云环境隐私侵犯取证研究

doi:10.11959/j.issn.2096-109x.2018004

网络与信息安全学报 ›› 2018, Vol. 4 ›› Issue (1): 26-35.doi: 10.11959/j.issn.2096-109x.2018004

云环境隐私侵犯取证研究

李维奉,羌卫中(),李伟明,邹德清

华中科技大学计算机科学与技术学院，湖北武汉 430074

修回日期:2018-01-02 出版日期:2018-01-01 发布日期:2018-02-09
作者简介:李维奉（1991-），男，江西南昌人，华中科技大学硕士生，主要研究方向为信息安全。|羌卫中（1977-），男，江苏南通人，博士，华中科技大学副教授，主要研究方向为信息系统安全。|李伟明（1975-），男，湖南株洲人，博士，华中科技大学副教授，主要研究方向为信息安全。|邹德清（1975-），男，湖南长沙人，博士，华中科技大学教授，主要研究方向为信息安全。
基金资助:
国家重点研发计划项目(2017YFB0802205)

Research on forensics of privacy violations in cloud environment

Weifeng LI,Weizhong QIANG(),Weiming LI,Deqing ZOU

School of Computer Science ＆Technology,Huazhong University of Science and Technology,Wuhan 430074,China

Revised:2018-01-02 Online:2018-01-01 Published:2018-02-09
Supported by:
The National Key Research ＆ Development (R＆D) Plan of China(2017YFB0802205)

摘要/Abstract

摘要：

云计算是主流的信息系统技术，但是云计算环境下的用户隐私保护和隐私侵犯追踪取证一直是一个挑战。当前主流的云计算取证技术体系和标准并不成熟和完备，距离计算机取证的目标相去甚远。针对云环境下隐私侵犯取证，首先，给出了云取证和云隐私侵犯的研究现状和挑战；其次，着重分析了云环境下隐私取证的研究内容和技术路线；最后，提出了一个具体的面向云环境的隐私侵犯取证系统。

关键词: 云计算, 云取证, 云证据分析, 隐私侵犯

Abstract:

Cloud computing is the mainstream information system technology,however,privacy protection of user and privacy violation tracking and forensics in the cloud computing environment have always been a challenge.The current mainstream cloud computing forensics system and standard are not mature and complete,and are far from the target of computer forensics.With the focus on privacy violation and forensics in the cloud environment,status and challenges of cloud forensics and cloud privacy violation were reported firstly.Then,the research content and technical route of privacy forensics in the cloud environments were analyzed.Finally,a specific privacy violation forensics system for cloud environments was presented.

Key words: cloud computing, cloud forensics, cloud evidence analysis, privacy violation

中图分类号:

TP393

李维奉,羌卫中,李伟明,邹德清. 云环境隐私侵犯取证研究[J]. 网络与信息安全学报, 2018, 4(1): 26-35.

Weifeng LI,Weizhong QIANG,Weiming LI,Deqing ZOU. Research on forensics of privacy violations in cloud environment[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 26-35.

图/表 5

参考文献 32

[1]	NIST cloud computing forensic science chanllengs[EB/OL]. .
[2]	RUAN K , CARTHY J , KECHADI T ,et al. Cloud forensics[C]// IFIP International Conference on Digital Forensics. 2011: 35-46.
[3]	Mapping the forensic standard ISO/IEC 27037 to Cloud Computing[EB/OL]. .
[4]	RUAN K , CARTHY J , KECHADI T ,et al. Cloud forensics definitions and critical criteria for cloud forensic capability:An overview of survey results[J]. Digital Investigation, 2013,10(1): 34-43.
[5]	ZARGARI S , BENFORD D . Cloud forensics:concepts,issues,and challenges[C]// The third Conference on Emerging Intelligent Data and Web Technologies (EIDWT). 2012: 236-243.
[6]	TAYLOR M , HAGGERTY J , GRESTY D ,et al. Forensic investigation of cloud computing systems[J]. Network Security, 2011(3): 4-10.
[7]	[EB/OL]. .
[8]	[EB/OL]. .
[9]	ZAWOAD S , HASAN R . Cloud forensics:a meta-study of challenges,approaches,and open problems[EB/OL]. .
[10]	NANDA S , HANSEN R A . Forensics as a service:three-tier architecture for cloud based forensic analysis[C]// The 15th International Symposium on Parallel and Distributed Computing (ISPDC). 2016: 178-183.
[11]	谢亚龙, 丁丽萍, 林渝淇 ,等. ICFF:一种IaaS 模式下的云取证框架[J]. 通信学报, 2013,34(5): 200-206.
	XIE Y L , DING L P , LIN Y Q ,et al. ICFF:a cloud forensics framework under the IaaS model[J]. Journal on Communications, 2013,34(5): 200-206.
[12]	周刚 . 云计算环境中面向取证的现场迁移技术研究[D]. 武汉:华中科技大学, 2011.
	ZHOU G . Research on forensics-oriented site migration technology in cloud computing environment[D]. Wuhan:Huazhong University of Science and Technology, 2011.
[13]	LEE J , UN S . Digital forensics as a service:a case study of forensic indexed search[C]// The International Conference on ICT Convergence (ICTC). 2012: 499-503.
[14]	WEN Y , MAN X , LE K ,et al. Forensics-as-a-service (faas):computer forensic workflow management and processing using cloud[C]// The fifth International Conferences on Pervasive Patterns and Applications. 2013: 1-7.
[15]	SANG T , . A log based approach to make digital forensics easier on cloud computing[C]// Intelligent System Design and Engineering Applications (ISDEA). 2013: 91-94.
[16]	田庆宜, 王琳, 黄道丽 . Vsphere 架构私有云取证方法研究及其实践[J]. 信息网络安全, 2011,9: 44-46.
	TIAN Q Y , WANG L , HUANG D L . Research and practice of VSPhere architecture private cloud forensics methods[J]. Netinfo Security, 2017,30(1): 31-38.
[17]	吴松洋, 张熙哲, 王旭鹏 ,等. 基于 Hadoop 的高效分布式取证:原理与方法[J]. 电信科学, 2017,30(1): 31-38.
	WU S Y , ZHANG X Z , WANG X P ,et al. Highly distributed distributed forensics based on hadoop:principles and methods[J]. Telecommunications Science, 2017,30(1): 31-38.
[18]	ZHOU M , ZHANG R , XIE W ,et al. Security and privacy in cloud computing:a survey[C]// The sixth International Conference on Semantics Knowledge and Grid (SKG). 2010: 105-112.
[19]	BURNSIDE R S . The electronic communications privacy act of 1986:the challenge of applying ambiguous statutory language to intricate telecommunication technologies[J]. Rutgers Computer ＆Technology, 1987,13：451. 31-38.
[20]	SHELDON J . Fair credit reporting act[J]. National Consumer Law Center Consumer Credit ＆ Sales Legal Practice, 1994,65(2): 595-609.
[21]	EVideo Privacy Protection Act[EB/OL]. .
[22]	GELLMAN R , . Privacy in the clouds:risks to privacy and confidentiality from cloud computing[C]// The World privacy forum. 2012.
[23]	CAVOUKIAN A . Privacy in the clouds[J]. Identity in the Information Society, 2008,1(1): 89-108.
[24]	PEARSON S , . Taking account of privacy when designing cloud computing services[C]// The 2009 ICSE Workshop on Software Engineering Challenges of Cloud Computing. 2009: 44-52.
[25]	PEARSON S , CHARLESWORTH A . Accountability as a way forward for privacy protection in the cloud[C]// IEEE International Conference on Cloud Computing. 2009: 131-144.
[26]	SADEGHI A R , SCHNEIDER T , WINANDY M . Token-based cloud computing[C]// The International Conference on Trust and Trustworthy Computing. 2010: 417-429.
[27]	WANG C , REN K , WANG J . Secure and practical outsourcing of linear programming in cloud computing[C]// INFOCOM. 2011: 820-828.
[28]	XU Z , WANG C , REN K ,et al. Proof-carrying cloud computation:the case of convex optimization[J]. IEEE Transactions on Information Forensics and Security, 2014,9(11): 1790-1803.
[29]	ITANI W , KAYSSI A , CHEHAB A . Privacy as a service:privacy-aware data storage and processing in cloud computing architectures[C]// Dependable,Autonomic and Secure Computing. 2009: 711-716.
[30]	SQUICCIARINI A , SUNDARESWARAN S , LIN D . Preventing information leakage from indexing in the cloud[C]// The 3rd International Conference on Cloud Computing (CLOUD). 2010: 188-195.
[31]	PEARSON S , SHEN Y , MOWBRAY M . A privacy manager for cloud computing[C]// IEEE International Conference on Cloud Computing. 2009: 90-106.
[32]	MOWBRAY M , PEARSON S . A client-based privacy manager for cloud computing[C]// The Fourth International ICST Conference on Communication System Software and Middleware. 2009:5.

云环境隐私侵犯取证研究

Research on forensics of privacy violations in cloud environment

在线阅读

pdf下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 5

参考文献 32

相关文章 15

Metrics

推荐阅读 0

[1]	李凌书, 邬江兴, 曾威, 刘文彦. 容器云中基于信号博弈的容器迁移与蜜罐部署策略[J]. 网络与信息安全学报, 2022, 8(3): 87-96.
[2]	刘尚, 郭银章. 云计算多授权中心CP-ABE代理重加密方案[J]. 网络与信息安全学报, 2022, 8(3): 176-188.
[3]	张艺, 田立勤, 毋泽南, 武文星. 基于FANP的云用户行为信任评估优化机制[J]. 网络与信息安全学报, 2022, 8(2): 175-182.
[4]	吴颖,李璇,金彪,金榕榕. 隐私保护的图像内容检索技术研究综述[J]. 网络与信息安全学报, 2019, 5(4): 14-28.
[5]	李颖, 马春光. 可搜索加密研究进展综述[J]. 网络与信息安全学报, 2018, 4(7): 13-21.
[6]	于孟洋,林晖,田有亮. 移动云计算中一种新的跨层信誉机制[J]. 网络与信息安全学报, 2018, 4(3): 51-58.
[7]	王元昊,李宏博,崔钰钊,郭庆文,黄琼. 具有密文等值测试功能的公钥加密技术综述[J]. 网络与信息安全学报, 2018, 4(11): 13-22.
[8]	张建标,朱元曦,胡俊,王晓. 面向云环境的虚拟机可信迁移方案[J]. 网络与信息安全学报, 2018, 4(1): 6-14.
[9]	高元照,李学娟,李炳龙,吴熙曦. 云计算取证模型[J]. 网络与信息安全学报, 2017, 3(9): 13-23.
[10]	袁得嵛,王小娟,万建超. “互联网+”对网络空间安全影响及未来发展趋势[J]. 网络与信息安全学报, 2017, 3(5): 1-9.
[11]	施江勇,杨岳湘,李文华,王森. 基于SDN的云安全应用研究综述[J]. 网络与信息安全学报, 2017, 3(5): 10-25.
[12]	陈飞,毕小红,王晶晶,刘渊. DDoS攻击防御技术发展综述[J]. 网络与信息安全学报, 2017, 3(10): 16-24.
[13]	孙光,樊晓平,蒋望东,周航军,刘胜宗,龚春红,朱静. 云计算环境约束下的软件水印方案[J]. 网络与信息安全学报, 2016, 2(9): 12-21.
[14]	冯丙文,翁健,卢伟. 基于隐私保护的数字图像取证外包技术框架研究[J]. 网络与信息安全学报, 2016, 2(8): 23-31.
[15]	刘炜,冯丙文,翁健. 小型无人机安全研究综述[J]. 网络与信息安全学报, 2016, 2(3): 39-45.