Memory Dumps Cloud Forensics

The dataset contains memory dump data which is generated continuously. For the experiment wecarried out, we implemented the volatile data dump module which generated around 360 VM memorydump images of average size 1GB each. These data files are compressed to 79.5GB memory evidencedataset. Out of these preserved and stored memory dump dataset, 79 files of size 17.3GB weregenerated during the attack. This means the data 21.76% of data (in size) is potential evidence and thiscan improve the storage and the processing time during the forensics investigation. However, thesestatistics only depicts the current scenario of the simulation and subject to change as per the attackduration.Table 1 Bifurcation of the evidence dataSr No Description Number ofMemory DumpsCompressed Sizein GB1 Data generated incloud 360 79.52 Data generatedduring Attack 78 17.3