非法入侵网站案件的电子取证分析  

Electronic Evidence Gathering for Illegal Network Intrusion

作　　者：庄建儿[1] 

机构地区：[1]浙江省湖州市公安局网络警察支队,浙江湖州313000

出　　处：《宁波大学学报（理工版）》2012年第4期55-58,共4页Journal of Ningbo University：Natural Science and Engineering Edition

摘　　要：为有效打击入侵网站的行为,以Windows系统为例,对一般网站服务器常见的电子取证内容和方法进行了总结和分析.重点就易变数据、事件日志、网站日志、异常帐户和文件、特殊目录下的文件记录等证据的取证进行了分析和阐述,提出了一些有用的对策.Illegal Network Intrusion is one of the main threats that we are facing in the field of network security. In order to crack down the illegal network intrusion, in this work, taking the Windows system as the platform, the author makes some efforts on summarizing the methods and analyzing the contents of the electronic evidence obtained from the common website severs in illegal network intrusion activities. The focal point of this article is set on the analysis and statement of the evidence gathering, which involves using the mutable figures, event logs, website logs, unusual accounts and documents, the documents record in some particular contents. Some useful countermeasures are also presented in the end of this paper.

关 键 词：网站 入侵 电子证据 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]