期刊文献+

数据恢复技术在计算机取证系统中的应用 被引量:12

Data Reconversion in Computer Forensics System
下载PDF
导出
摘要 在讨论计算机取证概念和技术进展的基础上,针对其中重要的数据恢复技术进行了讨论,并对该技术的应用、局限性进行了讨论,提出了在计算机取证系统中如何利用数据恢复技术完成软件自动取证和自动恢复的问题. Based on the Computer Forensics System concepts the development of evidential system and techniques, the data reconversion techniques and its limitations and applications were discussed. The auto-forensics and auto-reconversion techniques in software design were also mentioned.
出处 《成都大学学报(自然科学版)》 2008年第2期131-133,140,共4页 Journal of Chengdu University(Natural Science Edition)
关键词 计算机取证 数据恢复 电子证据 computer forensics data reconversion electronic evidence
  • 相关文献

参考文献5

  • 1Peter Sommer. Intrusion Detection ,Systems as Evidence [ J ]. Computer Networks, 1999,31 ( 23 ) : 2477 - 2487.
  • 2Henry B W. Computer Forensics [J]. Journal of Computer Security,2003,22(1) :26 - 28.
  • 3王玲,钱华林.计算机取证技术及其发展趋势[J].软件学报,2003,14(9):1635-1644. 被引量:198
  • 4Mark R, Clint C, Gregg G. An Examination of Digital Forensic Models[J].International Journal of Digital Evidence, 2002, 1 (3) :25 - 28.
  • 5汪中夏.数据高级恢复技术[M].北京:电子工业出版社.2006.

二级参考文献7

  • 1grugq.Defeating forensic analysis on Unix. Phrack #59 article6.http://www.phrack.org/show.phpp=59a=6,2002.
  • 2Farmer D.What are MACtimes Dr. Dobb''s Journal.http://www.ddj.com/documents/s=880/ddj0010f/0010f.htm,2000,10.
  • 3Farmer D Venema W.The coroner''''s toolkit (TCT). Dan Farmer Wietse Venema.http://www.fish.com/tct/,2002.
  • 4grugq scut.Armouring the ELF: Binary encryption on the UNIX platform. Phrack #58 article5.http://www.phrack.org/show.phpp=58a=5,2001.
  • 5Oseles L.Computer forensics: The key to solving the crime.http://facuity.ed.umuc.edu/-meinkej/inss690/oseles_2.pdf,2001.
  • 6ParraM.Computer forensics.http://www.giac.org/practical/Moroni_Parra_GSEC.doc,2002.
  • 7Dittrich D.Basic steps in forensic analysis of Unix systems.http://staff.washington.edu/dittrich/misc/forensics/,2000.

共引文献197

同被引文献65

引证文献12

二级引证文献26

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部