Design And Implementation Of Electronic Data Forensics System Based On EnCase

With the widespread usage of computers and the rapid development of information network, the electronic data has increasingly become the important evidence of judicial proceedings, electronic data forensics research has become the one focus of attention. How to convert the " 0, 1 " of digital electronic data into the electronic evidence be recognized by the court, how to use computer theory and the technique of electronic data to fix evidences, how to identify the occurrence and the processing method of the electronic data in the case, and how to extract the case clues and evidence from the voluminous electronic data in the electronic equipment, and a series of research content. At the same time, how to determine the electronic evidence and guarantee that it can not be altered, what kind of the electronic evidence can be recognized in the court, and be the focus. Finally, the electronic data forensics is a new research field. It is a comprehensive application of computer technology, law and criminal investigation science. In our country the electronic data forensics has just started, especially the electronic data forensics system research.The thesis has introduced the current situation of research and application on the electronic data forensics. According to the demand of electronic data forensics in our country, this paper has discussed the litigation evidence, the characteristics of electronic evidence, the theory and technology method of electronic data forensics, electronic data forensics tools and"EnCase"forensics platform, and the key technologies of electronic data forensics. Finally, combining with the requirements of programs by law and the work experience of electronic data forensics, it has designed the standard of electronic data processing flow, and researched the technology methods and solutions. Moreover, by using the EnCase platform, I has made an electronic data forensics system application software and realized the fixed, collection, recovery, correlation analysis, depth excavation, lectronic data, and electronic data forensics report writing and a series of standard functions of forensics.