On a network forensics model for information security
| dc.contributor.author | Wei, Rei | |
| dc.contributor.editor | Doroshenko, Anatoly E. | |
| dc.contributor.editor | Halpin, Terry A. | |
| dc.contributor.editor | Liddle, Stephen W. | |
| dc.contributor.editor | Mayr, Heinrich C. | |
| dc.date.accessioned | 2019-10-15T12:40:39Z | |
| dc.date.available | 2019-10-15T12:40:39Z | |
| dc.date.issued | 2004 | |
| dc.description.abstract | The employment of a patchwork of nonintegrated security products can only provide incomplete coverage, which cannot give the total panorama of the network misuse behavior. Network forensics is a new approach for the incident investigation and emergence response, which also enhance the network security from a different point of view. However, the current network forensics system is confused with the network monitor system or sniffer system. It always is misconstrued to an only network traffic capture system. In this paper, we for the first time discuss the concept model of network forensics system, which can give guidance for the implementation of network forensics system and the formalization of the network forensics procedure, which is a principle element of the recognition between the law enforcement participation. Particularly, some novel approaches for network forensics system are discussed for the first time, such as network forensics server, network forensics protocol and standardization, and so on. | en |
| dc.identifier.isbn | 3-88579-377-6 | |
| dc.identifier.pissn | 1617-5468 | |
| dc.identifier.uri | https://dl.gi.de/handle/20.500.12116/29100 | |
| dc.language.iso | en | |
| dc.publisher | Gesellschaft für Informatik e.V. | |
| dc.relation.ispartof | Information systems technology and its applications, 3rd international conference ISTA'2004 | |
| dc.relation.ispartofseries | Lecture Notes in Informatics (LNI) - Proceedings, Volume P-48 | |
| dc.subject | network | |
| dc.subject | computer forensics | |
| dc.subject | network forensics | |
| dc.subject | network security | |
| dc.subject | incident investigation | |
| dc.subject | information security | |
| dc.title | On a network forensics model for information security | en |
| dc.type | Text/Conference Paper | |
| gi.citation.endPage | 234 | |
| gi.citation.publisherPlace | Bonn | |
| gi.citation.startPage | 229 | |
| gi.conference.date | June 15-17, 2004 | |
| gi.conference.location | Salt Lake City, Utah, USA | |
| gi.conference.sessiontitle | Regular Research Papers |
Dateien
Originalbündel
1 - 1 von 1