仿真分析取证模型的形式化研究  

The Formal Research on Simulation Analysis of Forensics Model

作　　者：张羽[1] 吴瑞[1] 

机构地区：[1]中国人民公安大学,北京100038

出　　处：《福建警察学院学报》2010年第1期43-49,共7页Journal of Fujian Police College

基　　金：国家科技支撑计划"计算机犯罪仿真重现取证系统"(项目编号:2007BAK34B04)

摘　　要：计算机犯罪的多样性使得现有的静态取证和动态取证模型均已不能很好的满足计算机取证的要求,亟需建立一种新型态的取证模型。仿真分析取证模型运用"自顶向下"的形式化建模方法,结合虚拟机技术的最新发展成果,通过虚拟犯罪现场重建构建了一种并行的取证平台,为侦查实践和司法实务提供了有力的技术支撑。The diversity of computer crime makes the existing static forensics and dynamic forensics models not very good for the requirements of computer forensics, so there is an urgent need to establish a new type of forensics model. Simulation analysis of forensics model use the ＂top-down＂ formal modeling approach, combined with the latest development results of virtual machine technology, through the virtual reconstruction of the crime scene evidence to build a parallel platform for analysis forensics. It provides a strong technical support for the detection practice and judicial practice.

关 键 词：计算机取证 虚拟机 仿真分析取证 形式化规约 

分 类 号：D918.4[政治法律—法学] TP309[自动化与计算机技术—计算机系统结构]