网格环境下的取证研究

Forensics Research in Grid Environment

网格是构筑在Internet上的一组新兴技术,它将高速互联网、高性能计算机、大型数据库、传感器和远程设备等融为一体,提供透明的计算、存储功能。随着网络技术的发展,保护网络及其资源不受恶意程序的破坏也就越来越重要,而在针对网格的攻击发生后,安全人员必须具备处理、恢复并且获得证据的能力。本文在讨论计算机网格安全与取证概念的基础上,结合IDS入侵检测技术,.通过对网格安全架构与实时取证技术的深入研究,提出了一种网格环境下的取证模型,并进行了相应分析与论证。

Grid is a group of new and emerging technologies based on the Internet, it melted high-speed Internet, high-performance computers, large scale databases, integrating sensors and remote devices and provide a transparent calculations, the storage capabili- ties.With the development of Internet technology, the protection of networks and their resources against malicious damage is becoming more and more important, after the attack happens, grid security teams must have the ability handling, recovering and obtaining evi- dences.Based on the discussion of grid security and the concept of evidence, combinating IDS technology, Through the in-depth tech- nical study of grid security architecture and real-time evidence, this article Presents a grid environment model of forensics and Cor- responding analysis and feasibility studies.