基于多Agent的网络取证自适应技术研究

Research on adaptive technique of network forensics based on multi-agent

在分析目前网络取证系统的不足和多Agent自适应技术特点的基础上,本文提出并建立了自适应网络取证模型,针对其中的检测与决策取证两个关键Agent工作原理进行了详细探讨,并就其自适应性进行了论述。

AbsBase on the analysis of insufficiency of the network forensics system at present and characteristic of multi-agent＇s adap- tive technology. This paper presents a multi- agent- based adaptive network forensics model. Principle of work of the two keys agent including collected evidence and Decision-making forensics is specified, and has carried on the elaboration on its adaptability.