Abstract Cloud computing is used by consumers to access cloud services. Malicious actors exploit vulnerabilities of cloud services to attack consumers. The link between these two assumptions is the cloud service. Although cloud forensics assists in the direction of investigating and solving cloud-based cyber-crimes, in many cases the design and implementation of cloud services fall back. Software designers and engineers should focus their attention on the design and implementation of cloud services that can be investigated in a forensic sound manner. This paper presents a methodology that aims on assisting designers to design cloud forensic-enabled services. The methodology supports the design of cloud services by implementing a number of steps to make the services cloud forensic enabled. It consists of a set of cloud forensic constraints, a modeling language expressed through a conceptual model and a process based on the concepts identified and presented in the model. The main advantage of the proposed methodology is the correlation of cloud services’ characteristics with the cloud investigation while providing software engineers the ability to design and implement cloud forensic-enabled services via the use of a set of predefined forensic-related tasks.

中文翻译：

---

用于设计支持云取证的服务 (CFeS) 的框架

摘要 云计算被消费者用来访问云服务。恶意行为者利用云服务的漏洞攻击消费者。这两个假设之间的联系是云服务。尽管云取证有助于调查和解决基于云的网络犯罪，但在许多情况下，云服务的设计和实施会退步。软件设计人员和工程师应将注意力集中在可以以合理的方式进行调查的云服务的设计和实施上。本文提出了一种旨在帮助设计人员设计支持云取证的服务的方法。该方法通过实施多个步骤来支持云服务的设计，使服务能够进行云取证。它由一组云取证约束组成，通过概念模型表达的建模语言和基于模型中识别和呈现的概念的过程。所提出的方法的主要优点是云服务的特征与云调查的相关性，同时为软件工程师提供了通过使用一组预定义的取证相关任务来设计和实施支持云取证的服务的能力。