基于云架构的计算机取证研究

摘要

取证证据必须遵循及时、合法、多备份、远离不安全因素等原则,传统计算机取证无法满足海量证据存储、及时分析的需求。云计算具有高效计算、虚拟化、并行处理等特点,适于解决当前计算机取证领域新的需求。基于云架构的计算机取证模型具有能够解决海量数据分析的问题、提高设备利用率、解决取证人才紧缺以及缩短取证时间等优势。但云的复杂环境存在诸多不安全因素和隐私问题,对计算机取证具有极大的挑战,应对这些挑战亟待业界人员的共同努力。%Forensic evidence must be prompt,legal,multi-backuped,far away from insecure causes,and so on.Traditional computer forensic cannot meet the need of massive evidence storage and timely analysis.Cloud computation has several features,e.g.efficient computation,virtualization,and parallel processing.It agrees with the new need of computer forensic.The computer forensic model,which bases on cloud computation,solves the problem of huge data analysis,improves the equipment utilization rate and shortens the forensics time.A lot of insecure elements and privacy exist in cloud＇s complicated environment,challenging computer forensics.It demands the active participation of relevant personnel.