Preservation Of Digital Evidence During The Process Of Investigating

With the development of the information society, variety of law cases related to computer are becoming more and more. This requires to pick up, preserve and identify digital evidences, and this kinds of evidences are the key of solving a case. We concentrate in this thesis on the problem of obtaining and preserving digital evidences during the process of investigating to provide power evidences for judicial act.We investigate preserving digital evidence from concept, content, method, step and information security technology in this thesis. Then we make a special effort to investigate and study the method preserving digital evidence during the process of investigating, and we have laid out an evidence management system. The management system successfully achieve preserving digital evidence through resolving the problem that digital evidence is easily to be copied and be altered, hardly to be confirmed its source and keep its integrity by using digital signature technology.