Evidence obtaining method for Web browser caching data

A web browser and data caching technology, applied in the fields of electrical digital data processing, special data processing applications, instruments, etc., can solve the problem of difficult access to webpage click operations, etc., to achieve the effect of convenient viewing

Inactive Publication Date: 2009-02-18
HANGZHOU DIANZI UNIV
View PDF4 Cites 40 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

In this invention, the general importance of each node is calculated by explicitly recording the click operation of the terminal, but in computer surveys, it

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Evidence obtaining method for Web browser caching data
  • Evidence obtaining method for Web browser caching data
  • Evidence obtaining method for Web browser caching data

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0068] Below in conjunction with accompanying drawing, the present invention is described in further detail:

[0069] In step 1 corresponding to figure 1 In, firstly, the operator obtains the registry file and operating system type from the target computer through DOS commands in the on-site forensics. In the next step, according to different positions in the registry corresponding to different operating systems (98 / 2000 / XP), the URLs of the IE home page, the IE address bar drop-down list and the path of important folders are extracted. These important folders include IE temporary folder, IE Cookies folder and IE Favorites. Then, after the user selects the browser data to be analyzed according to the case situation, the system will copy the files to the corresponding specific folders, for example, copy the Web cache files to the folder named "Web cache".

[0070] In step 2 corresponding to figure 2 , firstly detect which browser data is included in the evidence ext...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to an evidence-taking method of Web browser buffer memory data. In the method of the prior art, it is difficult to acquire click operation of the web and information which is acquired by users. The method comprises: inputting a Web browser data file and searched sensitive key words; resolving and pretreating an evidentiary document; conforming each record and other associated Web evidence into a Web object using Web browse record as a main line; selecting special Web object as a root node, constructing a Web tree according to link reference and web visit time between webs, construct a web evidence forest; performing intelligent search on the forest though input key words, obtaining relative web object; performing content analysis on relative Web object and Web tree; generating a Web evidence-taking report for the user to browse. The method of the invention is high in efficiency, strong in intelligibility and low in requirement on proficiency of investigators.

Description

technical field [0001] The invention belongs to the technical field of information security and computer application, and relates to a method for collecting evidence of Web browser data, in particular to a method for analyzing and extracting evidence related to Web browser data in a personal computer. The invention can face the needs of computer investigation and evidence collection, analyze and search the data of Web browser in the personal computer, and search for criminal evidence. Background technique [0002] Computer crime is closely related to computer technology. With the rapid development of computer technology and the rapid expansion of computer applications in society, the types and fields of computer crimes continue to increase and expand, so that the term "computer crime" continues to acquire new meanings over time . Generally speaking, the concept of computer crime can be divided into broad sense and narrow sense: in the broad sense, computer crime refers to ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F17/30
Inventor 徐明杨弘曧郑宁
Owner HANGZHOU DIANZI UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products