Cloud Storage Forensics


  • Darren Quick, Darren Quick is an Electronic Evidence Specialist in the Electronic Crime Section of the South Australia Police, and a PhD Scholar at the University of South Australia.
  • Ben Martini, Ben Martini is the Digital Forensics Research Administrator in the Information Assurance Research Group and PhD Scholar at the University of South Australia.
  • Raymond Choo, Fulbright Scholar and Senior Lecturer, University of South Australia, Research Director, Cloud Security Alliance, Australia Chapter

To reduce the risk of digital forensic evidence being called into question in judicial proceedings, it is important to have a rigorous methodology and set of procedures for conducting digital forensic investigations and examinations. Digital forensic investigation in the cloud computing environment, however, is in infancy due to the comparatively recent prevalence of cloud computing.

Cloud Storage Forensics presents the first evidence-based cloud forensic framework. Using three popular cloud storage services and one private cloud storage service as case studies, the authors show you how their framework can be used to undertake research into the data remnants on both cloud storage servers and client devices when a user undertakes a variety of methods to store, upload, and access data in the cloud. By determining the data remnants on client devices, you gain a better understanding of the types of terrestrial artifacts that are likely to remain at the Identification stage of an investigation. Once it is determined that a cloud storage service account has potential evidence of relevance to an investigation, you can communicate this to legal liaison points within service providers to enable them to respond and secure evidence in a timely manner.

View full description


Information Security professionals of all levels, digital forensic and e-discovery researchers and practitioners, law enforcement agencies, and an academic audience among postgraduate and undergraduate students studying digital forensics and e-discovery.


Book information

  • Published: December 2013
  • Imprint: SYNGRESS
  • ISBN: 978-0-12-419970-5


"The authors discuss the challenges that the use of cloud computing presents for investigators, and propose a framework to support forensic investigations that involve cloud storage…This is a good, concise work on a subject of growing importance."--Computing Reviews,July 21 2014

"...excellently written and categorized for each facet of forensics and security issues...Rarely is a book a valuable addition to your collection from both research and industrial perspectives."--Computing Reviews,July 23 2014

Table of Contents

  1. Introduction
  2. Cloud Forensic Frameworks
  3. Public Cloud Storage Services
  4. Cloud Computing and Digital Forensics
  5. Challenges, Including Legal
  6. Contributions: Framework and the Analysis
  7. Private Cloud Storage Services
  8. Conclusion and Future Work