Forensic Examination of Ceph-Reference-Cited by-同舟云学术

Forensic Examination of Ceph

Published:2023-07-20 Issue: Volume: Page:
ISSN:2692-1626
Container-title:Digital Threats: Research and Practice
language:en
Short-container-title:Digital Threats

Author:

Bausch Florian¹,Dewald Prof. Dr.-Ing. Andreas¹

Affiliation:

1. ERNW Research GmbH, Germany

Abstract

The concept of Software Defined Storage (SDS) has become very popular over the last few years. It is used in public, private, and hybrid clouds to store enterprise, private, and other kinds of data. Ceph is an open-source software that implements an SDS stack. This paper analyzes the data found on storage devices (OSDs 1 ) used to store Ceph BlueStore data from a data forensics point of view. The OSD data is categorized using the model proposed by Carrier into the five categories: file system, content, metadata, file name, and application category. It then describes how the different data can be connected to present useful information about the content of an OSD and presents the implementation of a forensic software tool for OSD analysis based on Ceph 12.2.4 luminous .

Publisher

Association for Computing Machinery (ACM)

Subject

Computer Networks and Communications,Computer Science Applications,Hardware and Architecture,Safety Research,Information Systems,Software

Link

https://dl.acm.org/doi/pdf/10.1145/3609862

Reference42 articles.

1. Margaret Rouse . Definition. software-defined storage (sds) , August 2017 . https://searchstorage.techtarget.com/definition/software-defined-storage, accessed 19.08.2018. Margaret Rouse. Definition. software-defined storage (sds), August 2017. https://searchstorage.techtarget.com/definition/software-defined-storage, accessed 19.08.2018.

2. Karan Singh . Erasure coding in ceph , April 2014 . https://karan-mj.blogspot.com/2014/04/erasure-coding-in-ceph.html, accessed 16.01.2023. Karan Singh. Erasure coding in ceph, April 2014. https://karan-mj.blogspot.com/2014/04/erasure-coding-in-ceph.html, accessed 16.01.2023.

3. ceph.com. Erasure code – ceph documentation , 2023 . https://docs.ceph.com/en/latest/rados/operations/erasure-code/, accessed 16.01.2023. ceph.com. Erasure code – ceph documentation, 2023. https://docs.ceph.com/en/latest/rados/operations/erasure-code/, accessed 16.01.2023.

4. ceph.com. Pool , pg and crush config reference – ceph documentation , 2023 . https://docs.ceph.com/en/quincy/rados/configuration/pool-pg-config-ref/, accessed 16.01.2023. ceph.com. Pool, pg and crush config reference – ceph documentation, 2023. https://docs.ceph.com/en/quincy/rados/configuration/pool-pg-config-ref/, accessed 16.01.2023.

5. Grid resource management---CRUSH