Network Forensic Analysis for Lawful Enforcement Steroids, Distributed and Scalable

conference paper

English

Forensic analysis of intercepted network traffic focuses on finding and extracting communication evidence, such as instant messaging, email, VoIP calls, localization information, documents, images. Due to the amount of data captured, this process is time-consuming and complicated. Most commonly used forensic network analysis tools have limited capabilities for large data processing. In this paper, we are introducing a new tool that, through distributed processing, achieves better data processing performance using available computing resources. Thanks to the technology used, this tool can be used on commodity hardware in a local area network, in a dedicated computing cluster or cloud environment.

Network Forensics, Network Traffic Processing, Distributed Computing

LETAVAY, V.; PLUSKAL, J.; RYŠAVÝ, O.

31. 5. 2019

Association for Computing Machinery

Bucharest

978-1-4503-7636-5

Proceedings of the 6th Conference on the Engineering of Computer Based Systems (ECBS 2019), 2019

1

10

9

https://dl.acm.org/citation.cfm?id=3352720

ECBS2019__LEA_s_Network_Forensic_Analysis_on_Steroids__Distributed_and_Scalable.pdf