Publication Details
Network Forensic Analysis for Lawful Enforcement Steroids, Distributed and Scalable
Pluskal Jan, Ing., Ph.D. (DIFS FIT BUT)
Ryšavý Ondřej, doc. Ing., Ph.D. (DIFS FIT BUT)
Network Forensics, Network Traffic Processing, Distributed Computing
Forensic analysis of intercepted network traffic focuses on finding and extracting communication evidence, such as instant messaging, email, VoIP calls, localization information, documents, images. Due to the amount of data captured, this process is time-consuming and complicated. Most commonly used forensic network analysis tools have limited capabilities for large data processing. In this paper, we are introducing a new tool that, through distributed processing, achieves better data processing performance using available computing resources. Thanks to the technology used, this tool can be used on commodity hardware in a local area network, in a dedicated computing cluster or cloud environment.
@INPROCEEDINGS{FITPUB11991, author = "Viliam Letavay and Jan Pluskal and Ond\v{r}ej Ry\v{s}av\'{y}", title = "Network Forensic Analysis for Lawful Enforcement Steroids, Distributed and Scalable", pages = "1--10", booktitle = "Proceedings of the 6th Conference on the Engineering of Computer Based Systems (ECBS 2019), 2019", year = 2019, location = "Bucharest, RO", publisher = "Association for Computing Machinery", ISBN = "978-1-4503-7636-5", doi = "10.1145/3352700.3352720", language = "english", url = "https://www.fit.vut.cz/research/publication/11991" }