使用I-STRIDE确定云基础架构调查的培训需求
Determining Training Needs for Cloud Infrastructure Investigations using I-STRIDE
摘要：
随着越来越多的企业和用户采用云计算服务，安全漏洞将越来越多地被发现和利用。在调查云中的潜在犯罪事件方面存在许多技术和政治挑战。然而，安全专家仍然必须能够以有条不紊、严格和合法的方式获取和分析数据。这项工作将STRIDE基于资产的风险评估方法应用于云计算基础设施，以确定和评估组织应对和调查云计算环境中违规行为的能力。建议对STRIDE风险评估模型进行扩展，以帮助组织快速应对事件，同时确保尽可能获取最大数量的数字证据并确保其完整性。此外，所提出的模型允许组织在事件发生之前评估其事件响应者的需求和能力。
英文摘要：
As more businesses and users adopt cloud computing services, security vulnerabilities will be increasingly found and exploited. There are many technological and political challenges where investigation of potentially criminal incidents in the cloud are concerned. Security experts, however, must still be able to acquire and analyze data in a methodical, rigorous and forensically sound manner. This work applies the STRIDE asset-based risk assessment method to cloud computing infrastructure for the purpose of identifying and assessing an organization's ability to respond to and investigate breaches in cloud computing environments. An extension to the STRIDE risk assessment model is proposed to help organizations quickly respond to incidents while ensuring acquisition and integrity of the largest amount of digital evidence possible. Further, the proposed model allows organizations to assess the needs and capacity of their incident responders before an incident occurs.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
