The Design Of Online Digital Forensics System

Internet technology plays an important role in social and economic life,and the security threats to the Internet have become increasingly serious in recent years.How to combat cybercrime on the Internet has become an important issue.Traditional digital forensics technology relies heavily on the analysis of data on devices or network servers.For online content network forensics,this paper proposes an online digital forensics system that can analyze browser and network traffic content,including designing for digital information collect,analysis,storage and report on the network.The main research contents of this paper are as follows:(1)In view of the problem that there is a large amount of data in text data in digital information and it is difficult to analyze,this paper studied a text information extraction method,developed the keyword extraction algorithm,combined with bilingual named entity recognition technology,realized real-time analysis of text,finally extracted key evidence information from text data.(2)In view of the problem that image data obtained from the network has unclear sources and questionable authenticity,this paper studied the image forgery detection method.By obtaining metadata information from images,calculating image hashes and performing forgery detection based on noise,realize image data forensics and analysis.(3)In view of the problem that there are malicious attacks in network traffic,apply network intrusion detection technology to extract traffic data features and analyze traffic data through rule-based and machine learning methods to achieve intrusion detection of network traffic data.(4)In view of the difficulty of digital forensics and analysis for online content,this paper combines the above-mentioned methods for various types of data to design an online digital forensics system oriented to browsers and servers,and developed a prototype system.The system can effectively collect digital information from online content,analyze and store various types of digital evidence,to help forensic personnel investigate online content.