网络入侵检测与计算机取证技术探析

Network Intrusion Detection and Computer Obtaining Evidence Technology Analysis

网络入侵检测和计算机取证技术对网络犯罪防范和打击具有关键性意义。阐述了入侵检测步骤和主要分析技术、探讨计算机取证的法律依据及其关键技术,在对入侵检测和计算机取证进行基本阐述的基础上,尝试构建网络入侵取证模型。

Network intrusion detection and computer obtaining evidence technology analysis have key signifieances in preventing and combating crimes on the network. It elaborates the intrusion detection steps and main analysis technology, explores the legal basis of computer obtaining evidence and its key technology. Trying to construct the model of obtaining evidence of network intrusion, on the basis of elaborations of intrusion detection and computer obtaining evidence.