计算机犯罪现场中的取证技术及应用

科学有效地应用计算机取证技术是侦办计算机犯罪案件的关键。计算机取证也称为计算机法医学,是把计算机运行环境看作是犯罪现场,运用相关的辨析技术,对计算机犯罪行为进行法医式的解剖,从而搜寻确认罪犯及犯罪证据,并据此提起诉讼。从理论上讲,计算机取证人员能否找到犯罪证据取决于有关犯罪证据是否被覆盖。但从海量的数据里面寻找蛛丝马迹是一件非常费时费力的工作,侦查人员必须具备相应的专业技能,并按照科学合理的步骤来实施计算机犯罪现场中的取证工作。

The Application of Computer Forensic Technology for Investigation

Applying computer forensic technology scientifically and effectively is crucial to handle computer crimes. Computer forensics, also called medical jurisprudence with computer, regards the working environment of computer as the scene of a crime, applies theory to practice, searches for the computer crime and collects its evidence. It is a laborious job for investigator to carry out investigation and obtain evidence of the crime on networks. Therefore, the investigator should form the concepts of police equipped with technology and information in order to fight against the criminal behaviors on networks.