基于云计算的数字取证关键技术的研究与实现

发布时间：2018-12-17 08:34

【摘要】：现在，网络已经成为了人们生活中最重要的角色之一，同时各种安全问题也应运而生。在这个背景下，针对网络的数字取证问题已经成为了当下的热点。同时，云计算技术的兴起，为数字取证问题所遇到的困难，提供了新的解决办法。云计算技术解决大规模数据上的能力是有目共睹的，这一新的技术产生，提供了一种新的计算服务和存储服务形式。本文将云计算技术引入到以网络流量为目标的数字取证问题中，首先对云计算的背景知识和数字取证的背景知识进行了概要介绍，并着重描述了Hadoop2.2的优势，以及选择这一版本作为基础平台的原因；其次对map-reduce和yarn架构进行了阐述，给出了基于云计算的网络流量数字取证模型，并对前人提出的分布式SVM算法进行了总结，以之前的算法作为基础，提出了一种改进后分布式SVM算法作为网络流量算法，经过实验验证了其有效性和准确性，并给出了实验过程和结果，证明了这个分布式算法能够在保证准确性的前提下，在一定程度上提高流量分析的效率和性能；最后，对本文的工作进行了总结，，并对应用云计算的数字取证背景进行了展望。
[Abstract]:Now, the network has become one of the most important roles in people's life, at the same time, a variety of security problems have emerged. In this context, digital forensics for the network has become a hot spot. At the same time, the rise of cloud computing technology provides a new solution to the problem of digital forensics. The ability of cloud computing technology to solve large-scale data is obvious. This new technology has provided a new form of computing and storage services. In this paper, cloud computing technology is introduced into digital forensics with network traffic as its target. Firstly, the background knowledge of cloud computing and the background knowledge of digital forensics are briefly introduced, and the advantages of Hadoop2.2 are described emphatically. And the reasons for choosing this version as the base platform; Secondly, the architecture of map-reduce and yarn is expatiated, and the network traffic digital forensics model based on cloud computing is given, and the distributed SVM algorithm proposed by predecessors is summarized, which is based on the previous algorithms. An improved distributed SVM algorithm is proposed as a network traffic algorithm. The validity and accuracy of the algorithm are verified by experiments, and the experimental process and results are given. It is proved that this distributed algorithm can ensure the accuracy of the algorithm. Improve the efficiency and performance of flow analysis to a certain extent; Finally, the work of this paper is summarized, and the application of cloud computing digital forensics background is prospected.
【学位授予单位】：吉林大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【参考文献】