谈计算机取证

Computer Forensics

随着信息技术的发展,利用计算机系统作为犯罪工具或目标的案件越来越多。因此,电子证据也将成为越来越重要的证据。但对于这类证据的取得,即计算机犯罪取证,却是人们要面对的一个难题。计算机取证可按以下步骤进行:保护和勘查现场、确定和获取电子证据、分析和提取数据、归档并提交结果。

With the development of information technologies, the criminal cases whose tool or goal is computer system are increasing. So , electronic evidence is becoming a more and more important evidence. But acquiring this kind of evidence, that is computer forensics , is a big problem to us. The computer forensics can take the following steps：protect and investigate crime scene; determine and obtain electronic evidence; analyze and take data; file and submit result.