Distributed network forensics system based on Bloom filter engine
Tao Zou · 2009
Aiming at technical challenges of network forensics at present,a distributed network forensics system based on the Bloom filter engine was proposed and designed.The system with the Bloom filter engine as the core can filtrate,memory-map raw network data for compression,capture complete evidence,save storage space,and help with post-event investigation of network forensics.