关键词: 大数据取证, 云计算, Hadoop取证, 大数据安全, 大数据取证流程

Abstract: With the advent of the era of big data, the volume of electronic data is rapidly expanding. At the same time, more key data are placed in the cloud site. The traditional forensics objects are generally independent physical entity, such as computer, mobile phone, mobile storage media and wearable electronic devices. But the big data forensics objects may be the host computer of big data system , big data system itself, virtual host, cloud software, and the cloud Web pages, etc., which bringing great challenge for electronic forensics. Now, the big data forensics is becoming a hot spot in electronic forensics field. The development of big data and the security problems were discussed at first. Then the content of big data forensics object is analyzed in the host layer, system layer and application layer. On the basis of the latest forensics law in China the process of big data forensics is built. And the forensics platform construction based on big data structure is discussed. Finally, the development trend of large data forensics is put forward with author’s view.

Key words: big data forensics, cloud computing, hadoop forensics, big data security, big data forensics process