Research On Electronic Evidence Forensics In Cloud Computing Environment

With the progress of society and the development of science and technology,information technology is playing an increasingly important role in our daily lives.Among them,since Google CEO Eric Schmidt first proposed the concept of "cloud computing" in 2006,cloud computing has quickly become one of the most concerned technologies in the IT industry,it has developed rapidly in more than ten years.Today,cloud computing not only occupies an important position in the information industry,but also has become the object of choice for governments around the world.Major countries and regions in the world,led by China,the United States,and the European Union,have issued related documents on cloud computing as national Development strategy,with a view to occupying a place in the information age.However,the development of cloud computing has brought new problems to the electronic evidence forensics system and electronic evidence forensics technology.Cloud computing has changed the original information storage mode due to its distributed storage technology,virtualization technology,massive data,and de-localization.The data is no longer completely fixed in a single device,but in the form of fragmentation Distributed in servers located in different geographical locations,and each data has multiple copies,which also leads to the traditional electronic forensics method mainly based on stand-alone forensics is no longer applicable.Difficulties in the electronic evidence forensics system mainly include the fact that the existing forensic subjects cannot take into account the legality and technicality,the difficulty of cross-border forensics,the excessive investigation authority in the cloud network environment,and the personal information security can't be effectively guaranteed.The difficulty of electronic evidence forensics technology is that there is no standardized model or unified technical standard to regulate the forensics process,and the evidence collection,extraction,and analysis processes cannot be effectively connected,which will affect the qualification of electronic evidence.The reason for these dilemmas is that there is currently no unified evidence forensic rules and system for electronic evidence forensics in the cloud computing environment,and countries do not have a standard or convention on cross-border evidence collection for reference.Therefore,based on the problem of electronic evidence forensics in the cloud computing environment,this article will introduce and analyze the electronic evidence forensics and cloud computing technologies one by one,and then analyze the process of electronic evidence forensics in China under the cloud computing environment by comparing with relevant foreign legislation Possible shortcomings,and finally provide some suggestions from the legal level and the technical level,Improve relevant regulations and technologies to ensure the legality,authenticity and relevance of electronic evidence,so as to achieve the purpose of perfecting the forensic rules in the cloud computing environment and increasing the admissibility of electronic evidence.