A relevance technical approach for screening the significance of IDS in cloud forensics

Abstract

Due to an exponential growth of technology with huge and huge amount of data which is generated and has to be processed and this data is not related to a single area which is related to multiple areas and also this raises the need for the storage of data, which emphasizes the importance of cloud, now every small industry or small organizations has moved maximum towards cloud. Storage of data in cloud has many advantages including which has accessing the data with respect to any place, with respect to any device with a minimal internet connection beside this there is a downfall with respect to the intruders who are considered as the major threat for the data stored in the cloud. The importance which is given for storage of data in the cloud the same has to be implemented for protection of data inside the cloud, well which sometimes failed to be achieved this stresses for the need of Intrusion Detection System. An Intrusion Detection System (IDS) also plays an important role during the process of Cloud Forensics. In This paper we have traced out the importance of IDS in Cloud Forensics by using a snort IDS which is an open source we have gone with the process of using snort by tuning the rules in snort according to our requirements. Where the intrusion activities are being sniffed by the IDS which are then detected by the Forensic Analysis tools and then they are being analysed during the forensic process.