一种改进的计算机取证领域的分流过程模型  

An Improved Computer Forensics Field Triage Process Model

作　　者：张媛[1] 周婷[1] 赵志军[1] 

机构地区：[1]南京师范大学数学科学学院,江苏南京210046

出　　处：《计算机时代》2010年第11期30-32,共3页Computer Era

摘　　要：随着计算机的广泛应用,计算机犯罪越来越多,由此产生了一门新的学科——计算机取证学。文章在计算机取证领域的分流过程模型CFFTPM(Computer Forensics Field Triage Process Model)的基础上,提出了一种改进的计算机取证领域的分流过程模型ICFFTPM(an Improved CFFTPM)。与CFFTPM模型相比,该模型更完整、更具体,并且可以方便地运用于实际的数字取证调查中,适用于多种计算机犯罪案件的侦破。With the wide application of computer, computer crimes are becoming more and more common. Therefore a new subject--computer forensics has emerged. On the basis of CFFTPM （Computer Forensics Field Triage Process Model）, this paper proposes ICFFTPM （an Improved CFFTPM）. Compared with CFFTPM, this model is more integrated and specific, and it can be used in actual digital evidence investigation conveniently and is also suitable for the detection of various computer crimes.

关 键 词：计算机取证 过程模型 计算机犯罪 数字证据 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]