Forensic Implications of Virtualization Technologies

View Sample PDF

Author(s): Cosimo Anglano (Universitá del Piemonte Orientale “A. Avogadro”, Italy)
Copyright: 2010
Pages: 23
Source title: Handbook of Research on Computational Forensics, Digital Crime, and Investigation: Methods and Solutions
Source Author(s)/Editor(s): Chang-Tsun Li (University of Warwick, UK)
DOI: 10.4018/978-1-60566-836-9.ch018

Keywords: Digital Crime & Forensics / Information Science Reference / IT Security and Ethics / Security & Forensics

Purchase

View Forensic Implications of Virtualization Technologies on the publisher's website for pricing and purchasing information.

Abstract

In the recent past machine and application virtualization technologies have received a great attention from the IT community, and are being increasingly used both in the Data Center and by the end user. The proliferation of these technologies will result, in the near future, in an increasing number of illegal or inappropriate activities carried out by means of virtual machines, or targeting virtual machines, rather than physical ones. Therefore, appropriate forensic analysis techniques, specifically tailored to virtualization environments, must be developed. Furthermore, virtualization technologies provide very effective anti-forensics capabilities, so specific countermeasures have to be sought as well. In addition to the above problems, however, virtualization technologies provide also the opportunity of developing novel forensic analysis techniques for non-virtualized systems. This chapter discusses the implications on the forensic computing field of the issues, challenges, and opportunities presented by virtualization technologies, with a particular emphasis on the possible solutions to the problems arising during the forensic analysis of a virtualized system.

The IRMA Community

Research IRM

Forensic Implications of Virtualization Technologies

Purchase

Abstract

Related Content

IRMA Sponsors