给出"人+工具+证明"的取证模式,提出可信取证理念。从电子数据的静态属性可信性和取证方法动态行为的可信性两个方面对可信取证体系进行研究,以便最终形成可信的电子证据结果。建立基于瀑布模型的电子取证模型,从可信表达、可信分析、可信提取、可信固定以及可信发现等方面加以分析。
After giving the forensic model of "man + tools + confirmation", trusted forensic (TF) is proposed. From the trusted static attributes of digital data and trusted dynamic behavior of forensic method, the TF's goal is to get the trusted result. According to the strict process of computer forensics, the computer forensics model is been built based on the waterfall model. Finally, the model is analyzed from five aspects, such as trusted expressing, trusted analyzing, trusted extracting, trusted fixing, and trusted discovering.