Using Open Source Based Distributed Agents to Perform Digital Investigation in Virtual Environments

Abstract

To solve the challenges of digital investigation in virtual environments, we propose the use of distributed agents to ensure valid and continuous network traffic observations in these environments. As one of the most relevant new evolution in information technology, cloud computing demands a flexible and highly dynamic infrastructure, provided by the virtualization of systems, networks and storage. However investigating computer related crime in these environments a necessity. Current techniques like computer or network forensic investigation are not suitable for these environments. The migration of virtual machines changes the environment permanently, thus every running investigation is aggravated. Our approach of open source based, distributed agents is able to implement viable investigations in these virtual environment.