计算机动态取证技术分析和模型实现

Technology analysis and Model Implementing on Computer Dynamic Forensics Technology

本文针对计算机动态取证的数据分析阶段面临的问题,首先介绍了计算机动态取证的概念,然后提出了基于智能代理的动态取证系统模型、智能代理技术在动态取证中的应用以及动态取证中的数据获取,解决动态取证的实时性、智能性、可适应性和扩展性问题。

This paper aims at the problem of data analysis in computer dynamic forensics. The concept of computer dynamics forensics is analyzed first, and then presents the model of dynamic forensics based on intelligent agent, the application of intelligent agent in dynamic forensics and the data collection of dynamic forensics, the application of intelligent agent can help to resolve the real-time, intelligent and adaptable problems.