On the base of requirement, combining with the ideas of software engineering, a dynamic network intrusion forensics process model based on evidence competency was explored.

• 在此基础上,结合软件工程的思想,从获取证据的需求出发,提出了一个基于入侵检测的网络证据获取过程模型。