| 计算机取证系统核心技术分析 |
| |
| 引用本文： | 黄宁宁,苏红帆. 计算机取证系统核心技术分析[J]. 广西科学院学报, 2006, 22(4): 370-374 |
| |
| 作者姓名： | 黄宁宁 苏红帆 |
| |
| 作者单位： | 南宁市公安局指挥中心,广西南宁,530012;南宁市公安局交警支队,广西南宁,530028 |
| |
| 摘 要： | 介绍计算机取证的相关知识,分析实现计算机取证系统所涉及的硬盘的数据组织格式、文件系统解读、文件发现技术、删除数据的恢复技术等核心技术,为进一步实现计算机取证系统提供技术支撑.
|
| 关 键 词： | 计算机取证 数字证据 系统解读 数据恢复 |
| 文章编号： | 1002-7378（2006）04-0370-05 |
| 收稿时间： | 2006-07-03 |
| 修稿时间： | 2006-09-15 |
Analysis on Key Techniques of Forensic Computing System |
| |
| HUANG Ning-ning and SU Hong-fan. Analysis on Key Techniques of Forensic Computing System[J]. Journal of Guangxi Academy of Sciences, 2006, 22(4): 370-374 |
| |
| Authors: | HUANG Ning-ning and SU Hong-fan |
| |
| Affiliation: | 1. Command Center, Nanning Bureau of Public Security, Nanning, Guangxi, 530012, China; 2. Traffic Police Detachment, Nanning Bureau of Public Security, Nanning, Guangxi, 530028, China |
| |
| Abstract: | Forensic computing involves processes of retrieving, preserving, analyzing, and presenting of data that have been stored in computer media. It is a hotspot in security field. The techniques about data forraat, unscrambling of system architecture, file finding, recovery of deleted files in the hard disk are discussed. |
| |
| Keywords: | forensic computing forensic duplicates system architecture recovery of data |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《广西科学院学报》浏览原始摘要信息 |
|
点击此处可从《广西科学院学报》下载免费的PDF全文 |
|
