非法入侵网站案件的电子取证分析
PDF下载 (916)庄建儿.非法入侵网站案件的电子取证分析[J].宁波大学学报(理工版),2012,25(04):55-58.DOI:
ZHUANG Jian-er.Electronic Evidence Gathering for Illegal Network Intrusion[J].Journal of Ningbo University(Natural Science & Engineering Edition),2012,25(04):55-58.DOI:
| Title: | Electronic Evidence Gathering for Illegal Network Intrusion |
| 作者: | 庄建儿 |
| Author(s): | ZHUANG Jian-er |
| 关键词: | 网站; 入侵; 电子证据 |
| Keywords: | website; illegal intrusion; electronic evidence |
| 分类号: | TP393.08 |
| 文献标识码: | A |
| 摘要: | 为有效打击入侵网站的行为, 以Windows系统为例, 对一般网站服务器常见的电子取证内容和方法进行了总结和分析. 重点就易变数据、事件日志、网站日志、异常帐户和文件、特殊目录下的文件记录等证据的取证进行了分析和阐述, 提出了一些有用的对策. |
| Abstract: | Illegal Network Intrusion is one of the main threats that we are facing in the field of network security. In order to crack down the illegal network intrusion, in this work, taking the Windows system as the platform, the author makes some efforts on summarizing the methods and analyzing the contents of the electronic evidence obtained from the common website severs in illegal network intrusion activities. The focal point of this article is set on the analysis and statement of the evidence gathering, which involves using the mutable figures, event logs, website logs, unusual accounts and documents, the documents record in some particular contents. Some useful countermeasures are also presented in the end of this paper. |
| 参考文献 /References: | [1] 公信安﹝2005﹞161号. 计算机犯罪现场勘验与电子证据检查规则[S]. [2] 陈龙, 麦永浩, 黄传河. 计算机取证技术[M]. 武汉: 武汉大学出版社, 2007:7-8. [3] 高峰, 邹积超. 试论刑事诉讼中电子证据的审查[J]. 信息网络安全, 2011(9):167-170. [4] Harlan Carvery. Windows取证分析[M]. 王智慧, 崔孝晨, 陆道宏, 译. 北京: 科学出版社, 2009:7. [5] 刘建军, 黄政. 网站入侵案件中的电子证据研究[J]. 信息网络安全, 2011(11):93-96. [6] 范春荣, 张战勇, 肖新华. 充分利用WEB 日志分析检测黑客入侵[J]. 石家庄铁路职业技术学院学报, 2009 (1):90-94. [7] 陈龙, 麦永浩, 黄传河. 计算机取证技术[M]. 武汉: 武汉大学出版社, 2007:119-120. |
| 备注/Memo: | 收稿日期: 2012-05-23. 作者简介: 庄建儿（1973－）, 男, 浙江湖州人, 硕士/工程师, 主要研究方向: 信息网络安全及电子证据检验鉴定. E-mail: zje01@qq.com 宁波大学学报（理工版）网址：http://journallg.nbu.edu.cn/ |
