电子科技大学学报Issue(6)：921-927,7.DOI:10.3969/j.issn.1001-0548.2015.06.022
基于业务用户行为的计算机动态取证评估模型研究
Study on the Dynamic Computer Forensic Evaluation Model Based on Business User’s Behavior
摘要
Abstract
A dynamic computer forensic model based on business user’s behavior is proposed under the research background of complex network environment of information system. This model, which adopts the Trojans theory, provides a method of quantitative evaluation of business user’s behavior based on cloud model theory. The rationality of the model’s evaluation is verified through simulation tests. At the meantime, it is proved that the model is able to record the business user’s behavior covertly and real-timely, and ensure that the obtained evidence can be fed beck to the control terminal, offering a feasible technical approach to the research of computer forensics.关键词
行为评估/业务用户行为/云模型/计算机动态取证/信任云Key words
behavior evaluation/business user behavior/cloud model theory/dynamic computer forensic/trust cloud分类
信息技术与安全科学引用本文复制引用
王丹琛,张仕斌,徐扬,许宁..基于业务用户行为的计算机动态取证评估模型研究[J].电子科技大学学报,2015,(6):921-927,7.基金项目
国家自然科学基金(61175055)；四川省重点科技研究发展计划(2011FZ0051)；工信部无线电管理局项目([2011]146) （61175055）
