基于数据挖掘的Multi-Agent动态取证系统研究  

Dynamic Computer Forensics System Based on Data Mining and Multi-Agent

作　　者：吕爱丽[1] 魏海平[2] 叶小涛[1] 

机构地区：[1]河南理工大学,河南焦作454000 [2]辽宁石油化工大学计算机与通信工程学院,辽宁抚顺113001

出　　处：《辽宁石油化工大学学报》2008年第1期62-65,共4页Journal of Liaoning Petrochemical University

摘　　要：研究了计算机动态取证的相关技术,提出了一个计算机动态取证系统模型并对相关模块进行设计。根据动态取证的特点,将数据挖掘技术和多智能代理技术结合起来应用于动态取证系统中,系统在体系结构上使用基于智能代理的分布式结构,采用数据挖掘技术进行动态取证的海量数据分析,针对基本挖掘算法在取证分析实际应用中可能存在的不足,提出了相应的改进方法,通过实验分析,证明了改进算法在动态取证应用中的有效性。Some association technologies were studied. A design model to the computer dynamic forensics system was put forward, and the detail design to the modules was given. According to the features of dynamic forensics, the method of applying data mining and multi--agent into the dynamic forensics, using multi--agent to build the architecture, using data mining technology to analyze the magnanimous data was raised. However, basic mining algorithms cannot be used to analyze digital evidence directly. So, relative improvements of basic algorithms and methods＇ of pattern analysis were put forward, and experiment is performed to prove the feasibility.

关 键 词：计算机取证 数据挖掘 动态取证 关联分析 

分 类 号：TP309.08[自动化与计算机技术—计算机系统结构]