Vsphere架构私有云取证方法研究及其实践

Forensic Investigation of Vsphere Structure in Private Cloud Computing Systems

文章通过研究目前主流的Vsphere架构体系及其文件系统特征,主要针对Vsphere架构私有云的网络架构和文件系统进行分析,研究其与传统取证环境的异同,在此基础上,提出了一种基于Vsphere私有云架构的取证方法,并成功应用于案件侦查实战。

By studying the structure of the current mainstream Vsphere system and it＇s file system characteristics, analysing Vsphere network architecture and file system in private cloud, researching their similarities and differences in evidence collecting between the private cloud and traditional environment, On the groundwork, we proposed an evidence-gathering techniques based on Vsphere private cloud architecture, and successfully applied to Case investigation.