计算机取证的相关法律技术问题研究

法律界研究计算机证据的有关法律特性及其认定,而计算机科学领域的研究人员则从技术的角度研究计算证据的技术特征及其获取技术.由于这一学科是建立在法学和计算机科学之上的交叉学科,必须从这两个学科及其派生学科上体现出的特殊性的角度对其进行研究.在这一领域把法律和技术分离的做法会导致法律认定上的错误和技术上的无序性.通过将法律和计算机技术相结合对计算机取证进行了研究.阐明了计算机取证的相关法律问题,重点研究了计算机取证的技术方法和工具,并给出了一个计算机取证实验的技术过程.提出了目前计算机取证相关法律法规和计算机取证技术的不足,指出了今后法律法规的进一步健全、计算机取证工作的规范化和计算机取证技术的发展趋势.

计算机取证的技术方法及工具研究

计算机取证(computer forensics)是一个迅速成长的研究领域,在国家安全、消费者保护和犯罪调查方面有着重要的应用前景。由于计算机证据的特殊性,为了保证其满足证据的可采用性标准,即关联性、可靠性和合法性,其获取需要采取特殊的技术和方法,使用特殊的工具。本文对用于计算机取证的技术方法进行了较为详细的分析研究,分析对比了国内外的计算机取证工具。

面向入侵的取证系统框架

在分析常见入侵攻击的基础上抽象出入侵过程的一般模式，提出针对入侵攻击的取证系统应满足的特征。提出了入侵取证模型，并基于这一取证模型在操作系统内核层实现了取证系统原型KIFS（kernel intrusion forensic system）。在对实际入侵的取证实验中，根据KIFS得到的证据，成功记录并重构了一个针对FreeBSD系统漏洞的本地提升权限攻击的完整过程。

Coma measurement of projection optics in lithographic tools based on relative image displacements at multiple illumination settings

In this paper, we propose a novel method for measuring the coma aberrations of lithographic projection optics based on relative image displacements at multiple illumination settings. The measurement accuracy of coma can be improved because the phase-shifting gratings are more sensitive to the aberrations than the binary gratings used in the TAMIS technique, and the impact of distortion on displacements of aerial image can be eliminated when the relative image displacements are measured. The PROLITH simulation results show that, the measurement accuracy of coma increases by more than 25% under conventional illumination, and the measurement accuracy of primary coma increases by more than 20% under annular illumination, compared with the TAMIS technique. (c) 2007 Optical Society of America.

The Uniaxial Tensile Deformation of Ni Nanowire: Atomic-Scale Computer Simulations

The mechanical deformations of nickel nanowire subjected to uniaxial tensile strain at 300 K are simulated by using molecular dynamics with the quantum corrected Sutten-Chen many-body force field. We have used common neighbor analysis method to investigate the structural evolution of Ni nanowire during the elongation process. For the strain rate of 0.1%/ps, the elastic limit is up to about 11% strain with the yield stress of 8.6 GPa. At the elastic stage, the deformation is carried mainly through the uniform elongation of the distances between the layers (perpendicular to the Z-axis) while the atomic structure remains basically unchanged. With further strain, the slips in the {111} planes start to take place in order to accommodate the applied strain to carry the deformation partially, and subsequently the neck forms. The atomic rearrangements in the neck region result in a zigzag change in the stress-strain curve; the atomic structures beyond the region, however, have no significant changes. With the strain close to the point of the breaking, we observe the formation of a one-atom thick necklace in Ni nanowire. The strain rates have no significant effect on the deformation mechanism, but have some influence on the yield stress, the elastic limit, and the fracture strain of the nanowire.

Dependence of collision frequency on distance between two hard-sphere particles estimated by computer simulation

A Monte Carlo simulation is performed to study the dependence of collision frequency on interparticle distance for a system composed of two hard-sphere particles. The simulation quantitatively shows that the collision frequency drops down sharply as the distance between two particles increases. This characteristic provides a useful evidence for the collision-reaction dynamics of aggregation process for the two-particle system described in the other reference.

Computer Simulation Of Random Sphere Packing In An Arbitrarily Shaped Container

Most simulations of random sphere packing concern a cubic or cylindric container with periodic boundary, containers of other shapes are rarely studied. In this paper, a new relaxation algorithm with pre-expanding procedure for random sphere packing in an arbitrarily shaped container is presented. Boundaries of the container are simulated by overlapping spheres which covers the boundary surface of the container. We find 0.4 similar to 0.6 of the overlap rate is a proper value for boundary spheres. The algorithm begins with a random distribution of small internal spheres. Then the expansion and relaxation procedures are performed alternately to increase the packing density. The pre-expanding procedure stops when the packing density of internal spheres reaches a preset value. Following the pre-expanding procedure, the relaxation and shrinking iterations are carried out alternately to reduce the overlaps of internal spheres. The pre-expanding procedure avoids the overflow problem and gives a uniform distribution of initial spheres. Efficiency of the algorithm is increased with the cubic cell background system and double link data structure. Examples show the packing results agree well with both computational and experimental results. Packing density about 0.63 is obtained by the algorithm for random sphere packing in containers of various shapes.

Computer simulation of influence of sedimentation on rapid coagulation

A computer simulation was performed to explore the features and effects of sedimentation on rapid coagulation. To estimate the accumulated influence of gravity on coagulation for dispersions, a sedimentation influence ratio is defined. Some factors possibly related to the influence of sedimentation were considered in the simulation and analysed by comparing the size distribution of aggregates, the change in collision number, and coagulation rates at different gravity levels (0 g, 1 g and more with g being the gravitational constant).

Computer simulation on the collision-sticking dynamics of two colloidal particles in an optical trap

Collisions of a particle pair induced by optical tweezers have been employed to study colloidal stability. In order to deepen insights regarding the collision-sticking dynamics of a particle pair in the optical trap that were observed in experimental approaches at the particle level, the authors carry out a Brownian dynamics simulation. In the simulation, various contributing factors, including the Derjaguin-Landau-Verwey-Overbeek interaction of particles, hydrodynamic interactions, optical trapping forces on the two particles, and the Brownian motion, were all taken into account. The simulation reproduces the tendencies of the accumulated sticking probability during the trapping duration for the trapped particle pair described in our previous study and provides an explanation for why the two entangled particles in the trap experience two different statuses. (c) 2007 American Institute of Physics.

Collective evolution characteristics and computer simulation of short fatigue cracks

Fatigue testing was conducted using a kind of triangular isostress specimen to obtain the short-fatigue-crack behaviour of a weld low-carbon steel. The experimental results show that short cracks continuously initiate at slip bands within ferrite grain domains and the crack number per unit area gradually increases with increasing number of fatigue cycles. The dispersed short cracks possess an orientation preference, which is associated with the crystalline orientation of the relevant slip system. Based on the observed collective characteristics, computer modelling was carried out to simulate the evolution process of initiation, propagation and coalescence of short cracks. The simulation provides progressive displays which imitate the appearance of experimental observations. The results of simulation indicate that the crack path possesses a stable value of fractal dimension whereas the critical value of percolation covers a wide datum band, suggesting that the collective evolution process of short cracks is sensitive to the pattern of crack site distribution.

Digitized Processing Track Generation of a Computer Integrated Multi-Functional 5-Axis Laser Processing System

Based on the computer integrated and flexible laser processing system, an intelligent measuring sub-system was developed. A novel model has been built up to compensate the deviations of the main frame-structure, and a new 3-D laser tracker system is applied to adjust the accuracy of the system. To analyze the characteristic of all kind surfaces of automobile outer penal moulds and dies, classification of types of the surface、brim and ridge(or vale) area to be measured and processed has been established, resulting in one of the main processing functions of the laser processing system. According to different type of surfaces, a 2-D adaptive measuring method based on B?zier curve was developed; furthermore a 3-D adaptive measuring method based on Spline curve was also developed. According to the laser materials processing characteristics and data characteristics, necessary methods have been developed to generate processing tracks, they are explained in details. Measuring experiments and laser processing experiments were carried out to testify the above mentioned methods, which have been applied in the computer integrated and flexible laser processing system developed by the Institute of Mechanics, CAS.

The Intelligent Measuring Sub-System in the Computer Integrated and Flexible Laser Processing System

Based on the computer integrated and flexible laser processing system, develop the intelligent measuring sub-system. A novel model has been built to compensate the deviations of the main frame, a new-developed 3-D laser tracker system is applied to adjust the accuracy of the system. Analyzing the characteristic of all kinds of automobile dies, which is the main processing object of the laser processing system, classify the types of the surface and border needed to be measured and be processed. According to different types of surface and border, develop 2-D adaptive measuring method based on B?zier curve and 3-D adaptive measuring method based on spline curve. During the data processing, a new 3-D probe compensation method has been described in details. Some measuring experiments and laser processing experiments are carried out to testify the methods. All the methods have been applied in the computer integrated and flexible laser processing system invented by the Institute of Mechanics, CAS.

Novel approach for region merging and image segmentation for human-computer interaction

For the purpose of human-computer interaction (HCI), a vision-based gesture segmentation approach is proposed. The technique essentially includes skin color detection and gesture segmentation. The skin color detection employs a skin-color artificial neural network (ANN). To merge and segment the region of interest, we propose a novel mountain algorithm. The details of the approach and experiment results are provided. The experimental segmentation accuracy is 96.25%. (C) 2003 Society of Photo-Optical Instrumentation Engineers.