Application of Log Testing Technology in Computer Forensics
OU Yang-jia · Computer Technology and Development · 2010
Computer forensics refers to the process of identification,preservation,analysis and preservation of digital evidence,which use of computer hardware and software technologies and should be in accordance with laws and regulations.As an indispensable tool for maintenance of the running of computer system,log analysis and testing technology is widely used in computer forensics and it is an effective way to assess the status of system operation,to test the effectiveness of network security policy.In this paper,designed and implemented a log monitor system from three aspects of log pre-decoding,decoding,and analysis.The experimental results show that the method is effective and can help administrator to detect system intrusion.