关键词: 计算机取证, 数据挖掘, 动态取证, 关联分析

Abstract: Some association technologies were studied. A design model to the computer dynamic forensics system was put forward, and the detail design to the modules was given. According to the features of dynamic forensics, the method of applying data mining and multi-agent into the dynamic forensics, using multi-agent to build the architecture, using data mining technology to analyze the magnanimous data was raised. However, basic mining algorithms cannot be used to analyze digital evidence directly. So, relative improvements of basic algorithms and methods of pattern analysis were put forward, and experiment is performed to prove the feasibility.

Key words: Computer forensics, Data mining, Dynamic forensics, Association analysis