毕业论文--杨宜辰.docVIP

编 号： 审定成绩： 重庆邮电大学 毕业设计（论文） 设计（论文）题目： 学院： 学 生 姓 名 ： 专 业 ： 班 级 ： 学 号 ： 指 导 教 师 ： 答辩组 负责人 ： 填表时间：年月 重庆邮电大学教务处制 摘 要 。 首先，介绍了数字取证技术的基本情况及网络安全的相关背景知识，并基于此给出了三种基于不同技术背景且均被广泛使用的基于网络的数字取证模型，即基于主机和网络入侵检测的取证模型、基于数据挖掘的网络取证模型以及基于Bloom Filter的网络取证模型。之后针对模型不同的特点分别从模型的构建、模型的实现、模型的应用等方面对这三种模型进行了深入的探讨。 其次，提出了一种基于模糊聚类的孤立点挖掘模型，通过结合孤立点挖掘与模糊聚类的分析方法，加强了对孤立数据的挖掘与判断。之后对一个实例进行了分析，验证了模型的可行性。 接着，针对现在网络犯罪的特征，对反取证技术的概念、手段、关键技术进行了阐述分析，并对犯罪分子常用的数据擦除技术进行了具体研究，以更好地防范网络犯罪。 最后，引入一次成功破获网站攻击的案例来说明数字取证的重要性，并进行了网络监视和通信分析的实验。 【关键词】 数据挖掘 模糊聚类 反取证  ABSTRACT With the development of the network, more and more criminalities need to realize through the network. It sets a higher request to the digital forensic. This paper mainly carried on the analysis based on the network digital forensic technology. And the aspects vary from the concept, the usage, the models, the case and other parts. Firstly, the paper introduced the related information that is digital forensic technology and the knowledge of the network environment situation, and also the paper introduced the digital forensics’ definition and the network’s composition structure, and pointed out how to use digital forensic. We make the theory upholstery for the network and the digital forensics’ fusion. It introduced three digital forensic models which based on different tech-background. Those are the model that based on the main engine and network invasion examination, the model that based on the data mining and the model that based on the Bloom Filter. And it discussed more about it from the model realization, the model construction and the model application. Secondly, the paper launched a new model based on the Fuzzy Clustering and Outlier Mining. With the combination of these, model strengthening mining and determining of data. At last the paper analysis an example, authenticating the feasibility of the model. Then, it