Application Research Of Electronic Data Forensics

With the development of information technology, electronic evidence has gradually entered the field of judicial practice. It has become a new evidence of litigation.And, Identification of the acquisition,preservation, transportation and inspection of electronic evidence all require special technical means and particularly strict implementation procedures. This paper is based on the development trend of domestic and foreign electronic evidence collection and Combining the author's electronic evidence collection work practice. On the basis of technical support, the paper discusses the different degree in exploring the concept of electronic evidence, attribute characteristics and common methods and procedures for the exploration of electronic evidence, evidence collection.Research on electronic evidence in China, all emphasis on the study are be of the attribution of evidence form and the questions of the "three" etc. as evidence. Purpose is to define the category of electronic evidence In the whole system of evidence. There is less research on the exploration, collection and preservation of electronic evidence, On how to solve the legal problems of the technical level, there is not much in-depth study. It is difficult to provide practical and full guidance to judicial practice. This paper focuses on the different kinds of electronic evidence collection, exploration technology and in-depth study. In particular, the research on the computer system, e-mail system and network system, such as data collection and maintenance methods. The status and function of electronic evidence in the evidence system of computer network crime is demonstrated. In addition to the electronic evidence on the spot investigation and the identification of the process and method of the identification of the procedures and methods have been demonstrated, and have proposed a feasible implementation model. Through the digital fingerprint demonstration, To the electronic evidence preservation, the fixed and so on the question carries on the technical level and the legal stratification plane has been demonstrated.Through examine the legal effect of digital signature, establish its legal status in the evidence system. Its innovation process lies in the structure and characteristics of data information about computer system, some common mobile phone system and local network system are studied in this paper. Under legal proceedings,study that how to search for effective and sufficient evidence of electronic evidence. Meanwhile, Under the premise of ensuring the validity of the law, study how to effectively obtain and seal the evidence and the methods for analyzing and identifying the electronic evidence. And,the technology of data analysis, data recovery and encryption and decryption technology are discussed. In this paper, we put forward a practical method of program about them. Furthermore, in the process of increasing the network information, taking into account the existence of the electronic data storage problem, we put forward the scheme of international cooperation and exchange,and the legal risk of electronic evidence is evaluated. At the same time,we put forward opinions about reducing the computer network crime to our country's harm.