Author(s): Arwa Ibrahim Ahmed
Abstract: Cloud computing is one of the most prominent technological trends as it provides a number of digital storage and services. However, evidence acquisition and investigation of violations occurring in cloud environment is still a critical issue in cloud forensics. This paper develops an integrated framework that consists two main layers are Cloud Forensics Layer (Cloud Service Provider, law enforcement, forensics investigators and cloud users), and Multi Agent System (MAS) architecture layer that includes two agents: Cloud Acquiring Agent (CAA) and Cloud Forensics Agent (FCA). The model is then tested based on the Cloud Forensic Capability Matrix (CFCM) using a sample covered the cloud actors who are cloud forensic practitioners and experts from cloud users, CSPs, academia, cloud broker, cloud investigators, and law enforcement. The proposed framework was supported, providing preliminary evidence that the two layers can and should be integrated. The integrated framework helps build a conceptual bridge to the cloud forensics.