电子取证应用研究综述

Survey on Electronic Forensics Research

近年来,电子数据取证对案件侦破起着重要的作用,由于电子数据具有易失性、易破坏性等特点,需要取证人员具备专业的电子取证技术和方法,才能最后分析出有用的证据,保证案件的真实性和客观性,详细分析三种取证技术和方法:基于Windows的电子取证、基于智能手机的电子取证,基于网络的电子取证,其中基于智能手机的电子取证包括Android手机和iPhone手机,并提出电子取证技术未来的发展方向.

In recent years,electronic data forensics has played an important role in the detection of cases.Because the electronic data have the characteristics of vulnerability,in order to finally analyze the useful evidence,it is necessary for the forensics personnel to have professional electronic forensics technology and methods to ensure the authenticity and objectivity of the cases.Three kinds of forensic techniques are analyzed in detail:electronic forensics based on Windows,electronic forensics based on smart phones,and electronic forensics based on network.Electronic forensics based on smart phones,include Android mobile phone and iPhone mobile phone.And the future development direction of electronic forensics technology is put forward as well.