Primary Exploration of Reliability Evaluation of Computer Live Forensics Model on Physical Memory An

来源 :Journal of Harbin Institute of Technology | 被引量 : 0次 | 上传用户:vbcasp
下载到本地 , 更方便阅读
声明 : 本文档内容版权归属内容提供方 , 如果您对本文有版权争议 , 可与客服联系进行内容授权或下架
论文部分内容阅读
The integrity and fidelity of digital evidence are very important in live forensics. Previous studies have focused the uncertainty of live forensics based on different memory snapshots. However,this kind of method is not effective in practice. In fact,memory images are usually acquired by using forensics tools instead of using snapshots. Therefore,the integrity and fidelity of live evidence should be evaluated during the acquisition process. In this paper,we study the problem in a novel viewpoint. Firstly,several definitions about memory acquisition measure error are introduced to describe the trusty. Then,we analyze the experimental error and propose some suggestions on how to reduce it. A novel method is also developed to calculate the system error in detail. The results of a case study on Windows 7 and VMware virtual machine show that the experimental error has good accuracy and precision,which demonstrate the efficacy of the proposed reducing methods. The system error is also evaluated,that is,it accounts for the whole error from 30% to 50%. The integrity and fidelity of digital evidence are very important in live forensics. Previous studies have focused the uncertainty of live forensics based on different memory snapshots. However, this kind of method is not effective in practice. Using forensics tools instead of using snapshots. Thus, the integrity and fidelity of live evidence should be evaluated during a novel viewpoint. describe the trusty. Then, we analyze the experimental error and propose some suggestions on how to reduce it. A novel method is also developed to calculate the system error in detail. The results of a case study on Windows 7 and VMware virtual machine show that that the experimental error has good accuracy and precision, which demonstrate the efficacy of the proposed reducing methods. The system error is also evalu ated, that is, it accounts for the whole error from 30% to 50%.
其他文献
中国共产党优秀党员,全国著名耳鼻咽喉科专家、解放军总医院耳鼻咽喉头颈外科原主任杨伟炎教授,因病医治无效,于2016年7月4日8时13分在北京逝世,享年81岁。
期刊
期刊
期刊
期刊
期刊
期刊
期刊
期刊
2018年10月4-6日,恒之道科技有限公司在深圳举办了“第四届中国汽车电子高峰论坛”,200多名来自全国各地的汽车电子维修行业精英参与了本次论坛,将恒之道科技有限公司的技术
期刊