基于加权模糊推理的电子取证入侵重构系统  

Intrusion reconstruction system of computer forensics based on fuzzy reasoning with weights

作　　者：朱剑[1] 张基温[1] 

机构地区：[1]江南大学信息工程学院,江苏无锡214122

出　　处：《计算机工程与设计》2006年第14期2663-2666,共4页Computer Engineering and Design

摘　　要：针对目前电子取证入侵重构多用人工分析的方式导致效率低的问题,将AI领域中加权模糊推理方法引入电子取证入侵重构分析中,建立了基于加权模糊推理的电子取证入侵重构专家系统,该系统采用预先定义好的入侵特征,与取证现场获取的入侵痕迹相匹配,并结合相应的权值来推断实际可能的攻击场景。Aimed at the problem of inefficient manual analysis for intrusion reconstruction of computer forensics, the method ＂Fuzzy Reasoning with Weights＂ in AI （artificial intelligence） is introduced to intrusion reconstruction of computer forensics. The intrusion reconstruction expert system is built based on fuzzy reasoning with weights. This system predefines intrusion traits and compares them with intrusion traces in forensics scene. And the real attack scenarios are reconstructed by using corresponding weights in the system.

关 键 词：电子取证 入侵重构 人工智能 加权模糊推理 专家系统 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]