| |
| IT Management > Systems Operations > Security > Network Security > |
Network Forensics
|
ALSO CALLED: Cyberforensics, Security Forensics, Digital Forensics, Forensic Analysis, and Forensics
DEFINITION: Network forensics is the capture, recording, and analysis of network events in order to discover the source of security attacks or other problem incidents. (The term, attributed to firewall expert Marcus Ranum, is borrowed from the legal and criminology fields where forensics pertains to the
Definition continues below.
|
|

|

|
|
Add Network-Forensics to your RSS Reader:
|
|
|
|
|
| 1 Match |
 |
|  |
| |
NETWORK FORENSICS DEFINITION (continued):
investigation of crimes.) According to Simson Garfinkel, author of several books on security, network forensics systems can be one of two kinds: - "Catch-it-as-you-can" systems, in which all packets passing through a certain traffic point are captured and written to storage with analysis being done subsequently in batch mode. This approach requires large amounts of storage, usually involving a RAID system.
- "Stop, look and listen" systems,
Network Forensics definition sponsored by SearchSecurity.com, powered by WhatIs.com an online computer dictionary
|
| |

|

|
|