一种基于敏感信息跟踪的网络取证技术的研究  

Network Evidence-getting Technique Based on Tracking Sensitive Information

作　　者：李焕洲[1] 张健[1] 陈麟[1] 

机构地区：[1]四川师范大学电子工程学院,四川成都610066

出　　处：《四川师范大学学报（自然科学版）》2005年第6期759-762,共4页Journal of Sichuan Normal University（Natural Science）

基　　金：国家973基金(G1999035801)资助项目

摘　　要：为解决网络取证所面临的技术难题,借用信息安全领域中的标记技术、木马技术,提出了一种基于敏感信息跟踪的网络取证方案GENBAD.介绍了GENBAD的体系结构及工作机制,采用原型法部分实现了GENBAD的功能,分析了GENBAD的优点及下一步改进的思路.To settle the technical difficulty in network evidence-getting, referring to the label and Trojan horse teclmique in security theory, this paper puts forward a network evidence-getting technique scheme called GENBAD（ Gathering Evidence by Network Based on Active Defence）, which is based on tracking sensitive information. The paper introduces the architecture and work mechanism of GENBAD. GENBAD are partly implemented by prototype method. The paper also analyses the advantage of GENBAD and the idea to promote GENBAD.

关 键 词：网络取证 跟踪 GENBAD 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]