HoneyPot在计算机取证中的应用探讨

随着计算机网络的发展,计算机犯罪现象呈现越来越严重化的趋势,为了获取犯罪证据,计算机取证问题近年也成为计算机领域的热门话题。针对目前对网络攻击取证多采用案发后再采集证据的不足,重点讨论了主动取证的工作模式,即在网络攻击的过程中完成预警和取证工作,HoneyPot就是解决此问题的一种技术。

Application of HoneyPot in the Computer Forensics

With the development of computer networks,computer crime phenomenon of more and more serious trend,in order to obtain evidence of a crime,computer forensics problem in recent years has also become a hot topic in the computer field.In light of the attacks at the use of evidence collected after the lack of evidence,the paper focused on the evidence of the active mode,that is,network attacks in the course of the work completed early warning and Evidence,HoneyPot is to solve the problem of a technology.