懇求~幫忙翻譯或段落說明一下”遠端鑑識”的英文文章 Ⅱ

第二篇

Assuming that the forensic computer can make a connection via a network, then the target computer can be anywhere in the world. In one case, the forensic computer was in New York and the target computer was in Hong Kong.

There can be issues with communicating through a firewall, via a gateway or even with systems using Windows XP SP2, which can prevent the connection. These must be clarified and tested when starting any investigation.

Evidential integrity

Principle 1 of the Association of Chief Police Officers (ACPO) guidance on computer evidence handling states that:

"No action taken by law enforcement agencies or their agents should change data held on a computer or storage media which may

subsequently be relied upon in court."

The Courts are yet to confirm what actually constitutes data in relation to computer systems. There are a few problematic scenarios that can arise when the servlet program is actually installed on the target machine. Firstly it may overwrite an

existing file. This is a remote possibility, as the operating system will write new data to free areas of the hard disk rather than over existing files. Next there is the possibility that the servlet software may be written to the free area on the hard disk. Depending on what was there before, it might overwrite some previously deleted data, or it might write over a region of the disk that has not been written to before. With new hard disks, which tend to be greater that 100 Gb in size, this is a definite possibility. Lastly, the servlet might be written in the unused portion of the hard disk. This is an area that the BIOS or operating system does not address so the chance of overwriting any information in this area is again remote. The servlet software is 316 Kb in size so takes up minimal space when installed. The issue at the end of the day is "did the servlet program overwrite any data", which is something that can be investigated and the result put before the Courts.

1 Answer

Rating
  • 1 decade ago
    Favorite Answer

    Assuming that the forensic computer can make...43

    假設用來鑑識的電腦可以透過網路來做連結,那麼目標電腦就可以在世界上的任何一個地方。在其中一個案例中,鑑識電腦端是在紐約而目標電腦則是在香港。

    There can be issues with communicating ...43

    但是通過防火牆,透過閘道或甚至使用Windows XP SP2的系統(也就是用來預防連結)來進行通訊卻有可能產生爭議(問題)。

    Evidential integrity

    證據的完善(完整?)

    Principle 1 of the Association of Chief Police Officers (ACPO) guidance on computer evidence handling states that:

    警官協會(ACPO)輔導(?)對於電腦證據操作的第一項原則說明如下:

    "No action taken by law enforceme...43

    『禁止任何執法人員或他們的探員更改電腦上的資料或儲存的媒體,因為那些資料可能隨後就在法庭而被人們所信賴著。』

    The Courts are yet to confirm what actually constitutes ....43

    法庭尚未確認(批準)關於組成電腦系統的資料。當servlet程式確實被安裝在目標機器上時會發生少數不確定(有問題)的狀況。首先它可能會覆蓋(覆寫?)在原本存在的檔案上。這是一個遠端的可能性(?),如同作業系統將新的資料在寫在硬碟的空白區域上而非覆摡其它檔案。它可能覆蓋一些事先被刪除的資料上,或是硬碟中一些之前已經被寫入過的區域,這取決於之前硬碟裡有些什麼。使用全新硬碟,傾向於大於100Gb的容量而言,這絕對有可能。最後,servlet可能會被寫入硬碟中不被使用的區域。這是一個BIOS或是作業系統並未定址(?)的區域,因此覆寫任何在這個區域的資訊的機率也在一次的遠端(?)。servlet軟體是316Kb大小,所以安裝時只需要很小的空間。在那天的結尾爭議的議題是『servlet程式會覆蓋任何資料嗎?』,那也是應該要研究的而結果應該呈交上法庭(?)。

    *******

    如同第一篇一樣

    要記得自己多看幾次然後改一改

    Source(s): 大腦&字典
Still have questions? Get your answers by asking now.