B. (2011). Exploring solutions put forth to solve computer forensic investigations of large storage media. In Proceedings of the 6th International Annual Workshop on Digital Forensics & Incident Analysis, London, UK."},{"key":"jdcf.2012040103-47","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2010.03.002"},{"key":"jdcf.2012040103-48","unstructured":"The Law Commission. (2009). The admissibility of expert evidence in criminal proceedings in England and Wales - A new approach to the determination of evidentiary reliability (Consultation Paper No. 190). Retrieved February 2, 2012, from http:\/\/www.justice.gov.uk\/lawcommission\/docs\/cp190_Expert_Evidence_Consultation.pdf"},{"key":"jdcf.2012040103-49","unstructured":"The Open Cloud Manifesto Consortium. (2009). Open Cloud manifesto. Retrieved February 2, 2012, from http:\/\/www.opencloudmanifesto.org\/Open%20Cloud%20Manifesto.pdf"},{"key":"jdcf.2012040103-50","author":"J. R.Vacca","year":"2005","journal-title":"Computer forensics: Computer crime scene investigation"},{"key":"jdcf.2012040103-51","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2009.89"},{"key":"jdcf.2012040103-52","doi-asserted-by":"crossref","unstructured":"Wang, K. (2010). Using a local search warrant to acquire evidence stored overseas via the Internet. In Proceedings of the 6th IFIP WG 11.9 International Conference on Advances in Digital Forensics VI, Hong Kong (pp. 37-48).","DOI":"10.1007\/978-3-642-15506-2_3"},{"key":"jdcf.2012040103-53","doi-asserted-by":"publisher","DOI":"10.1016\/j.clsr.2005.02.007"},{"key":"jdcf.2012040103-54","unstructured":"Wauters, R. (2008). Amazon EC2 now available in Europe. Retrieved February 2, 2012, from http:\/\/techcrunch.com\/2008\/12\/10\/amazon-ec2-now-available-in-europe\/"},{"key":"jdcf.2012040103-55","doi-asserted-by":"crossref","unstructured":"Wolthusen, S. D. (2009). Overcast: Forensic discovery in cloud environments. In Proceedings of the Fifth International Conference on IT Security Incident Management and IT Forensics, Stuttgart, Germany (pp. 3-9).","DOI":"10.1109\/IMF.2009.21"},{"key":"jdcf.2012040103-56","unstructured":"Wyld, D. C. (2009). Moving to the cloud: An introduction to cloud computing in government. Armonk, NY: IBM Center for the Business of Government. Retrieved February 2, 2012, from http:\/\/www.businessofgovernment.org\/sites\/default\/files\/Moving%20to%20the%20Cloud.pdf"}],"container-title":["International Journal of Digital Crime and Forensics"],"original-title":[],"language":"ng","link":[{"URL":"https:\/\/www.igi-global.com\/viewtitle.aspx?TitleId=68408","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,6,1]],"date-time":"2022-06-01T19:45:18Z","timestamp":1654112718000},"score":1,"resource":{"primary":{"URL":"https:\/\/services.igi-global.com\/resolvedoi\/resolve.aspx?doi=10.4018\/jdcf.2012040103"}},"subtitle":["The Challenges of Cloud Computing in Digital Forensics"],"short-title":[],"issued":{"date-parts":[[2012,4,1]]},"references-count":57,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2012,4]]}},"URL":"https:\/\/doi.org\/10.4018\/jdcf.2012040103","relation":{},"ISSN":["1941-6210","1941-6229"],"issn-type":[{"value":"1941-6210","type":"print"},{"value":"1941-6229","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,4,1]]}}}