论文部分内容阅读
QQ已成为国内主流的在线即时通讯软件。由于QQ巨大的用户规模,很多不法分子以QQ作为媒介来进行违法犯罪活动,因此分析QQ好友列表和聊天内容中的信息是计算机调查取证的一个重要研究方向。本文分别深入研究了中国最流行的即时通讯软件QQ好友列表和聊天内容的信息存储结构和有效数据的加密方式,并提出了一种基于复合文档格式的QQ客户端好友列表文件和聊天记录文件的全面解析方案。从而,为计算机调查取证工作提供了有力的工具。
QQ has become the mainstream of the domestic instant messaging software. Due to the massive user scale of QQ, many criminals use QQ as a medium to carry out criminal activities. Therefore, analyzing information in QQ friend list and chat contents is an important research direction of computer investigation and evidence collection. In this paper, we deeply study the information storage structure of QQ friend list and chat contents, which is the most popular instant messaging software in China, and the encryption method of valid data, and propose a QQ client buddy list file and chat record file based on the composite document format A comprehensive analysis of the program. Thus, it provides a powerful tool for computer investigation and evidence collection.