| 基于Docker容器的电子数据取证方法 |
| |
| 引用本文： | 李鹏超,周凯.基于Docker容器的电子数据取证方法[J].吉林大学学报(理学版),2002,57(6):1485-1490. |
| |
| 作者姓名： | 李鹏超 周凯 |
| |
| 作者单位： | 1. 重庆警察学院 信息安全系, 重庆 401331； 2. 西南大学 计算机与信息科学学院, 重庆 400715 |
| |
| 摘 要： | 针对目前基于Docker容器的取证技术缺陷, 提出一种基于Docker主机的调查取证模型, 并根据该取证模型中Docker主机所处不同状态给出有针对性的数据取证方法. 实验结果表明, 利用该模型取证能更有针对性地获取相关电子证据.
|
| 关 键 词： | Docker 容器 镜像 数字取证 |
| 收稿时间： | 2019-08-02 |
Electronic Data Forensics Method Based on Docker Container |
| |
| LI Pengchao,ZHOU Kai.Electronic Data Forensics Method Based on Docker Container[J].Journal of Jilin University: Sci Ed,2002,57(6):1485-1490. |
| |
| Authors: | LI Pengchao ZHOU Kai |
| |
| Institution: | 1. Department of Information Security, Chongqing Police College, Chongqing 401331, China；2. College of Computer and Information Science, Southwest University, Chongqing 400715, China
|
| |
| Abstract: | Aiming at the shortcomings of forensic technology based on Docker container, we proposed an investigation and forensics model based on Docker host, and gave a targeted data forensics method according to the different states of the Docker host in
the forensic model. The experimental results show that the forensicscan obtain relevant electronic evidence more specifically by using the model. |
| |
| Keywords: | Docker container image digital forensic |
|
| 点击此处可从《吉林大学学报(理学版)》浏览原始摘要信息 |
| 点击此处可从《吉林大学学报(理学版)》下载免费的PDF全文 |
