电子数据取证勘查调研综述

A Survey of Development and Equipment of Digital Evidence Investigation

由于互联网的发展与新型智能终端的不断涌现和普及,智能终端在犯罪活动中被频繁使用。在公安机关在打击犯罪一线实战中,涉案新型智能终端中的数据已成为重要的破案线索和证据来源,因此电子数据取证技术的作用愈加重要。现有的电子数据取证技术及装备仍面临着几方面的问题,包括:难以适应新型智能设备及应用的快速发展、无法对云环境下电子数据进行取证分析、对新设备、新环境支持验证不足的问题,使得现有技术装备无法很好地满足打击犯罪工作的需要。该文详细分析对比国内外主流的电子数据取证技术及装备的主要特点、优势与应用情况,并立足于案件一线的应用,给出电子数据取证目前需应对的挑战与未来的研究重点。

Due to the development of the Internet and the emergence and popularity of new intelligent terminals,intelligent termi⁃nals are frequently used in terrorism activities.In the actual combat of terrorism in the public security organs,the data in the new intelligent terminals involved has become an important source of clues and evidence,so the role of electronic data forensics technol⁃ogy is increasingly important.The existing electronic data forensics technology and equipment still face several problems,includ⁃ing:difficulty in adapting to the rapid development of new intelligent devices and applications,forensic analysis of electronic data in cloud environments,and insufficient support for new devices and new environments.The problem is that the existing technology equipment can not meet the needs of anti-terrorism work well.This paper analyzes in detail the main characteristics,advantages and applications of the mainstream electronic data forensics technology and equipment at home and abroad,and based on the appli⁃cation of the first-line terrorism-related cases,and gives the challenges and future research priorities for electronic data forensics.