Generalizing sources of live network evidence

Digital Investigation

Volumn 2, Issue 3, 2005, Pages 193-200

  Nikkel, Bruce J ^a  

^a Union Bank of Switzerland   (Switzerland)

Author keywords

Cyber forensics; Live network acquisition; Live network evidence; Live network sources; Network forensics; NFAT

Indexed keywords

COMPUTATIONAL COMPLEXITY; DATA ACQUISITION; MATHEMATICAL MODELS; TELECOMMUNICATION TRAFFIC;

CYBER FORENSICS; LIVE NETWORK ACQUISITION; LIVE NETWORK EVIDENCE; LIVE NETWORK SOURCES; NETWORK FORENSICS; NFAT;

COMPUTER NETWORKS;

EID: 24344472708     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2005.08.001     Document Type: Article

References (19)

1. ACPO Computer Crime Group. Good practice guide for computer based evidence; 1999.
2. Frank Adelstein MFP: the mobile forensic platform International Journal of Digital Evidence Spring 2003
3. Brian Carrier Defining digital forensic examination and analysis tools using abstraction layers International Journal of Digital Evidence Winter 2003
4. Brian Carrier, and Joe Grand A hardware-based memory acquisition procedure for digital investigations Digital Investigation 1 1 2004
5. Eoghan Casey Network traffic as a source of evidence: tool strengths, weaknesses, and future needs Digital Investigation 1 1 2004
6. Eoghan Casey Digital evidence and computer crime 2004 Elsevier Academic Press
7. Eoghan Casey, and Aaron Stanley Tool review - remote forensic preservation and examination tools Digital Investigation 1 4 2004
8. Matthew Gerber, and John Leeson Formalization of computer input and output: the Hadley model Digital Investigation 1 3 2004
9. ITU-T Rec. X.200 (1994) - ISO/IEC 7498-1:1994. Information technology - open systems interconnection - basic reference model: the basic model; 1994.
10. Erin E. Kenneally The internet is the computer: the role of forensics in bridging the digital and physical divide Digital Investigation 2 1 2005
11. Sarah Mocas Building theoretical underpinnings for digital forensic research Digital Investigation 1 1 2004
12. NIST Computer Forensics Tool Testing (CFTT) Project. Disk imaging tool specification; 2001.
13. Owen O'Connor Deploying forensic tools via PXE Digital Investigation 1 3 2004
14. Philip Sealy Remote forensics Digital Investigation 1 4 2004
15. Peter Sommer Downloads, logs, and captures: evidence from cyberspace Journal of Financial Crime 1997
16. Peter Sommer Intrusion detection systems as evidence Computer Networks 31 1999
17. Tang Yongping, Daniels Thomas E. A simple framework for distributed forensics. In: Proceedings of the 25th IEEE international conference on distributed computing systems workshops; 2005.
18. US Department of Justice (CCIPS). Searching and seizing computers and obtaining electronic evidence in criminal investigations; 2002.
19. Wei Ren. A framework of distributed agent-based network forensics system, DFRWS; 2004.