分析了云取证技术所面临的挑战,提出了一种基础设施即服务(IaaS)云模型下的取证框架ICFF,并在开源IaaS云平台Eucalyptus中进行了实现,最后通过实验的方法对ICFF进行了验证分析。实验结果表明,该框架能够有效并快速地获取云平台中的证据数据。
Technical challenges of cloud forensics was summarized and a forensics framework under an infrastructure as a service(IaaS) cloud model called ICFF was proposed. Then, this framework on the open source iaaS cloud platform Eucalyptus was implemented. Finally, a test case to demonstrate the effectiveness of ICFF was designed. Experiments show that the framework can obtain evidence data in cloud platform effectively and efficiently.