本文首先介紹了計算機動態(tài)取證的概念、原則和步驟，然后提出了一個計算機動態(tài)取證系統模型，并針對計算機動態(tài)取證的數據分析階段面臨的問題,將數據挖掘技術應用于計算機動態(tài)取證的海量數據分析中,能夠有效的提高動態(tài)取證中數據分析的速度、分析的準確性和分析的智能性,解決動態(tài)取證中的實用性、有效性、可適應性和可擴展性問題。
關鍵詞：計算機取證、動態(tài)取證、數據分析、數據挖掘
Abstract: Firstly, this essay introduces concept, principle and step of computer dynamic forensics, then proposed a computer dynamic forensics system model, and aims at the question which the computer dynamic forensics faces in the data analysis stage, the data mining technology applies to magnanimous data analysis in the computer dynamic forensics, it can effectively enhancement the data analysis speed, the analysis accuracy and the analysis intelligence, solute dynamic forensics usability, the validity, compatibility and extended question.
Key words: computer forensics, dynamic forensics, data analysis, data mining