网络取证中的若干问题研究

Research on Several Issues in Network Forensics.

为了保证网络证据的可采性,网络取证在遵循证据的客观性、关联性和合法性三个基本原则之外,还必须遵守一定的程序和步骤。国内外学者建立了诸多网络取证过程模型,但是从网络发展趋势来看,网络取证模型不必强调统一、通用性,应该针对特定的环境分别制定网络取证过程模型。

Network Forensics is developing fast with the Internet explosion. To ensure the validity and facticity, the network forensics must follow certain processes, principles, and steps. The objectivity, relevance and validity of the evidence are three basic principles of the network forensics. Many network forensic process models are already in place, but, due to the developmental tendency of network, it is unnecessary to emphasize the unity and universality of network forensic process model. We, therefore, should tailor specific network forensic process models according to special circumstances.