-
公开(公告)号:US20110153748A1
公开(公告)日:2011-06-23
申请号:US12971177
申请日:2010-12-17
申请人: Joo Young Lee , Sung Kyong Un , Young Soo Kim , Geon Woo Kim , Sang Su Lee , Su Hyung Jo , Youn Hee Gil , Woo Yong Choi , Do Won Hong , Hyun Sook Cho
发明人: Joo Young Lee , Sung Kyong Un , Young Soo Kim , Geon Woo Kim , Sang Su Lee , Su Hyung Jo , Youn Hee Gil , Woo Yong Choi , Do Won Hong , Hyun Sook Cho
IPC分类号: G06F15/16
CPC分类号: H04L67/125
摘要: A remote forensics system based on a network is provided to allow for accessing a forensics analysis center from a remote area to perform forensic analysis. The network-based remote forensic system includes: one or more remote terminals performing forensic analysis on an evidence device in a remote area, through a virtual forensic tool when the evidence device is connected thereto; and an investigation center system connected to the remote terminals via a wide area network to provide the virtual forensic tool, processing a requirement of the remote terminals, and providing requirement processing results to the remote terminals.
摘要翻译: 提供基于网络的远程取证系统,以便从远程区域访问取证分析中心进行法医分析。 基于网络的远程取证系统包括:一个或多个远程终端,当证据设备连接到其上时,通过虚拟取证工具对远程区域的证据设备执行取证分析; 以及通过广域网连接到远程终端的调查中心系统,以提供虚拟取证工具,处理远程终端的需求,并向远程终端提供需求处理结果。
-
公开(公告)号:US08799291B2
公开(公告)日:2014-08-05
申请号:US13601925
申请日:2012-08-31
申请人: Joo Young Lee , Youn Hee Gil , Do Won Hong , Keon Woo Kim , Young Soo Kim , Sung Kyong Un , Sang Su Lee , Su Hyung Jo , Woo Yong Choi , Hyun Sook Cho
发明人: Joo Young Lee , Youn Hee Gil , Do Won Hong , Keon Woo Kim , Young Soo Kim , Sung Kyong Un , Sang Su Lee , Su Hyung Jo , Woo Yong Choi , Hyun Sook Cho
IPC分类号: G06F17/30
CPC分类号: G06F17/30312
摘要: Provided is a forensic index method by distributed processing, including: generating data to be divided by dividing data to be indexed according to predetermined division setting for distributed processing; allocating the generated data to be divided to a plurality of data processing units according to the predetermined division setting, extracting an index by filtering the allocated data to be divided in the plurality of data processing units, and generating divided index data including the extracted index; and generating an index database by merging the generated divided index data.
摘要翻译: 提供了一种通过分布式处理的取证索引方法,包括:根据用于分布式处理的预定划分设置,生成要划分的索引数据进行划分的数据; 根据预定的分割设置将生成的要分割的数据分配给多个数据处理单元,通过对分配在多个数据处理单元中的分配数据进行滤波来提取索引,并生成包括提取的索引的分割索引数据; 以及通过合并生成的分割索引数据来生成索引数据库。
-
3.
公开(公告)号:US08639683B2
公开(公告)日:2014-01-28
申请号:US13282078
申请日:2011-10-26
申请人: Youn Hee Gil , Joo Young Lee , Su Hyung Jo , Young Soo Kim , Keon Woo Kim , Sang Su Lee , Woo Yong Choi , Sung Kyong Un , Do Won Hong , Hyun Sook Cho
发明人: Youn Hee Gil , Joo Young Lee , Su Hyung Jo , Young Soo Kim , Keon Woo Kim , Sang Su Lee , Woo Yong Choi , Sung Kyong Un , Do Won Hong , Hyun Sook Cho
CPC分类号: G06F17/30864
摘要: A system and method for data analysis and digital forensics is provided. The system for data analysis and digital forensics may include: an online data forensic server for collecting and analyzing usage history information from an object device, which is subject to data collection, downloading and collecting data on the Internet based on the usage history information, requesting issuance of a timestamp token for the collected data, and receiving the issued timestamp token; a timestamp token issuing server for issuing the timestamp token for the collected data in response to the request for issuance of the timestamp token and proving the issued timestamp token to the online data forensic server; and a storage device for storing the collected data.
摘要翻译: 提供了一种用于数据分析和数字取证的系统和方法。 用于数据分析和数字取证的系统可以包括:在线数据取证服务器,用于从对象设备收集和分析使用历史信息,所述对象设备需要根据使用历史信息进行数据收集,下载和收集数据,请求 发出用于收集的数据的时间戳令牌,以及接收所发出的时间戳令牌; 时间戳令牌发行服务器,用于响应于发出时间标记令牌的请求发布收集的数据的时间戳令牌,并向在线数据取证服务器证明发出的时间戳令牌; 以及用于存储所收集的数据的存储装置。
-
公开(公告)号:US20130117273A1
公开(公告)日:2013-05-09
申请号:US13601925
申请日:2012-08-31
申请人: Joo Young LEE , Youn Hee Gil , Do Won Hong , Keon Woo Kim , Young Soo Kim , Sung Kyong Un , Sang Su Lee , Su Hyung Jo , Woo Yong Choi , Hyun Sook Cho
发明人: Joo Young LEE , Youn Hee Gil , Do Won Hong , Keon Woo Kim , Young Soo Kim , Sung Kyong Un , Sang Su Lee , Su Hyung Jo , Woo Yong Choi , Hyun Sook Cho
IPC分类号: G06F17/30
CPC分类号: G06F17/30312
摘要: Provided is a forensic index method by distributed processing, including: generating data to be divided by dividing data to be indexed according to predetermined division setting for distributed processing; allocating the generated data to be divided to a plurality of data processing units according to the predetermined division setting, extracting an index by filtering the allocated data to be divided in the plurality of data processing units, and generating divided index data including the extracted index; and generating an index database by merging the generated divided index data.
摘要翻译: 提供了一种通过分布式处理的取证索引方法,包括:根据用于分布式处理的预定划分设置,生成要划分的索引数据进行划分的数据; 根据预定的分割设置将生成的要分割的数据分配给多个数据处理单元,通过对分配在多个数据处理单元中的分配数据进行滤波来提取索引,并生成包括提取的索引的分割索引数据; 以及通过合并生成的分割索引数据来生成索引数据库。
-
公开(公告)号:US08856152B2
公开(公告)日:2014-10-07
申请号:US13488826
申请日:2012-06-05
申请人: Keon Woo Kim , Do Won Hong , Sung Kyong Un , Young Soo Kim , Woo Yong Choi , Sang Su Lee , Joo Young Lee , Su Hyung Jo , Youn Hee Gil
发明人: Keon Woo Kim , Do Won Hong , Sung Kyong Un , Young Soo Kim , Woo Yong Choi , Sang Su Lee , Joo Young Lee , Su Hyung Jo , Youn Hee Gil
CPC分类号: G06Q50/265
摘要: Proposed is a data visualizing apparatus for visualizing data as effectual information using a correlation between forensic data collected from various sources. The proposed data visualizing apparatus may visualize, as effectual information, single-source single-data, single-source multi-data, and multi-source multi-data.
摘要翻译: 提出了一种使用从各种来源收集的法医数据之间的相关性将数据可视化为有效信息的数据可视化装置。 所提出的数据可视化装置可以将单源单一数据,单源多数据和多源多数据可视化为有效的信息。
-
公开(公告)号:US20130159327A1
公开(公告)日:2013-06-20
申请号:US13488826
申请日:2012-06-05
申请人: Keon Woo Kim , Do Won Hong , Sung Kyong Un , Young Soo Kim , Woo Yong Choi , Sang Su Lee , Joo Young Lee , Su Hyung Jo , Youn Hee Gil
发明人: Keon Woo Kim , Do Won Hong , Sung Kyong Un , Young Soo Kim , Woo Yong Choi , Sang Su Lee , Joo Young Lee , Su Hyung Jo , Youn Hee Gil
IPC分类号: G06F17/30
CPC分类号: G06Q50/265
摘要: Proposed is a data visualizing apparatus for visualizing data as effectual information using a correlation between forensic data collected from various sources. The proposed data visualizing apparatus may visualize, as effectual information, single-source single-data, single-source multi-data, and multi-source multi-data.
摘要翻译: 提出了一种使用从各种来源收集的法医数据之间的相关性将数据可视化为有效信息的数据可视化装置。 所提出的数据可视化装置可以将单源单一数据,单源多数据和多源多数据可视化为有效的信息。
-
公开(公告)号:US20120166456A1
公开(公告)日:2012-06-28
申请号:US13338147
申请日:2011-12-27
申请人: Keonwoo KIM , Do Won Hong , Sung Kyong Un , Youngsoo Kim , Sang Su Lee , Woo Yong Choi , Jooyoung Lee , Su Hyung Jo , Youn-Hee Gil , Hyun sook Cho
发明人: Keonwoo KIM , Do Won Hong , Sung Kyong Un , Youngsoo Kim , Sang Su Lee , Woo Yong Choi , Jooyoung Lee , Su Hyung Jo , Youn-Hee Gil , Hyun sook Cho
IPC分类号: G06F17/30
CPC分类号: G06F16/25
摘要: An apparatus for creating a data table of a forensic data, includes a data parser configured to create primary data tables including unique attributes of the predetermined keywords by parsing the raw data having different formats for each forensics tool, each attribute having a unique standardized format. The apparatus further includes a data filter filtering specific fields or attributes from the primary data tables to newly create secondary data table. The apparatus further includes a data relation analyzer analyzing a relation between the data within the primary data tables to newly create secondary data tables.
摘要翻译: 一种用于创建取证数据的数据表的装置,包括:数据解析器,被配置为通过解析每个取证工具具有不同格式的原始数据来创建包括预定关键字的唯一属性的主数据表,每个属性具有唯一的标准化格式。 该装置还包括从主数据表过滤特定字段或属性以新建二次数据表的数据过滤器。 该装置还包括数据关系分析器,分析主数据表内的数据之间的关系,以新创建二次数据表。
-
公开(公告)号:US20110055590A1
公开(公告)日:2011-03-03
申请号:US12620925
申请日:2009-11-18
申请人: Joo-Young LEE , Su Hyung Jo , Youn-Hee Gil , Youngsoo Kim , Keonwoo Kim , Sang Su Lee , Sung Kyong Un , Do Won Hong
发明人: Joo-Young LEE , Su Hyung Jo , Youn-Hee Gil , Youngsoo Kim , Keonwoo Kim , Sang Su Lee , Sung Kyong Un , Do Won Hong
CPC分类号: G06F21/31 , G06F21/64 , G06F2221/2151 , G06F2221/2153 , G06Q10/10 , G06Q50/26 , H04L63/123 , H04L2463/121
摘要: An apparatus for collecting evidence data includes: an online data collection unit for collecting online data from a location designated by a user; a screen capture unit for capturing shots viewed on a computer screen, as they are; a time stamping unit for calculating a message digest for the collected online data to generate a time stamp including date and time when the message digest has been generated and a signature of the time stamping unit itself; and an image generation unit for generating a forensic image for the collected online data and generating a message digest for the collected online data.
摘要翻译: 用于收集证据数据的装置包括:在线数据收集单元,用于从用户指定的位置收集在线数据; 用于捕获在计算机屏幕上观看的照片的屏幕捕获单元; 时间戳单元,用于计算所收集的在线数据的消息摘要以生成包括已经生成消息摘要的日期和时间的时间戳以及时间戳单元本身的签名; 以及图像生成单元,用于生成用于收集的在线数据的取证图像,并生成用于收集的在线数据的消息摘要。
-
-
-
-
-
-
-