计算机取证模型研究

在计算机犯罪发生后对现场信息进行事后的收集,难以确保证据的真实性和及时性。提出了一个基于动态采集理念的计算机取证模型,介绍了该模型的功能模块,将模糊C均值聚类算法引入到数据分析阶段,采用XML技术表示取证结果,实现了基于该模型的计算机取证原型系统。实验证明,原型系统能采集到准确、有效的电子证据。

Research on the Computer Forensics Model

If the data was collected after the computer crime had occurred,it was difficult to ensure the authenticity and the timeliness of the evidence.A computer forensics model based on the concept of dynamic-collection was built in this paper.The work process of the model was introduced,the fuzzy C-means(FCM) clustering method was used to analyze the digital data,and the extensible Markup Language(XML)was also used to describe the forensics results.A computer forensics prototype system based on this model was imp...