浅析“伪基站”类案件电子数据鉴定实务  

Discussion of Digital Forensic of ＂Pseudo Base Station＂

作　　者：张晓[1] 郭弘[1] 王永全[2] 沙晶[1] 崔宇寅[1] 蔡立明[1] 

机构地区：[1]公安部第三研究所信息网络安全公安部重点实验室,上海201204 [2]华东政法大学信息科学与技术系,上海200042

出　　处：《计算机科学》2015年第B10期122-124,135,共4页Computer Science

基　　金：本文受科技部科技支撑项目（2012BAH95F03）资助.

摘　　要：随着通信技术的高速发展，手机成为人们交流的必备工具。然而大部分用户在使用手机的过程中，会收到陌生号码发来的含有广告、诈骗等内容的垃圾短信，这就是不法分子利用“伪基站”设备进行违法犯罪活动的一种手段。目前，“伪基站”类违法犯罪活动在全国日益猖獗，严重损害了手机用户和运营商的合法权益。从时间检验、运行界面、数据库中数据、涉案IMSI记录和短信内容的固定保全以及鉴定结果应包含的内容等几个方面对“伪基站”类案件电子数据鉴定实务进行了讨论和分析，这对于提高此类案件的鉴定效率和准确性具有重要意义，同时也为公安机关及时侦破案件提供了可靠依据。As the communication technology develops rapidly, mobile phone has become an essential communication tool for people. However, most users may receive spare messages containing advertising, fraud and other content which sent from strangers in the use of mobile phones. This is a crime through ＂Pseudo base station＂. At present, there is a large number of crime by ＂Pseudo base station＂ in the country, which violate the rights of mobile phone us- ers and dealers. This paper discussed about some key points on digatal forensic of ＂Pseudo base station＂, such as the check of time, preservation of the Interface of run-time, data in database, IMSI and messages and conclusion. Thus, it can improve efficiency and accuracy to identify such cases, and it can also provide clues and evidence for the public se- curity organs to solve the case promptly.

关 键 词：伪基站 鉴定 数据库 IMSI 短信内容 鉴定结果 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]