电子证据获取和分析系统设计与实现.docVIP

电子证据获取和分析系统的设计与实现 摘要 由于计算机技术的不断发展与进步，计算机成为了人们生活的一部分，然而利用计算机来进行犯罪的现象也在不断地增加。那么应怎样得到人们犯罪证据呢？公安部门要严厉打击网络犯罪，给人们一个健康的网络环境，这就用到当今世人所关心与研究的计算机获取与分析技术。 通过计算机来获取证据属于为计算机犯罪提供有利的证据的一门较先进的技术手段，这门技术有电子证据的获取、保存、研究分析几大部分构成，在这最重要的是要使得数据的可依赖、真实以及不被破坏得到保证，而且要遵循法律的要求。对电子证据获取的调查，可避免有些利用计算机犯罪、追踪入侵以及修复安全的漏洞，进而使网络变得更健康与完善。 我们知道电子数据是很多的，并且它们都分散在不同的区域，那么怎样把这些证据都集中在一起呢？怎样找到有更有利的证据呢？这是当今计算机获取电子证据的难点。通过阅读的大量文献资料，本文对电子证据获取与分析的发展现状，并把研究意义以及研究基本方法给予了详细阐述；通过研究国内外的电子证据的状况，把现实生活的获取证据与体系的研究开发联系在一起，研究出了一门比较先进的计算机获取电子证据的技术，为的就是要得到更多的证据。 关键词：计算机；电子证据；获取与分析；犯罪 Abstract Because computer technology continues to evolve and progress, the computer has become a part of peoples lives, but the use of computers to carry out criminal phenomenon is also increasing. So how to get people to be evidence of guilt it? Public security departments to crack down on cyber crime, to give people a healthy network environment, which people use computers today are concerned with the study of the acquisition and analysis techniques. To obtain evidence through the computer belongs to provide evidence in favor of computer-related crime a more advanced technology, this technology has electronic evidence acquisition, preservation, research and analysis of several major parts, in which the most important is to make the data can rely on, real and guaranteed not to be destroyed, but also to follow the requirements of the law. Investigation of electronic evidence obtained, can avoid some use of computer crime, tracking the invasion and fix security vulnerabilities, thereby enabling the network to become more healthy and perfect. We know that the electronic data are many, and they are scattered in different regions, so how the evidence are concentrated together? How to find more favorable evidence? This is todays computers to obtain electronic evidence difficult. By reading a lot of literature, this paper obtain electronic evidence and analysis of current development, and the significance and basic research methods to give a detail; e