Result Details
Network Forensic Investigations of Tunneled Traffic: A Case Study
PLUSKAL, J.; KOUTENSKÝ, M.; VONDRÁČEK, M.; RYŠAVÝ, O. Network Forensic Investigations of Tunneled Traffic: A Case Study. Revue Roumaine des Sciences Techniques-Serie Electrotechnique et Energetique, 2019, vol. 64, no. 4, p. 429-434. ISSN: 0035-4066.
Type
journal article
Language
English
Authors
Pluskal Jan, Ing., Ph.D., DIFS (FIT)
Koutenský Michal, Ing., DIFS (FIT)
Vondráček Martin, Ing.
Ryšavý Ondřej, doc. Ing., Ph.D., DIFS (FIT)
Koutenský Michal, Ing., DIFS (FIT)
Vondráček Martin, Ing.
Ryšavý Ondřej, doc. Ing., Ph.D., DIFS (FIT)
Abstract
The increasing importance of network forensics in the investigations conducted by Law Enforcement Agencies is indisputable.Today's Internet does not carry ordinary TCP/IP traffic but utilizes many other encapsulations and tunneling protocols. In thispaper, we overview the most used tunneling protocols and their features concerning digital forensic analysis. A case study ofgeneric stream encapsulation describes how the investigator can obtain encapsulated application data from within.
Keywords
Network traffic forensics, Generic stream encapsulation, Network forensic and analysis tool.
URL
Published
2019
Pages
429–434
Journal
Revue Roumaine des Sciences Techniques-Serie Electrotechnique et Energetique, vol. 64, no. 4, ISSN 0035-4066
UT WoS
000509418000019
EID Scopus
BibTeX
@article{BUT161867,
author="Jan {Pluskal} and Michal {Koutenský} and Martin {Vondráček} and Ondřej {Ryšavý}",
title="Network Forensic Investigations of Tunneled Traffic: A Case Study",
journal="Revue Roumaine des Sciences Techniques-Serie Electrotechnique et Energetique",
year="2019",
volume="64",
number="4",
pages="429--434",
issn="0035-4066",
url="http://www.revue.elth.pub.ro/upload/31372219_JPluskal_RRST_4_2019_pp_429-434.pdf"
}
Files
Projects
Nástroje, metody a technologie ICT pro podporu konceptu smart cities, BUT, Vnitřní projekty VUT, FIT-S-17-3964, start: 2017-03-01, end: 2020-02-29, completed
Research groups
Departments