E-mail Event Traces Searching And Clue Synthesis

Information sharing is realized with the fast development of Internet. E-mail has become the most important application on the internet and it makes people communicate with each other easier. Meanwhile, it becomes more and more common to take advantage of e-mail to commit crime. E-mail is becoming the more and more important possible evidence carrier for crime. Nowadays, In order to prevent and detect computer-related crime, computer forensics is the key of Computer crime investigation. The governments of many countries have attached importance to it. The thesis is based on the project "The research of investigation technology for beating computer crimes", sponsored by Department of National Technology and it is one of the most imporant projects of "the 10th national 5-year plan" . Taking e-mail related event traces as the researching object, a prototype system on seeking e-mail related evidences is designed and developed. The applicability of its rationale has been proved in practices.The main work finished by author is:1) Explicitly analysized and researched the distributed trace infomation and its formats about some of the E-mail client 's software of Foxmail and Outlook Express under windows platform.2) .Optimized and perfected the macro-frame and operating flow of some of the modules of cybercrime log forensics with the other team members, basing on laboratorial work.3) Expanded the expert kownledge system and strengthened the computer detecting and forensics ability of E-mail related events.