一种电子数据可信取证形式化模型

发布时间：2018-04-26 21:22

本文选题：可信取证 + 静态属性　；参考：《南京邮电大学》2012年硕士论文

【摘要】：伴随着计算机技术的快速发展，涉及到计算机犯罪的案件频繁发生，计算机取证技术应运而生。计算机取证具有自身的特点，要求在取证过程中，尽最大可能地搜集到所有涉案电子证据、保证电子数据的原始性、确保电子数据取证结果可信。如何保证提供的证据能够呈堂并作为庭审的依据，是一个亟待解决的难题。纵观计算机取证近些年的研究现状，技术研究的重点放在电子数据的获取上，忽视了数据分析和取证理论的研究。鉴于此，本文在已有研究的基础上，提出了计算机取证中电子数据的静态属性语义特征模型和计算机取证过程中动态行为形式化模型，从而保证取证过程电子数据的原始性、完整性、一致性和可信性以及取证方法的规范化。在查阅大量的文献后，，本文做的主要工作如下： 1）总结已有研究成果，研究分析电子数据可信取证的理论基础，为可信取证形式化模型提供基本的理论支撑。 2）在已有的电子数据可信取证体系的理论基础上，分析现有计算机取证方法的不足，并由此提出计算机取证中电子数据的静态属性语义特征模型和计算机取证过程中动态行为形式化模型。 3）使用FODA和OCL形式化描述计算机取证的电子数据的静态属性语义特征模型。 4）将层次时间自动机和基于瀑布模型的可信取证方法结合，形式化描述了计算机取证过程中动态行为形式化模型。 5）针对电子数据的静态属性语义特征模型给出实例分析；针对计算机取证过程中动态行为形式化模型使用UPPAAL仿真和验证。
[Abstract]:With the rapid development of computer technology, cases involving computer crime occur frequently, and computer forensics technology emerges as the times require. Computer forensics has its own characteristics, so it is required to collect all electronic evidence as far as possible in the process of obtaining evidence, to ensure the originality of electronic data and to ensure that the results of electronic data collection are credible. How to ensure that the evidence can be presented and used as the basis of the trial is a difficult problem to be solved. In recent years, the research on computer forensics has focused on the acquisition of electronic data, ignoring the research of data analysis and forensics theory. In view of this, based on the existing research, this paper proposes the static attribute semantic feature model of electronic data in computer forensics and the formalized model of dynamic behavior in the process of computer forensics, so as to ensure the originality of electronic data in the process of forensics. Integrity, consistency and credibility, and standardization of evidence collection methods. After consulting a lot of literature, the main work of this paper is as follows: 1) summarizing the existing research results and analyzing the theoretical basis of electronic data trusted forensics, which provides the basic theoretical support for the formal model of trusted forensics. 2) on the basis of the existing theory of electronic data credible forensics system, the deficiency of the existing computer forensics methods is analyzed. The static attribute semantic feature model of electronic data in computer forensics and the formal model of dynamic behavior in computer forensics are proposed. 3) FODA and OCL are used to formalize the static attribute semantic feature model of electronic data obtained by computer. 4) combining hierarchical time automata with credible forensics based on waterfall model, the formal model of dynamic behavior in computer forensics is formalized. 5) an example analysis is given for the static attribute semantic feature model of electronic data, and UPPAAL is used to simulate and verify the formal model of dynamic behavior in the process of computer forensics.
【学位授予单位】：南京邮电大学
【学位级别】：硕士
【学位授予年份】：2012
【分类号】：TP393.08;D918.2

【参考文献】