Show simple item record

dc.contributor.authorKiltz, Stefan
dc.contributor.authorHildebrandt, Mario
dc.contributor.authorAltschaffel, Robert
dc.contributor.authorDittmann, Jana
dc.contributor.editorFreiling, Felix C.
dc.date.accessioned2019-01-17T13:26:55Z
dc.date.available2019-01-17T13:26:55Z
dc.date.issued2010
dc.identifier.isbn978-3-88579-264-2
dc.identifier.issn1617-5468
dc.identifier.urihttp://dl.gi.de/handle/20.500.12116/19803
dc.description.abstractIn this paper we introduce a prototype that is designed to produce forensic sound network data recordings using inexpensive hardand software, the Linux Forensic Transparent Bridge (LFTB). It supports the investigation of the network communication parameters and the investigation of the payload of network data. The basis for the LFTB is a self-developed model of the forensic process which also addresses forensically relevant data types and considerations for the design of forensic software using software engineering techniques. LFTB gathers forensic evidence to support cases such as malfunctioning hardand software and for investigating malicious activity. In the latter application the stealthy design of the proposed device is beneficial. Experiments as part of a first evaluation show its usability in a support case and a malicious activity scenario. Effects to latency and throughput were tested and limitations for packet recording analysed. A live monitoring scheme warning about potential packet loss endangering evidence has been implemented.en
dc.language.isoen
dc.publisherGesellschaft für Informatik e.V.
dc.relation.ispartofSicherheit 2010. Sicherheit, Schutz und Zuverlässigkeit
dc.relation.ispartofseriesLecture Notes in Informatics (LNI) - Proceedings, Volume P-170
dc.subjectIT-forensics
dc.subjectnetwork security
dc.subjectreactive security
dc.subjectintrusion detection
dc.titleA transparent Bridge for forensic sound network traffic data acquisitionen
dc.typeText/Conference Paper
dc.pubPlaceBonn
mci.reference.pages93-104
mci.conference.sessiontitleRegular Research Papers
mci.conference.locationBerlin
mci.conference.date5.-7. Oktober 2010


Files in this item

Thumbnail

Show simple item record