张 楚¹  张 樊²

( 1.中国政法大学,北京 100088; 2.湖北襄樊学院政法系 441000)

【摘 要】为了保证网络证据的可采性,网络取证在遵循证据的客观性、关联性和合法性三个基本原则之外,还必须遵守一定的程序和步骤。国内外学者建立了诸多网络取证过程模型,但是从网络发展趋势来看,网络取证模型不必强调统一、通用性,应该针对特定的环境分别制定网络取证过程模型。

【关键词】网络取证; 数字取证; 网络取证过程模型; 电子证据

【中图分类号】D915.13

【文献标识码】A

【文章编号】1674- 1226( 2007) 01- 0052- 07 Research on Several Issues in Network Forensics. ZHANG Chu, ZHANG Fan. China University of Politics Science and Law, Beijing, 100088

【Abstract】Network Forensics is developing fast with the Internet explosion. To ensure the validity and facticity, the network forensics must follow certain processes, principles, and steps. The objectivity, relevance and validity of the evidence are three basic principles of the network forensics. Many network forensic process models are already in place, but,due to the develop- mental tendency of network, it is unnecessary to emphasize the unity and universality of network forensic process model.We,therefore, should tailor specific network forensic process models according to special circumstances.

【Key Words】Network forensics, Digital forensics, Network forensic process model,E-evidence