一種電子數(shù)據(jù)可信取證形式化模型
本文選題:可信取證 + 靜態(tài)屬性 ; 參考:《南京郵電大學(xué)》2012年碩士論文
【摘要】:伴隨著計算機技術(shù)的快速發(fā)展,涉及到計算機犯罪的案件頻繁發(fā)生,計算機取證技術(shù)應(yīng)運而生。計算機取證具有自身的特點,要求在取證過程中,盡最大可能地搜集到所有涉案電子證據(jù)、保證電子數(shù)據(jù)的原始性、確保電子數(shù)據(jù)取證結(jié)果可信。如何保證提供的證據(jù)能夠呈堂并作為庭審的依據(jù),是一個亟待解決的難題?v觀計算機取證近些年的研究現(xiàn)狀,技術(shù)研究的重點放在電子數(shù)據(jù)的獲取上,忽視了數(shù)據(jù)分析和取證理論的研究。鑒于此,本文在已有研究的基礎(chǔ)上,提出了計算機取證中電子數(shù)據(jù)的靜態(tài)屬性語義特征模型和計算機取證過程中動態(tài)行為形式化模型,從而保證取證過程電子數(shù)據(jù)的原始性、完整性、一致性和可信性以及取證方法的規(guī)范化。 在查閱大量的文獻后,,本文做的主要工作如下: 1)總結(jié)已有研究成果,研究分析電子數(shù)據(jù)可信取證的理論基礎(chǔ),為可信取證形式化模型提供基本的理論支撐。 2)在已有的電子數(shù)據(jù)可信取證體系的理論基礎(chǔ)上,分析現(xiàn)有計算機取證方法的不足,并由此提出計算機取證中電子數(shù)據(jù)的靜態(tài)屬性語義特征模型和計算機取證過程中動態(tài)行為形式化模型。 3)使用FODA和OCL形式化描述計算機取證的電子數(shù)據(jù)的靜態(tài)屬性語義特征模型。 4)將層次時間自動機和基于瀑布模型的可信取證方法結(jié)合,形式化描述了計算機取證過程中動態(tài)行為形式化模型。 5)針對電子數(shù)據(jù)的靜態(tài)屬性語義特征模型給出實例分析;針對計算機取證過程中動態(tài)行為形式化模型使用UPPAAL仿真和驗證。
[Abstract]:With the rapid development of computer technology, cases involving computer crime occur frequently, and computer forensics technology emerges as the times require. Computer forensics has its own characteristics, so it is required to collect all electronic evidence as far as possible in the process of obtaining evidence, to ensure the originality of electronic data and to ensure that the results of electronic data collection are credible. How to ensure that the evidence can be presented and used as the basis of the trial is a difficult problem to be solved. In recent years, the research on computer forensics has focused on the acquisition of electronic data, ignoring the research of data analysis and forensics theory. In view of this, based on the existing research, this paper proposes the static attribute semantic feature model of electronic data in computer forensics and the formalized model of dynamic behavior in the process of computer forensics, so as to ensure the originality of electronic data in the process of forensics. Integrity, consistency and credibility, and standardization of evidence collection methods. After consulting a lot of literature, the main work of this paper is as follows: 1) summarizing the existing research results and analyzing the theoretical basis of electronic data trusted forensics, which provides the basic theoretical support for the formal model of trusted forensics. 2) on the basis of the existing theory of electronic data credible forensics system, the deficiency of the existing computer forensics methods is analyzed. The static attribute semantic feature model of electronic data in computer forensics and the formal model of dynamic behavior in computer forensics are proposed. 3) FODA and OCL are used to formalize the static attribute semantic feature model of electronic data obtained by computer. 4) combining hierarchical time automata with credible forensics based on waterfall model, the formal model of dynamic behavior in computer forensics is formalized. 5) an example analysis is given for the static attribute semantic feature model of electronic data, and UPPAAL is used to simulate and verify the formal model of dynamic behavior in the process of computer forensics.
【學(xué)位授予單位】:南京郵電大學(xué)
【學(xué)位級別】:碩士
【學(xué)位授予年份】:2012
【分類號】:TP393.08;D918.2
【參考文獻】
相關(guān)期刊論文 前10條
1 岳香芬;;一種基于時間自動機的實時系統(tǒng)模型檢查算法的設(shè)計與實現(xiàn)[J];電腦知識與技術(shù);2009年30期
2 周敏;付國瑜;龔箭;;計算機取證模型研究[J];計算機安全;2010年01期
3 翟勝軍;;三網(wǎng)融合面臨的網(wǎng)絡(luò)安全問題和解決思路[J];計算機安全;2010年12期
4 姬莉霞;李俊鋒;張雷;;實時系統(tǒng)驗證工具UPPAAL[J];光盤技術(shù);2006年01期
5 麥永浩;劉志軍;向大為;張鵬;;計算機取證的系統(tǒng)化流程規(guī)范[J];電信科學(xué);2010年S2期
6 譚安芬;;靜態(tài)計算機取證的過程模型研究[J];計算機安全;2007年08期
7 宋蕾;李俊莉;;云計算環(huán)境下的計算機取證[J];河南科技;2011年01期
8 周剛;麥永浩;曹強;張鵬;;云計算應(yīng)用對計算機取證技術(shù)的挑戰(zhàn)和對策[J];警察技術(shù);2011年02期
9 周海剛,邱正倫,肖軍模;網(wǎng)絡(luò)主動防御安全模型及體系結(jié)構(gòu)[J];解放軍理工大學(xué)學(xué)報(自然科學(xué)版);2005年01期
10 金仙力;馬華東;;基于OCL的服務(wù)構(gòu)件特征語義描述模型[J];計算機研究與發(fā)展;2007年12期
相關(guān)碩士學(xué)位論文 前1條
1 沈洋;三網(wǎng)融合環(huán)境中的信息安全技術(shù)研究[D];大連海事大學(xué);2010年
本文編號:1807743
本文鏈接:http://sikaile.net/shekelunwen/gongan/1807743.html