| VMware虚拟磁盘结构分析及在电子数据取证中的应用 |
| |
| 引用本文： | 钱伟,沙晶. VMware虚拟磁盘结构分析及在电子数据取证中的应用[J]. 中国司法鉴定, 2011, 0(2): 60-64. DOI: 10.3969/j.issn.1671-2072.2011.02.013 |
| |
| 作者姓名： | 钱伟 沙晶 |
| |
| 作者单位： | 上海辰星电子数据司法鉴定中心,公安部第三研究所信息网络安全公安部重点实验室,上海,200035 |
| |
| 摘 要： | 详细分析了VMware的虚拟磁盘结构,并针对电子数据取证中的磁盘镜像虚拟加载、虚拟机数据迁移、虚拟磁盘文件的搜索和虚拟磁盘数据的鉴定与恢复等实际问题提出相应的解决方案。
|
| 关 键 词： | 虚拟机 磁盘 电子数据 取证 |
Structural Analysis of Vmware Virtual Disk and its Application in Electronic Data Examination |
| |
| QIA N Wei,SHA Jing. Structural Analysis of Vmware Virtual Disk and its Application in Electronic Data Examination[J]. Chinese Journal of Forensic Sciences, 2011, 0(2): 60-64. DOI: 10.3969/j.issn.1671-2072.2011.02.013 |
| |
| Authors: | QIA N Wei SHA Jing |
| |
| Affiliation: | QIAN Wei,SHA Jing(Shanghai Stars Digital Forensic Center,Key Laboratory of Information Network Security,Ministry of Public Security,Shanghai 200035,China) |
| |
| Abstract: | This paper gave a detailed structural analysis of VMware virtual disk and corresponding solutions to problems emerged in electronic data examination,like virtual disk image loading,data migration of virtual machines,files search on virtual disk,examination and restoration of virtual disk data. |
| |
| Keywords: | virtual machine disk electronic data electronic evidence |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
