A Defensive Evidence Model: An Approach of Security Model for Storing Digital Evidence in Network Forensics

• Main Authors: Mohd Izham, Ibrahim, Aman, Jantan, Mohammad, Rasmi
• 格式: Conference or Workshop Item
• 語言: English
• 出版: 2012
• 主題: QA76 Computer software
• 在線閱讀: http://umpir.ump.edu.my/id/eprint/3668/1/48ICoCSIM.pdf; http://umpir.ump.edu.my/id/eprint/3668/

Network Forensics Investigators apply most of the network monitoring tools, such as Snort or WinPcap to monitor or identify potential evidence to be collected and stored. However, these tools are lack of protection mechanisms to keep the evidence safe as well as the rising issues of chain-of-custody...