Dynamic electronic forensics based on plug-in

Abstract

Considering the characteristics of judicial forensics as well as diversity types of network forensics, this paper proposed a forensic framework based on XML and plug-in technology. The framework maintains scalability of forensic analysis and ensures the stability of forensic process simultaneity. Specified host forensics and hacker intrusion forensics were implemented to proof the validity of the framework. © 2011 Springer-Verlag.