基于业务用户行为的计算机动态取证评估模型研究  

Research on Computer Dynamic Forensic Evaluation Model based on Business User Behavior

作　　者：缪红[1] Miao Hong(Sichuan Police College,Luzhou Sichuan 646000,China)

机构地区：[1]四川警察学院,四川泸州646000

出　　处：《信息与电脑》2017年第15期38-39,共2页Information & Computer

基　　金：四川省教育厅课题"基于任务驱动的计算机取证案例教学资源平台建设";四川省教育厅科研基金项目(项目编号:15ZB0287)

摘　　要：通过调研信息要求繁多、应用较广的业务用户行为,辅助木马技术对业务用户的行为进行动态取证。该模型基于大数据定量评估的方法,通过云计算技术模拟再通过仿真实验来评估该模型是否合理,能否将反馈误差降到最低且能隐蔽记录用户行为,利用反侦查学原理反馈给取证控制端。这一技术方案增强了计算机动态取证的可行性。Through the research information requirements,the application of a wide range of business user behavior,assisted Trojan technology business users to conduct a dynamic evidence.The model is based on a large data quantitative assessment method.Through the simulation of cloud computing technology and then through the simulation experiment to assess whether the model is reasonable,whether the feedback error can be minimized and can conceal the record user behavior.Use the principle of antireconnaissance feedback to the evidence control side.This technical solution enhances the feasibility of allowing the computer to be dynamically validated.

关 键 词：云模型 行为评估 业务用户行为 计算机动态取证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]