家庭路由器镜像提取分析研究

Research on Image Extraction and Analysis of Home Routers

摘要: 家庭路由器作为室内现场最常见的电子设备，记录着网络访问记录、设备连接日志等关键的涉案线索，是重要的电子数据取证工作对象。本文以家庭路由器为研究对象，尝试通过多种方式提取路由器存储镜像文件并进行解析。研究结果表明，相较于传统家庭路由器Web取证方式，使用镜像提取解析的方式不但能部分绕过密码限制，还可以提取到更多的网络访问日志、设备连接记录等信息。

Abstract: As the most common electronic equipment at indoor crime scenes, home routers store critical case-related clues including network access records and device connection logs, making them vital targets for electronic data forensics. Taking home routers as the research object, this paper explores multiple methods to extract and analyze router storage image files. The research results demonstrate that compared with the traditional Web-based forensics method for home routers, image extraction and analysis can partially bypass password restrictions and retrieve more data such as network access logs and device connection records.