网络取证及其应用技术研究

Study of Network Forensics and its Application Techniques

网络取证技术的研究目前还很不成熟,术语的使用也较混乱.本文主要研究了网络取证的分析技术,着重分析了基于IDS、蜜阱、Agent、模糊专家系统和SVM等技术的网络取证实现方法,提出了基于入侵容忍、网络监控等技术的网络取证系统设计思想,从而系统地介绍了网络取证技术的概念、分析方法、取证技术、系统实现方法及其发展趋势.

At present, the research of network forensics is far from mature, and the use of nomenclature is very confused. The paper discusses the analysis techniques in network forensics, and network forensic methods based on IDS, honeytrap, Agent, fuzzy ES and SVM. It is proposed how to design the network forensic systems based on the techniques of intrusion tolerance, network monitor and so on. To sum up we discuss systematically the concepts, methods, realizing techniques and the development trend of the network forensics.／