基于原数据的可信电子证据固定方法
发布时间：2018-11-21 18:36
【摘要】：针对信息犯罪,计算机取证已成为实现法律力量的重要技术手段。但长期以来对于电子取证的研究多聚焦在电子证据的获取与分析上,对于电子取证的可信性和有效性缺乏相应的论证。不合理的电子取证流程会影响到电子证据的采信度,因此需要在采集后对电子证据进行固定,确保证据的原始性。针对传统取证中缺乏可信度的问题,论文在可信取证理念的基础上首先提出“描述证据的数据”原数据的概念,并给出原数据的标准体系。由于不同案件对电子证据有不同的侧重点,论文对各类案件中如何总结出最合适的原数据组成给出了原数据的质量评估方法。在原数据的基础上,论文提出基于原数据的可信电子证据固定方法。该方法利用取证现场的多个角色,结合GPS定位、指纹识别与电子签名等技术,实现对电子证据的可信固定。与此同时,给出其配套的可信校验流程与可信存储方案,通过可信证据校验确保了电子证据即使被篡改后也可以被查出,通过可信存储方案确保采集到的电子证据在采集现场能够被可信保全。论文采用ARM+Linux架构实现了电子证据固定原型系统,通过对已固定证据的攻击实验,从实际应用上证明了论文提出的可信固定方案的可行性。
[Abstract]:In view of information crime, computer forensics has become an important technical means to realize legal power. However, for a long time, the research on electronic forensics has focused on the acquisition and analysis of electronic evidence, and there is no corresponding argument for the credibility and validity of electronic forensics. Unreasonable electronic forensics process will affect the reliability of electronic evidence, so it is necessary to fix the electronic evidence after collection to ensure the originality of evidence. In order to solve the problem of lack of credibility in traditional forensics, this paper first puts forward the concept of "describing evidential data" based on the concept of credible forensics, and gives the standard system of original data. Because different cases have different emphases on electronic evidence, this paper gives the quality evaluation method of original data on how to sum up the most suitable original data composition in all kinds of cases. Based on the original data, this paper proposes a reliable electronic evidence fixation method based on the original data. This method makes use of multiple roles in the forensics scene, combined with the techniques of GPS location, fingerprint identification and electronic signature, to realize the reliable fixation of electronic evidence. At the same time, the supporting trusted verification flow and the trusted storage scheme are given to ensure that electronic evidence can be detected even after tampering. The trusted storage scheme is used to ensure that the collected electronic evidence can be trusted and preserved in the collection site. In this paper, the electronic evidence fixed prototype system is implemented with the ARM Linux architecture. The feasibility of the credible fixation scheme proposed in this paper is proved by the attack experiments on the fixed evidence.
【学位授予单位】：南京邮电大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP309;D918.2
本文编号：2347922
[Abstract]:In view of information crime, computer forensics has become an important technical means to realize legal power. However, for a long time, the research on electronic forensics has focused on the acquisition and analysis of electronic evidence, and there is no corresponding argument for the credibility and validity of electronic forensics. Unreasonable electronic forensics process will affect the reliability of electronic evidence, so it is necessary to fix the electronic evidence after collection to ensure the originality of evidence. In order to solve the problem of lack of credibility in traditional forensics, this paper first puts forward the concept of "describing evidential data" based on the concept of credible forensics, and gives the standard system of original data. Because different cases have different emphases on electronic evidence, this paper gives the quality evaluation method of original data on how to sum up the most suitable original data composition in all kinds of cases. Based on the original data, this paper proposes a reliable electronic evidence fixation method based on the original data. This method makes use of multiple roles in the forensics scene, combined with the techniques of GPS location, fingerprint identification and electronic signature, to realize the reliable fixation of electronic evidence. At the same time, the supporting trusted verification flow and the trusted storage scheme are given to ensure that electronic evidence can be detected even after tampering. The trusted storage scheme is used to ensure that the collected electronic evidence can be trusted and preserved in the collection site. In this paper, the electronic evidence fixed prototype system is implemented with the ARM Linux architecture. The feasibility of the credible fixation scheme proposed in this paper is proved by the attack experiments on the fixed evidence.
【学位授予单位】：南京邮电大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP309;D918.2
【参考文献】
相关期刊论文 前10条
1 马康;;论行政证据在刑事诉讼中的使用——以“快播”案为切入点[J];三峡大学学报(人文社会科学版);2016年04期
2 王志刚;;从“快播案”看当前电子数据运用困境[J];法治研究;2016年04期
3 梅臻;;《电子签名法》适用的难点问题探析[J];法律适用;2016年07期
4 杜翰洋;;论新型网络技术对电子数据证据的影响——以“快播案”为例[J];广西青年干部学院学报;2016年01期
5 袁胜;;“快播”案为安全、法律、技术划线[J];中国信息安全;2016年02期
6 金波;杨涛;吴松洋;黄道丽;郭弘;;电子数据取证与鉴定发展概述[J];中国司法鉴定;2016年01期
7 樊崇义;李思远;;论我国刑事诉讼电子证据规则[J];证据科学;2015年05期
8 杨妍;;浅谈计算机犯罪及相关法律研究[J];法制博览(中旬刊);2014年09期
9 曾荣鑫;;互联网电子证据保全公证机制探析[J];云南社会主义学院学报;2014年01期
10 程权;孟传香;;论新刑事诉讼法视野下电子证据的审查[J];重庆邮电大学学报(社会科学版);2013年06期
相关硕士学位论文 前1条
1 邵泽慧;基于可信取证的电子数据溯源方法[D];南京邮电大学;2014年
，本文编号：2347922
本文链接：https://www.wllwen.com/falvlunwen/fanzuizhian/2347922.html
