XenServer虚拟化平台取证方法研究  

Research on forensic method of XenServer virtualization platform

作　　者：邵炳阳 田庆宜[1] 沈长达[1] 吴少华[1] Shao Bingyang;Tian Qingyi;Shen Changda;Wu Shaohua(Xiamen Meiya Pico Information Co.,Ltd.,FujianXiamen 361008)

机构地区：[1]厦门市美亚柏科信息股份有限公司

出　　处：《网络空间安全》2019年第2期49-56,共8页Cyberspace Security

摘　　要：服务器虚拟化技术的引入为企业带来便利的同时,也为取证人员带来了挑战。文章深入研究了XenServer服务器系统的体系结构,重点阐述了XenServer服务器磁盘数据存储和管理方式,提升取证人员对XenServer虚拟化服务器的取证能力,为取证人员在XenServer服务器证据固定、取证分析等工作的开展,提供基础指导以及取证思路。XenServer is a server virtualization system developed by Citrix,which aims to provide enterprises with a dynamic and automated server virtualization solution.The introduction of server virtualization technology has brought convenience to enterprises,but also brought challenges to forensics work.This paper studies the architecture of XenServer,focuses on the disk data storage management,which enhances the forensic officer's ability to obtain evidence from XenServer,and provides for the forensic officer to carry out the work of XenServer evidence fixation and forensic analysis and provide basic guidance and evidence-taking ideas.

关 键 词：虚拟化 XenServer 服务器取证 虚拟磁盘 

分 类 号：TN915.08[电子电信—通信与信息系统]