计算机取证必须遵循严格的过程和程序,否则,所荻取的证据缺乏可靠性和真实性。建立一个实用的计算机取证模型很重要,因为它能不依赖任何一种特殊的技术或组织环境,为研究支撑调查工作的技术提供一种抽象的参考构架。文章针对法律执行过程模型这一数字取证模型进行了简单的分析。
The computer forensics must follow strict process and procedure. Otherwise, the evidences gotten are lack of reliability and authenticity. To construct a practical computer forensics model is very important because it does not rely on any kind of special technology or organization environment and it provides an abstract reference framework for researching the technologies of support investigation. A digital forensics model, namely the law enforcement process model is briefly analyzed.