云计算环境与电子取证的研究

Research on Cloud Computing Environment and Electronic Forensics

近年来云计算和云应用悄然走进了人们的生活，云计算的迅猛发展不仅给社会带来了客观的经济效益，同时向云计算平台提出了云安全的巨大挑战。目前，云计算技术存在云计算不能得到明确的限制、没有安全规定的对应接口、云服务商工作人员没有明确的操作限制、共享存在隐患、数据隐私存在泄漏隐患、登录信息存在泄漏隐患等一系列问题。虽然云计算环境为电子取证带来了大量难题，但还是要遵循侦查取证的基本原理对云环境下的电子取证进行研究。云平台的技术特点与电子取证相结合的方法，最终得到云取证。云环境中可提供大规模的节点进行分布式数据处理，能够提高实时处理能力。利用云计算解决取证的相关技术已经成为信息技术和电子取证的发展趋势。主要研究和探讨云计算的大数据处理能力，并介绍在取证工作中所运用到的云取证技术和分布式kmeans数据挖掘算法。

At present, cloud computing technology, has the following challenges, cloud computing can not be explicitly limited, there are no security requirements corresponding interface, cloud service provider staff does not have explieit operational restrictions, there are hidden dangers, the existence of data privacy risks of leakage, login information leakage and a series of problems. Although the cloud computing environment for electronic evidence has brought a lot of problems, but it still has to follow the basic principles of investigation and evidence collection under the cloud envi- ronment of electronic evidence research. The technical characteristics of cloud platform and the electronic evidence has been combined,and ultimately get cloud evidence. Large-scale nodes can be distributed in the cloud environment for data processing, which can improve real-time processing capabilities. The use of cloud computing to solve the relevant technical problems of evidence has become the development trend of information technology and electronic evidence. This paper mainly studied and discussed the large data processing capability of cloud computing, and introduced cloud forensics and distributed k-means data mining algorithms used in forensics work.