Computer Forensics Research

With the deveopment of computer technology and the popularity of information, the events of computer crime occur frequently. How to obtain the electronics evidence mostly, put the criminal into prison, attack the computer crime validly, it involves the technology of computer forensics which people are studying and paying close attention. If the computer forensics is adopted after the crime have occured, it will have the problems of the true and the efficacy on the evidence.This paper is committed to the study of computer forensics. It uses dynamic forensics to solve the problems of the static forensics. The thesis focuses on the research in the definition and the model of the dynamic forensics, the application of intelligent agent and data mining in dynamic forensics, the data collection and data analysis of dynamic forensics. It presents the combine forensics with firewall and intrusion detection system to get the electronic evidence timely. According to the features of the dynamic forensics, this paper raises the method of applying data mining and intelligent agent into the dynamic forensics, using intelligent agent to build the architecture, applying date mining to dig very larger and dynamic data. It has meaning to raise efficiency, adaptability and extendibility of the dynamic forensics system, it can raise the reality and efficiency of electronic evidence too.