电子物证溯源性研究  

Traceability analysis on digital forensic

作　　者：戴士剑[1] 李运策[1] 梅越 

机构地区：[1]最高人民检察院,北京100040 [2]空司自动化工作站,北京100843

出　　处：《信息网络安全》2010年第11期15-18,共4页Netinfo Security

基　　金："证据科学教育部重点实验室(中国政法大学)开放基金资助课题"资助;项目批准号为09KFKT002

摘　　要：理想的电子物证扣押程序是在扣押电子物证物理实体的同时,通过数字指纹对其数据信息进行固定和提取。固定和提取时,可以以只读方式任意制作多份检材复制件,供不同的鉴定机构重复进行检验鉴定,不仅不对原始检材进行任何修改,而且原始检材与其复制件的任何污染变化,都可以从其数字指纹上反映出来,从而保证了电子物证的真实性。但是在很多情况下,不能够做的这么完美。对于程序不完善或由原告方按照相应程序提取的电子物证,遭到质疑时,在一定条件下,可以通过技术手段对其进行溯源性分析与鉴定,以检验是否是原始电子物证,以及其是否受到过污染或改变。Ideal digital forensic collect program is to fix and extract the evidence by electronic fingerprint from physical entities when they are seized. During the process of fixing and extracting, copies can be created in the read-only mode to examine many times by different identifi cation centers. We use electronic fingerprint to ensure original evidence and copies never be modifi ed or changed, thus ensure the integrity of evidence. But in many cases, we can’t do perfectly. when the digital evidence are questioned because plaintiffs use incomplete program to extract, we can do traceability analysis and identification by technical means to identify whether they are original evidence and their contents are modified or changed.

关 键 词：电子物证 鉴定 溯源性 提取与固定 数字指纹 

分 类 号：D918.2[政治法律—法学]