收集和分发应用软件工件的标准化策略
Towards a standardised strategy to collect and distribute application software artifacts
摘要：
参考集包含用于识别相关内容或过滤不相关内容的已知内容。应用简档是包含与应用软件相关联的数字伪影的一类参考集。应用程序配置文件可以与目标数据集进行比较，以识别各种调查场景中应用程序使用的相关证据。研究目标是设计和实现一个标准化的策略，收集和分发应用软件文物使用应用程序配置文件。一个先进的技术，用于创建应用程序配置文件的设计使用正式的差分分析策略。该设计在实时差分取证分析工具LiveDiff中实现，以自动化和简化数据汇集。一个存储机制的基础上设计了以前标准化的取证数据抽象。该设计是在一个新的数据抽象中实现的，即应用程序配置文件XML（APXML），以提供对收集到的工件的存储、分发和自动化处理。
英文摘要：
Reference sets contain known content that are used to identify relevant or filter irrelevant content. Application profiles are a type of reference set that contain digital artifacts associated with application software. An application profile can be compared against a target data set to identify relevant evidence of application usage in a variety of investigation scenarios. The research objective is to design and implement a standardised strategy to collect and distribute application software artifacts using application profiles. An advanced technique for creating application profiles was designed using a formalised differential analysis strategy. The design was implemented in a live differential forensic analysis tool, LiveDiff, to automate and simplify data collection. A storage mechanism was designed based on a previously standardised forensic data abstraction. The design was implemented in a new data abstraction, Application Profile XML (APXML), to provide storage, distribution and automated processing of collected artifacts.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
