| In recent years, as the continuous development of communication technology and ITtechnology, the function of smart phones and other intelligent mobile information devicesis more and more powerful, portable and easier to operate. And because of this, they havebeen widely popularity. And then their security problems are also growing, more andmore criminals are using intelligent terminal engaging in criminal activity. How to obtainthe favorable evidence quickly and comprehensive from the intelligent mobileinformation device, becomes the key to solve the case.At present, the forensics tools of intelligent mobile information device are mostlyfor data extraction, but the analysis of the evidences has not been researched deeply. Inorder to cover up the criminal evidence, criminals usually use synonyms instead ofsensitive words. Most of the existing forensics equipments are accurate matching, somuch key information can not be found lead to forensic information will be notcomprehensive, this seriously affect the quality of forensic work. To solve this problem,this paper proposes an improved algorithm, designs and implements a forensic system, toobtain more comprehensive evidences.The main work of this paper includes the following aspects:First, describes the process and relevant technologies of intelligent mobileinformation device forensics. Analyzes the existing forensic tools, and points out theirdisadvantages in evidences analysis, and introduces the text classification technology.Proposes improve text classification technology to improve the recall ratio of theevidence.Second, in the study of evidence classification algorithm, designs an improvedsynonyms expansion algorithm for text classification to solve the key words sparseproblem in text categorization. This algorithm expands feature words bases on Hownethierarchy structure relationship, and calculates the synonyms weights Experimentalresults show that the improved algorithm significantly improves the recall and F1valueof text classification.Third, intelligent mobile information device forensics system is designed andimplemented. The system describes the data extraction and evidence search process indetail. In the data analysis module, the system uses the improved text categorization algorithm improves the comprehensiveness of evidence obtained. The system uses avisual interface presents evidence to forensic, it is convenient for forensic work.Evidence analysis is the key link in the process of intelligent mobile informationdevice forensics. In this paper, the evidence forensic analysis system based on theimproved algorithm, can fully obtain crime evidence. This is important to combat alltypes of criminal activities related to intelligent mobile information equipment andmaintain social. |