并行技术在取证工作中的应用

Parallel Processing and Analysis in Digital Forensics

随着计算机技术的不断发展,硬盘容量的不断提升。目前的取证方式针对大容量硬盘与突发群体性案件中的海量数据无法实现快速而高效的取证分析工作。无法满足高速、高效地为信息研判提供支持,为此需要一种高速、高效的并行取证分析方式与相关技术,加快目前针对大容量硬盘或海量硬盘数据的取证分析工作。

With the development of computer and information technology, the capacity of hard drives is increasing rapidly. Currently it＇s hard to efficiently process and analyze evidence when investigators face with cases with many large volume hard drives. This paper describes a kind of new analysis method by using parallel forensic analysis and parallel evidence processing.