In order to fetch evidences effectively and insure their originality and validity, a new method for dynamic computer forensics is presented.

• 实验表明,该模型能有效地对多种攻击进行实时证据的提取,具有自适应性、分布性、实时性等优点,是动态计算机取证的一个较好解决方案。