Traditional static forensics develops slowly and imperfect dynamic forensics have caused technical difficulties to the development of network forensics at this stage.Enhancing the development of network forensics technology has great significance to policing information model.This paper defines the network forensics and the relationship between network forensics with policing information model,researches network forensics,analyzes the limitations of network forensics at the stage,explores in building a intelligent dynamic network forensics systems in technology;and creates actively the evidence preservation of network notarization as well with perfect network forensics methods and related laws and regulations in non-technical.%本文界定了网络取证的定义及其与信息化警务模式的关系,研究了网络取证的技术,分析了现阶段网络取证技术的局限性,从技术上,探索构建智能动态化的网络取证系统;从非技术上,主张开创网络公证的证据保全方法和积极健全网络取证的法律法规。
展开▼