可信计算环境下的计算机取证技术研究  

Research on computer forensics technology in trusted computing environment

作　　者：张君贤[1] 燕雨薇 

机构地区：[1]江苏警官学院计算机信息与网络安全系,南京210031

出　　处：《智能计算机与应用》2017年第4期64-66,共3页Intelligent Computer and Applications

摘　　要：可信计算技术是目前信息安全领域一项较新的技术,用于保护数据的可靠性和安全性。可信计算技术的应用,在为网络安全提供了基本保障的同时,却给计算机取证带来了困难。介绍了可信计算的背景和计算机取证的概念,分析了可信计算对计算机取证的影响,最后以Windows操作下的可信计算环境为例,分析了可信环境的构建技术对取证带来的挑战,提出了相应的研究方法和思路。Trusted computing technology is a relatively new technology, it is used in information and data security. Trusted computing technology provides a basic guarantee in network security, at the same time, brings difficulties to computer forensics. This paper introduces the background of trusted computing and the concept of computer forensics, analyzes the influence of trusted computing on computer forensics. After that, illustrated by the case of the Windows operating environment, the paper explores the challenges of computer forensics brought by building technology of the trusted environment. Finally, the paper puts forward the corresponding research methods and ideas.

关 键 词：可信计算 计算机取证 BIT LOCKE 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]