计算机取证的研究现状分析

本文从技术和法律相结合的角度对于国内外计算机取证的研究现状进行了总结和分析。以电子证据的来源为标准,计算机取证技术可分为：单机取证技术、网络取证技术和相关设备取证技术。而以计算机取证的过程为标准,计算机取证技术可以分为：电子证据的发现技术、固定技术、提取技术、分析技术和表达技术等。本文结合这两种分类,全面地分析了计算机取证这一领域的技术法律研究现状,提出了目前存在的问题和解决问题的建议。

Overview of Computer Forensics Research

In this paper, the current research situation of computer forensics is summed and analyzed. According to the sources of digital evidences, the computer forensics technologies are divided into machine forensics, network forensics and related equipment forensics. While following the process of computer forensics, the computer forensics technologies are made up of discovery, fixation, extract, analysis, and presentation. These two categories are all be analysis completely. Some issues and proposals are put forward.