An online snapshot management method and system based on version control
A version control and snapshot technology, which is applied in digital data processing, generation of response errors, error detection of redundant data in calculations, etc., to achieve low real-time operation overhead, credible and reliable evidence collection, and high coverage Effect
Inactive Publication Date: 2018-04-24
华中科技大学附属中学 +1
View PDF3 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
These are very challenging
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0028] In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention. In addition, the technical features involved in the various embodiments of the present invention described below can be combined with each other as long as they do not constitute a conflict with each other.
[0029] Such as figure 1 Shown is an overall architecture diagram of an online snapshot management system based on version control, including the following modules:
[0030] The kernel event notification driver module is used to monitor the running status of the virtual machine. When a system call or process switching occurs in the monitored virtual machine, the process name, event cause and eve...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses a version control-based online snapshot management method and system, and belongs to the field of computer security. A specific kernel event-based incremental snapshot mechanism can generate an incremental snapshot in time to record state information of a system subjected to evidence obtaining; a capacity upper limit of the incremental snapshot is set; when snapshot occupation space exceeds a threshold, an incremental snapshot and a basic snapshot before a certain time are combined into a new basic snapshot; and the basic snapshot can be recovered to be in a recorded virtual machine memory state at any time and any address by performing combination operation on the basic snapshot and the incremental snapshot. Abnormal change of the system state is discovered when the snapshot is translated from a machine language to an application language. The invention furthermore discloses the system which realizes the method. The method and the system are independent of the system subjected to evidence obtaining, so that the snapshot and an analysis result have high credibility; and in addition, the specific kernel event-based incremental snapshot mechanism is small in real-time running cost and can effectively record the system state when a key event occurs.
Description
technical field [0001] The invention belongs to the field of computer security, and more specifically relates to an online snapshot management method and system based on version control. Background technique [0002] With the rapid development of information technology, the accelerated penetration and in-depth application of network and information technology, as well as software vulnerabilities continue to emerge, leading to an increasing number of computer-related crimes and serious network security threats. According to a report released by the US Center for Strategic and International Studies (CSIS), cybercrime brings about $445 billion in economic losses to the world every year. Computer forensics is a key technology to combat computer and network crimes. Its purpose is to extract the attack traces left by the criminals in the computer and provide them to the court as effective litigation evidence so that the criminals can be brought to justice. Computer forensics, aft...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): G06F11/14
CPCG06F11/1458G06F11/1484
Inventor 邹雅毅张盼
Owner 华中科技大学附属中学