通信电子档案非自体入侵多方协作取证方法研究

Research on Multi-party Cooperative Forensics Method of Non-self-intrusion in Communication Electronic Archives

通信电子档案容易受到外界入侵导致信息泄漏,需要对入侵信息进行多方协作取证,提出一种基于关联规则特征提取的通信电子档案非自体入侵多方协作取证方法,构建通信电子档案非自体入侵的信息检测模型,采用最大似然拟合方法进行通信电子档案非自体入侵的信号模型构建,建立通信电子档案非自体入侵的码元传输信道分布模型,提取通信电子档案流量序列的统计特征量,采用码元包络幅值检测方法进行通信电子档案非自体入侵多方协作取证,实现入侵的多方协作检测.仿真结果表明,采用该方法进行通信电子档案非自体入侵多方协作取证的准确性较高,入侵检测概率较好,提高了通信电子档案的安全性.

Communication electronic archives are vulnerable to external intrusion resulting in information leakage,Therefore,it is necessary to carry out multi-party cooperative forensics to obtain intrusion information.A multi-party cooperative forensics method based on association rule feature extraction for non-self-invading communication electronic archives is proposed.The information detection model of non-self-intrusion of communication electronic archives was constructed.The signal model of non-self-intrusion of communication electronic archives was constructed using the maximum likelihood fitting method,and the symbol transmission channel distribution model of non-self-intrusion of communication electronic archives was established.The statistical characteristic of the traffic sequence of communication electronic archives was extracted,and the detection method of symbol envelope amplitude was used to detect the multiparty cooperation of the non-self-intrusion of communication electronic archives in order to realize the multi-party cooperation detection of the intrusion.The simulation results show that the accuracy and detection probability of non-selfinvading multi-party cooperative forensics of communication electronic archives are high,and the security of communication electronic archives is improved.