摘要： 计算机数据具有脆弱性，因此必须在计算机取证过程中对电子证据进行安全保护使其具有证据能力。该文提出一种基于SHA-1, RSA和Rabin容错算法实现的电子证据安全保护策略以支持计算机取证，对原始记录进行实时、安全的转移并分散存储，保证数据的真实性和完整性，能通过快速检测和还原对其进行有效性鉴定。

关键词: 计算机取证, 电子证据, 安全保护

Abstract: It is essential to protect the electronic evidence for its admissibility in computer forensics due to the weakness of computer data. This paper presents a secure protection policy for electronic evidence supporting computer forensics, in which some algorithms of SHA-1, RSA and Rabin fault tolerance are used. It can transfer the original records in real time and securely, store them dispersively for the authenticity and integrality, and make validity assessment in fast check and recovery.

Key words: computer forensics, electronic evidence, secure protection

中图分类号: 

• TP309.2