Research on Electronic Data Forensics Model under Cloud Computing

With the continuous development of the cloud applications, some abuse behavior may occur in cloud computing environment, just like the increasing unauthorized operation of platform's administrators and users. The environment has a certain of characteristics, such as complexity of system, heterogeneity of resource, diversity of security threat, and etc. These characteristics will bring a new challenge to the electronic data forensics work in cloud computing environment. The research is to design a Data Refinement System which can be used in distributed cloud computing platform for judiciary; and a computer forensics model for mass data in cloud. A third-party forensic theoretical framework based on cloud computing is designed. The model can analyze and identify the user behavior from multiple levels, such as virtual layer, application layer, service layer, and etc. The key technology is to support data associated evidence analysis and cases incident reconstruction in a dynamic, real-time cloud platform, and the ability to isolate evidence in the process of obtaining evidence.