一种基于镜像管理的电子证据系统  

AN ELECTRONIC EVIDENCE SYSTEM BASED ON IMAGE MANAGEMENT

作　　者：孙国梓[1] 王瑞[1] 薛磊[1] 朱小龙[1] 

机构地区：[1]南京邮电大学计算机学院,江苏南京210003

出　　处：《计算机应用与软件》2013年第8期32-35,共4页Computer Applications and Software

基　　金：国家自然科学基金项目(61073114);江苏省高校优势学科建设工程项目(YX002001)

摘　　要：随着信息犯罪的逐日增长,数字取证技术也日益受到重视并得以快速发展。提出一种解决方案,对来自复杂数据源的电子数据进行采集,并以镜像方式进行自动化管理。在给出系统总体架构的基础上,分别从镜像提取、镜像还原、镜像和文件的存储、镜像及文件的挂载、文件提取等功能模块进行详细描述,给出具体的设计和实现方法。最后,给出系统在不同数据缓冲区大小下镜像传输速度的试验结果。With the increase of information crimes, digital forensics technology has attracted more attentions and develops rapidly. A solution is proposed in this paper, namely, the collection of electronic data in complex information source and the automated management of them with the method of mirror image. On the basis of providing the overall system framework, we give detailed description on function modules of the solution including image extraction, image restoration, the storage and mounting of image and documents, and document extraction, as well as the specific ways of design and implementation. In end of the paper, the test result of image transmission rate in different sizes of data buffer in the system is presented.

关 键 词：信息犯罪 数字取证 磁盘镜像 镜像管理 文件提取 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]