关键词: 网络安全, 网络取证, Bloom filter

Abstract: Aiming at technical challenges of traditional network forensics，this paper researches the trait of Bloom filter.A network forensics system based on Bloom filter is proposed and designed.Making use of the characteristics of Bloom filter data structure，the system can collect，compress and store the raw network data，so that the storage space is efficiently saved and post-event querying and analyzing is supported.At last some advices about future works are given.

Key words: network security, network forensics, Bloom filter