Research And Implementation Of Dynamic Real-time Forensics Systems Based On Web Technology

With the advent of the "Internet +" period, the development of the Internet in China has reached unprecedented levels. The network leaks, defamation, rumors, spam, information interference are more and more rampant. Moreover, hacking, phishing and other kinds of criminal acts happen in a high frequency. And the content on the Internet are complex and changing, which cause difficulties for administrative authorities in the process of gathering evidence of network crime.According to laws and regulations of China, after doing in-depth study of the characteristics of electronic evidence and taking full consideration of the key issues in the process of evidence collection, a dynamic real-time forensics models based on web technology is designed. Based on this model, a dynamic real-time forensics systems based on web technology is achieved. Main work and research results are:1. It proposed a forensics model for any Web site can be dynamic real-time forensics, which is more in line with the requirements of Web sites than traditional forensics model. The proposed model responses to Web sites forensics features,in the formal, hierarchical, modular design model has been optimized,so that the model for the evidence collection pr ocess of Web sites can get more convenient and legitimate.2. To simplify the process of obtaining evidence, proposed a mode for acquisition of "What you see is what you gain". By design data captured and evidence collected collaboration module in the forensics model,it proposes requests and responses for sites timely,and the real-time responsed data will be timestamped and digital fingerprints,encrypted and transmitted to the third party maintenance center, ultimately which can automatically get the data when forensics officers browse the Web sites.3. Combined with the way of forensics execution and evidence to show in the forensics model,designed and realized the model of evidence acquisition,evidence curing,site positioning,the access control and forensics interface,and ultimately completed the dynamic real-time forensics system based on Web. Abstract should include main information of the original thesis as far as possible for the reader to determine whether to read the full text, which can also be applied for secondary sources.