一种基于孤立点挖掘的计算机取证技术

A Computer Dynamic Forensic Technique Based on Outlier Detection

针对计算机动态取证的数据分析中面临的问题,将基于相似度和的孤立点挖掘技术应用于计算机动态取证的海量数据分析中,通过仿真实验验证了该方法的可行性,具有较高的取证准确率。

The paper presents survey of computer dynamic forensics and develops a computer dynamic forensics system model to solve the problem which the computer dynamic forensics faces in the data analysis stage. The Outlier Detection applies to maguuiimous data analysis in the computerd ynamic forensics. We apply this technique on KDDCUP99 data set and get satisfactory results.