Limits to the Forensic Analysis of Container Applications in Cloud Environments

View Full Paper

Ask AI

Bookmark

Authors

Discussion

Investigation reveals limited forensic evidence in container applications with varying access levels, suggesting risk for incident responders.

Critically relevant forensic evidence is not available in cases of lower access levels, impacting response.
Investigation examined three AWS container deployment models and their access to forensic data during security incidents.
Forensic analysis in container environments reveals significant challenges due to design choices that limit access to information.
Cloud service providers must enhance accessibility to forensic evidence in lightweight deployment models to support incident response.

Schmid et al. (2025) studied this question.

View Full Paper

Ask AI

Bookmark

Investigation reveals limited forensic evidence in container applications with varying access levels, suggesting risk for incident responders.