摘要
本文首先介绍了计算机动态取证的概念、原则和步骤,然后提出了一个计算机动态取证系统模型,并针对计算机动态取证的数据分析阶段面临的问题,将数据挖掘技术应用于计算机动态取证的海量数据分析中,能够有效的提高动态取证中数据分析的速度、分析的准确性和分析的智能性,解决动态取证中的实用性、有效性、可适应性和可扩展性问题。
Firstly, this essay introduces concept, principle and step of computer dynamic forensics, then proposed a computer dynamic forensics system model, and aims at the question which the computer dynamic forensics faces in the data analysis stage, the data mining technology applies to magnanimous data analysis in the computer dynamic forensics, it can effectively enhancement the data analysis speed, the analysis accuracy and the analysis intelligence, solute dynamic forensics usability, the validity, compatibility and extended question.
出处
《微计算机信息》
北大核心
2005年第11X期82-84,共3页
Control & Automation
关键词
计算机取证
动态取证
数据分析
数据挖掘
computer forensics, dynamic forensics, data analysis, data mining