Digital evidence investigation in QQ software is the current research focus.In order to identify the authenticity and credibility of QQ chat records,the method based on attacking QQ chat records is proposed.Firstly,an...Digital evidence investigation in QQ software is the current research focus.In order to identify the authenticity and credibility of QQ chat records,the method based on attacking QQ chat records is proposed.Firstly,an evaluation model on checking the authenticity of QQ chat records is proposed.The cases on kinds of changing QQ chat records are discussed.The challenge in identifying the authenticity of QQ chat records is raised.Secondly,case study on attacking QQ chat records is proposed to check the relationship between the authenticity of QQ chat records and the difficulty of changing them.A couple of experiments on changing QQ chat records are finished to find how difficult changing records is and whether there are clues left on changing them or not.Finally,a kind of QQ chat forensic process is presented,which can help for digital evidence investigation in the authenticity and credibility of QQ chat records.The practices in QQ forensic cases show that it works well.展开更多
基金Sponsored by Science&Technology Research Program of the Municipal Education Committee of Chongqing of China(No.KJ110505)Key Project of Science and Technology and Natural Science Foundation Project of CQ CSTC of China(No.cstc2011AC2155 and cstc2011jjA 40031)
文摘Digital evidence investigation in QQ software is the current research focus.In order to identify the authenticity and credibility of QQ chat records,the method based on attacking QQ chat records is proposed.Firstly,an evaluation model on checking the authenticity of QQ chat records is proposed.The cases on kinds of changing QQ chat records are discussed.The challenge in identifying the authenticity of QQ chat records is raised.Secondly,case study on attacking QQ chat records is proposed to check the relationship between the authenticity of QQ chat records and the difficulty of changing them.A couple of experiments on changing QQ chat records are finished to find how difficult changing records is and whether there are clues left on changing them or not.Finally,a kind of QQ chat forensic process is presented,which can help for digital evidence investigation in the authenticity and credibility of QQ chat records.The practices in QQ forensic cases show that it works well.
