Previous article in series – Digital Forensics: E-Discovery Preparing for a legal hold or e-discovery may include the following: Consideration of the SLA and contract agreements to ensure that investigations of cloud-based assets are permitted, or to check if prior notification and acceptance are required Contract agreements, explicitly stating the communication path between court participants…
Digital Forensics: E-Discovery
Previous article in series – Digital Forensics: Challenges & Recommendations What is E-Discovery? Electronic discovery (e-discovery) is the identification, preservation, collection, processing, review, analysis, or production of electronically stored information. Often it is the support mechanism and the impetus for investigations, data acquisition, and insight-driven initiatives. To properly manage e-discovery a multidisciplinary team needs to…
Digital Forensics: Challenges & Recommendations
Welcome to the fun world of Digital Forensics! *ahem* It’s even more fun on the Cloud. Gathering evidence is a crucial part of digital forensics, cloud or otherwise. Therefore, it is important to identify challenges before you begin the process. Key challenges to keep in mind are – The seizure of servers containing files from…
Corporate & Cloud Governance
Policies are the foundation of corporate governance. They require penalties as well as senior management sponsorship to be effective. Policies are created in response to a requirement such as a standard or requirement benchmark. This standard is the result of either a regulation, which is a legislative requirement, or a contractual requirement such as a…
Creating a notification for every time a file is uploaded to an S3 bucket
Step 1 – Create S3 bucket Navigate to Amazon S3 dashboard Click on Create bucket Bucket name: provide a unique name Leave everything else as default Click on Create bucket Step 2 – Create SNS Topic Navigate to Amazon SNS dashboard Click on Topics on the left menu Click on Create Topic Select Standard Topic…
QuickGuide: Allowing EC2 access to S3 and other AWS Services
Navigate to IAM Dashboard Click on Roles on the left menu Click on Create role Select AWS service as the type of trusted entity Select EC2 as the use case Click on Next: Permissions In the Search bar, type in the name of the service you want EC2 to access, for instance S3 or DynamoDB…
Cloud Service Agreement
There are thousands of cloud service providers in the marketplace with hundreds being added every day. Since there are no industry-wide required governance standards or service descriptions, the cloud service customer must closely review and understand the following cloud service contractual documents. Although details will vary, cloud service providers should always offer a cloud customer…
Security Considerations for Software as a Service (SaaS)
Previous article in series – Security Considerations for PaaS When SaaS is consumed from a public cloud service provider, the security options that the customer can control may be only at the application level. In that model, application security is the responsibility of the cloud service provider, but the customer retains responsibility for identity access…
Security Considerations for Platform as a Service (PaaS)
Previous article in the series – IaaS: Cloud Virtual Infrastructure Threats With the PaaS (platform as a service) model the vendor offers a complete development environment in which application developers can create and deploy their code. This avoids the need to build a server environment to run an application and the need to install a…
IaaS: Cloud Virtual Infrastructure Threats
Previous article in series – IaaS: Hypervisor Security Provisioning tools and VM templates are exposed to different attacks that attempt to create new unauthorized VMs or patch the VM templates to infect the other VMs that will be cloned from this template. These new categories of security threats are a result of the new, complex,…