Research on real-time network forensics techniques
Feng Wang · Microcomputer & its Applications · 2009
This paper introduces the concept of network forensics, the characteristics of network evidence, comparison with the traditional static computer forensic and current research situation. Data capture, data analysis techniques, expert system and data mining techniques were presented in detail in the paper. Current network forensics problems and trends were analyzed.