A Computer Forensic System Based on Multi-leveled Marks Mining

摘要：

With the rapid development of information technology, computer crimes become very serious.However, traditional computer forensic has inherent limitations. Any modification, edit, removal, or cover, whether are caused by external force or human factors of electronic evidence, are difficult to distinguish technically. To solve these problems, we have implemented a computer forensic system based on multi-leveled marks mining to mine the marks as wide as possible, as soon as possible, and to fix evidence information supporting anti-repudiation. This paper describes the architecture and key technology of the computer forensic system in detail, as well as system implementation and experimental analysis.

关键词： computer forensic electronic evidence multi- leveled marks anti-repudiation

作者: Zhou Jie Wu Jiangjiang Wang Zhiying Ren Jiangchun Chen Yong Mei Songzhu

作者单位: Department of Computer National University of Defense Technology, NUDT Changsha, China

会议类型: 国际会议

会议名称: The 13th IEEE Joint International Computer Science and Information Technology Conference(2011年第13届IEEE联合国际计算机科学与信息技术会议 JICSIT 2011)

会议地点: 重庆

会议语种:英文

页码: 1866-1869

在线出版日期: 2011-08-20（万方平台首次上网日期，不代表论文的发表时间）