本文關(guān)鍵詞：電子郵件分析取證系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)　出處：《華南理工大學(xué)》2011年碩士論文　論文類型：學(xué)位論文

  更多相關(guān)文章： 電子郵件 分析取證 Foxmail COM OLE ADO 遺傳算法

【摘要】：隨著互聯(lián)網(wǎng)技術(shù)的高速發(fā)展,人們通過互聯(lián)網(wǎng)發(fā)送電子郵件,使得溝通交流變得更加容易、快捷。電子郵件也以其新型、快速、經(jīng)濟(jì)的特點(diǎn)已成為現(xiàn)代社會(huì)不可缺少的重要通信方式之一。與此同時(shí),各種犯罪分子也開始普遍利用電子郵件從事各類違法犯罪活動(dòng),在很多計(jì)算機(jī)犯罪案件以及商業(yè)、民事糾紛中都涉及電子郵件。在電子郵件中蘊(yùn)藏了豐富的各類有用信息,是進(jìn)行計(jì)算機(jī)分析取證的重要內(nèi)容之一,它能為案件偵破提供一些有力的線索。為提高使用效率,人們經(jīng)常使用各類電子郵件客戶端(如Foxmail、Outlook Express、Microsoft Office Outlook等)來處理郵件。因此,分析各類郵件客戶端所保存的郵件數(shù)據(jù)文件也是計(jì)算機(jī)分析取證的重要手段之一。 本文所研究的電子郵件分析取證系統(tǒng)主要是針對(duì)目前國(guó)內(nèi)主流的Foxmail、Outlook Express和Office Outlook這三款郵件客戶端。通過分析Foxmail所保存的.ind、.BOX格式的郵件文件、Outlook Express所保存的DBX的復(fù)合數(shù)據(jù)文件和Office Outlook所保存的PST復(fù)合郵件文件,從中提取感興趣郵件的收發(fā)件人郵箱地址、收發(fā)件人姓名、發(fā)送時(shí)間、主題、郵件正文內(nèi)容及附件等信息;然后統(tǒng)計(jì)歸類收、發(fā)件人郵箱地址,運(yùn)用可視化、人際網(wǎng)絡(luò)分析等技術(shù)繪制郵件的時(shí)間關(guān)系圖和人際網(wǎng)絡(luò)關(guān)系圖,從而為分析和發(fā)現(xiàn)收、發(fā)件人之間隱藏的關(guān)系提供很好的參考依據(jù)。 本論文將首先簡(jiǎn)要說明電子郵件分析取證的背景、重要意義及目前國(guó)內(nèi)外電子郵件分析取證的一些現(xiàn)狀;接著,介紹系統(tǒng)的總體目標(biāo)、運(yùn)行環(huán)境、主要功能及總體架構(gòu),重點(diǎn)介紹系統(tǒng)各關(guān)鍵功能模塊的設(shè)計(jì)思路、架構(gòu)等情況;然后詳細(xì)介紹在本系統(tǒng)設(shè)計(jì)和開發(fā)中所使用的關(guān)鍵技術(shù):即基于文件結(jié)構(gòu)分析的.ind、.BOX郵件數(shù)據(jù)文件解析、基于COM技術(shù)的DBX復(fù)合郵件體的解析、基于OLE自動(dòng)化技術(shù)的PST郵件文件解析方法,以及在繪制郵件時(shí)間關(guān)系圖和人際網(wǎng)絡(luò)關(guān)系圖中所使用到的圖形繪制基礎(chǔ)理論、數(shù)據(jù)庫(kù)訪問技術(shù)和基于遺傳算法的圖自動(dòng)布局算法及實(shí)現(xiàn)等;接著,介紹整個(gè)系統(tǒng)的開發(fā)環(huán)境,并重點(diǎn)闡述如何運(yùn)用前面提到的關(guān)鍵技術(shù)實(shí)現(xiàn)預(yù)期的系統(tǒng)用戶界面和各項(xiàng)功能指標(biāo)等,詳細(xì)介紹了電子郵件分析取證系統(tǒng)的實(shí)現(xiàn);最后總結(jié)本系統(tǒng)的設(shè)計(jì)實(shí)現(xiàn)開發(fā)情況,并針對(duì)所存在不足提出下步的研究方向。
[Abstract]:With the rapid development of Internet technology, people through the Internet to send e-mail, makes communication easier and faster. With its new e-mail, fast and economic characteristics has become one of the important means of communication in modern society indispensable. At the same time, all kinds of criminals also generally begin to use e-mail to engage in all kinds of criminal activities, in a lot of computer crime the case and commercial, civil disputes are involved in an email email. Contains all kinds of useful information, is one of the important contents of computer forensics analysis, it can provide some powerful clues for the detection of cases. In order to improve the efficiency, people often use various types of e-mail client (such as Foxmail, Outlook Express, Microsoft Office Outlook) to handle the mail. Therefore, analysis of various types of mail client saved The mail data file is also one of the important means of computer analysis and forensics.
This paper studies the e-mail forensic analysis system is mainly aimed at the current mainstream Foxmail, Outlook Express and Office Outlook these three e-mail client. Through the analysis of save Foxmail.Ind,.BOX format of the mail file, save to save Outlook Express DBX composite data files and Office Outlook PST composite mail file the extraction of interested mail sender email address from the sender to send, name, time, subject, message body content and attachments and other information; and then classified statistics, the sender email address, use visualization, social network analysis techniques such as drawing mail time diagram and network diagram, so as to analyze and found, which provides a good reference to hide the relationship between the sender.
This paper will first briefly explain the e-mail forensic analysis of the background, significance and present situation of domestic and foreign e-mail forensic analysis; then, the overall goal, introduces the running environment of the system, the main functions and overall structure design focuses on the key functional modules of the system architecture, etc.; and then introduces the key technologies used in the design and development of this system: Based on the analysis of.Ind file structure,.BOX mail data file parsing, parsing DBX composite mail COM technology based on the PST, the mail file analytical method based on OLE automation technology, and used to draw the mail in time diagram and interpersonal network diagram graphics draw the basic theory, database access technology and automatic layout algorithm based on genetic algorithm and implementation; then, introduces the development environment on the whole system, and On how to use the key technologies mentioned above to achieve the system user interface and the function index, introduced the realization of email forensics system analysis; finally summarizes the design and implement of the system development, and in view of the existing shortcomings of the next step.

【學(xué)位授予單位】：華南理工大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2011
【分類號(hào)】：TP393.098;D918.2

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 趙英男,張秉權(quán);MIME郵件結(jié)構(gòu)格式分析[J];兵工自動(dòng)化;2001年02期

2 不凡;;OE中的.dbx文件揭秘[J];電腦采購(gòu)周刊;2001年31期

3 孫濤;;MIME郵件格式分析及信息提取[J];計(jì)算機(jī)與信息技術(shù);2007年06期

4 楊俊彬;曾春溪;蔡劍懷;吳順祥;;基于OLE自動(dòng)化技術(shù)的PST文件解析[J];計(jì)算機(jī)工程;2009年20期

5 劉浩陽;;電子郵件的調(diào)查與取證[J];遼寧警專學(xué)報(bào);2007年05期

6 黃競(jìng)偉,康立山,陳毓屏;一個(gè)新的無向圖畫圖算法[J];軟件學(xué)報(bào);2000年01期

7 張清國(guó),金聰,林春;基于遺傳算法的平面圖平面正交直線畫圖算法[J];計(jì)算機(jī)工程與設(shè)計(jì);2005年02期

8 譚敏;胡曉龍;楊衛(wèi)平;;計(jì)算機(jī)取證概述[J];網(wǎng)絡(luò)安全技術(shù)與應(yīng)用;2006年12期

9 王晨,沈虹;基于XML技術(shù)的郵件格式化[J];西安工業(yè)學(xué)院學(xué)報(bào);2005年03期

10 鐘秀玉;計(jì)算機(jī)取證技術(shù)探討[J];現(xiàn)代計(jì)算機(jī)(專業(yè)版);2005年01期

相關(guān)碩士學(xué)位論文 前2條

1 李佐斌;利用OLE自動(dòng)化和VBA的Delphi動(dòng)態(tài)報(bào)表的研究與實(shí)現(xiàn)[D];武漢理工大學(xué);2006年

2 徐永來;基于COM的綜合數(shù)據(jù)分析管理系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)[D];哈爾濱工程大學(xué);2007年

，

本文編號(hào)：1409822