基于多视图分析的复杂网络犯罪现场重构  

Complex Cyber Crime Scene Reconstruction Using Multi-View Analysis

作　　者：钟琳[1] 黎家盈[2] 邹锦沛[2] 许榕生[1] 

机构地区：[1]中国科学院高能物理研究所网络安全实验室,北京100049 [2]香港大学

出　　处：《电信科学》2010年第S2期165-170,共6页Telecommunications Science

摘　　要：当前互联网上发生的复杂网络案件越来越多(如网络种金案件),现有的计算机取证方法或是不能解决,或是所需证据收集不明确因而无法适用于实际案件,因而没有一种十分有效的应对方法。本文提出了一种新型取证模型,从多视图角度分析案件,并以实际案例论证该模型的有效性,同时结合业务、用户以及系统实现等视图进行展示,从而成功地重构了网络犯罪现场。There are more and more complex cyber crimes involving Internet(e.g.Internet-based Ponzi system).However,there are no effective methodologies to handle these cases.Existing approaches either do not address Internet-based cyber crimes or cannot be easily applied to complex cyber crime as the list of evidence to be collected is not well-defined.In this paper,we propose a new model to investigator these cases based on a multiple view analysis.We verify the effectiveness of our model based on a real case example and show that by combining different views,namely business view,user view,and system/implementation view,we are able to reconstruct the cyber crime scene successfully.

关 键 词：犯罪现场重构 复杂的网络犯罪 多视图 计算机取证 

分 类 号：D918.2[政治法律—法学]