数字取证的三维过程模型

摘要

This paper presents a three-dimension digital forensic process model based on emphasizing the importance of forensic numbers and different data sources. In this model, collecting methods are different varying from data source to data source which involved in the event in order to explore the scope of the model used. Meanwhile in this paper the evidence can collect and analyze automatically. Knowledge can re-use. In the phase of investigation and analysis it improves the evidence reliability amplification in order to improve evidence reliability and work effectively.%在强调取证人员重要性的基础上,根据电子证据来源的不同,提出了一个三维过程模型,针对不同的案件中涉及的不同证据来源,可以采用不同的证据收集方案,扩大了数字取证模型的使用范围,同时实现了证据的自动收集和分析功能,及知识的重复使用功能,并在调查分析阶段对证据可靠性放大算法进行了改进,提高了证据的可靠性和工作效率.