Seite 94-95 - Cloud Migration Taiwan 2013

94
ථ၌༶ၑᐄ༶୚ື
95
Chapter 3
݂ٙஈଣ೻ҏʿʺॴஷజdɰც
ࠅ
ίථ၌؂ਕΥ
ߒ
ʕ
ࠈ
֛̈Ըf
ᝈ࿀ථ၌ԶᏐਠԴ͜ࡳԬ༟τԫ݂၍ଣٙʈՈdɰ̙˸ᏍпҢ
ࡁ
ᐝ༆Չί༟τԫ
݂၍ଣٙϓᆞ
ܓ
22
f
༟τԫ݂ˀᏐ
ཥ໘ᛠᗆ
މ
ə
ܔ
ࣩͭ΁ʕٙԫྼdཥ໘ᛠᗆऒʿᅰЗ༟ࣘٙᗆйeϗණeʱؓʿᜑͪfί
ᗆйච
ݬ
dึ࣬ኽྼყ
ࡈ
ًࣩ
ر
ၾ܄˒ɓৎ፫ᗆ̙ঐٙᗇኽf༟ࣘϗණܼ̍˸
ܔ
͕ͭ
ໆତఙɓᅵٙᘌᔫ೻
ܓ
dԸሜ
ݟ
Ԩʃːή
ڭ
πᗇኽd
ڭ
ᚐԨᆽႩᗇኽٙҁ዆׌fίʱ
ؓಂගd˺୚ʱؓᗇኽԨ܄ᝈ൙Пഐ
؈
d௰
ܝ
ආБഐሞᏨীdሜ
ݟ
ഐ
؈
ᆽ֛ԨЪϓഐ
ሞ
ߏ
፽
ܝ
ഐࣩ
23
f
ථ၌ٙܿ኷
࿁મᗇਖ਼࢕ԸႭd༟ࣘϗණච
ݬ
ึ݊௰ɽٙܿ኷fɓছཥ໘ᛠᗆٙમᗇஷ੬੽Ꮇ
πద᜗ක֐
ܔ
ͭЗʩ࿁ЗʩٙልႡ೻ҏdШ݊வᅵٙ˙όίථ၌఻˷݊ʔ̙Бٙf࿁
ථ၌͜˒ϾԊ€ɰܼ̍મᗇਖ਼࢕dஷ੬ೌ
ج
ٝ༸ԶᏐਠԴ͜ࡳ၇ᎷπʈՈԸᎷπ༟
ࣘdɽ฿ɰೌ੽੻ٝᎷπྼ᜗ٙЗໄfථ၌ᛠᗆ༟ࣘϗණც
ࠅ
મ՟ಁ˾˙ࣩ֛׌ٙӉ
᜷fમᗇਖ਼࢕̀඲л͜ᜌ፨ʧࠦdνൈᏝͦ፽e༟ࣘࢫഃԸϗණ༟ࣘfତίdϞԬථ
၌
ԶᏐਠৰəवπ༟ࣘ
ߏ
፽̮dɰवπ౳ΐՌᅰ
࠽
€
hash function
dу
މ
ᅰЗܸ७d
வԬ̙͜׵ᛠᗆʱؓfථ၌͜˒ʿԶᏐਠ̀඲ί؂ਕ˥๟՘ᙄʕ΋
ࠈ
̈வԬӉ᜷dΝ
ࣛ
ࠅ
Ӌ޴ᗫҦஔ˖΁˸ᆽ
ڭ
ᛠᗆ༟̙ࣘٙ
ܓڦ
f
ථ၌ᛠᗆሜ
ݟ
ٙϓ̌Ϊ९ఱ݊Ո௪ԑ੄ٙ
ߏ
፽Ꮶ༟ࣘ€
log data
fၣ༩eӻ୕ʿ
Ꮠ͜೻όɪɰც
ࠅ
޴Чٙ
ߏ
፽fவԬ
ߏ
፽Ꮶ༟̙ࣘщԶમᗇਖ਼࢕՟͜ʿՉ
ڭ
वಂࠢே
඲࣬ኽ
ج
஝ʿᕐ˙՘ᙄԸ
ޢ
֛fίϤd
ה
Ϟӻ୕ٙӻ୕ࣛගٙΝӉ
੬ڢ
ࠠ
ࠅ
fʱؓ೻
ҏஷ੬ึΥԻʔΝӻ୕ٙ
ߏ
፽Ꮶ༟ࣘf̥Ϟਗ਼
ߏ
፽ࣛගΝӉ
ܝ
dʑঐࠠ
ܔ
Ъًุ
ر
d
Ͼᐝ༆ԫ݂೯͛ٙԸᎲ̘এf
ν
ࠅ
˴ਗ˕౪ᛠᗆሜ
ݟ
dථ၌ԶᏐਠ
ޟ
Ї̙˸ίତϞٙථ၌؂ਕΎ৛̋ᕘ̮ٙ؂
ਕfவԬ؂ਕࢁ΁౤Զ༟ࣘ
و
͉છՓeಁ˾׌ٙᛠᗆ༟ࣘᎷπ€Էνཥɿඉ΁ਓ͉e
Іਗʷ౳ΐՌᅰ
࠽
€
hashes
e޴ᗫ༟ࣘʧࠦʿʱؓʈՈഃf
Ϊ
މ
ථ၌؂ਕ̙ঐ༨൳
ܘ
ε਷࢕dΪϤ
ࠅ
Ͻᅇᛠᗆሜ
ݟ
̙ঐऒʿʔΝٙ
ܛج
ӻ
୕fΪϤd඲࣬ኽࣩ΁तሯԸ፯኿ቇ຅ણ݄fɰ඲
ࠈ
̈ଡ଼ᔌlzฤ॰€
house search
d
͵уʮක၍ଣ€
disclosure management
ٙЪุ೻ҏd˸ᆽ
ڭ
ཀ೻ٙන࿫fᒔ
ܔࠅ
ͭ
ɓ
ࡈ
ܼ̍ථ၌͜˒eථ၌ԶᏐਠʿՉ˼޴ᗫɛࡰٙଡ଼ᔌ
ݖ
࿴d଄ႊᛠᗆeථ၌Ҧஔe
Άุଡ଼ᔌʿ
ܛج
ਖ਼ุɛɻ
24
f
ଭ௞ᛠᗆʱؓՈϞ
ܛج
ɪٙจ່d
ה
˸̀඲ਗ਼༟ࣘ
ڭ
ᚐ
ج
eཥ
אجڦ
௶ʈ
ج
ഃ΢
ᗳΪᏐϾ͛ٙ
ܛج
dॶɝஷᆵϽඎfл͜ථ၌؂ਕٙΆุίආБሜ
ۃݟ
dᏐ༈Ͻᅇவ
ԬᙄᕚdɰᏐၾ
ܛ
ࢪʿࡰʈٙ΂ਕʃଡ଼τરሜ
ݟ
ආБ˙όdՉ
ܝ
Ύၾථ၌ԶᏐਠ
ࠈ
֛
ሜ
ݟ
Ӊ᜷dක֐ආБሜ
ݟ
f
ථ၌ٙዚึ
Ң
הࡁ
޶Ցථ၌؂ਕٙཥ໘ᛠᗆఱνΝ੽͕ໆତఙϗණ༟ࣘԨЪʱؓfШ݊ཥ໘
ᛠᗆ͉Ԓఱ̙˸݊ɓ၇ථ၌؂ਕdɰఱ݊ᛠᗆу؂ਕٙɓ
༆ࡈ
Ӕ˙ࣩfଭ௞dʱؓɽ
ඎٙ༟ࣘც
ܘࠅ
εᎷπ٤ගʿཥ໘ஈଣࣛගfΪ
މ
ථ၌ַٙ࢝׌ʿᜳ
ܓݺ
d޴࿁̙͜
༰
೵ٙࣛග̂ʱတԑவԬცӋfϤ̮dᒅ൯̀
ࠅ
ழ᜗ʿ৅ᇖࡰʈٙ൬̙͜ঐ
৷ܘ
d
ה
˸Άุ̙˸ί༈ਖ਼ࣩಂගΣථ၌ᒅ൯வԬᛠᗆ؂ਕf
22
本章的延伸請參考
網站資料。
23
請參考《電腦鑑識:識別,偵測和解決系統入侵》;
Alexander Geschonneck
。
24
參考
Cloud forensics: An overview. Ed.: Centre of Cybercrime Investigations, University College Dublin