数字取证的三维过程模型  

Three-dimension digital forensic process model

作　　者：赵倩[1] 宋如顺[1] 

机构地区：[1]南京师范大学数学科学学院,南京245041

出　　处：《计算机工程与应用》2013年第5期93-95,98,共4页Computer Engineering and Applications

基　　金：国家"211工程"建设项目(No.181070H901)

摘　　要：在强调取证人员重要性的基础上,根据电子证据来源的不同,提出了一个三维过程模型,针对不同的案件中涉及的不同证据来源,可以采用不同的证据收集方案,扩大了数字取证模型的使用范围,同时实现了证据的自动收集和分析功能,及知识的重复使用功能,并在调查分析阶段对证据可靠性放大算法进行了改进,提高了证据的可靠性和工作效率。This paper presents a three-dimension digital forensic process model based on emphasizing the importance of foren- sic numbers and different data sources. In this model, collecting methods are different varying from data source to data source which involved in the event in order to explore the scope of the model used. Meanwhile in this paper the evidence can collect and analyze automatically. Knowledge can re-use. In the phase of investigation and analysis it improves the evidence reliability amplification in order to improve evidence reliability and work effectively.

关 键 词：数字取证 证据可靠性 数字取证过程 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]