Real-Time Analysis of Big Network Packet Streams by Learning the Likelihood of Trusted Sequences

Yoon, John; DeBiase, Michael

doi:10.1007/978-3-319-94301-5_4

Cited by 1 publication

(1 citation statement)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The research aims to compare the ability to recognize patterns in different packet analyzer applications in order to find the most suitable tool for network forensic analysis activities. The results of DPI (Deep Packet Inspection), a packet analysis tool with machine learning capabilities are valid [8][9] [10].…”

Section: A Research Related To Packet Capture (Pcap) Analysismentioning

confidence: 99%

A Novel Approach to Network Forensic Analysis: Combining Packet Capture Data and Social Network Analysis

Sembiring¹,

Suharyadi²,

Iriani³

et al. 2023

IJACSA

View full text Add to dashboard Cite

Log data from computers used for network forensic analysis is ineffective at identifying specific security threats. Log data limitations include the difficulty in reconstructing communication patterns between nodes and the inability to identify more advanced security threats. By combining traditional log data analysis methods with a more effective combination of approaches, a more comprehensive view of communication patterns can be achieved. This combined approach can then help identify potential security threats more effectively. It's difficult to determine the specific benefits of combining Packet Capture (PCAP) and Social Network Analysis (SNA) when performing forensics. This article proposes a new approach to forensic analysis that combines PCAP and social network analysis to overcome some of the limitations of traditional methods. The purpose of this discovery is to improve the accuracy of network forensic analysis by combining PCAP and social network analysis to provide a more comprehensive view of network communication patterns. Network forensics, which combines pcap analysis and social network analysis, provides more comprehensive results. PCAP analysis is used to analyze network traffic, conversation statistics, protocol distribution, packet content and round-trip times. Social network analysis maps communication patterns between nodes and identifies the most influential key players within the network. PCAP analysis efficiently captures and analyzes network packets, and SNA provides insight into relationships and communication patterns between devices on the network.

show abstract

Section: A Research Related To Packet Capture (Pcap) Analysismentioning

confidence: 99%