›› 2013 ›› Issue (3): 0-0.
• Forensic System • Next Articles
Received:
Revised:
Published:
Online:
刘惠萍1,罗文华2
通讯作者:
基金资助:
公安部应用创新计划项目
Abstract: Microsoft PowerPoint is a common file type in computer forensics. With a true intellectual property case as example, this paper introduces the procedure and method of tracing back to the residual information in PowerPoint file, based on the analysis of Microsoft compound document structure and PowerPoint record layout.
Key words: font-size: 10.5pt, mso-bidi-font-size: 10.0pt, mso-fareast-font-family: 宋体, mso-font-kerning: 1.0pt, mso-ansi-language: EN-US, mso-fareast-language: ZH-CN, mso-bidi-language: AR-SA" lang="EN-US">Microsoft PowerPoint, Microsoft compound document, CurrentUserAtom record, DocumentContainer record, SlideListWithTextSubContainerOrAtom record
摘要: Microsoft PowerPoint演示文稿是电子数据鉴定实践中比较常见的文件类型。从一起真实的知识产权侵害案件为背景,基于Microsoft复合文档结构和Microsoft PowerPoint记录格式的分析,说明追溯演示文稿残余编辑信息的步骤与方法。
关键词: Microsoft PowerPoint演示文稿, Microsoft复合文档;CurrentUserAtom记录;DocumentContainer记录;SlideListWithTextSubContainerOrAtom记录
CLC Number:
TP399
LIU Hui-Ping-1, LUO Wen-Hua-2. Forensic Examination of Microsoft PowerPoint File with an Example from an Intellectual Property Case[J]. , 2013(3): 0-0.
刘惠萍1, 罗文华2. 从知识产权侵害案件看Microsoft PowerPoint演示文稿鉴定实践[J]. , 2013(3): 0-0.
Add to citation manager EndNote|Ris|BibTeX
URL: http://www.chsfjd.cn/EN/
http://www.chsfjd.cn/EN/Y2013/V0/I3/0