摘要
计算机取证是对计算机犯罪证据的识别、获取、传输、保存、分析和提交认证过程,实质是一个详细扫描计算机系统以及重建入侵事件的过程。本文主要介绍了计算机取证的概念、特点,计算机取证的过程,然后探讨了计算机取证的发展趋势和局限性。
Computer evidence obtain is a process of identification,access,transmission,storage,analysis and presentation of crime evidence,in essence,it is a process to scan the computer system in detail and the process of re-invasion.This paper introduces the concept,features and process of computer evidence and then discusses the development trend and limitations of computer evidence obtain.
出处
《价值工程》
2011年第12期175-175,共1页
Value Engineering
关键词
计算机取证
电子证据
计算机反取证
computer evidence obtain
electronic evidence
anti-obtain evidence by computer
