Research of distributed and autonomous computer forensics system
分布式自治型计算机取证系统研究

Currently, most of computer forensics systems are not real-time, and often cause communicational bottleneck. In order to overcome the shortages, a distributed and autonomous computer forensics system was presented. By using the autonomous forensics node, the system could obtain real-time evidence dynamically as soon as network intrusions took place,in which the evidence could be saved in a safe way in time. This way of autonomous forensics could optimize system performance. Experimental result shows that th...