Regeneration of events using system snapshots for cloud forensic analysis

While cloud computing continues to advance as a technology, its security is still perceived as a major concern in the corporate world. Several approaches are being considered in order to resolve the security issues so that the maximum potential of cloud computing can be exploited. Cloud forensics is one such approach that attempts to provide the requisite tools for investigation and analysis of cloud security threats. In this context, we present a novel approach to analysis of cloud attacks through event regeneration. VNsnaps are used to take periodic snapshots of the virtual network environment (VNE) during cloud attacks which are detected by using fuzzy clustering techniques. These snapshots are later restored to regenerate the events of attack.