arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 0906.5181cs.LOcs.CRcs.PL
收藏

利用Forensic Lucid对一起模拟打印机案件的推理

Reasoning About a Simulated Printer Case Investigation with Forensic Lucid

Serguei A. Mokhov, Joey Paquet, Mourad Debbabi

摘要:

在这项工作中,我们模拟ACME(一个虚构的公司名称)“打印机事件”,并使其规范在法医清醒,清醒和内涵逻辑为基础的程序设计语言的网络取证分析和事件重建规范。打印机案件涉及到双方之间的争议,以前使用有限状态自动机(FSA)方法解决,现在在Forensic Lucid中以更可用的方式重新完成。我们的模拟是基于所述的情况下,通过编码的概念,如证据和相关的证人帐户作为一个证据陈述的背景下,在一个法医清醒的程序,这是一个输入的过渡功能,模型的情况下可能的扣除。然后,我们调用转换函数(实际上是它的反向)与证据陈述上下文,看看我们编码的证据是否与一个人的主张一致,然后试图重建事件的序列,可以解释或反驳索赔。

英文摘要:

In this work we model the ACME (a fictitious company name) "printer case incident" and make its specification in Forensic Lucid, a Lucid- and intensional-logic-based programming language for cyberforensic analysis and event reconstruction specification. The printer case involves a dispute between two parties that was previously solved using the finite-state automata (FSA) approach, and is now re-done in a more usable way in Forensic Lucid. Our simulation is based on the said case modeling by encoding concepts like evidence and the related witness accounts as an evidential statement context in a Forensic Lucid program, which is an input to the transition function that models the possible deductions in the case. We then invoke the transition function (actually its reverse) with the evidential statement context to see if the evidence we encoded agrees with one's claims and then attempt to reconstruct the sequence of events that may explain the claim or disprove it.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑