基于Shamir秘密共享的安全取证服务器方案

为解决计算机取证系统现有方案中没有考虑到取证信息可能在传输过程中及取证服务器中被破坏这一安全性问题,提出了基于Shamir秘密共享的安全取证服务器方案。方案首次将Shamir秘密共享的思想引入计算机取证中,利用Shamir(n,t)算法共享取证信息m成n份,然后将n份信息传输并分别储存于n个独立的服务器,从而有效提高了取证信息在传输过程、存储过程及存储区内的安全性。n个独立的取证存储区使系统可以在取证存储区的破坏数不超过n-t时仍能完成取证审计,提高了取证信息在取证服务器中的安全性,增强了系统的容错、容侵性能。

A Safe Server for Computer Forensics Based on Shamir Secret Sharing Scheme

Computer torensics is the technology field that attempts to prove to be thorough,efficient,and secure method to investigate computer crime.Computer evidence must be authentic,accurate,dependable and available.A new server scheme for computer forensics has been proposed in our work in order to solve the above-mentioned problem,We introduce the Shamir secret sharing into the field of computer forensics firstly;the scheme can not only ensure the integrity and dependability of the computer evidence but also can gain a good resistance to deletion accidentally or deliberately.The system can continue to support computer forensics unless more than areas in store for forensics information were broken.