| 一种针对MongoDB数据库的证据获取方法 |
| |
| 引用本文： | 吴淼,倪力舜.一种针对MongoDB数据库的证据获取方法[J].中国司法鉴定,2011(3):54-55,62. |
| |
| 作者姓名： | 吴淼 倪力舜 |
| |
| 作者单位： | 上海展星电子数据司法鉴定中心,公安部第三研究所信息网络安全公安部重点实验室,上海,201204 |
| |
| 摘 要： | 根据MongoDB文件型数据库的特点,提出了一种针对MongoDB文件型数据库的证据获取方法。在研究GridFS文件系统原理的基础上,详细阐述了MongoDB和GirdFS文件系统结构,对MongoDB存放数据的文件进行了分析,进而获取被删除的文件数据。实验结果表明该方法能有效地从MongoDB数据库中获取电子证据。
|
| 关 键 词： | 计算机取证 电子证据 MongoDB |
Electronic Evidence Acquisition from MongoDB |
| |
| WU Miao,NI Li-Shun.Electronic Evidence Acquisition from MongoDB[J].Chinese Journal of Forensic Sciences,2011(3):54-55,62. |
| |
| Authors: | WU Miao NI Li-Shun |
| |
| Institution: | (Shanghai Stars Digital Forensic Center,Information and Network Security Lab, The Third Research Institute of Ministry of Public Security,Shanghai 201204,China) |
| |
| Abstract: | According to the characteristic of MongoDB,an approach of electronic evidence acquisition is proposed.The structure of MongoDB and GirdFS is introduced;the file which MongoDB stores data in is analyzed;and the procedure to recover deleted data in MongoDB is put forward.The experiment shows that the approach can acquire electronic evidence from MongoDB effectively. |
| |
| Keywords: | forensic computer technology electronic evidence MongoDB |
| 本文献已被 维普 万方数据 等数据库收录！ |
|
