8056

7491

كارشناسي ارشد

هوش مصنوعي

اصفهان: دانشگاه صنعتي اصفهان، دانشكده برق و كامپيوتر

1391

يازده،121ص.: مصور،جدول،نمودار

ص.ع.به فارسي و انگليسي

محمدعلي منتظري

4/8/92

ناصر قديري، رسول موسوي

مهندسي برق و كامپيوتر

ID7491

به فارسي و انگليسي:‌قابل رويت در نسخه ديجيتالي

An Ontology for Memory Forensics Evidence with a New Automatic Event Reconstruction Framework for Digital Investigation Mostafa Mardfekri m mardfekri@ec iut ac ir Date of Submission 2013 01 26 Department of Electrical and Computer Engineering Isfahan University of Technology Isfahan 84156 83111 Iran Degree M Sc Language Farsi Supervisor Mohammad Ali Montazeri montazeri@cc iut ac ir Abstract Security of computer systems regards to increasing security breach has been challenging topic in scientific communities From a point of view we can classify the computer security processes into post incident response and pre incident response Our interest in post inceident response in to collect digital evidence from target system to identify the crime and the effect of malicious code in order to find the attacker and obstruct the attack way This process is called digital forensics The traditional methods for the sake of un volatile nature of disk evidence focus on un volatile evidence However the invaluable sources of information conceal from analysis In this research the important tools presented for collection and analysis of memory evidence is reviewed and a measure for comprison and selection of each one is suggested We proposed an ontology for memory evidence to overcome some of the problems which encounter in digital investigation processes Finally a new framework for event reconstruction occured in digital investigation process is proposed Keywords Memory Forensics Evidence Ontology Memory Evidence Event Reconstruction Digital Investigation PDF created with pdfFactory trial version www pdffactory com

محمدعلي منتظري

ناصر قديري، رسول موسوي