Electronic data forensics system and forensics control method based on virtual desktop

Abstract

The invention relates to an electronic data forensics system and a forensics control method based on a virtual desktop, and belongs to the technical field of network application. The electronic data forensics system comprises a virtual machine and an electronic data storage server. The forensics control method includes the steps of using the virtual machine to remotely login a target computer with electronic data which needs forensics through a network, operating the virtual desktop to simulate the target computer, using the network to obtain the electronic data which need to be preserved and storing the electronic data to the electronic data storage server to finish forensics of the electronic data. The electronic data forensics system and the forensics control method can effectively prevent the electronic data from being faked and changed in the forensics process, ensures forensics efficiency and primitiveness and integrity of the electronic data, and at the same time, the system is low in requirements for network transmission rate. Therefore, according to the electronic data forensics system and the forensics control method based on the virtual desktop, the system is simple in structure and low in cost, and the method is simple and convenient in application modes and wide in application scope.

Description

technical field [0001] The invention relates to the technical field of network applications, in particular to the technical field of electronic data forensics, and specifically refers to a virtual desktop-based electronic data forensics system and a method for forensics control. Background technique [0002] In recent years, with the rapid development of computer and Internet technology, various disputes caused by the tampering of electronic data or the validity of electronic data have also increased sharply. How to provide a highly protective and easy-to-popular electronic data And the method of efficiently preserving electronic data such as web pages, emails and chat records has become the most urgent problem to be solved to ensure a good social order and maintain social stability. Existing electronic data preservation methods and systems are generally as follows figure 1 shown. While these methods and systems provide convenience for remote electronic data forensics, the...

AI Technical Summary

Problems solved by technology

First of all, users are performing data preservation operations on their private computers, and the electronic data may be damaged due to computer attacks or failures during the operation, so that the originality and validity of the preserved electronic data cannot be guaranteed; secondly , these existing preservation methods and systems do not provide a standardized operation process for electronic data forensics, so for ordinary users who lack relevant knowledge of electronic data forensics operations, the preserved electronic data may be incomplete due to improper operation; finally, When the user’s preserved data needs to be uploaded, it must first be uploaded to the security system through the Internet, which puts forward high requirements on network bandwidth, especially for large-capacity pictures and video file data, which requires a very high network data transmission rate. thus limiting the popularity of the system

In addition, Internet data transmission has low reliability and insecurity, and traditional electronic data forensics methods and systems cannot meet the requirements of ensuring the originality and integrity of electronic evidence

Images