...
  • 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>Kinetik >Comparison of Acquisition Software for Digital Forensics Purposes
【24h】

Comparison of Acquisition Software for Digital Forensics Purposes

机译：用于数字取证目的的采集软件的比较

获取原文
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Digital Forensics, a term that is increasingly popular with internet needs and increasing cybercrime activity. Cybercrime is a criminal activity with digital media as a tool for committing crimes. The process for uncovering cybercrime is called digital forensics. The initial stage in digital forensics is an acquisition. The acquisition phase is very important because it will affect the level of difficulty and ease in investigating cybercrime. Software acquisition will affect the abandoned artefacts and even overwrite important evidence by the software, therefore investigators must use the best software for the acquisition stage. This study shows the difference in software for the acquisition of the best Random Access Memory (RAM) such as processing time, memory usage, registry key, DLL. This research presents five acquisition software such as FTK Imager, Belkasoft RAM Capturer, Memoryze, DumpIt, Magnet RAM Capturer. Results of this study showed that FTK Imager left about 10 times more artefacts than DumpIt and Memoryze. Magnet RAM Capture the most artefacts, 4 times more than Belkasot RAM Capturer. Software acquisition with many artefacts, namely Capture RAM Magnet and FTK Imager, while for the fastest time is DumpIt and Capture RAM Magnet for software that takes a long time.
机译：数字取证，这个术语在互联网需求和网络犯罪活动中越来越流行。网络犯罪是一种犯罪活动，其数字媒体作为犯罪工具。发现网络犯罪的过程称为数字取证。数字取证的最初阶段是收购。获取阶段非常重要，因为它将影响调查网络犯罪的难度和难度。软件购置将影响废弃的文物，甚至会覆盖该软件的重要证据，因此调查人员必须在购置阶段使用最佳软件。这项研究显示了获取最佳随机存取存储器（RAM）的软件差异，例如处理时间，内存使用量，注册表项，DLL。这项研究提出了五种采集软件，例如FTK Imager，Belkasoft RAM Capturer，Memoryze，DumpIt，Magnet RAM Capturer。这项研究的结果表明，FTK Imager留下的伪像比DumpIt和Memoryze大约多10倍。磁铁RAM捕获最多的文物，是Belkasot RAM捕获器的4倍。具有许多伪像的软件获取，包括Capture RAM Magnet和FTK Imager，而最快的时间是DumpIt和Capture RAM Magnet，这需要很长时间。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号