随着信息犯罪的逐日增长,数字取证技术也日益受到重视并得以快速发展。提出一种解决方案,对来自复杂数据源的电子数据进行采集,并以镜像方式进行自动化管理。在给出系统总体架构的基础上,分别从镜像提取、镜像还原、镜像和文件的存储、镜像及文件的挂载、文件提取等功能模块进行详细描述,给出具体的设计和实现方法。最后,给出系统在不同数据缓冲区大小下镜像传输速度的试验结果。
With the increase of information crimes, digital forensics technology has attracted more attentions and develops rapidly. A solution is proposed in this paper, namely, the collection of electronic data in complex information source and the automated management of them with the method of mirror image. On the basis of providing the overall system framework, we give detailed description on function modules of the solution including image extraction, image restoration, the storage and mounting of image and documents, and document extraction, as well as the specific ways of design and implementation. In end of the paper, the test result of image transmission rate in different sizes of data buffer in the system is presented.