Memory Dumps Cloud Forensics

The dataset contains memory dump data which is generated continuously. For the experiment wecarried out, we implemented the volatile data dump module which generated around 360 VM memorydump images of average size 1GB each. These data files are compressed to 79.5GB memory evidencedataset. Out of these preserved and stored memory dump dataset, 79 files of size 17.3GB weregenerated during the attack. This means the data 21.76% of data (in size) is potential evidence and thiscan improve the storage and the processing time during the forensics investigation. However, thesestatistics only depicts the current scenario of the simulation and subject to change as per the attackduration.Table 1 Bifurcation of the evidence dataSr No Description Number ofMemory DumpsCompressed Sizein GB1 Data generated incloud 360 79.52 Data generatedduring Attack 78 17.3

搜集汇总

背景与挑战

背景概述

该数据集包含云环境中的内存转储数据，共生成360个虚拟机内存映像（压缩后79.5GB），其中攻击期间的数据占21.76%（78个文件，17.3GB），可用于提升云取证调查中的存储和处理效率。