ENGLISH

Network Forensics: Tracking Hackers through Cyberspace

By Sherri Davidoff & Jonathan Ham

Book information

Publisher
Prentice Hall
Year
2012
ISBN
978-0-13-256471-7, 0-13-256471-8, 8350582774, 7-56358-172-3, 1436350344
Language
english
Format
EPUB
Filesize
46 MB (48130716 bytes)
Series
Fernando Lopez-Lezcano's Library
Pages
545\0
Time added
2019-09-25 00:08:21
Computer crimes;Investigation;Hackers;Forensic sci

Description

Content: Foreword xviiPreface xixAcknowledgments xxvAbout the Authors xxvii Part I: Foundation 1Chapter 1: Practical Investigative Strategies 31.1 Real-World Cases 31.2 Footprints 81.3 Concepts in Digital Evidence 91.4 Challenges Relating to Network Evidence 161.5 Network Forensics Investigative Methodology (OSCAR) 171.6 Conclusion 22 Chapter 2: Technical Fundamentals 232.1 Sources of Network-Based Evidence 232.2 Principles of Internetworking 302.3 Internet Protocol Suite 352.4 Conclusion 44 Chapter 3: Evidence Acquisition 453.1 Physical Interception 463.2 Traffic Acquisition Software 543.3 Active Acquisition 653.4 Conclusion 72 Part II: Traffic Analysis 73Chapter 4: Packet Analysis 754.1 Protocol Analysis 764.2 Packet Analysis 954.3 Flow Analysis 1034.4 Higher-Layer Traffic Analysis 1204.5 Conclusion 1334.6 Case Study: Ann's Rendezvous 135 Chapter 5: Statistical Flow Analysis 1595.1 Process Overview 1605.2 Sensors 1615.3 Flow Record Export Protocols 1665.4 Collection and Aggregation 1685.5 Analysis 1725.6 Conclusion 1835.7 Case Study: The Curious Mr. X 184 Chapter 6: Wireless: Network Forensics Unplugged 1996.1 The IEEE Layer 2 Protocol Series 2016.2 Wireless Access Points (WAPs) 2146.3 Wireless Traffic Capture and Analysis 2196.4 Common Attacks 2246.5 Locating Wireless Devices 2296.6 Conclusion 2356.7 Case Study: HackMe, Inc. 236 Chapter 7: Network Intrusion Detection and Analysis 2577.1 Why Investigate NIDS/NIPS? 2587.2 Typical NIDS/NIPS Functionality 2587.3 Modes of Detection 2617.4 Types of NIDS/NIPSs 2627.5 NIDS/NIPS Evidence Acquisition 2647.6 Comprehensive Packet Logging 2677.7 Snort 2687.8 Conclusion 2757.9 Case Study: Inter0ptic Saves the Planet (Part 1 of 2) 276 Part III: Network Devices and Servers 289Chapter 8: Event Log Aggregation, Correlation, and Analysis 2918.1 Sources of Logs 2928.2 Network Log Architecture 3068.3 Collecting and Analyzing Evidence 3118.4 Conclusion 3178.5 Case Study: L0ne Sh4rk's Revenge 318 Chapter 9: Switches, Routers, and Firewalls 3359.1 Storage Media 3369.2 Switches 3369.3 Routers 3409.4 Firewalls 3449.5 Interfaces 3489.6 Logging 3529.7 Conclusion 3559.8 Case Study: Ann's Coffee Ring 356 Chapter 10: Web Proxies 36910.1 Why Investigate Web Proxies? 36910.2 Web Proxy Functionality 37110.3 Evidence 37510.4 Squid 37710.5 Web Proxy Analysis 38110.6 Encrypted Web Traffic 39210.7 Conclusion 40110.8 Case Study: Inter0ptic Saves the Planet (Part 2 of 2) 402 Part IV: Advanced Topics 421Chapter 11: Network Tunneling 42311.1 Tunneling for Functionality 42311.2 Tunneling for Confidentiality 42711.3 Covert Tunneling 43011.4 Conclusion 43911.5 Case Study: Ann Tunnels Underground 441 Chapter 12: Malware Forensics 46112.1 Trends in Malware Evolution 46212.2 Network Behavior of Malware 48412.3 The Future of Malware and Network Forensics 49112.4 Case Study: Ann's Aurora 492 Afterword 519 Index 521

Similar books

The arraignment and tryall with a declaration of the Ranters also, several sentences proceedings at the sessions in the Old-Baily, and Councel of War: their protestations and the hanging of one up by the thumbs; with divers penalties to be inflicted upon others. The dancing and revelling of Dr. Buckeridge and his wife, and other gent. dancing all in white, in Berkshire, and their Christmas carol. A dispute between a Ranter in Bridewel, and one that came to see him; with his creed and pater noster: and the names of the false gods they worship. As also, a list of many of the Ranters, from whence they are derived: and of many hundreds of them in England

The arraignment and tryall with a declaration of the Ranters also, several sentences proceedings at the sessions in the Old-Baily, and Councel of War: their protestations and the hanging of one up by the thumbs; with divers penalties to be inflicted upon others. The dancing and revelling of Dr. Buckeridge and his wife, and other gent. dancing all in white, in Berkshire, and their Christmas carol. A dispute between a Ranter in Bridewel, and one that came to see him; with his creed and pater noster: and the names of the false gods they worship. As also, a list of many of the Ranters, from whence they are derived: and of many hundreds of them in England

2019 · EPUB

The discoverer; vvherein is set forth (to undeceive the nation) the reall plots and stratagems of Lievt. Col. John Lilburn, Mr. William Walwyn, Mr. Thomas Prince, Mr. Richard Overton, and that partie ... Namely, under the pretence and colour of libertie ... a most dangerous and destructive designe is carried on to deprive the nation of their religion, rights, liberties, proprieties, lawes, government, &c. and to bring a totall and universall ruine upon the land. And so much is here clearely proved. The first part

The discoverer; vvherein is set forth (to undeceive the nation) the reall plots and stratagems of Lievt. Col. John Lilburn, Mr. William Walwyn, Mr. Thomas Prince, Mr. Richard Overton, and that partie ... Namely, under the pretence and colour of libertie ... a most dangerous and destructive designe is carried on to deprive the nation of their religion, rights, liberties, proprieties, lawes, government, &c. and to bring a totall and universall ruine upon the land. And so much is here clearely proved. The first part

2019 · EPUB

An act to impower Sir John Molesworth: Baronet, and Joseph Moyle, Esquire, Two of the surviving Trustees, in an Indenture, dated the Twenty-Fifth Day of December One thousand Seven hundred and Forty-Three, to raise the several Sums in the said Indenture mentioned, or such of them as are still unsatisfied, and pay the same, as well as the rest of the personal Estate of Hugh Gregor, deceased, to such Person as Jane Gregor, an Infant, shall marry during her Infancy, with the Consent of the surviving Trustees, and of her Guardians

An act to impower Sir John Molesworth: Baronet, and Joseph Moyle, Esquire, Two of the surviving Trustees, in an Indenture, dated the Twenty-Fifth Day of December One thousand Seven hundred and Forty-Three, to raise the several Sums in the said Indenture mentioned, or such of them as are still unsatisfied, and pay the same, as well as the rest of the personal Estate of Hugh Gregor, deceased, to such Person as Jane Gregor, an Infant, shall marry during her Infancy, with the Consent of the surviving Trustees, and of her Guardians

EPUB