毕业设计（论文）-计算机取证可视化分析技术研究与应用.docVIP

编 号： 审定成绩： 重庆邮电大学 毕业设计（论文） 设计（论文）题目： 学院： 学 生 姓 名 ： 专 业 ： 班 级 ： 学 号 ： 指 导 教 师 ： 答辩组 负责人 ： 填表时间：年月 重庆邮电大学教务处制随着信息技术的广泛应用，计算机、手机等电子设备的大量普及，计算机、手机中涉及的电子数据成为一种新的证据形式——电子证据。这些电子证据中蕴含的嫌疑人相关信息、人际关系也成为电子取证的分析关键。尤其是犯罪分子在一起进行预谋活动时通过电子邮件等高级的通信媒介进行联络，这样使取证人员必须通过数据分析和调查软件对有效的数据进行关联分析并可视化显示。可见，计算机取证的可视化分析在计算机取证过程中有重要的意义。 本文主要研究的是基于电子邮件取证的可视化分析主要分为两个模块来完成首先特定路径文件中提取IP地址并进行显示保存，提取物理进行显示利用百度地图API技术把IP地址所对应的物理位置在地图上进行可视化显示。本系统实现，当取证数据较少时为较好的使用系统，目前在测试时未遇到问题，如果对其加以改进和完善，那么将在计算机取证的可视化分析方面会有比较好的贡献。计算机取证可视化IP地址百度地技术 ABSTRACT With the large popularity of wide application of information technology, computers, cell phones and other electronic devices are more and more popular. electronic data involved in mobile phone and computers has become a new form of evidence - electronic evidence. These electronic evidences contain information about suspects, relationships have become critical analysis of electronic evidence. Especially when liaising together for premeditated criminal activities through e-mail and other advanced communication media, such evidence must make through data analysis and survey software to effectively analyze and correlate data visualization. Visible, visual analysis of computer forensics has important significance in the computer forensics process. In this paper, the study is based on visual analysis of e-mail evidence, mainly divided into two modules to complete. The first module is: first extracted from the IP address stored in the specified file path eml,stored and displayed, and then extracted from the database of each of the pure IP address corresponding to the physical location and displayed. The second module is: first by C # XML file parsing way, the relationship between the extracted IP address and forensic between objects displayed by the tree; then use Baidu Maps API technology to the IP address corresponding to the physical l