| 分布式计算机动态取证模型 |
| |
| 引用本文： | 梁昌宇,吴强,曾庆凯.分布式计算机动态取证模型[J].计算机应用,2005,25(6):1290-1293. |
| |
| 作者姓名： | 梁昌宇 吴强 曾庆凯 |
| |
| 作者单位： | 南京大学计算机科学与技术系 |
| |
| 基金项目： | 863计划项目(2004AA147070)，国家自然科学基金资助项目(60473053) |
| |
| 摘 要： | 提出一个分布式计算机动态取证模型,在被保护系统中进行实时动态的证据采集,将证据及时、完整地存储到安全的证据中心,为证据分析和提取工作提供可信的原始证据数据。
|
| 关 键 词： | 计算机取证 动态取证 证据完整性 |
| 文章编号： | 1001-9081(2005)06-1290-04 |
Distributed and dynamic computer forensic model |
| |
| LIANG Chang-Yu,WU Qiang,ZENG Qing-Kai.Distributed and dynamic computer forensic model[J].journal of Computer Applications,2005,25(6):1290-1293. |
| |
| Authors: | LIANG Chang-Yu WU Qiang ZENG Qing-Kai |
| |
| Affiliation: | Department of Computer Science and Technology, Nanjing University, Nanjing Jiangsu 210093, China |
| |
| Abstract: | Along with the development of computer technology , traditional computer forensics model could not meet the requirements for safety. The new forensic model was proposed here. Camparing with traditional computer forensic model, the major differenced between these two models lies on the distributed structure and the mechanism of dynamical data gathering. With this two characteristics, forensics system based on the new model could gather real-time evidences dynamically in a distributed system, and save this evidences in a safe place in time. So unauthorised deletion ,change to evidences could be detected and prevented. Then the stored evidences could be used for further analysis and review. |
| |
| Keywords: | computer forensics dynamic forensics integrality of evidence |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机应用》浏览原始摘要信息 |
|
点击此处可从《计算机应用》下载全文 |
