云环境下电子数据调查与取证研究

Study of Electronic Data Investigation and Evidence Collection under Cloud Computing Environment

分析了云环境下电子数据调查取证所面临的机遇与挑战,并基于云计算参考架构,研究云计算环境下电子证据的采集途径,提出了基于SLA实现电子取证模型和在不同云部署环境中实现证据采集的主要方法。本架构对研发云环境下基于日志的电子数据调查与取证工具系统和技术具有重要的参考价值。

Technical opportunities and challenges which electronic data investigation and evidence collection faced under cloud environment are summarized. Based on cloud computing reference architecture, cloud computing digital forensics investigation and audit framework are established using the service level agreement （SLA） for electronic data investigation, and evidence collection and transaction reconstruction under cloud computing environment are also analyzed. This framework has important reference value for developing investigative and forensic auditing tools as well as techniques based on logs under cloud environment.