A Printing Data Acquisition System Based On Keyword Matching

As the fast development of information industry and the widespread application of printer, more and more managers with advanced insight have been aware of that it is very significant to secure the application of printer in order to protect the information and the interest of users. Undoubtedly, the best way to do that is to keep the content of printer under surveillance.Electronic evidence is included many aspects like text, graphic, image, audio and video. The source of Electronic evidence mainly comes from system log, IDS, firewall, ftp, www, anti-virus log, system's audit trails, Network monitor traffic, E-mail, temporary files or hidden files in Windows and database, operation log of database, swap section of hard disk driver, slack space, idle space, software configuration, script to finish specific function, Web explorer cache, bookmark, history, dialogue and chatting log.Today, the content of printer can be used as electrical evidence, such as the report forms, documents and pictures printed by suspects. But, it is not easy to get such evidence. This paper presents a practical solution about acquiring the content of printer.In order to solve the problems of the electronic evidence about computer forensics, a printing data acquisition system was designed and implemented based on keyword matching. In this paper, the author gives a brief introduction about computer forensics and the principle of printing. In addition, the author expatiate some key technologies in the process of acquiring printing data. Moreover, a key word matching algorithm is proposed in order to acquire the printing data in higher efficiency. The testing results prove that this system has a good performance.