本文首先介紹了計(jì)算機(jī)動(dòng)態(tài)取證的概念、原則和步驟，然后提出了一個(gè)計(jì)算機(jī)動(dòng)態(tài)取證系統(tǒng)模型，并針對計(jì)算機(jī)動(dòng)態(tài)取證的數(shù)據(jù)分析階段面臨的問題,將數(shù)據(jù)挖掘技術(shù)應(yīng)用于計(jì)算機(jī)動(dòng)態(tài)取證的海量數(shù)據(jù)分析中,能夠有效的提高動(dòng)態(tài)取證中數(shù)據(jù)分析的速度、分析的準(zhǔn)確性和分析的智能性,解決動(dòng)態(tài)取證中的實(shí)用性、有效性、可適應(yīng)性和可擴(kuò)展性問題。
關(guān)鍵詞：計(jì)算機(jī)取證、動(dòng)態(tài)取證、數(shù)據(jù)分析、數(shù)據(jù)挖掘
Abstract: Firstly, this essay introduces concept, principle and step of computer dynamic forensics, then proposed a computer dynamic forensics system model, and aims at the question which the computer dynamic forensics faces in the data analysis stage, the data mining technology applies to magnanimous data analysis in the computer dynamic forensics, it can effectively enhancement the data analysis speed, the analysis accuracy and the analysis intelligence, solute dynamic forensics usability, the validity, compatibility and extended question.
Key words: computer forensics, dynamic forensics, data analysis, data mining