Logo des Repositoriums
 

A transparent Bridge for forensic sound network traffic data acquisition

dc.contributor.authorKiltz, Stefan
dc.contributor.authorHildebrandt, Mario
dc.contributor.authorAltschaffel, Robert
dc.contributor.authorDittmann, Jana
dc.contributor.editorFreiling, Felix C.
dc.date.accessioned2019-01-17T13:26:55Z
dc.date.available2019-01-17T13:26:55Z
dc.date.issued2010
dc.description.abstractIn this paper we introduce a prototype that is designed to produce forensic sound network data recordings using inexpensive hardand software, the Linux Forensic Transparent Bridge (LFTB). It supports the investigation of the network communication parameters and the investigation of the payload of network data. The basis for the LFTB is a self-developed model of the forensic process which also addresses forensically relevant data types and considerations for the design of forensic software using software engineering techniques. LFTB gathers forensic evidence to support cases such as malfunctioning hardand software and for investigating malicious activity. In the latter application the stealthy design of the proposed device is beneficial. Experiments as part of a first evaluation show its usability in a support case and a malicious activity scenario. Effects to latency and throughput were tested and limitations for packet recording analysed. A live monitoring scheme warning about potential packet loss endangering evidence has been implemented.en
dc.identifier.isbn978-3-88579-264-2
dc.identifier.pissn1617-5468
dc.identifier.urihttps://dl.gi.de/handle/20.500.12116/19803
dc.language.isoen
dc.publisherGesellschaft für Informatik e.V.
dc.relation.ispartofSicherheit 2010. Sicherheit, Schutz und Zuverlässigkeit
dc.relation.ispartofseriesLecture Notes in Informatics (LNI) - Proceedings, Volume P-170
dc.subjectIT-forensics
dc.subjectnetwork security
dc.subjectreactive security
dc.subjectintrusion detection
dc.titleA transparent Bridge for forensic sound network traffic data acquisitionen
dc.typeText/Conference Paper
gi.citation.endPage104
gi.citation.publisherPlaceBonn
gi.citation.startPage93
gi.conference.date5.-7. Oktober 2010
gi.conference.locationBerlin
gi.conference.sessiontitleRegular Research Papers

Dateien

Originalbündel
1 - 1 von 1
Lade...
Vorschaubild
Name:
93.pdf
Größe:
166.53 KB
Format:
Adobe Portable Document Format