当前的计算机网络犯罪取证多以直接特征为主,缺少对关联特征的分析.提出一种基于远程控制技术的计算机数据取证系统优化设计方法,设计了完整的系统取证流程,给出了硬件和软件设计.在当前技术基础上,加入关联规则模型,使得取证过程自动具备特征关联性.试验结果证明:系统的优化设计方案能够自动关联特征,取证准确性增加明显.%The current computer network crime forensics is mainly characterized by direct characteristics,without the analysis of related characteristics.This paper proposes a computer data forensics system optimization design method based on remote control technology,designs a complete system forensics flow,and gives the hardware and software design.On the basis of the current technology,the association rules model is added,and automatically has the feature correlation.The experiment results show that the optimized design scheme of the system can automatically correlate the characteristics and the accuracy of obtaining evidence increases obviously.
展开▼
