信息网络安全

信息网络安全 ›› 2017, Vol. 17 ›› Issue (2): 29-34.doi: 10.3969/j.issn.1671-1122.2017.02.005

• • 上一篇    下一篇

毁损移动智能终端取证技术分级模型研究

田庆宜1,2, 郭弘3()   

  1. 1. 重庆市公安局网络安全保卫总队, 重庆401121
    2. 重庆大学,重庆400044
    3. 信息网络安全公安部重点实验室（公安部第三研究所）,上海 201204
  • 收稿日期:2016-11-01 出版日期:2017-02-20 发布日期:2020-05-12
  • 作者简介:

    作者简介： 田庆宜（1977—）,男,重庆,教授级高级工程师,博士,主要研究方向为电子物证、网络安全;郭弘（1978—）,女,上海,副研究员,硕士,主要研究方向为电子数据取证。

  • 基金资助:
    国家自然科学基金[61402062];信息网络安全公安部重点实验室开放课题[C16606];重庆市社会民生科技创新专项项目[cstc2015shmszx40004]

Research on Hierarchical Model for Defective Mobile Intelligent Teminal Forensic Technology

Qingyi TIAN1,2, Hong GUO3()   

  1. 1. Net Supervise Place of Chongqing Municipal Public Security Bureau, Chongqing 401121, China
    2. Chongqing University, Chongqing 400044, China
    3. Key Lab of Information Network Security of Ministry of Public Security (The Third Research Institute of Ministry of Public Security), Shanghai 201204, China
  • Received:2016-11-01 Online:2017-02-20 Published:2020-05-12

RichHTML

1

PDF (PC)

298

摘要：

移动智能终端取证环境日趋复杂,一方面,移动智能终端本身的技术条件及嫌疑人对检材蓄意破坏对取证技术途径和结果均有影响,另一方面,移动智能终端取证技术也得到了飞速发展,不同的技术途径有不同的适用条件和风险,导致遇到检材量较大时难以在实验室人员、设备等有限资源下选择最优的取证技术途径。文章通过对影响技术途径选择的相关因素进行抽象,并对各影响因素根据实战实践赋予权重,建立评分模型,可实现检材进入实验室自动评分并提示其可选技术途径,有效提高了取证实验室反应能力。

关键词: 损毁移动智能终端, 芯片取证, 分级模型, 取证技术途径选择

Abstract:

In actual combat, mobile Intelligent Terminal forensics environment is becoming increasingly complex. On the one hand, the technical conditions of the mobile intelligent terminal itself and the suspect's destruction of the material collection have an impact on the forensic technology and results. On the other hand, the mobile intelligent terminal forensics technology has also been rapid development, There are different technical approaches have different applicable conditions and risks, resulting in It is difficult to choose the best way of obtaining evidence in the limited resources of laboratory personnel, equipment and so on. This paper is abstracted by factors related to selection of techniques, and the effect of each factor according to the actual practice of giving weight, establish evaluation model, which can realize automatic scoring of samples into the laboratory and indicates that the optional technical way, effectively improve the reaction ability of actual combat forensics laboratory.

Key words: defective mobile intelligent terminal, chip forensics, hierarchical model, forensic methods

中图分类号: