Server Virtualization Acquisition Using Live Forensics Method

DOI

10.2991/iccelst-st-19.2019.4How to use a DOI?

Keywords

Digital forensics, Acquisition, Server Virtualization, Live Forensic

Abstract

Server virtualization is a technology that can run multiple operating systems simultaneously on one computer. The emergence of server virtualization invites a new crime gap that is different from the challenge of finding clues and digital evidence in uncovering cases of crime. This certainly makes it difficult for investigators to make acquisitions of one of the operating systems in server virtualization without disturbing and shutting down the computer given the importance of the server. So far, acquisition techniques are generally used singly which only contains one operating system. Therefore, it is necessary to have a technique to acquire server virtualization by using the live forensics method without interrupting or shutting down other running operating systems. The use of the live forensics method to acquire server virtualization is done by applying three acquisition techniques. Three acquisition technique models are carried out by acquiring one of the operating systems that are in the virtual machine on server virtualization through the Proxmox server without turning off the other operating systems that are running. Of the three acquisition models that have been tested, it is known that there are two models of acquisition techniques that are well used and recommended based on the situation and conditions that are occurring.

Copyright

© 2019, the Authors. Published by Atlantis Press.

Open Access

This is an open access article distributed under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/).

Download article (PDF)

TY  - CONF
AU  - Soni
AU  - Yudi Prayudi
AU  - Bambang Sugiantoro
AU  - Didik Sudyana
AU  - Harun Mukhtar
PY  - 2019/12
DA  - 2019/12
TI  - Server Virtualization Acquisition Using Live Forensics Method
BT  - Proceedings of the International Conference of CELSciTech 2019 - Science and Technology track (ICCELST-ST 2019)
PB  - Atlantis Press
SP  - 18
EP  - 23
SN  - 2352-5401
UR  - https://doi.org/10.2991/iccelst-st-19.2019.4
DO  - 10.2991/iccelst-st-19.2019.4
ID  - 2019/12
ER  -