基于Encase平台下的计算机犯罪勘查的研究及应用

发布时间：2018-05-19 22:46

本文选题：计算机犯罪 + 勘查方法　；参考：《南京理工大学》2010年硕士论文

【摘要】：随着计算机技术和网络技术的发展,计算机犯罪也在同步的发展。在这种虚拟的环境下实施计算机犯罪,不易取证和勘查。为了有效地打击计算机犯罪,培养一批综合素质高的勘查侦查人才显得尤为重要。我国的公安系统也非常重视这项工作。目前,公安机关对计算机犯罪的取证主要采用国际主流取证软件EnCase,它提供了常用勘查功能外,更重要的是它提供了可以扩展其程序功能的接口,勘查人员可以根据工作需要编写程序来满足勘查的需求,进而解决更复杂的现实问题。开发一些实用性强的程序对计算机犯罪的勘查有着重要的作用。本文兼顾前人的理论研究,从实践的角度来研究如何在EnCase平台下开发功能强大的程序对计算机犯罪的勘查有着重要的意义。本文共分了四部分进行研究：第一部分通过整理总结了大量的材料对选题依据和意义,计算机犯罪的国内外现状,计算机犯罪的概念、特点,计算机犯罪取证原则、勘查步骤及方法,计算机犯罪常见的手段,计算机取证的常见工具等方面进行了概要的阐述。第二部分在实践的基础上从EnCase产品情况,EnCase特点,EnCase功能三个方面对EnCase平台进行了介绍；第三部分结合基层公安工作的调研对系统的需求,总体框架,开发环境和脚本关键技术做了相关的设计和说明；第四部分根据需求分析对系统包含的案例初始化、文件查询、邮件勘查、QQ查询、IE历史查询和信誉卡查询六大模块进行详细的设计。最后总结了系统可以改进的地方。
[Abstract]:With the development of computer technology and network technology, computer crime is also developing synchronously. In this virtual environment, computer crime is not easy to obtain evidence and exploration. In order to effectively crack down on computer crime, it is very important to train a group of investigators with high comprehensive quality. Our country's public security system also attaches great importance to this work. At present, the public security organs mainly use the international mainstream forensics software EnCase.It provides the common exploration function, more importantly, it provides the interface that can expand its program function. Prospectors can write programs according to their work needs to meet the needs of exploration, and then solve more complex practical problems. Developing some practical programs plays an important role in the exploration of computer crime. In this paper, from the perspective of practice, it is of great significance to study how to develop powerful programs under the EnCase platform for the exploration of computer crimes. This paper is divided into four parts: the first part summarizes a large number of materials on the basis and significance of the topic, the current situation of computer crime at home and abroad, the concept of computer crime, characteristics, computer crime forensics principles, The steps and methods of exploration, the common means of computer crime and the common tools of computer forensics are described briefly. On the basis of practice, the second part introduces the EnCase platform from three aspects: the characteristics of EnCase and the function of EnCase. The development environment and script key technologies are designed and described. The fourth part is based on the requirements analysis of the system including the case initialization, file query, E-mail survey QQ query IE history inquiry and credit card inquiry six modules for detailed design. Finally, the system can be improved.
【学位授予单位】：南京理工大学
【学位级别】：硕士
【学位授予年份】：2010
【分类号】：D917;TP393.08

【参考文献】