基于区块链的云取证系统研究与实现

发布时间：2018-05-28 20:51

本文选题：电子取证 + 云取证　；参考：《西南科技大学》2017年硕士论文

【摘要】：现如今人们正从IT时代走向DT(Data technology)时代,同时伴随着云计算的发展及云计算应用的大量普及,针对“云”平台下的各种不法行为也越来越多。电子取证技术虽然是打击计算机犯罪和计算机网络犯罪的关键技术,但是在云计算环境下,传统的电子取证技术和方法面临着诸多新的挑战。云取证与传统的电子取证相比面临着数据分散、数据控制有限、取证监督链难以实现、多租户环境等诸多困难,目前学术界也已经提出了不少关于云取证的技术方案,但是这些方案并没有完全解决云计算对取证工作的挑战,尤其是在CSPs(云服务提供者)、调查者、用户等不诚实的场景,以及证据监督链不完整的问题。本课题为了克服以上问题,提出了一种基于区块链的云取证方案,采用区块链的全新理念,以去中心化、去信任化的方式来解决无论是存证方还是保全方都无法篡改保全在区块链上的电子证据,并实现电子证据的可验证和可追溯。本课题借助区块链的全新思想,把电子数据记录在区块链上,并结合加密算法、时间戳、数字签名等技术,设计并搭建了基于区块链的云取证系统。系统主要采用区块链分布式数据库的特点,即采用P2P网络技术实现系统的去中心化、使用加密算法保证用户数据的安全性、使用Merkle树技术保证数据的不可篡改及可追溯、使用共识算法保障计算节点间数据的一致性、且通过时间戳技术保证数据在某个特定时间段或者某个特定时间之前的存在性以及采用首尾相连的链式数据结构等技术,设计了一种去中心化的、可验证、不可篡改的云取证系统。
[Abstract]:Nowadays, with the development of cloud computing and the popularity of cloud computing applications, there are more and more illegal behaviors under the "cloud" platform as people move from the IT era to the era of DT(Data technology. Electronic forensics technology is the key technology to combat computer crime and computer network crime, but in the cloud computing environment, the traditional electronic forensics technology and methods are facing many new challenges. Compared with traditional electronic forensics, cloud forensics faces many difficulties, such as scattered data, limited data control, difficult to realize the chain of forensic supervision, multi-tenant environment and so on. At present, the academic circles have also put forward a lot of technical schemes about cloud forensics. However, these solutions do not completely address the challenges of cloud computing to forensics, especially in the CSPss (cloud service providers, investigators, users, etc.) dishonest scenarios, and the incomplete chain of evidence supervision. In order to overcome the above problems, this paper proposes a cloud forensics scheme based on block chain, which adopts a new concept of block chain to decentralize. The method of distrust can not tamper with the electronic evidence in the block chain, and realize the verification and traceability of the electronic evidence. With the help of the new idea of block chain, the electronic data is recorded on the block chain, and the cloud forensics system based on block chain is designed and built in combination with encryption algorithm, time stamp, digital signature and so on. The system mainly adopts the characteristics of block chain distributed database, that is, using P2P network technology to realize the decentralization of the system, using encryption algorithm to ensure the security of user data, and using Merkle tree technology to ensure that the data can not be tampered with and traceable. The consensus algorithm is used to guarantee the consistency of the data between nodes, and the existence of the data in a certain time period or before a certain time period is guaranteed by the timestamp technology, and the chained data structure is used. A decentralized, verifiable, untampered cloud forensics system is designed.
【学位授予单位】：西南科技大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP311.52;TP309

【参考文献】