计算机取证平台研究

目前的计算机取证工具多完成计算机取证的某一方面工作。计算机取证平台由证据收集平台、证据分析平台和证据表示平台构成，涵盖了计算机取证的整个工作流程。硬盘映像拷贝工具和现场取证系统构成了证据收集平台，证据分析平台由单机和网络版证据分析软件构成，而证据表示平台则使用XML来表达证据。计算机取证平台使计算机取证工作能够在统一的平台上进行，为计算机取证工作者提供了有力的工具。

Research of the Computer Forensic Platform

Current computer forensics tools are concentralcd on one or more specific areas. The Computer Forensic Platform is comprised of Evidence Collecting Platform, Evidence Analysis Platform and Evidence Presenting Platform. It covers the whole workflow of computer forensics. Disk imaging tool trod scene forensic system comprise the Evidence Collecting Platform. The Evidence Analysis Platform includes native and network versions. The Evidence Presenting Platform uses XML technology to express electronic evidence, The Computer Forensic Platform brings a uniform platform for computer forensic, and gives computcr forensic employers a powerful weapon against digital criminals.