오픈소스를 이용한 포렌식 클라우드 시스템 프레임워크 설계 및 구현

Abstract

With the growing use of digital devices such as computer, smart phone or portable data storages, digital information has become a greater priority as evidence for crime investigation. As a result, digital forensics is under the spotlight as the proper alternative to address these issues because it is a branch of forensic science encompassing the recovery and investigation of material which was found in digital devices, often in relation to computer crime. The process of digital forensics are generally divided into the two major tasks: data acquisition and analysis. This sounds so easy but it is not because there are many requirements closely related to the law. Specially, traditional forensic tools and techniques have various limitations considering the rapid changes of IT environment like Big data. Therefore, this thesis proposes forensics-cloud framework for the forensics tool based on open sources. In this thesis, first, limitations of existing forensics tools is analyzed and considerations for forensics-cloud system is examined. And then, the framework and architecture of the forensics-cloud system is proposed. Also, the usage flow diagram of the proposed forensics cloud tool is described. Finally, this thesis suggests the implementation result of SaaS model for the proposed system. The proposed framework has scalability and can improve functional aspects and efficiency of the existing forensics tools.