虚拟环境下的计算机取证分析  

Computer Forensic Analysis in Virtual Environment

作　　者：邵彦宁 SHAO Yanning(Heyuan Power Supply Bureau,Guangdong Power Grid Co.,Ltd.,Heyuan,Guangdong 517000,China)

机构地区：[1]广东电网有限责任公司河源供电局

出　　处：《机电工程技术》2019年第11期104-106,共3页Mechanical & Electrical Engineering Technology

摘　　要：研究了虚拟环境在计算机取证调查分析阶段的潜在作用。提出了虚拟环境计算机取证软件工具的一般概念;指出了虚拟环境的局限性,设计了一种同时独立使用传统环境和虚拟环境的新方法,并证明这种方法可以大大缩短计算机取证调查分析阶段的时间。The potential role of virtual environment in the stage of computer forensics investigation and analysis is studied.The general concept of virtual environment computer forensics software tools is proposed.The limitations of virtual environment are pointed out,and a new method of using traditional environment and virtual environment independently is designed.It is proved that the method can greatly shorten the stage of computer forensics investigation and analysis time.

关 键 词：计算机取证 虚拟机 计算机证据 

分 类 号：TP31[自动化与计算机技术—计算机软件与理论]