|
Abstract: |
Digital evidence investigation in QQ software is the current research focus. In order to identify the authenticity and credibility of QQ chat records, the method based on attacking QQ chat records is proposed. Firstly, an evaluation model on checking the authenticity of QQ chat records is proposed. The cases on kinds of changing QQ chat records are discussed. The challenge in identifying the authenticity of QQ chat records is raised. Secondly, case study on attacking QQ chat records is proposed to check the relationship between the authenticity of QQ chat records and the difficulty of changing them. A couple of experiments on changing QQ chat records are finished to find how difficult changing records is and whether there are clues left on changing them or not. Finally, a kind of QQ chat forensic process is presented, which can help for digital evidence investigation in the authenticity and credibility of QQ chat records. The practices in QQ forensic cases show that it works well. |
Key words: digital evidence investigation in QQ forensic identification QQ chat records authenticity credibility |
DOI:10.11916/j.issn.1005-9113.2014.06.012 |
Clc Number:TP391 |
Fund: |