| 基于时间有限状态自动机的事件重建推理算法 |
| |
| 引用本文： | 陈龙,陈武.基于时间有限状态自动机的事件重建推理算法[J].重庆邮电学院学报(自然科学版),2009(3). |
| |
| 作者姓名： | 陈龙 陈武 |
| |
| 作者单位： | 重庆邮电大学计算机取证与调查研究所; |
| |
| 基金项目： | 重庆市自然科学基金项目(CSTC,2007BB2454) |
| |
| 摘 要： | 应用时间Mealy型有限状态自动机(TMM)模型进行系统建模及计算机证据的形式化。针对单路推理算法推理时随着搜索路径的延长造成推理效率下降的问题,利用证据的时间先后关系以及推理路径数量发散特性,提出一种双路双向事件重建推理算法以提高推理效率。在8个时间Mealy有限状态自动机模型上进行了推理验证,实验结果表明该算法推理效率得到了提高。
|
| 关 键 词： | 计算机取证 事件重建 有限状态自动机 |
Event reconstruction algorithm based on timed finite state machine |
| |
| CHEN Long,CHEN Wu.Event reconstruction algorithm based on timed finite state machine[J].Journal of Chongqing University of Posts and Telecommunications(Natural Sciences Edition),2009(3). |
| |
| Authors: | CHEN Long CHEN Wu |
| |
| Institution: | CHEN Long,CHEN Wu (Institute of Computer Forensics , Investigation,Chongqing University of Posts , Telecommunications,Chongqing 400065,P.R.China) |
| |
| Abstract: | Target system and computer evidence formalization based on the timed Mealy finite state machine(TMM) model was introduced.In order to solve the problem of reasoning inefficiency with the reasoning path' s extension in single-channel reasoning algorithm,using the timed successively relation of evidences and the characteristic of the divergence of the reasoning path's quantity,a double-channel double-tracing event reconstruction algorithm was presented to inprove the reasoning efficiency.The reasoning simulat... |
| |
| Keywords: | computer forensics event reconstruction finite state machine |
| 本文献已被 CNKI 等数据库收录！ |
