云计算支持下的协作式数字取证技术

为解决网络环境下电子证据分散、取证分析效率低、协作难度大等问题,在分析计算机犯罪特点以及当前数字取证所面临的相关问题基础上,针对数字取证与分析的协同需求,设计了一种具有正循环反馈机制的云计算支持下的协作式数字取证模型,并详细论述了其设计思想和体系架构.最后,研究了模型的系统实现方法、电子证据云存储调度策略、基于封锁机制的并发分析任务调度.实验表明,协作式数字取证技术可有效提高数字取证工作效率和分析结果的准确性.

Collaborative Digital Forensics System Based on Cloud Computing

In order to solve the problems about decentralized electronic evidence, low efficiency of forensic analysis, cooperative forensics difficultly, etc. A collaborative digital forensics model with positive feedback loop mechanism based on cloud computing are designed according to the needs of digital discovery and analyze cooperatively, which is based on the characteristics of the computer crime and related problems of the current digital forensics. Then, design idea and architecture of the model are discussed in detail. Finally, the realization method and key techniques of the model are analyzed, such as scheduling policy for cloud storage and task scheduling for electronic evidence based on locking mechanism. Experiments show that collaborative digital forensics could effectively improve the efficiency of digital forensics and the accuracy of analysis results.