Primary Exploration of Reliability Evaluation of Computer Live Forensics Model on Physical Memory Analysis
Lian-Hai Wang1,2, Qiu-Liang Xu1
(1. School of Computer Science and Technology, Shandong University, Jinan 250101, China; 2. Shandong Provincial Key Laboratory of Computer Network, Shandong Computer Science Center(National Supercomputer Center in Jinan), Jinan 250014, China)
Abstract:
The integrity and fidelity of digital evidence are very important in live forensics. Previous studies have focused the uncertainty of live forensics based on different memory snapshots. However, this kind of method is not effective in practice. In fact, memory images are usually acquired by using forensics tools instead of using snapshots. Therefore, the integrity and fidelity of live evidence should be evaluated during the acquisition process. In this paper, we study the problem in a novel viewpoint. Firstly, several definitions about memory acquisition measure error are introduced to describe the trusty. Then, we analyze the experimental error and propose some suggestions on how to reduce it. A novel method is also developed to calculate the system error in detail. The results of a case study on Windows 7 and VMware virtual machine show that the experimental error has good accuracy and precision, which demonstrate the efficacy of the proposed reducing methods. The system error is also evaluated, that is, it accounts for the whole error from 30％ to 50％.
Key words: digital investigation live forensics volatile memory acquisition trusted probability
DOI：10.11916/j.issn.1005-9113.2014.04.019
Clc Number:TP309
Fund:
删除或更新信息，请邮件至freekaoyan#163.com(#换成@)
Primary Exploration of Reliability Evaluation of Computer Live Forensics Model on Physical Memory An
本站小编 哈尔滨工业大学/2019-10-23
相关话题/Primary Exploration Reliability Evaluation Computer
领限时大额优惠券,享本站正版考研考试资料!
优惠券领取后72小时内有效，10万种最新考研考试考证类电子打印资料任你选。涵盖全国500余所院校考研专业课、200多种职业资格考试、1100多种经典教材，产品类型包含电子书、题库、全套资料以及视频，无论您是考研复习、考证刷题，还是考前冲刺等，不同类型的产品可满足您学习上的不同需求。 ...考试优惠券 本站小编 Free壹佰分学习网 2022-09-19Evaluation Method of Output Waveform Quality for Neutral-Point-Clamped Three-Level Converter
Evaluation Method of Output Waveform Quality for Neutral-Point-Clamped Three-Level Converter Author NameAffiliationGuozheng ZhangThe National Local Joint Engineering Research Center of Electrical Machine System Design and Manufacturing, Tiangong University, Tianjin 300387,Ch ...哈尔滨工业大学科研学术 本站小编 哈尔滨工业大学 2020-12-05Research on the Evaluation System of Epoxy Asphalt Steel Deck Pavement Distress Condition
Research on the Evaluation System of Epoxy Asphalt Steel Deck Pavement Distress Condition Author NameAffiliationHui ZhangCollege of Aerospace Engineering, Nanjing University of Aeronautics and Astronautics, Nanjing 210016, China Jiangsu SinoRoad Engineering Research Institut ...哈尔滨工业大学科研学术 本站小编 哈尔滨工业大学 2020-03-06Exploring the Evolution of Passenger Flow and Travel Time Reliabilitywith the Expanding Process of M
Exploring the Evolution of Passenger Flow and Travel Time Reliabilitywith the Expanding Process of Metro System Using Smartcard Data Xinwei Ma, Yanjie Ji, Yao Fan ,Chenyu Yi (School of Transportation, Southeast University, Nanji ...哈尔滨工业大学科研学术 本站小编 哈尔滨工业大学 2019-10-24Computer Forensics-An Essential Element of Modern IT Security
Computer Forensics-An Essential Element of Modern IT Security Frank Y. W. Law, K. P. Chow (Center for Information Security and Cryptography, University of Hong Kong,Hong Kong,China) Abstract: ...哈尔滨工业大学科研学术 本站小编 哈尔滨工业大学 2019-10-24Empirical Evaluation of Information Leakage Detection Using Net-flow Analysis
Empirical Evaluation of Information Leakage Detection Using Net-flow Analysis Jing Xu1,2, Fei Xu1, Xiao-Jun Chen1, Jin-Qiao Shi1, Cheng Qi1 (1.Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, Ch ...哈尔滨工业大学科研学术 本站小编 哈尔滨工业大学 2019-10-24Computer Forensics Under Cloud Computing Environment
Computer Forensics Under Cloud Computing Environment Yi Wang (Dept. of Information Science and Technology, East China University of Political Science and Law, Shanghai 201620, China) Abstract: ...哈尔滨工业大学科研学术 本站小编 哈尔滨工业大学 2019-10-24Novel Spectrum Allocation Algorithm Based on the Activities of Primary Users for Cognitive Radio Net
Novel Spectrum Allocation Algorithm Based on the Activities of Primary Users for Cognitive Radio Networks Yao Wang, Zhong-Zhao Zhang, Lin Ma, Jia-Mei Chen Communication Research Center, Harbin Institute of Technology, Harbin 150 ...哈尔滨工业大学科研学术 本站小编 哈尔滨工业大学 2019-10-24Research on Comparison and Evaluation Studies of Several Smoothing Denoising Method Based on γ-ray S
Research on Comparison and Evaluation Studies of Several Smoothing Denoising Method Based on γ-ray Spectrum Detector Jian-Feng He1,2, Fang Fang1, Yao-Zong Yang1, Yue-Shun He2, Bin Tang2 (1. College of Nuclear Technology and Aut ...哈尔滨工业大学科研学术 本站小编 哈尔滨工业大学 2019-10-24Interval Motion Accuracy Reliability Analysis of Manipulators Based on Chebyshev Inclusion Polynomia
Interval Motion Accuracy Reliability Analysis of Manipulators Based on Chebyshev Inclusion Polynomial Juan Wei, Jianguo Zhang,Xiaosong Du (School of Reliability and System Engineering, Beihang University, Beijing 100083, China) ...哈尔滨工业大学科研学术 本站小编 哈尔滨工业大学 2019-10-23Evaluation of the Performance of the GSSM Under Vibration Based on Normalized Point Source Sensitivi
Evaluation of the Performance of the GSSM Under Vibration Based on Normalized Point Source Sensitivity Qichang An1,2, Jingxu Zhang1, Fei Yang1,Hongchao Zhao1 (1. Changchun Institute of Optics, Fine Mechanics and Physics, Chinese ...哈尔滨工业大学科研学术 本站小编 哈尔滨工业大学 2019-10-23
