毁损移动智能终端取证技术分级模型研究  

Research on Hierarchical Model for Defective Mobile Intelligent Teminal Forensic Technology

作　　者：田庆宜[1,2] 郭弘[3] 

机构地区：[1]重庆市公安局网络安全保卫总队,重庆401121 [2]重庆大学,重庆400044 [3]信息网络安全公安部重点实验室(公安部第三研究所),上海201204

出　　处：《信息网络安全》2017年第2期29-34,共6页Netinfo Security

基　　金：国家自然科学基金[61402062];信息网络安全公安部重点实验室开放课题[C16606];重庆市社会民生科技创新专项项目[cstc2015shmszx40004]

摘　　要：移动智能终端取证环境日趋复杂,一方面,移动智能终端本身的技术条件及嫌疑人对检材蓄意破坏对取证技术途径和结果均有影响,另一方面,移动智能终端取证技术也得到了飞速发展,不同的技术途径有不同的适用条件和风险,导致遇到检材量较大时难以在实验室人员、设备等有限资源下选择最优的取证技术途径。文章通过对影响技术途径选择的相关因素进行抽象,并对各影响因素根据实战实践赋予权重,建立评分模型,可实现检材进入实验室自动评分并提示其可选技术途径,有效提高了取证实验室反应能力。In actual combat, mobile Intelligent Terminal forensics environment is becoming increasingly complex. On the one hand, the technical conditions of the mobile intelligent terminal itself and the suspect’s destruction of the material collection have an impact on the forensic technology and results. On the other hand, the mobile intelligent terminal forensics technology has also been rapid development, There are different technical approaches have different applicable conditions and risks, resulting in It is difficult to choose the best way of obtaining evidence in the limited resources of laboratory personnel, equipment and so on. This paper is abstracted by factors related to selection of techniques, and the effect of each factor according to the actual practice of giving weight, establish evaluation model, which can realize automatic scoring of samples into the laboratory and indicates that the optional technical way, effectively improve the reaction ability of actual combat forensics laboratory.

关 键 词：损毁移动智能终端 芯片取证 分级模型 取证技术途径选择 

分 类 号：TN40[电子电信—微电子学与固体电子学] D918.2[政治法律—法学]