分析了云取证技术所面临的挑战,提出了一种基础设施即服务(IaaS)云模型下的取证框架ICFF,并在开源IaaS云平台Eucalyptus中进行了实现,最后通过实验的方法对ICFF进行了验证分析。实验结果表明,该框架能够有效并快速地获取云平台中的证据数据。国家科技重大专项基金资助项目(2010ZX01036-001-002,2010ZX01037-001-002)|中国科学院知识创新工程基金资助项目(KGCX2-YW-125,KGCX2-YW-174)|国家自然科学基金资助项目(61170072)Technical challenges of cloud forensics was summarized and a forensics framework under an infrastructure as a service(IaaS) cloud model called ICFF was proposed. Then, this framework on the open source IaaS cloud platform Eucalyptus was implemented. Finally, a test case to demonstrate the effectiveness of ICFF was designed. Experiments show that the framework can obtain evidence data in cloud platform effectively and efficiently
