支持多种介质的电子取证方法与平台的研究
发布时间：2018-10-30 10:01
【摘要】：信息技术的发展使得电子数据深入到人们生活的各个角落,也带来了日益猖獗的以电子设备为手段和介质的犯罪活动,针对这类活动的电子取证应运而生。然而我国法律没有对电子证据的明确定位,且电子证据又具有脆弱性、抽象性以及多样性的特征,给多介质环境下的电子取证方法带来新的问题。 本文以电子取证的法律环境为基础,对电子取证的过程模型以及取证技术和工具现状进行分析,研究多介质环境下的电子取证工作的关键问题,提出相应的解决方案,设计了一种支持多介质的电子取证方法,实现了电子取证平台原型,并通过一系列实验进行了验证。 本文首先对电子证据的法律定位和电子取证的过程模型以及技术工具的现状进行分析,研究并提出了多介质环境下的电子取证的两个关键问题的解决方案:1)电子证据的不同介质统一格式。通过对DEB格式的改进,保持公开和多介质包容特性,并加入电子签名和多级别流转的支持,让多介质的电子证据的存储包装更加统一和易用。2)电子取证的可信性保证方法。通过包含流转元数据的电子签名链的设计,让可信性保证方法达到了完整性、可校验性和时序性的要求,为取证过程中电子证据的完整性和取证结果的可信性提供保证。 在此基础上,本文提出了一个支持多介质的电子取证方法,支持多介质环境下的证据搜集、证据保全、证据分析和证据展现。本文对方法中的关键活动以及电子证据的存储进行了详细设计。然后,基于该方法,本文采用UML技术完成了电子取证平台的需求分析和架构设计,并采用Java、OpenSSL、hibernate以及MySQL数据库等技术完成了平台的实现。最后,针对电子取证的关键活动,本文对平台进行了一系列实验。实验证明,平台能在完成电子取证流程的基础上,对多介质来源的电子证据提供有效的支持,并为电子取证过程提供可信性保证。
[Abstract]:With the development of information technology, electronic data goes deep into every corner of people's life, and it also brings about increasingly rampant criminal activities with electronic devices as means and media. Electronic forensics against such activities emerges as the times require. However, there is no clear orientation of electronic evidence in Chinese law, and electronic evidence has the characteristics of fragility, abstraction and diversity, which brings new problems to the electronic forensics method in multi-medium environment. Based on the legal environment of electronic forensics, this paper analyzes the process model, techniques and tools of electronic forensics, studies the key problems of electronic forensics in multi-medium environment, and puts forward corresponding solutions. An electronic forensics method supporting multi-media is designed, and the prototype of electronic forensics platform is implemented, which is verified by a series of experiments. This paper first analyzes the legal orientation of electronic evidence, the process model of electronic forensics and the present situation of technical tools. This paper studies and proposes two key solutions for electronic forensics in multi-media environment: 1) the unified format of electronic evidence in different media. By improving the DEB format, maintaining the characteristics of openness and multi-media inclusiveness, and adding the support of electronic signature and multi-level flow, the storage packaging of electronic evidence in multi-media is more uniform and easy-to-use. 2) the credibility of electronic forensics is guaranteed. Through the design of the electronic signature chain which contains the flow metadata, the credibility assurance method can meet the requirements of integrity, verifiability and timing, which can guarantee the integrity of the electronic evidence and the credibility of the evidence results in the process of obtaining evidence. On this basis, this paper proposes an electronic forensics method that supports multi-media, supporting evidence collection, evidence preservation, evidence analysis and evidence presentation in multi-media environment. In this paper, the key activities of the method and the storage of electronic evidence are designed in detail. Then, based on this method, this paper uses UML technology to complete the requirements analysis and architecture design of the electronic forensics platform, and uses Java,OpenSSL,hibernate and MySQL database technology to complete the implementation of the platform. Finally, aiming at the key activities of electronic forensics, this paper carries out a series of experiments on the platform. Experimental results show that the platform can provide effective support for electronic evidence from multiple media sources on the basis of completing the process of electronic forensics and provide credibility assurance for the process of electronic forensics.
【学位授予单位】：上海交通大学
【学位级别】：硕士
【学位授予年份】：2012
【分类号】：TP311.52;D918.2
本文编号：2299685
[Abstract]:With the development of information technology, electronic data goes deep into every corner of people's life, and it also brings about increasingly rampant criminal activities with electronic devices as means and media. Electronic forensics against such activities emerges as the times require. However, there is no clear orientation of electronic evidence in Chinese law, and electronic evidence has the characteristics of fragility, abstraction and diversity, which brings new problems to the electronic forensics method in multi-medium environment. Based on the legal environment of electronic forensics, this paper analyzes the process model, techniques and tools of electronic forensics, studies the key problems of electronic forensics in multi-medium environment, and puts forward corresponding solutions. An electronic forensics method supporting multi-media is designed, and the prototype of electronic forensics platform is implemented, which is verified by a series of experiments. This paper first analyzes the legal orientation of electronic evidence, the process model of electronic forensics and the present situation of technical tools. This paper studies and proposes two key solutions for electronic forensics in multi-media environment: 1) the unified format of electronic evidence in different media. By improving the DEB format, maintaining the characteristics of openness and multi-media inclusiveness, and adding the support of electronic signature and multi-level flow, the storage packaging of electronic evidence in multi-media is more uniform and easy-to-use. 2) the credibility of electronic forensics is guaranteed. Through the design of the electronic signature chain which contains the flow metadata, the credibility assurance method can meet the requirements of integrity, verifiability and timing, which can guarantee the integrity of the electronic evidence and the credibility of the evidence results in the process of obtaining evidence. On this basis, this paper proposes an electronic forensics method that supports multi-media, supporting evidence collection, evidence preservation, evidence analysis and evidence presentation in multi-media environment. In this paper, the key activities of the method and the storage of electronic evidence are designed in detail. Then, based on this method, this paper uses UML technology to complete the requirements analysis and architecture design of the electronic forensics platform, and uses Java,OpenSSL,hibernate and MySQL database technology to complete the implementation of the platform. Finally, aiming at the key activities of electronic forensics, this paper carries out a series of experiments on the platform. Experimental results show that the platform can provide effective support for electronic evidence from multiple media sources on the basis of completing the process of electronic forensics and provide credibility assurance for the process of electronic forensics.
【学位授予单位】：上海交通大学
【学位级别】：硕士
【学位授予年份】：2012
【分类号】：TP311.52;D918.2
【引证文献】
相关期刊论文 前1条
1 隆波;周道明;麦永浩;;专业电子设备取证技术研究[J];信息网络安全;2013年08期
，本文编号：2299685
本文链接：https://www.wllwen.com/shekelunwen/gongan/2299685.html
