期刊名称：International Journal of Computer Science Issues
印刷版ISSN：1694-0784
电子版ISSN：1694-0814
出版年度：2013
卷号：10
期号：2
出版社：IJCSI Press
摘要：The existing Forensics model already could not satisfy the need of the computer forensics. Key technology which can implement Forensics Model was studied in this paper. Honeypot forensics, IDS, Ontology technologies were combined effectively in order to obtain forensics data beforehand. A complete dynamic forensics system which can replay computer crime was designed. Non-repeated varying probability packet marking scheme was proposed. The paper proposed dynamic forensics model based on ontology and context information. Dynamic forensics will inevitably produce large amounts of disorganized data having many drawbacks such as non-uniform format, so the paper proposed the high-precision data mining model based on ontology. The efficiency and accuracy of spam filtering are improved.
