仿真分析取证模型的形式化研究

计算机犯罪的多样性使得现有的静态取证和动态取证模型均已不能很好的满足计算机取证的要求，亟需建立一种新型态的取证模型。仿真分析取证模型运用“自顶向下”的形式化建模方法，结合虚拟机技术的最新发展成果，通过虚拟犯罪现场重建构建了一种并行的取证平台，为侦查实践和司法实务提供了有力的技术支撑。

The Formal Research on Simulation Analysis of Forensics Model

The diversity of computer crime makes the existing static forensics and dynamic forensics models not very good for the requirements of computer forensics, so there is an urgent need to establish a new type of forensics model. Simulation analysis of forensics model use the ＂top-down＂ formal modeling approach, combined with the latest development results of virtual machine technology, through the virtual reconstruction of the crime scene evidence to build a parallel platform for analysis forensics. It provides a strong technical support for the detection practice and judicial practice.