欢迎您！东篱公司
退出
-
申报数据库
-
立项数据库
-
成果数据库
-
项目获奖数据库
中文摘要：
在电子取证工作中，往往忽略对电子证据信息的预处理，从而导致电子证据冗余较大，计算分析较复杂。为解决计算机取证中存在电子证据形式化表示的困难以及数据缺失的问题，在对事件关联技术进行研究和深入分析的基础上，利用贝叶斯网络理论，提出一种基于事件关联的证据链构造方法。该方法考虑事件之间的相互影响以及序列关系，分析缺失数据的因果关系，拟合完整证据链，实现了形式化表示电子证据，并降低了证据分析的数据冗余，从而有针对性地进行数据处理和证据分析，完善了取证体制。通过实验结果分析得出，该方法实现了证据的形式化表示，减少了证据分析的数据量。
英文摘要：
The electronic evidence data preproeessing is easily neglected in electronic forensics work,leading to heavy redundancy for electronic evidence and complex calculation. Since the electronic evidence is difficult to represent formalized, and there exist missing data. A method for constructing electronic evidence chain is proposed on the basis of the study and analysis of event correlation and Bayesian network. Considering the interaction between evidence events and sequence relationship,it can be analysis of causal relationship of the events to deal with the missing data. It realizes the electronic evidence represented and reduces the data redundancy of evidence analysis, thus consummating the evidence collection system and making the data process and evidence analysis be more target-oriented. The experimental results show that the method realizes the representation of evidence and reduces the computation.
同期刊论文项目
同项目期刊论文
期刊信息
位置：