Disk Image Management System Based On Distributed Storage

With the continuous development of the times, the computer forensics technology has attracted more and more attention. Now the amount of data that computer forensics faces is growing much biger. The preservation and management of the digital data has been a new research area. This paper studies how to apply the cloud storage to computer forensics. which has theoretical significance.In this paper, the author gives some discussion for a series of issues such as the storage of electronic evidence, access control to the electronic evidence, the restore of the disk images, methods of disk image transmission on the LAN, reading data from disk images etc. It proposes a solution of disk image management based on distributed storage, through which organizations of different areas can share data between each other. In order to ensure the security of the electronic evidence and user’s information, an improved attribute-based access control scheme is put into the system. This would not only alleviate the burden of the cloud storage service provider, but also improve the security of the stored data. In order to facilitate the latter part of the corresponding disk reprocessing, the autor proposes a model through which the system user can freely restore disk image stored in cloud to hard disk to form a forensics disk.The main contribution of this paper is as follows:Proposes a third-party certification based disk image management model of computer forensics, through which data can be stored securely in a distributed storage environment; Presents a privacy preserving access control scheme for clouds. The scheme not only provides access control but also authenticates users who store information in the cloud. The cloud however does not know the identity of the user who stores information. Designs and implements the disk image extraction system; Designs and implements a disk image management system; Designs a system to share data between Windows and Linux mirror image; Designs to achieve the DOS partition restoring system.In all,the system is a combination of computer forensics and cloud storage with a third party assists for the access control. The System has good scalability and is a practical guidance to electronic evidence management system.