云环境隐私侵犯取证研究

李维奉; 羌卫中; 李伟明; 邹德清

doi:10.11959/j.issn.2096-109x.2018004

您当前的位置：

首页 >

文章列表页 >

云环境隐私侵犯取证研究

学术论文 | 更新时间：2024-06-03

- 云环境隐私侵犯取证研究
- Research on forensics of privacy violations in cloud environment
- 网络与信息安全学报 2018年4卷第1期页码：26-35
- 作者机构：
- 作者简介：
  
  [ "李维奉（1991-），男，江西南昌人，华中科技大学硕士生，主要研究方向为信息安全。" ]
  [ "羌卫中（1977-），男，江苏南通人，博士，华中科技大学副教授，主要研究方向为信息系统安全。" ]
  [ "李伟明（1975-），男，湖南株洲人，博士，华中科技大学副教授，主要研究方向为信息安全。" ]
  [ "邹德清（1975-），男，湖南长沙人，博士，华中科技大学教授，主要研究方向为信息安全。" ]
- 基金信息：
  
  国家重点研发计划项目;The National Key Research ＆ Development (R＆D) Plan of China(2017YFB0802205)
- DOI：10.11959/j.issn.2096-109x.2018004
  中图分类号： TP393
- 网络首发：2018-01，
  
  纸质出版：2018-01-15
- 稿件说明：
移动端阅览
李维奉, 羌卫中, 李伟明, 等. 云环境隐私侵犯取证研究[J]. 网络与信息安全学报, 2018,4(1):26-35.

Weifeng LI, Weizhong QIANG, Weiming LI, et al. Research on forensics of privacy violations in cloud environment[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 26-35.
李维奉, 羌卫中, 李伟明, 等. 云环境隐私侵犯取证研究[J]. 网络与信息安全学报, 2018,4(1):26-35. DOI： 10.11959/j.issn.2096-109x.2018004.

Weifeng LI, Weizhong QIANG, Weiming LI, et al. Research on forensics of privacy violations in cloud environment[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 26-35. DOI： 10.11959/j.issn.2096-109x.2018004.

摘要

云计算是主流的信息系统技术，但是云计算环境下的用户隐私保护和隐私侵犯追踪取证一直是一个挑战。当前主流的云计算取证技术体系和标准并不成熟和完备，距离计算机取证的目标相去甚远。针对云环境下隐私侵犯取证，首先，给出了云取证和云隐私侵犯的研究现状和挑战；其次，着重分析了云环境下隐私取证的研究内容和技术路线；最后，提出了一个具体的面向云环境的隐私侵犯取证系统。

Abstract

Cloud computing is the mainstream information system technology

however

privacy protection of user and privacy violation tracking and forensics in the cloud computing environment have always been a challenge.The current mainstream cloud computing forensics system and standard are not mature and complete

and are far from the target of computer forensics.With the focus on privacy violation and forensics in the cloud environment

status and challenges of cloud forensics and cloud privacy violation were reported firstly.Then

the research content and technical route of privacy forensics in the cloud environments were analyzed.Finally

a specific privacy violation forensics system for cloud environments was presented.

关键词

Keywords

references

NIST cloud computing forensic science chanllengs [EB/OL ] . https://csrc.nist.gov/csrc/media/publications/nistir/8006/draft/documents/draft_nistir_8006.pdf https://csrc.nist.gov/csrc/media/publications/nistir/8006/draft/documents/draft_nistir_8006.pdf .

RUAN K , CARTHY J , KECHADI T , et al . Cloud forensics [C ] // IFIP International Conference on Digital Forensics . 2011 : 35 - 46 .

Mapping the forensic standard ISO/IEC 27037 to Cloud Computing [EB/OL ] . https://downloads.cloudsecurityalliance.org/initiatives/imf/Mapping-the-Forensic-Standard-ISO-IEC-27037-to-Cloud-Computing.pdf https://downloads.cloudsecurityalliance.org/initiatives/imf/Mapping-the-Forensic-Standard-ISO-IEC-27037-to-Cloud-Computing.pdf .

RUAN K , CARTHY J , KECHADI T , et al . Cloud forensics definitions and critical criteria for cloud forensic capability:An overview of survey results [J ] . Digital Investigation , 2013 , 10 ( 1 ): 34 - 43 .

ZARGARI S , BENFORD D . Cloud forensics:concepts,issues,and challenges [C ] // The third Conference on Emerging Intelligent Data and Web Technologies (EIDWT) . 2012 : 236 - 243 .

TAYLOR M , HAGGERTY J , GRESTY D , et al . Forensic investigation of cloud computing systems [J ] . Network Security , 2011 ( 3 ): 4 - 10 .

[EB/OL ] . http://www.guidancesoftware.com/encase-forensic http://www.guidancesoftware.com/encase-forensic .

[EB/OL ] . http://www.accessdata.com/solutions/digital-forensics/forensic-toolkit-ftk http://www.accessdata.com/solutions/digital-forensics/forensic-toolkit-ftk .

ZAWOAD S , HASAN R . Cloud forensics:a meta-study of challenges,approaches,and open problems [EB/OL ] . http://www.cryptome.org/2013/02/cloud-forensics.pdf http://www.cryptome.org/2013/02/cloud-forensics.pdf .

NANDA S , HANSEN R A . Forensics as a service:three-tier architecture for cloud based forensic analysis [C ] // The 15th International Symposium on Parallel and Distributed Computing (ISPDC) . 2016 : 178 - 183 .

谢亚龙 , 丁丽萍 , 林渝淇 , 等 . ICFF:一种IaaS 模式下的云取证框架 [J ] . 通信学报 , 2013 , 34 ( 5 ): 200 - 206 .

XIE Y L , DING L P , LIN Y Q , et al . ICFF:a cloud forensics framework under the IaaS model [J ] . Journal on Communications , 2013 , 34 ( 5 ): 200 - 206 .

周刚 . 云计算环境中面向取证的现场迁移技术研究 [D ] . 武汉:华中科技大学 , 2011 .

ZHOU G . Research on forensics-oriented site migration technology in cloud computing environment [D ] . Wuhan:Huazhong University of Science and Technology , 2011 .

LEE J , UN S . Digital forensics as a service:a case study of forensic indexed search [C ] // The International Conference on ICT Convergence (ICTC) . 2012 : 499 - 503 .

WEN Y , MAN X , LE K , et al . Forensics-as-a-service (faas):computer forensic workflow management and processing using cloud [C ] // The fifth International Conferences on Pervasive Patterns and Applications . 2013 : 1 - 7 .

SANG T , . A log based approach to make digital forensics easier on cloud computing [C ] // Intelligent System Design and Engineering Applications (ISDEA) . 2013 : 91 - 94 .

田庆宜 , 王琳 , 黄道丽 . Vsphere 架构私有云取证方法研究及其实践 [J ] . 信息网络安全 , 2011 , 9 : 44 - 46 .

TIAN Q Y , WANG L , HUANG D L . Research and practice of VSPhere architecture private cloud forensics methods [J ] . Netinfo Security , 2017 , 30 ( 1 ): 31 - 38 .

吴松洋 , 张熙哲 , 王旭鹏 , 等 . 基于 Hadoop 的高效分布式取证:原理与方法 [J ] . 电信科学 , 2017 , 30 ( 1 ): 31 - 38 .

WU S Y , ZHANG X Z , WANG X P , et al . Highly distributed distributed forensics based on hadoop:principles and methods [J ] . Telecommunications Science , 2017 , 30 ( 1 ): 31 - 38 .

ZHOU M , ZHANG R , XIE W , et al . Security and privacy in cloud computing:a survey [C ] // The sixth International Conference on Semantics Knowledge and Grid (SKG) . 2010 : 105 - 112 .

BURNSIDE R S . The electronic communications privacy act of 1986:the challenge of applying ambiguous statutory language to intricate telecommunication technologies [J ] . Rutgers Computer ＆Technology , 1987 , 13 ： 451 . 31 - 38 .

SHELDON J . Fair credit reporting act [J ] . National Consumer Law Center Consumer Credit ＆ Sales Legal Practice , 1994 , 65 ( 2 ): 595 - 609 .

EVideo Privacy Protection Act [EB/OL ] . http://epic.org/privacy/vppa/ http://epic.org/privacy/vppa/ .

GELLMAN R , . Privacy in the clouds:risks to privacy and confidentiality from cloud computing [C ] // The World privacy forum . 2012 .

CAVOUKIAN A . Privacy in the clouds [J ] . Identity in the Information Society , 2008 , 1 ( 1 ): 89 - 108 .

PEARSON S , . Taking account of privacy when designing cloud computing services [C ] // The 2009 ICSE Workshop on Software Engineering Challenges of Cloud Computing . 2009 : 44 - 52 .

PEARSON S , CHARLESWORTH A . Accountability as a way forward for privacy protection in the cloud [C ] // IEEE International Conference on Cloud Computing . 2009 : 131 - 144 .

SADEGHI A R , SCHNEIDER T , WINANDY M . Token-based cloud computing [C ] // The International Conference on Trust and Trustworthy Computing . 2010 : 417 - 429 .

WANG C , REN K , WANG J . Secure and practical outsourcing of linear programming in cloud computing [C ] // INFOCOM . 2011 : 820 - 828 .

XU Z , WANG C , REN K , et al . Proof-carrying cloud computation:the case of convex optimization [J ] . IEEE Transactions on Information Forensics and Security , 2014 , 9 ( 11 ): 1790 - 1803 .

ITANI W , KAYSSI A , CHEHAB A . Privacy as a service:privacy-aware data storage and processing in cloud computing architectures [C ] // Dependable,Autonomic and Secure Computing . 2009 : 711 - 716 .

SQUICCIARINI A , SUNDARESWARAN S , LIN D . Preventing information leakage from indexing in the cloud [C ] // The 3rd International Conference on Cloud Computing (CLOUD) . 2010 : 188 - 195 .

PEARSON S , SHEN Y , MOWBRAY M . A privacy manager for cloud computing [C ] // IEEE International Conference on Cloud Computing . 2009 : 90 - 106 .

MOWBRAY M , PEARSON S . A client-based privacy manager for cloud computing [C ] // The Fourth International ICST Conference on Communication System Software and Middleware . 2009 :5.

浏览量

3064

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

云计算取证模型

云计算多授权中心CP-ABE代理重加密方案

容器云中基于信号博弈的容器迁移与蜜罐部署策略

基于FANP的云用户行为信任评估优化机制

具有密文等值测试功能的公钥加密技术综述