Digital Forensics Model for Mobile VoIP Cloud Computing Investigation

Abstract

Voice over IP on Mobile Cloud Computing (mVoIPcc) is gaining acceptance as a technology for transmitting voice or video data over IP based cloud networks. This can be attributed to the ability to rapidly develop and deploy VoIP application by mobile application developers and the free billing features of VoIP in correlation to the traditional circuit switch network. This creates two precarious precedents, first of which is attack associated with vulnerability on VoIP protocols such as call management protocols (SIP) and Media Delivery Protocols (RTP). Secondly is the forensics analysis challenge to investigators due to the converged attribute of mVoIPcc communications which are not bounded to any physical location. The latter is further complicated by Cloud Service Providers (CSPs) reluctance to provide vital digital forensics data within the CSPs internal networks. This paper reveals VoIP Digital Forensics Models (f VoIP-DEFSOP and VoIP-NFDE) for detecting, reconstructing and investigating compromised VoIP systems. A hybrid cloud forensics investigation model, which consist of Forensic-as-a-Service provided by the CSPs, and investigation model that can be adapted to cloud forensics called mVoIPc-IM.