网页取证若干关键问题研究

发布时间：2018-03-31 08:48

本文选题：计算机取证　切入点：网络爬虫　出处：《合肥工业大学》2014年硕士论文

【摘要】：随着计算机和互联网技术的飞速发展,以计算机网络为工具和媒介的犯罪活动不断增长。传统的计算机取证技术依赖对个人电脑和本地服务器数据存储介质的获取。而在网络与云计算技术的发展下,大量信息存储于取证方很难直接访问的云端服务器中,难以进行直接和有效的取证,对传统的计算机取证技术提出了挑战。本文针对这一问题,提出网络取证相关模型和方法,研究和设计一个可信度网页取证系统,主要研究内容包括：首先,针对网页的可信取证问题,本文提出三层取证模型,将整个取证过程分为网络数据层、内容爬取层、截图取证层三个部分,在不同层次上进行数据获取,对保存的证据可以在不同层次间进行交叉验证。同时,对所获取的网页组件重新还原出原来的网页,并在本地浏览器中真实的显示出来,保证了网页取证电子证据的完整性、一致性和可验证性。其次,针对社交网站取证问题,本文以新浪微博为例,设计了一套有效的取证解决方案,主要对用户发表的信息、人脸图片、位置信息进行固定,依靠网页取证方法确保信息的可信性,而利用信息可视化展示手段,辅助分析,有助于应对在海量社交网站数据背景下的计算机取证工作难题。最后,针对互联网数字图像取证问题,本文提取合成图像、重压缩图像和计算机生成图像(CG)的图像特征,设计基于SVM的取证分类器,然后使用D-S证据理论对多种图像类别特征进行融合,提高了对常见图像分类取证的准确性和可靠性。
[Abstract]:With the rapid development of computer and Internet technology, Criminal activities using computer networks as tools and media are on the rise. Traditional computer forensics technology relies on the acquisition of data storage media for personal computers and local servers. With the development of network and cloud computing technology, A large amount of information is stored in the cloud server, which is difficult for the forensics parties to access directly, so it is difficult to obtain evidence directly and effectively, which challenges the traditional computer forensics technology. In view of this problem, this paper puts forward the related models and methods of network forensics. This paper studies and designs a credible web forensics system. The main research contents are as follows: first of all, aiming at the problem of web pages' credible forensics, this paper proposes a three-layer forensics model, which divides the whole process into network data layer and content crawling layer. The three parts of the screenshot and forensics layer are used to obtain data at different levels, and the stored evidence can be cross-validated between different levels. At the same time, the original web page is restored to the obtained web page components. And the real display in the local browser ensures the integrity, consistency and verifiability of the electronic evidence of web forensics. Secondly, aiming at the problem of forensics on social networking sites, this paper takes Weibo of Sina as an example. A set of effective forensics solution is designed, which mainly immobilizes the information published by the user, face pictures and location information, and relies on the method of web page forensics to ensure the credibility of the information, while the information visualization is used to assist the analysis. It is helpful to solve the problem of computer forensics under the background of massive social network data. Finally, aiming at the problem of Internet digital image forensics, this paper extracts the image features of synthetic image, recompressed image and computer-generated image (CGG). A forensics classifier based on SVM is designed, and then D-S evidence theory is used to fuse various image classification features, which improves the accuracy and reliability of common image classification.
【学位授予单位】：合肥工业大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.092

【相似文献】