Improving evidence acquisition from live network sources

Digital Investigation

Volumn 3, Issue 2, 2006, Pages 89-96

  Nikkel, Bruce J ^a  

^a Union Bank of Switzerland   (Switzerland)

Author keywords

Live network acquisition; Live network evidence; Live network forensics; Network forensics; NFAT

Indexed keywords

COMPACT DISKS; LAW ENFORCEMENT; ONLINE SYSTEMS; SECURITY OF DATA; SOCIETIES AND INSTITUTIONS;

LIVE NETWORK ACQUISITION; LIVE NETWORK EVIDENCE; LIVE NETWORK FORENSICS; NETWORK FORENSICS; NFAT;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 33745174196     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2006.05.002     Document Type: Article

References (14)

1. Casey E. Error, uncertainty and loss in digital evidence. International Journal of Digital Evidence (Summer 2002)
2. Casey E. Practical approaches to recovering encrypted digital evidence. International Journal of Digital Evidence (Fall 2002)
3. Casey E. Network traffic as a source of evidence: tool strengths, weaknesses, and future needs. Digital Investigation 1 1 (2004)
4. Hosmer C. Proving the integrity of digital evidence with time. International Journal of Digital Evidence (Spring 2002)
5. Kenneally E.E., and Brown C.L.T. Risk sensitive digital evidence collection. Digital Investigation 2 2 (2005)
6. Marshall A.M. An improved protocol for the examination of rogue WWW sites (2003), Center for Internet Computing, University of Hull
7. Nikkel B. Domain name forensics: a systematic approach to investigating an Internet presence. Digital Investigation 1 4 (2004) No. 3; 2004
8. Nikkel B. Generalizing sources of live network evidence. Digital Investigation 2 3 (2005)
9. Rekhter Y, Moskowitz B, Karrenberg D, de Groot G. Network Working Group. Request for comments (RFC1597); March 1994.
10. Schneier Bruce, Kelsey J. Secure audit logs to support computer forensics. In: Seventh Usenix security symposium proceedings; 1999.
11. Siegfried J., Siedsma C., Countryman B.-J., and Hosmer C.D. Examining the encryption threat. International Journal of Digital Evidence (Winter 2004)
12. Sommer P. Downloads, logs, and captures: evidence from cyberspace. Journal of Financial Crime (October 1997)
13. Sommer P. Directors and corporate advisors' guide to digital investigations and evidence (September 2005), Information Assurance Advisory Council (IAAC)
14. Turner P. Digital provenance-interpretation, verification and corroboration. Digital Investigation 2 2 (2005)