Method and system for distributed webpage forensics

Abstract

The present invention proposes a distributed webpage forensics method, including the following steps: S1: the data center receives the forensics service request from the user; S2: the data center distributes the forensics service request to the appropriate forensics master node currently registered in the registration center ; S3: After receiving the assigned forensic service request, the forensic master node analyzes the forensic service request, and based on the analysis result, distributes the forensic service request to the appropriate forensic slave node of the forensic master node, so that the forensic slave node can perform forensics process. By forwarding the forensics service request to the forensics master node and the forensics slave node for two-layer distributed node scheduling, and using the nodejs concurrent processing mechanism, it can still provide users with efficient and accurate web page forensics services in the case of high data concurrency. Moreover, the process of obtaining evidence is controlled by the notary office, which can ensure that the evidence obtained has higher practicability, security, validity and legality while saving costs.

Description

technical field [0001] The invention relates to the field of electronic forensics, in particular to a method and system for distributed webpage forensics. Background technique [0002] With the popularity of the Internet, people's network behavior is becoming more and more frequent. The Internet is also more and more applied to all walks of life. Human society has migrated various activities to the Internet one after another, forming various applications represented by e-government, e-commerce, e-finance, e-learning, etc., making the use of the Internet a daily habit of people. In this process, network security issues have gradually attracted people's attention, and with the continuous emergence of network security incidents, network information security has become a hot issue. [0003] At present, the extraction technology of network information evidence mainly designs the safe acquisition technology of computer systems and files, avoids any damage and interference to the...

AI Technical Summary

Problems solved by technology

[0005] At present, most webpage forensics methods adopt a one-layer distributed network architecture, and the efficiency of webpage forensics is low. The nodes in the network are independently controlled by each enterprise, which cannot cover a large area of ​​the country, and the collected webpage data does not necessarily have effective laws. effectiveness

Images