Implication of Virtualization Technologies in Computer Forensics

摘要：

As virtualization technologies become more prevalent in computer forensics, there is a great need to grasp for recovering digital evidence. In this paper, we present the history of virtualization, the definition of virtualization and demonstrate two main types of virtualization technologies. Further we compare static and live digital forensic analysis and combine them with novel virtualization techniques in a reak case.

关键词： virtual machine computer forensics static live analysis live analysis

作者: Hong GuQ

作者单位: Key Laboratory of Information Network Security, Ministry of Public Security, Peoples Republic of China The 3rd Research Institute of Ministry of Public Security Shanghai, China

会议类型: 国际会议

会议名称: 2011 International Conference on Security Science and Technology(ICSST 2011) (2011年安全科学与技术国际会议)

会议地点: 重庆

会议语种:英文

页码: 51-55

在线出版日期: 2011-01-21（万方平台首次上网日期，不代表论文的发表时间）