引用本文: |
-
黄宁宁,苏红帆.计算机取证系统核心技术分析[J].广西科学院学报,2006,22(4):370-374. [点击复制]
- HUANG Ning-ning,SU Hong-fan.Analysis on Key Techniques of Forensic Computing System[J].Journal of Guangxi Academy of Sciences,2006,22(4):370-374. [点击复制]
|
|
|
|
本文已被:浏览 329次 下载 416次 |
码上扫一扫! |
计算机取证系统核心技术分析 |
黄宁宁1, 苏红帆2
|
|
(1.南宁市公安局指挥中心, 广西南宁 530012;2.南宁市公安局交警支队, 广西南宁 530028) |
|
摘要: |
介绍计算机取证的相关知识,分析实现计算机取证系统所涉及的硬盘的数据组织格式、文件系统解读、文件发现技术、删除数据的恢复技术等核心技术,为进一步实现计算机取证系统提供技术支撑。 |
关键词: 计算机取证 数字证据 系统解读 数据恢复 |
DOI: |
投稿时间:2006-07-03修订日期:2006-09-15 |
基金项目: |
|
Analysis on Key Techniques of Forensic Computing System |
HUANG Ning-ning1, SU Hong-fan2
|
(1.Command Center, Nanning Bureau of Public Security, Nanning, Guangxi, 530012, China;2.Traffic Police Detachment, Nanning Bureau of Public Security, Nanning, Guangxi, 530028, China) |
Abstract: |
Forensic computing involves processes of retrieving,preserving,analyzing,and presenting of data that have been stored in computer media.It is a hotspot in security field.The techniques about data format,unscrambling of system architecture,file finding,recovery of deleted files in the hard disk are discussed. |
Key words: forensic computing forensic duplicates system architecture recovery of data |
|
|
|
|
|