Academic Journals Database
Disseminating quality controlled scientific knowledge

Forensic Investigation in Communication Networks Using Incomplete Digital Evidences

Author(s): Slim REKHIS | Jihene KRICHENE | Noureddine BOUDRIGA

Journal: International Journal of Communications, Network and System Sciences
ISSN 1913-3715

Volume: 02;
Issue: 09;
Start page: 857;
Date: 2009;
Original page

Keywords: Formal Digital Investigation | Incident Response Probabilistic Cognitive Map | DigForNet | Anti- Forensic Attacks Investigation | Attack Scenarios Reconstruction

Security incidents targeting information systems have become more complex and sophisticated, and intruders might evade responsibility due to the lack of evidence to convict them. In this paper, we develop a system for Digital Forensic in Networking, called DigForNet, which is useful to analyze security incidents and explain the steps taken by the attackers. DigForNet combines intrusion response team knowledge with formal tools to identify the attack scenarios that have occurred and show how the system behaves for every step in the scenario. The attack scenarios construction is automated and the hypothetical concept is introduced within DigForNet to alleviate missing data related to evidences or investigator knowledge. DigForNet system supports the investigation of attack scenarios that integrate anti-investigation attacks. To exemplify the proposal, a case study is proposed.
Affiliate Program     

Tango Jona
Tangokurs Rapperswil-Jona