摘要
给出"人+工具+证明"的取证模式,提出可信取证理念。从电子数据的静态属性可信性和取证方法动态行为的可信性两个方面对可信取证体系进行研究,以便最终形成可信的电子证据结果。建立基于瀑布模型的电子取证模型,从可信表达、可信分析、可信提取、可信固定以及可信发现等方面加以分析。
After giving the forensic model of ＂man ＋ tools ＋ confirmation＂, trusted forensic （TF） is proposed. From the trusted static attributes of digital data and trusted dynamic behavior of forensic method, the TF＇s goal is to get the trusted result. According to the strict process of computer forensics, the computer forensics model is been built based on the waterfall model. Finally, the model is analyzed from five aspects, such as trusted expressing, trusted analyzing, trusted extracting, trusted fixing, and trusted discovering.
出处
《信息网络安全》
2009年第7期4-6,20,共4页
Netinfo Security
基金
国家科技攻关项目(2007BAK34B06)
国家自然科学基金(60703086)
南京邮电大学攀登计划项目(NY208009)
关键词
信息安全
可信取证
瀑布模型
有效性
取证模型
Information security
Trusted forensics
Waterfall model
Reliability
Forensic model
