GOIP high-speed evidence obtaining method and system based on serial port and network port, and storage medium

Abstract

The invention provides a GOIP high-speed evidence obtaining method and system based on a serial port and a network port and a storage medium. The method comprises the steps that evidence obtaining equipment is connected with GOIP equipment and enters a GOIP system boot mode; a communication flow of the GOIP equipment and evidence obtaining equipment is compiled, the communication flow iscompiled into an executable program, and the executable program isdownloaded to a memory of the GOIP equipment through a transmission instruction in the system boot mode; the executable program runs through a program running instruction in the system boot mode; the mirror image data of the GOIP is uploaded to the evidence obtaining equipment through a network connected with the GOIP equipment; and the evidence obtaining equipment performs evidence obtaining analysis and display. According to the method, the system and the corresponding storage medium, a solution is provided for on-site comprehensive and efficient evidence obtaining of the GOIP equipment, the problems that in the prior art, the GOIP equipment is low in evidence obtaining efficiency, needs password permission and is incomplete in evidence obtaining data are solved, and the method and the system have great significance in evidence obtaining of the GOIP equipment and even electronic data of the Internet of Things.

Description

technical field [0001] The invention relates to the security field of forensics embedded in Internet of Things devices, in particular to a high-speed GOIP forensics method, system and storage medium based on a serial port plus a network port. Background technique [0002] With the popularization of 4G communication technology, all kinds of terminal equipment integrated with multi-communication modules commonly used in the Internet of Things are also upgraded, from traditional VOIP to the currently widely used GOIP equipment. At present, there are three main technologies for obtaining evidence for GOIP. The first method is to disassemble the GOIP device and take pictures of the IMEI nameplate on the internal communication module. However, there may be problems with the nameplate being damaged and unclear, and the extracted data is limited; second. The first is to log in to the GOIP background management through the GOIP network port to extract web page data. The data extracte...

AI Technical Summary

Problems solved by technology

[0004] In order to solve the problems of low efficiency of forensics of GOIP equipment in the prior art, the need for password authority and incomplete forensics data, the following technical solutions are proposed in the embodiments of the present invention:

Images