【摘要】：針對(duì)信息犯罪,計(jì)算機(jī)取證已成為實(shí)現(xiàn)法律力量的重要技術(shù)手段。但長(zhǎng)期以來對(duì)于電子取證的研究多聚焦在電子證據(jù)的獲取與分析上,對(duì)于電子取證的可信性和有效性缺乏相應(yīng)的論證。不合理的電子取證流程會(huì)影響到電子證據(jù)的采信度,因此需要在采集后對(duì)電子證據(jù)進(jìn)行固定,確保證據(jù)的原始性。針對(duì)傳統(tǒng)取證中缺乏可信度的問題,論文在可信取證理念的基礎(chǔ)上首先提出“描述證據(jù)的數(shù)據(jù)”原數(shù)據(jù)的概念,并給出原數(shù)據(jù)的標(biāo)準(zhǔn)體系。由于不同案件對(duì)電子證據(jù)有不同的側(cè)重點(diǎn),論文對(duì)各類案件中如何總結(jié)出最合適的原數(shù)據(jù)組成給出了原數(shù)據(jù)的質(zhì)量評(píng)估方法。在原數(shù)據(jù)的基礎(chǔ)上,論文提出基于原數(shù)據(jù)的可信電子證據(jù)固定方法。該方法利用取證現(xiàn)場(chǎng)的多個(gè)角色,結(jié)合GPS定位、指紋識(shí)別與電子簽名等技術(shù),實(shí)現(xiàn)對(duì)電子證據(jù)的可信固定。與此同時(shí),給出其配套的可信校驗(yàn)流程與可信存儲(chǔ)方案,通過可信證據(jù)校驗(yàn)確保了電子證據(jù)即使被篡改后也可以被查出,通過可信存儲(chǔ)方案確保采集到的電子證據(jù)在采集現(xiàn)場(chǎng)能夠被可信保全。論文采用ARM+Linux架構(gòu)實(shí)現(xiàn)了電子證據(jù)固定原型系統(tǒng),通過對(duì)已固定證據(jù)的攻擊實(shí)驗(yàn),從實(shí)際應(yīng)用上證明了論文提出的可信固定方案的可行性。
[Abstract]:In view of information crime, computer forensics has become an important technical means to realize legal power. However, for a long time, the research on electronic forensics has focused on the acquisition and analysis of electronic evidence, and there is no corresponding argument for the credibility and validity of electronic forensics. Unreasonable electronic forensics process will affect the reliability of electronic evidence, so it is necessary to fix the electronic evidence after collection to ensure the originality of evidence. In order to solve the problem of lack of credibility in traditional forensics, this paper first puts forward the concept of "describing evidential data" based on the concept of credible forensics, and gives the standard system of original data. Because different cases have different emphases on electronic evidence, this paper gives the quality evaluation method of original data on how to sum up the most suitable original data composition in all kinds of cases. Based on the original data, this paper proposes a reliable electronic evidence fixation method based on the original data. This method makes use of multiple roles in the forensics scene, combined with the techniques of GPS location, fingerprint identification and electronic signature, to realize the reliable fixation of electronic evidence. At the same time, the supporting trusted verification flow and the trusted storage scheme are given to ensure that electronic evidence can be detected even after tampering. The trusted storage scheme is used to ensure that the collected electronic evidence can be trusted and preserved in the collection site. In this paper, the electronic evidence fixed prototype system is implemented with the ARM Linux architecture. The feasibility of the credible fixation scheme proposed in this paper is proved by the attack experiments on the fixed evidence.
【學(xué)位授予單位】：南京郵電大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2017
【分類號(hào)】：TP309;D918.2

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 馬康;;論行政證據(jù)在刑事訴訟中的使用——以“快播”案為切入點(diǎn)[J];三峽大學(xué)學(xué)報(bào)(人文社會(huì)科學(xué)版);2016年04期

2 王志剛;;從“快播案”看當(dāng)前電子數(shù)據(jù)運(yùn)用困境[J];法治研究;2016年04期

3 梅臻;;《電子簽名法》適用的難點(diǎn)問題探析[J];法律適用;2016年07期

4 杜翰洋;;論新型網(wǎng)絡(luò)技術(shù)對(duì)電子數(shù)據(jù)證據(jù)的影響——以“快播案”為例[J];廣西青年干部學(xué)院學(xué)報(bào);2016年01期

5 袁勝;;“快播”案為安全、法律、技術(shù)劃線[J];中國(guó)信息安全;2016年02期

6 金波;楊濤;吳松洋;黃道麗;郭弘;;電子數(shù)據(jù)取證與鑒定發(fā)展概述[J];中國(guó)司法鑒定;2016年01期

7 樊崇義;李思遠(yuǎn);;論我國(guó)刑事訴訟電子證據(jù)規(guī)則[J];證據(jù)科學(xué);2015年05期

8 楊妍;;淺談?dòng)?jì)算機(jī)犯罪及相關(guān)法律研究[J];法制博覽(中旬刊);2014年09期

9 曾榮鑫;;互聯(lián)網(wǎng)電子證據(jù)保全公證機(jī)制探析[J];云南社會(huì)主義學(xué)院學(xué)報(bào);2014年01期

10 程權(quán);孟傳香;;論新刑事訴訟法視野下電子證據(jù)的審查[J];重慶郵電大學(xué)學(xué)報(bào)(社會(huì)科學(xué)版);2013年06期

相關(guān)碩士學(xué)位論文 前1條

1 邵澤慧;基于可信取證的電子數(shù)據(jù)溯源方法[D];南京郵電大學(xué);2014年

，

本文編號(hào)：2347922