多维关联度分析驱动的数字证据链构造方法  

Construction method of digital evidence chain driven by multidimensional correlation analysis

作　　者：刘延华[1] 欧振贵 刘西蒙 陈惠文 林钟馨 张明辉 LIU Yanhua;OU Zhengui;LIU Ximeng;CHEN Huiwen;LIN Zhongxin;ZHANG Minghui(College of Computer and Data Science,Fuzhou University,Fuzhou,Fujian 350108,China;State Grid Info-Telecom Great Power Science and Technology Co.,Ltd.,Fuzhou,Fujian 350003,China)

机构地区：[1]福州大学计算机与大数据学院,福建福州350108 [2]国网信通亿力科技有限责任公司,福建福州350003

出　　处：《福州大学学报（自然科学版）》2024年第4期404-412,共9页Journal of Fuzhou University(Natural Science Edition)

基　　金：国家自然科学基金资助项目(62072109,U1804263);福建省自然科学基金资助项目(2021J01625)。

摘　　要：提出一种基于多维关联度的数字证据链自动构造方法.首先设计一种数字证据标准化表示方法,将数字事件与其之间的关联关系进行规范化描述.然后通过对数字事件关联关系的分析,提出多维度的非因果关联度计算方法和基本证据环的构造方法,对数字事件因果关系进行深度分析.实验结果表明,所提出方法构造的数据证据链对于提升数字证据的证明力具有一定的应用意义.An automatic construction method of digital evidence chain is proposed based on multi-dimensional correlation degree.First,a standardized representation of digital evidence is designed to standardize the description of digital events and the correlations between them.Then,by analyzing the association relationship of digital events,a multidimensional non-causal correlation degree calculation method is proposed for the construction of the basic evidence ring,and a deep analysis of the causal relationship of digital events is conducted.The experimental results show that the data evidence chain constructed by the method has certain application significance for improving the proof power of digital evidence.

关 键 词：数字取证 数字证据链 证据环 关联度 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TP391[自动化与计算机技术—计算机科学与技术]