Detailed Information on Publication Record
2022
Toward Graph-Based Network Traffic Analysis and Incident Investigation
ČERMÁK, MilanBasic information
Original name
Toward Graph-Based Network Traffic Analysis and Incident Investigation
Authors
ČERMÁK, Milan
Edition
DFRWS EU 2022, 2022
Other information
Language
English
Type of outcome
Vyžádané přednášky
Country of publisher
Czech Republic
Confidentiality degree
není předmětem státního či obchodního tajemství
Organization
Ústav výpočetní techniky – Repository – Repository
Keywords in English
Network Forensics;Graph Database;Incident Investigation;Dgraph;Zeek;Association-based Analysis
Links
833418, interní kód Repo.
Změněno: 31/3/2022 04:20, RNDr. Daniel Jakubík
Abstract
V originále
Even though network traffic is typically encrypted, and it is almost impossible to look into the content of transmitted data, the analysis of metadata and characteristics of individual connections still plays an essential role in an incident or criminal investigation. In recent years, we have seen a significant development of various approaches for storing and analyz-ing large-scale data, including graph databases. Such an approach offers great potential for expert analysts performing digital forensics and network traffic investigation, as it corresponds to their natural perception of the data. In addition, it allows a simple connection of different types and sources of data, which represents the primary focus of our research.