Device for index managing of evidence image in digital forensic system and method therefor

摘要

An index management technique of evidence images in a digital forensic system. The index management apparatus includes: a restoration unit for restoring the evidence image to digital data of the file system structure, a document number dictionary management unit for assigning a unique document number to each of the files belonging to the restored digital data and managing the document number dictionary; An indexing unit including an indexing unit for extracting an index word from a file of digital material and specifying a document number assigned to a file to which the index word belongs for each extracted index word; An index storage unit for storing index information in which document numbers for respective index words are designated by the index unit; And an index word search unit that checks a document number assigned to the index word to be searched by referring to the index database, and searches the corresponding file by referring to the document number dictionary with the confirmed document number.