摘要
电子数据取证预警系统在网络安全和司法实践中发挥着重要作用,并随着技术的不断进步和需求的不断增长而持续发展.当前,电子数据取证预警系统存在功能缺失、分析能力有限等诸多不足.表现为面对海量信息,当前预警系统数据处理能力有限、误报漏报率高、平台兼容性较差、智能化水平较低.为此,设计新型的智能预警系统,通过建设数据中心充实分析能力、形成数据生态关联、设计涉网行为的环形模型,推动电子数据取证预警系统智能化、自动化和规范化发展.
Abstract
Electronic data forensics early warning system plays an important role in cybersecurity and judicial practice,and it evolves with the continuous advancement of technology and the growing demand.At present,there are many deficiencies in the function of electronic data forensics early warning system,such as functional deficiency and limited analysis capacity.The deficiencies are manifested in limited data processing capacity,high false alarm and missed alarm rate,poor platform compatibility,and low level of intelligence when facing massive information.Therefore,a new type of intelligent early warning system is designed by enriching the analysis capabilities,forming data ecological associations,and designing a ring model of network-related behaviors through the construction of data centers,in order to promote the intelligent,automated and standardized development of electronic data forensics early warning system.
NETL
NSTL
万方数据