万国根
云环境下电子数据调查与取证研究
Study of Electronic Data Investigation and Evidence Collection
under Cloud Computing Environment
摘 要 分析了云环境下电子数据调查取证所面临的机遇与挑战,并基于云计算参考架构,研究云计算环境下电子证据的采集途径,提出了基于SLA 实现电子取证模型和在不同云部署环境中实现证据采集的主要方法。本架构对研发云环境下基于日志的电子数据调查与取证工具系统和技术具有重要的参考价值。
关键词 云计算 电子数据 调查 取证
Abstract: Technical opportunities and challenges which electronic data investigation and
evidence collection faced under cloud environment are summarized. Based on cloud
computing reference architecture, cloud computing digital forensics investigation and
audit framework are established using the service level agreement (SLA) for electronic
data investigation, and evidence collection and transaction reconstruction under cloud
computing environment are also analyzed.This framework has important reference value
for developing investigative and forensic auditing tools as well as techniques based on
logs under cloud environment.
Keywords: cloud computing; electronic data; investigation; evidence collection