Monitoring & Forensic Analysis forWireless Networks
K.P. Mc Grath, J. Stuart Nelson · 2006
This paper describes FLUX: "A Network Forensic Time Machine". Operating like a surveillance camera, FLUX is an infrastructure for capturing and analyzing packets traversing the network. The ‘Time Machine’ term relates to the amount of dedicated storage to evidentiary data which can be forensically analyzed. The purpose of FLUX is to build intelligence about network usage, uncover anomalous traffic by transforming raw network data into meaningful knowledge.