Research And Implementation Of Digital Forensics Under Cloud Computing Environment

Along with the development of large-scale use of cloud computing and cloud applications, more and more of various crimes appearance under the cloud computing platforms. The traditional electronic forensics methods are basically for a single terminal, but cloud platforms are network-based environment, and the process to electronic evidence also extends to the network. Under the cloud environment Electronic forensics not only considering the object in the traditional sense, but also need to consider the communications equipment, safety equipment, such as virtual machines, service providers and third parties involved in the course are required to assist in the forensic process at the same time. The traditional computer forensics method is relatively backward, can not meet the needs of electronic evidence in a cloud environment, which need to find new ways to use the new tools.With the development of forensic technology, people have found some tangible evidence of models and methods available. General forensic methods are divided into five levels : evidences found layer, forensics fixed layer, evidence abstraction layer, evidence analysis layer, and evidence presented layer, this issue primarily concerned with three levels of functionality, according to the basic functionality i divided the layer into three levels: basic service layer, evidence accesss layer, and evidence supervision layer. In the design and implementation of cloud computing platforms electronic forensics. Open source cloud computing platform cloudfoundry are used, how to conduct safe and effective forensics work under cloudfoundry, this open source PaaS cloud computing platform environment is the main purpose of this subject.In the end, on the basis of the key technologies related to cloud computing and electronic evidence.Using a framework for secure electronic forensics model development to achieve a usable forensic software, and tested the system verifies the cloud environment the feasibility of electronic evidence.