Result Details
Identity Linking in Computer Networks
Ryšavý Ondřej, doc. Ing., Ph.D., DIFS (FIT)
Matoušek Petr, doc. Ing., Ph.D., M.A., DIFS (FIT)
Lawful interception, network forensics, and security incident investigations require cross-layer linking of identification information to link different activities of a particular person. This paper presents a model called graphs of identifiers that allows cross-layer linking of identifiers detected by various methods. Graphs of identifiers provide operations that link identifiers according to the constraints provided in the queries. The goal is to employ the linking during early stages of the network forensic investigations when an investigator searches for leads. The tools that implement the proposed model are publicly available.
Cross-Layer Identity Linking, Identifiers, Graph of Identifiers, Applications of Labeled Property Graphs.
@inproceedings{BUT162264,
author="Libor {Polčák} and Ondřej {Ryšavý} and Petr {Matoušek}",
title="Identity Linking in Computer Networks",
booktitle="Proceedings of the 17th International Joint Conference on e-Business and Telecommunications, DCNET, OPTICS, SIGMAP and WINSYS",
year="2020",
pages="45--52",
publisher="SciTePress - Science and Technology Publications",
address="Setubal",
doi="10.5220/0009783500450052",
isbn="978-989-758-445-9",
url="https://www.fit.vut.cz/research/publication/11497/"
}