Visual Analytics for Improving Efficiency of Network Forensics: Account Theft Investigation
Andrey Alexeevich Chechulin, Maxim Kolomeets, Igor Vitalievich Kotenko · Journal of Physics Conference Series · 2018
In the paper, we propose a technique and means of visual analytics for network forensic investigation. It is assumed that experts will be able to decrease the time required for analysis and for creation of easy readable evidences, timelines and presentation for the court. Also based on an example of account theft cyber-attack investigation the technique for classification of different aspects (slices) of network traffic is proposed. The evaluation and recommendations for the technique usage are also presented.