Podrobný výpis o publikaci

@inproceedings{44961,
   author = {Čermák, Milan and Šrámková, Denisa},
   address = {Portugal},
   booktitle = {Proceedings of the 18th International Conference on Security and Cryptography},
   doi = {http://dx.doi.org/10.5220/0010581807850790},
   keywords = {Network Forensics;Graph Database;Dgraph;Zeek;Association-based Analysis},
   howpublished = {elektronická verze "online"},
   language = {eng},
   location = {Portugal},
   isbn = {978-989-758-524-1},
   pages = {785-790},
   publisher = {SCITEPRESS},
   title = {GRANEF: Utilization of a Graph Database for Network Forensics},
   url = {https://www.scitepress.org/PublicationsDetail.aspx?ID=av7edGmfq2Y=},
   year = {2021}
}

TY  - JOUR
ID  - 44961
AU  - Čermák, Milan - Šrámková, Denisa
PY  - 2021
TI  - GRANEF: Utilization of a Graph Database for Network Forensics
PB  - SCITEPRESS
CY  - Portugal
SN  - 9789897585241
KW  - Network Forensics;Graph Database;Dgraph;Zeek;Association-based Analysis
UR  - https://www.scitepress.org/PublicationsDetail.aspx?ID=av7edGmfq2Y=
N2  - Understanding the information in captured network traffic, extracting the necessary data, and performing incident investigations are principal tasks of network forensics. The analysis of such data is typically performed by tools allowing manual browsing, filtering, and aggregation or tools based on statistical analyses and visualizations facilitating data comprehension. However, the human brain is used to perceiving the data in associations, which these tools can provide only in a limited form. We introduce a GRANEF toolkit that demonstrates a new approach to exploratory network data analysis based on associations stored in a graph database. In this article, we describe data transformation principles, utilization of a scalable graph database, and data analysis techniques. We then discuss and evaluate our proposed approach using a realistic dataset. Although we are at the beginning of our research, the current results show the great potential of association-based analysis.
ER  - 

ČERMÁK, Milan a Denisa ŠRÁMKOVÁ. GRANEF: Utilization of a Graph Database for Network Forensics. Online. In \textit{Proceedings of the 18th International Conference on Security and Cryptography}. Portugal: SCITEPRESS, 2021, s.~785-790. ISBN~978-989-758-524-1. Dostupné z: https://dx.doi.org/10.5220/0010581807850790.