Computer Crime Forensics Model And Key Technologies

With the development of information technology, computer and network are playing a more and more important role in social, political, economy and cultural areas, computer crimes in digital world are becoming serious issues consequently. Computer forensics is an essential approach to charging computer crimes and has become the common concern of study in the computer science and law field.The thesis develops a thorough study and exploration on the technology, the current state and its development on computer forensics. It analyses the technology of computer forensics, and compares the current main technology of dynamic obtaining evidence, a comprehensive perspective of the evolution process of computer forensics is presented, which lays the ground for the overall knowledge of the state of the art of computer forensics.By combining the latest technology in the field of knowledge management, computer evidence is represented based on Ontology. Through Ontology-based representation, digital evidence has a standard and uniform format. The key technique, characteristics and advantage of mobile agent are summarized, and a new DFS named MADDFS is presented, which means Mobile Agent based Distributed Dynamic Forensics System, the architecture of MADDFS is according with the concept model of "distributed forensics, dynamic collaborators, area surveillance and overall inference modules ", and the mobile agents are organized as a tree, some key technology for MADDFS is discussed, such as: how to protect completely evidence, etc, further, some optimum schemes have been put forward.By analyzing the characteristic of data mining and dynamic forensics, a data-analyzing forensics mechanism in filtering, formatting, correlating and arraying is provided.In summary, the principal achievements of the thesis are helpful to the exploration of computer forensics methods and the construction of useful computer forensics system.