The application research of electronic evidence system based on analysis of user correlative behavior

Nowadays, we put forward a kind of electronic forensics system based on user behavior correlation analysis in view of the present electronic evidence lack of supervision. The system builds knowledge base according to the business activity main body, behavior, and object constraints.It filters the original electronic evidence based on similarity of electronic evidence and realizes users´ behavior association of electronic evidence on the basis of WINEPI algorithm. Real data test shows that the system can carry on the whole process of user network activities supervision, and can put the forensics process monitoring data as evidence in court.