摘要
计算机取证技术是计算机安全技术的重要组成部分,通过对嫌疑人计算机中的相应数据进行识别、获取、传输、保存、分析、提交和认证,从而呈现出可以被法庭认可的证据文件。该过程需要详细剖析计算机数据,只有具备了计算机取证和计算机证据专业知识,才能更好地开展工作。文章分别从计算机取证的定义、特征以及操作过程等方面进行介绍,并对计算机取证技术面临的问题以及发展趋势进行描述。
Computer forensics is an important part of computer security technology. It presents evidence document accepted by the court by the way of identifying, acquiring, transmitting, preserving, analyzing.submitting and certificating the corresponding data from the uspects computers. Such process acquires the specific analysis on the computer data. And only if it has been well equipped with s the professional knowledge in the field of computer forensics and computer evidence, this process could carry out better job. This paper introduces the concept, characteristics, operation processes of computer forensics, and then discusses the limitations of the current computer forensics and future development trends.
出处
《无线互联科技》
2017年第6期42-43,共2页
Wireless Internet Technology
基金
2016年度校级青年研究课题
项目编号:2016YQN020
关键词
计算机取证
计算机数据
证据文件
computer forensics
forensic technology
development trends
evidence document
