A blockchain-based process provenance for cloud forensics

Because of the distributed nature of cloud computing, the data of cloud may be stored and processed across jurisdictional borders. In such case, collecting digital evidence from cloud computing requires multiparty cooperation. However, as far as we known, there is still no available technic approach for improving the trustworthy of the interaction records of all stakeholders in cloud forensics. This work proposed a process provenance, which provides proof of existence and privacy preservation for process records by using technologies of blockchain and cryptography group signature. The process provenance enhances the trustworthy of the chain of custody for cloud forensics.