基于日志技术的网络安全应急响应处置研究  

Network Security Emergency Response Based on Journaling Technology

作　　者：林建辉[1] 

机构地区：[1]湖北警官学院信息技术系,湖北武汉430034

出　　处：《湖北警官学院学报》2009年第5期10-12,共3页Journal of Hubei University of Police

基　　金：公安部应用创新项目2007yycxhbst065;湖北省自然科学基金项目2007A151

摘　　要：当前,信息网络安全事件由于技术和利益的原因层出不穷。作者分析了网络安全事件应急处理的调查和取证流程,提出了利用系统日志进行综合处置和调查取证,并给出了具体的系统模型。最后就日志证据的法律风险进行了探讨。The information network security cases appear constantly in current. Network security cases emergency response investigation and forensics procedure were analyzed, comprehensive disposal and investigation by system joumaling were offered, and concrete system model was put forward. At last, the legal risks of the joumaling proofs were discussed.

关 键 词：网络安全 日志技术 应急处置 取证 法律风险 

分 类 号：D631[政治法律—政治学]