INTEGRATED PROACTIVE FORENSICS MODEL IN NETWORK INFORMATION SECURITY

Keywords:
logging, monitoring system, proactive network forensics, integrated security event management, intrusion-detection

Abstract:
Internet is increasingly used in all aspects of our daily lives. In many cases, application security cannot provide the required level of security. Therefore, proactive collection of network data from all of the network layers in real time and forensic analysis of network traffic can easily help to uncover information about the internal or external attacks and to prevent potential damages. Consequently, best way is to combine application and system monitoring and perform centralized traffic monitoring to correlate events. Tracing traffic at multiple levels and points could potentially provide more information about the intrusion features. With the wide deployment of centralized log monitoring, the analysis of the data collected from those deployments has become an important research area in proactive network security. It has been shown that data collected in such manner can be used to detect traffic anomalies and improve network intrusion detection. In practice, attacks should be detected as soon as possible by monitoring system, in order to take appropriate corrective measures in timely manner. In this paper deferent types of network events and data sources are described and its integration with centralized log management infrastructure in proactive forensic architecture is researched. The authors of this paper proposed an integrated proactive digital forensic (PDF) model for internal and external attacks and its contribution to overall network security in context of high – volume network traffic, big data and virtualized cloud computing environment.

CITATION:

IEEE format

Copy to clipboard

G. Grubor, I. Barać, “INTEGRATED PROACTIVE FORENSICS MODEL IN NETWORK INFORMATION SECURITY,” in Sinteza 2014 - Impact of the Internet on Business Activities in Serbia and Worldwide, Belgrade, Singidunum University, Serbia, 2014, pp. 693-699. doi:10.15308/sinteza-2014-693-699

APA format

Copy to clipboard

Grubor, G., Barać, I. (2014). INTEGRATED PROACTIVE FORENSICS MODEL IN NETWORK INFORMATION SECURITY. Paper presented at Sinteza 2014 - Impact of the Internet on Business Activities in Serbia and Worldwide. doi:10.15308/sinteza-2014-693-699

BibTeX format
Download

RefWorks Tagged format
Download