Abstract: This article introduces the concept of digital forensics and digital forensic model, compares the difference between the usage of digital forensic in criminal investigating and in enterprise environment. Then, considering the usage of digital forensic in non-digital criminal fields, it provides an abstract digital forensic model that is based on the former work of other experts. The new abstract model, which describes the process of digital forensic as a forensic cycle, focuses on the actor of forensic instead of the evidence itself. It is general enough to describe the character of digital forensic in both digital criminal and non-digital criminal fields, and abstract enough to fit not only law enforcement users, but also for enterprise users.

Key words: Digital forensics; Forensic actors; Forensic cycle; Evidence collection; Forensic analysis

摘要： 介绍了数字取证和数字取证模型的概念，然后通过对基于刑事侦查和基于企业内部网的数字取证异同点的比较，结合数字取证在非数字化犯罪领域应用中的特点，在前人工作的基础上，提出了一种不局限于特定数字取证类型、以取证实施者为中心、使用状态转换图描述的抽象数字取证模型，采用取证循环的形式描述了数字取证的过程和特征。

关键词: 数字取证；取证实施者；取证循环；证据收集；取证分析