Electronic Evidence Service Research in Cloud Computing Environment

摘要

With the increasing of computer crime incidence and the digitization of criminal means, the work of collecting electronic evidence has become the key to provide important clues and solve the problem. And the same time, the development of computer hardware technology has been increasing rapidly, and the storage capacity of disk is getting bigger and bigger. A problem in front of forensics officers is that how to analysis massive evidence information. Cloud computing platform has superior processing power. In this paper, we study electronic evidence service in the cloud environment, and use the Map Reduce model to build the prototype system of the cloud forensic platform. The system can search the disk image file by many types, which can help the forensics officers obtain the clue information of the case.