Dissertation Defense

Digital Forensics for
Infrastructure-as-a-Service Cloud Computing

Josiah Dykstra

10:00am Tuesday, 16 April 2013, ITE 325b

We identify important issues in the application of digital forensics to Infrastructure-as-a-Service cloud computing and develop new practical forensic tools and techniques to facilitate forensic exams of the cloud. When investigating suspected cases involving cloud computing, forensic examiners have been poorly equipped to deal with the technical and legal challenges. Because data in the cloud are remote, distributed, and elastic, these challenges include understanding the cloud environment, acquiring and analyzing data remotely, and applying the law to a new domain. Today digital forensics for cloud computing is challenging at best, but can be performed in a manner consistent with federal law using the tools and techniques we developed.

The first problem is understanding how and why criminal and civil actions in and against cloud computing are unique and difficult to prosecute. We analyze a digital forensic investigation of crime in the cloud, and present two hypothetical case studies that illustrate the unique challenges of acquisition, chain of custody, trust, and forensic integrity. Understanding these issues introduces legal challenges which are also important for federal, state, and local law enforcement who will soon be called upon to conduct cloud investigations.

The second problem is the lack of practical technical tools to conduct cloud forensics. We examine the capabilities for forensics today, evaluate the use of existing tools including EnCase and FTK, and discuss why these tools are incapable of trustworthy cloud acquisition. We design consumer-driven forensic capabilities for OpenStack, including new features for acquiring trustworthy firewall logs, API logs, and disk images.

The third problem is a deficit of legal instruments for seizing cloud-based electronically-stored information. We analyze the application of existing policies and laws to the new domain of cloud computing by analyzing case law and legal opinions about digital evidence discovery, and suggest modifications that would enhance cloud the prosecution of cloud-based crimes. We offer guidance about how to author a search warrant for cloud data, and what pertinent data to request.

This dissertation enhances our understanding of technical, trust, and legal issues needed to investigate cloud-based crimes and offers new tools and techniques to facilitate such investigations.

Committee: Dr. Alan T. Sherman (Chair), Dr. Charles Nicholas, Dr. Richard Forno, Dr. Simson Garfinkel (Naval Postgraduate School), Mr. Donald Flynn, JD (Department of Defense Cyber Crime Center)

The elections for both the IEEE Undergraduate Student Branch and IEEE Graduate Student Branch Executive Boards have been scheduled for Friday, April 19th, 4.00pm to 5.00pm, room TBA. This is our regular meeting time. Below you will find more information on the election process, including the procedure to run for an Officer position.

IEEE Undergraduate Student Branch Officer positions include the following.

• Chair: Will be responsible for leading the IEEE Undergraduate Student Branch overall. S/he will also be responsible for representing the IEEE USB in General Body meetings and Executive Board meetings, and delegating responsibilities for various task. Events and activities must be approved by the Chair before sent to committees and funds must be approved before being forwarded to the Treasurer.
• Vice-Chair: Will be responsible for assisting the Chair in leading the IEEE USB and helping to run the branch smoothly. If the Chair is not present, the VP will take upon her/his responsibilities.
• Secretary: Will be responsible for taking minutes at meetings, keeping track of undergraduate student attendance and reporting the activities to the branch. S/he will be the point person for external relationships.
• Treasurer: Will manage the accounts and funds for the IEEE USB. S/he’ll be responsible for attending the SGA treasurer training session, and working with the Executive Board to generate a budget plan.
• Member At Large: Will support the other executive board members by facilitating their responsibilities as well as managing member recruitment/retention, managing fundraising activities in cooperation with the Treasurer and developing and managing projects.

IEEE Graduate Student Branch Officer positions include the following.

• Chair: Will be responsible for leading the IEEE Graduate Student Branch overall. S/he will also be responsible for representing the GSO in the GSA Senate meetings and external events. Funds must be approved by the Chair before being forwarded to the Treasurer.
• Vice-Chair: Will be responsible for assisting the Chair in leading the IEEE GSB and helping her/him to run the branch smoothly.
• General Secretary: Will be responsible for reporting the activities to the IEEE SB GSA. S/he will be the point person for external relationships.
• Treasurer: Will manage the accounts and funds for the IEEE GSB. S/he’ll be responsible for the annual budget report along with the payments.

To run for one of the above positions you must be a grad/undergrad student in good academic status, be subscribed to our mailing list, and send me (Sorry, you need javascript to view this email address. ) a small description (no more than 100 words) about you and why should other members vote for you, no later than next Thursday, April 11th, by 12.00pm (noon). You can only run for one position.

These descriptions will be compiled and sent out to the entire mailing list no later than the following Friday, April 12th. Each candidate will be given two minutes during that Friday's meeting to make a brief speech.

The election process will be supervised by our advisor, Dr. Choa.

IMPORTANT

• if you win, you MUST be an official IEEE member or become one within a week after the election date.
• to vote, you must present your UMBC ID and the email that you used to subscribe to our mailing list.

Please come and vote on the 19th to ensure that your voice is heard, and consider running for one of the positions. If you have any concerns or questions about the election process, please let Jorge Teixeira (Sorry, you need javascript to view this email address. ) know ASAP.

On behalf of the UMBC IEEE GSB and UMBC IEEE USB Executive Boards,

UMBC IEEE Student Branch, Chair
Jorge Teixeira

 The Baltimore Station is honored and excited to announce that they have been chosen to compete against three other nonprofits across the country in the Home Depot Aprons in Action contest this month! Aprons in Action is an online program from The Home Depot Foundation, which provides significant funds to nonprofit organizations dedicated to improving the homes and lives of U.S. military veterans.

The winner will receive $25,000 from The Home Depot Foundation, so they need your help to make sure The Baltimore Station comes out on top! Let’s help The Baltimore Station join the Ravens, Orioles and Blast to keep the winning streak alive in Baltimore!

Here’s what you can do:

1.         Go to www.baltimorestation.org/vote. This will take you to the Home Depot Aprons in Action application in Facebook.

2.         Select The Baltimore Station and VOTE!

3.         Vote once a day, every day during the month of April.

4.         Get more votes from your friends, family, neighbors and strangers!  Tell them about the contest by sharing it on your Facebook page, forwarding this email, picking up the phone and giving them a call – they need all the help they can get to win and continue supporting the veterans who need our help the most!

To win the $25,000 prize would forever impact The Baltimore Station and help improve the quality of life for the 144 homeless veterans currently in the program. If they are fortunate enough to win the prize, a team of community volunteers, program residents, donors, board members and organization staff will partner with Team Depot for a volunteer day to rejuvenate and repair many areas of the organization’s two facilities, which are the homes of veterans who are turning their lives around.

For more information, you can watch this quick video:   http://www.mediafire.com/?caen66aauyjypd4

Remember to cast your vote on Facebook once a day, every day this month so we can keep the winning streak alive in Baltimore!   I’ve also included some sample Facebook posts that you can use on your own page if you would like to share this contest with your network.  Thanks for your help and support!

OUT for Work Summer 2013 Internship Program

OUT for Work is a nonprofit organization with a mission to educate, prepare, and empower LGBTQ college students for the transition from academia to the workplace.  We do this by organizing career conferences, events, and providing tools and resources to college and university students across the country. We also reach out to LGBTQ safe and inclusive companies and organizations and bring them together to help educate and act as resources to prepare students.  
What is the OUT for Work internship program?
OUT for Work offers internships to all graduate, undergraduate, as well as recently graduated students covering a variety of disciplines. 
Internships are located in the Washington, D.C. office. OUT for Work offers public transportation travel cost reimbursements, however this is not a paid internship. Course credit for the internship is offered depending on the policies of the particular institution the student is attending. The status of a particular internship as credit will be determined before an internship is offered. 

Who can apply for OUT for Work internships?

We are looking specifically for individuals to fill two internship positions this summer:

1) Media/ public relations and outreach liaison – this person will focus on communications and press done by OUT for Work through social networking sites. This person will be responsible for maintaining the sites as well as posting articles and information about upcoming events and programs. This person will also keep in touch with our members and followers and do research to find interesting articles to promote, organize press releases about upcoming projects, publications, and events as well as creatively find new ways for OUT for Work to connect with list-servers, databases, and followers.

2) Research & Development Assistant – this person will maintain the up-to-date level of our databases, upload them into our online database system, maintain files and documents, while also assisting in archiving our resources, including websites, links, articles, organizations we are involved with, past conferences and programs, and more. This person will also keep past attendees in touch with OUT for Work, making them feel connected to our programs as well as other projects and assignments as needed.

Successful candidates must have the following skills:
-Knowledge of and commitment to LGBTQ issues. 
-Strong communication skills, both orally and in writing. 
-Computer proficiency for word processing, database work, e-mail and Web research. 
-Desire and commitment to work in a environment where commitment to diversity based on race, sex, ethnic origin, age, sexual orientation, gender identity, and physical ability is an important institutional value. 

How do I apply for an OUT for Work Internship? 
Please submit:
1. A cover letter stating: 
o	The approximate dates and times you are available 15-20hrs per week during the upcoming summer. 
o	Why you would like to work as an OUT for Work intern. 
o	What you think you can contribute to OUT for Work through your work as an intern. 
2.	Your resume 

E mail to: alex@outforwork.com before April 30th, 2013
Duration of internship: June  3rd – August 23rd, 2013

CareFirst BlueCross BlueShield is the largest health insurer in the mid-Atlantic region, serving over three million members in Maryland, DC and Northern Virginia.  Our interns work on a part time basis in the fall and up to full time in the summer.  As the leading HealthCare Company we teach our interns best practices and procedures for creating and maintaining HealthCare information systems.

Qualifications:

Must be a student enrolled in an accredited college or university either junior or senior, will accept qualified sophomores, looking for GPA 3.0 or above. Majors Information Systems, Technology, Computer Science or related field. 

Exposure to Computer Science, Engineering, or Data Analysis / Survey Design preferred but not required.  Depending on the area of IT, any of the following may be required:

Abilities/Skills:

The ability to work independently and in small teams is necessary.  Good oral and written communications abilities are necessary. Strong Analytical and Organizational skills are required.  

We are looking for students who can work up to 20 (3 days/week) hours for the fall and potentially full time for the summer.

MUST BE AUTHORIZED TO WORK IN THE US WITHOUT SPONSORSHIP

Department:  eBusiness Solutions

We are an Equal Employment Opportunity/Affirmative Action Employer and ADA compliant

To apply search Intern at:

www.carefirst.com/careers

UMCB CMSC alumnus Golois Mouelet is recruiting for software developers for RDA Corporation at 5pm-6:30pm on Tuesday, April 9th in troom 331 of the Commons.  He would like to meet with seniors and juniors.

RDA is launching a new software development center in Hunt Valley MD. They are looking for software developers who would like to expand their skills while learning from industry experts, and work on a variety of leading edge solutions (e.g. Web, Portal, Cloud, Mobile, and more) in a collaborative environment. They seek candidates with a strong desire to learn, a passion for technology, and a commitment to quality. Ideally, you will have a minimum of one year of development experience and a bachelor’s degree in Computer Science, but if you are excited about software development, have a go-getter personality, and skills you can demonstrate, they would like to meet you.

See this flier for more information: RDA information and recruiting

UMCB CMSC alumnus Golois Mouelet is recruiting for software developers for RDA Corporation at 5pm-6:30pm on Tuesday, April 9th in troom 331 of the Commons.  He would like to meet with seniors and juniors.

RDA is launching a new software development center in Hunt Valley MD. They are looking for software developers who would like to expand their skills while learning from industry experts, and work on a variety of leading edge solutions (e.g. Web, Portal, Cloud, Mobile, and more) in a collaborative environment. They seek candidates with a strong desire to learn, a passion for technology, and a commitment to quality. Ideally, you will have a minimum of one year of development experience and a bachelor’s degree in Computer Science, but if you are excited about software development, have a go-getter personality, and skills you can demonstrate, they would like to meet you.

See this flier for more information: RDA information and recruiting

Here is UMBC President Freeman Hrabowski's talk at the 2013 TED conference. He is, as usual, very inspirational. We are truly lucky to have him leading our university.

"If a student has a sense of self, it’s amazing how their dreams and values can make all the difference in the world."

Look for his mention of computer science and women in IT near the end.