In the paper, an effective acquring technique of dynamic digital evidence based on intrusion detection is proposed, which incorporates intrusion detection and computer forensics.

• 本文将入侵检测技术结合到计算机取证技术中,提出一个基于入侵检测技术的动态证据识别与获取方法。