| 摘要: |
| 介绍计算机取证的相关知识,分析实现计算机取证系统所涉及的硬盘的数据组织格式、文件系统解读、文件发现技术、删除数据的恢复技术等核心技术,为进一步实现计算机取证系统提供技术支撑。 |
| 关键词: 计算机取证 数字证据 系统解读 数据恢复 |
| DOI： |
| 投稿时间：2006-07-03修订日期：2006-09-15 |
| 基金项目: |
|
| Analysis on Key Techniques of Forensic Computing System |
|
HUANG Ning-ning1, SU Hong-fan2
|
| (1.Command Center, Nanning Bureau of Public Security, Nanning, Guangxi, 530012, China;2.Traffic Police Detachment, Nanning Bureau of Public Security, Nanning, Guangxi, 530028, China) |
| Abstract: |
| Forensic computing involves processes of retrieving,preserving,analyzing,and presenting of data that have been stored in computer media.It is a hotspot in security field.The techniques about data format,unscrambling of system architecture,file finding,recovery of deleted files in the hard disk are discussed. |
| Key words: forensic computing forensic duplicates system architecture recovery of data |
