大数据时代电子取证分布式架构的设计与实践

Design and Practice of Distributed Architecture of Digital Forensics in Era of Big Data

伴随着移动互联网、物联网以及云计算等技术的迅猛发展，社会由IT时代进入了DT时代，电子数据取证面临大数据时代带来的挑战。分布式计算、分布式存储以及分布式数据库技术为分布式取证系统的建设提供了技术基础。结合电子取证的业务流程设计开发了一套完整的分布式取证系统，并成功运用到电子取证的实战过程中，提高了大容量检材的取证分析效率。

With the rapid development of mobile Internet, Internet of things and cloud computing technology, we have entered the era of the DT from the IT era,while electronic data forensics is facing challenges brought by the big data era. Distributed computing, distributed storage and distributed database technology provide the technical basis for the construction of distributed system. In this paper, a set of complete distributed forensic system was developed based on the distributed technology, and it can be used in the process of electronic evidence collection to improve the efficiency of the collection of large capacity.