Presentation 2008-11-13
On Host-based Packet Capturing Mechanism for Network Forensics
Shunsuke INAI, Youji FUKUTA, Shoji MIZOBUCHI, Masami MOHRI, Yoshiaki SHIRAISHI, Ryoji NOGUCHI,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) Digital forensics is application of computer crime investigation and analysis techniques in the interests of determing potential legal evidence. In this paper, we will give some considerations about host-based network forensic system that communication packets are collected and preserved in each monitored host. The system has advantages in terms of comprehending communication state, however its each process requires ensuring reliability, availability and maintaining legal probative force. We show host-based packet capturing mechanism and process flow, which consist of log collection, preservation, for satisfying the above requirement.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) Network forensic / Hysteresis signature / Security device / Filter driver
Paper # ISEC2008-73,OIS2008-49
Date of Issue

Conference Information
Committee ISEC
Conference Date 2008/11/6(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Information Security (ISEC)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) On Host-based Packet Capturing Mechanism for Network Forensics
Sub Title (in English)
Keyword(1) Network forensic
Keyword(2) Hysteresis signature
Keyword(3) Security device
Keyword(4) Filter driver
1st Author's Name Shunsuke INAI
1st Author's Affiliation Nagoya Institute of Technology()
2nd Author's Name Youji FUKUTA
2nd Author's Affiliation Aichi University of Education
3rd Author's Name Shoji MIZOBUCHI
3rd Author's Affiliation Kinki University
4th Author's Name Masami MOHRI
4th Author's Affiliation Gifu University
5th Author's Name Yoshiaki SHIRAISHI
5th Author's Affiliation Nagoya Institute of Technology
6th Author's Name Ryoji NOGUCHI
6th Author's Affiliation Toyotsu Syscom Corporation
Date 2008-11-13
Paper # ISEC2008-73,OIS2008-49
Volume (vol) vol.108
Number (no) 284
Page pp.pp.-
#Pages 6
Date of Issue