Study on Design and Application of Electronic Evidence Preservation Program

In traditional evidence field¿C the evidence preservation was widely used in the fixed and preservation of evidence ¿Cwhich generally is look as a kind of legal measures. The characteristics between electronic evidence and traditional evidence are difference, so only through legal is difficult to realize preservation of the electronic evidence. This paper analyzes various factors of influencing evidence preservation in the computer forensics, and realizes that electronic evidence preservation needs comprehensive applying legal measures and technological means, and then, this paper analyzes how to use information security technology to construct the evidence chains of electronic evidence. Finally, it made beneficial exploration on technology application in electronic evidence preservation.