Trusted webpage forensics system and trusted webpage forensics method based on three-layer trusted webpage forensic model

Abstract

The invention discloses a trusted webpage forensics system and a trusted webpage forensics method based on a three-layer trusted webpage forensics model. The trusted webpage forensics system comprises an evidence obtaining server, an evidence storage server and an evidence presentation server. The evidence obtaining server is used for extracting and fixing evidences; the evidence storage server is used for storing the evidences; and the evidence presentation server is used for verifying reliability of the evidences and generating evidence files. The trusted webpage forensics system and the trusted webpage forensics method based on the three-layer trusted webpage forensics model can obtain and fix the evidences of webpage information, save the acquired evidences reliably and then generate forensic evidence files to assist in case detection.

Description

technical field [0001] The invention belongs to the field of electronic evidence collection, and in particular relates to a method for obtaining evidence and reconnaissance of web page data. Background technique [0002] At present, the existing electronic forensics technology mainly focuses on host electronic forensics, which belongs to the mainframe evidence acquisition technology: the safe acquisition technology of computer system files used to avoid damage and interference to the original medium, and the security of disk or other storage media. Damage-free backup technology, etc. Existing host electronic forensics technology has great limitations: most of the methods are relatively targeted and lack applicability to different organizations. In particular, there are the following problems when it is directly used to obtain evidence on Internet webpage content: [0003] 1. It is impossible to directly obtain the data storage medium of the Internet content provider. It i...

AI Technical Summary

Problems solved by technology

Existing host electronic forensics technology has great limitations: most of the methods are relatively targeted, lack of applicability to different organizations, etc.

It is difficult to fix the storage device of the server, which means that criminals can modify or delete the data on the network at any time, resulting in the loss of criminal evidence

[0005] 3. Webpage electronic evidence is vulnerable

Images