面向IaaS云服务基础设施的电子证据保全与取证分析系统设计

随着云技术在计算机网络领域的广泛应用，云环境下的安全审计与电子取证需求也日益迫切。由于云取证与传统计算机取证在取证环境、证据获取及证据分析方面有较大区别，目前尚缺乏有效的针对云的电子取证方法及技术手段，云系统作为一种信息系统，其可审计性得不到保证。文章设计了一套新的云取证系统，面向IaaS云服务的基础设施，通过采集终端对云系统中虚拟机进行监控并主动采集证据，同时将采集到的证据集中存放于一处，取证系统实时取证、证据集中保全的特性可以有效应对云环境下证据易失、证据提取困难的特点，达到高效取证。

Electronic Evidence and Forensic Analysis System Design of IaaS Cloud Service-oriented Infrastructure Preservation

With the cloud technology is widely used in the ifeld of computer networking, security, audit and e-discovery needs of cloud environments is increasingly urgent. As the cloud with traditional computer forensics evidence is quite different in the forensic environment, obtaining evidence and evidence analysis, the current lack of effective methods for cloud forensics and electronic techniques, the cloud system as an information system, which was auditability can not be guaranteed. This paper presents a new set of cloud forensics systems for infrastructure IaaS cloud services, data collection terminals through cloud system virtual machine monitor and actively collect evidence, and the evidence collected will be stored centrally in one place, forensics system Real-time forensics, evidence preservation features centralized cloud environment can effectively deal with volatile evidence, the evidence dififcult to extract features, to achieve efifcient forensics.