ZHANG Chu, ZHANG Fan. China University of Politics Science and Law, Beijing, 100088

  【Abstract】 Network Forensics is developing fast with the Internet explosion. To ensure the validity and facticity, the network forensics must follow certain processes, principles, and steps. The objectivity, relevance and validity of the evidence are three basic principles of the network forensics. Many network forensic process models are already in place, but, due to the developmental tendency of network, it is unnecessary to emphasize the unity and universality of network forensic process model. We, therefore, should tailor specific network forensic process models according to special circumstances.

  【Key Words】 Network forensics, Digital forensics, Network forensic process model, E-evidence