【摘要】 关联规则可以分析不同犯罪之间的相似性,不同犯罪人之间的关系。将关联规则的方法应用到计算机取证分析当中,从而找到经过机器的各活动之间的相关性。通过分析机器上留下的使用记录和痕迹,推断出使用者的习惯、特征,同时对于出现的异常情况做出判断。更多还原

【Abstract】 The association rules can analyze the likeness between different crime,relation between different crime person.Applying the method of the association rules to computer forensics,then find out the relativity between each activity through the machine.Analyzing the usage record and the traces that machine has left,predict the habit,characteristic of an user,do a judgment to the excrescent circumstance for appear at the same time.更多还原