计算机取证作为一个由多学科交叉融合后形成的新型学科,既继承了原有学科已取得的研究和应用成果,又体现了本学科显明的特色、背景和发展优势。作为一门派生学科,计算机取证亟需从研究对象、理论体系和研究方法等方面加强学科建设的创新,从培养目标、课程体系与培养对象等构建专业体系,从实验内容、实验方法、实验对象和实验目的等进行实验室建设的探讨。针对司法取证和人才培养要求,结合技术和教学特点,在分析计算机取证概念、电子证据来源、取证工具、取证方法和特点的基础上,提出了分层次和类型创建计算机取证实验室的理念和具体做法,描述了相关技术细节和内容 Computer forensics as a new discipline formed by the multi-disciplinary cross-integration not only inherits the research and application results obtained by the original disciplines, but also shows the obvious characteristics, backgrounds and development advantages of this discipline. As a derivative subject, computer forensics urgently need to enhance the innovation of subject construction from the aspects of object of study, theoretical system and research methods, and build a professional system from the training objectives, curriculum system and training of subjects, from the experimental content, experimental methods, experimental subjects And experimental purposes such as laboratory construction. According to the requirements of judicial forensics and personnel training, based on the characteristics of technology and teaching, based on the analysis of the concept of computer forensics, the source of electronic evidence, the tools of forensics and the methods and features of forensics, the concept and concrete method of creating computer forensics laboratories by level and type are proposed Practice, describes the relevant technical details and content