Credibility verification system and method for distributed cloud evidence collection

Abstract

The invention discloses a distributed cloud evidence obtaining credibility verification system and method. The system comprises a cloud evidence obtaining agent module, a source data collection moduleand an evidence credibility verification module. The cloud evidence obtaining agent module comprises a traceability data generation module, a multilayer compressed Bloom filter module, a data persistence module and an evidence transmission module; the method is based on an improved multi-layer compressed Bloom filter, and can be used in an untrusted multi-tenant cloud environment. According to the method, the untrustworthiness of participants in the evidence obtaining process is considered, tamper-proof protection is carried out on the data in a distributed mode, and the privacy of a user isnot invaded; according to the mechanism, each cloud node is bound with a cloud evidence obtaining agent for evidence collection, calculation, analysis and transmission, and a central credibility verification module sends a credibility verification command regularly or manually for credibility verification; the method is based on event driving, does not modify any code of a target operating system,is low in performance loss and high in flexibility, and is suitable for real-time cloud evidence obtaining and credibility analysis.

Description

technical field [0001] The invention relates to the technical field of computer networks, to a mechanism in the field of computer data behavior monitoring in a cloud environment, and in particular to a system and method for verifying the credibility of cloud evidence collection in a cloud environment. Background technique [0002] While cloud computing brings convenience, security issues have become the key to restricting its development. The characteristics of cloud computing, such as virtualization mechanism, multi-tenant, data off-site storage, and anonymous mechanism, make it easier to become a place for cybercrime. To ensure the healthy development of the cloud service market, the above security issues must be properly addressed. The best way to combat illegal behavior is undoubtedly to obtain relevant criminal evidence, submit it to the court, and use legal means to ensure the security of the cloud service market. Therefore, how to collect and analyze digital evidenc...

AI Technical Summary

Problems solved by technology

In the big data environment, traditional Bloom filters cannot use high-speed and efficient data access, and due to the inherent shortcomings of traditional Bloom filters, data privacy protection and correct insertion and deletion cannot be performed.

Images