论文部分内容阅读
计算机取证的应用领域是计算机犯罪的调查和举证。计算机犯罪是指利用计算机或以破坏计算机系统为目的的犯罪。它和现实生活中的各种犯罪一样,也会在犯罪现场留下痕迹和线索,不同的是计算机犯罪的“痕迹”是数字化的痕迹,“现场”在计算机系统中。在处理计算机犯罪方面,多数执法人员缺少专门的知识和训练,这给应对信息化的社会生活中的各种高技术犯罪带来了困难。我们的问题是:在发生了计算机犯罪时如何获取、保存和分析这些作为证据的“数字犯罪痕迹”,并在法庭上合法地出示证据,以利于将犯罪嫌疑人绳之以法。下面按四个方面阐述计算机取证的技术和方法。
The field of computer forensics is the investigation and evidence of computer crime. Computer crime refers to the use of computers or to destroy computer systems for the purpose of crime. Like all kinds of crime in real life, it will also leave traces and clues on the crime scene. The difference is that the “traces” of computer crimes are traces of digitization and the “scene” is in the computer system. In the area of computer crimes, most law enforcement officials lack specialized knowledge and training, which has caused difficulties in dealing with all kinds of high-tech crimes in the information society. Our question is how to obtain, preserve and analyze these “digital criminal traces” as evidence in the event of a cybercrime and to produce evidence legally in court to bring the suspects to justice. The following four aspects of computer forensics technology and methods.