Podrobný výpis o publikaci

ČERMÁK, Milan. Toward Graph-Based Network Traffic Analysis and Incident Investigation. In DFRWS EU 2022. 2022.

Další formáty: BibTeX LaTeX RIS

Základní údaje
Originální název	Toward Graph-Based Network Traffic Analysis and Incident Investigation
Autoři	ČERMÁK, Milan.
Vydání	DFRWS EU 2022, 2022.

Další údaje
Originální jazyk	angličtina
Typ výsledku	Vyžádané přednášky
Stát vydavatele	Česká republika
Utajení	není předmětem státního či obchodního tajemství
Organizace	Ústav výpočetní techniky – Masarykova univerzita – Repozitář
Klíčová slova anglicky	Network Forensics;Graph Database;Incident Investigation;Dgraph;Zeek;Association-based Analysis
Návaznosti	833418, interní kód Repo.
Změnil	Změnil: RNDr. Daniel Jakubík, učo 139797. Změněno: 31. 3. 2022 04:20.

Anotace
Even though network traffic is typically encrypted, and it is almost impossible to look into the content of transmitted data, the analysis of metadata and characteristics of individual connections still plays an essential role in an incident or criminal investigation. In recent years, we have seen a significant development of various approaches for storing and analyz-ing large-scale data, including graph databases. Such an approach offers great potential for expert analysts performing digital forensics and network traffic investigation, as it corresponds to their natural perception of the data. In addition, it allows a simple connection of different types and sources of data, which represents the primary focus of our research.

Anotace

Even though network traffic is typically encrypted, and it is almost impossible to look into the content of transmitted data, the analysis of metadata and characteristics of individual connections still plays an essential role in an incident or criminal investigation. In recent years, we have seen a significant development of various approaches for storing and analyz-ing large-scale data, including graph databases. Such an approach offers great potential for expert analysts performing digital forensics and network traffic investigation, as it corresponds to their natural perception of the data. In addition, it allows a simple connection of different types and sources of data, which represents the primary focus of our research.