摘要
文章基于计算机屏幕录影技术,提出一种新的计算机取证证据关联形式,即视频化计算机取证系统(VCFS)模型。基于该模型,设计并实现了用户行为违反监控规则情况下计算机终端的视频取证功能。最后通过分析在各种环境下视频化计算机取证系统的效率,得出影响系统效率的关键因素,并提出相应的解决思路。
Based on the computer screen-recording technology, this paper gives a new computer forensics model VCFS. In this model, the supervision and forensics function of computer terminals is designed and implemented when users act against supervision rules. Finally, through analyzing the efficiency of VCFS under various environments the key factor that affects the system efficiency is obtained, and corresponding resolutions are proposed.
出处
《信息安全与通信保密》
2009年第7期99-101,104,共4页
Information Security and Communications Privacy
基金
科研院所社会公益研究专项CY0606
关键词
计算机取证
动态取证
行为监控
视频取证
computer forensic
dynamic forensic
behavior monitor
video forensic
