Manual Link Analysis and Trace Back
Computer Fraud & Security · 2003
Peter Stephenson The concept of link analysis is fundamental in the tracing of various types of fraud. However, it also is quite useful for working out the suspected path of an attack. For link analysis to work well you will need a lot of data. The more data points you have that you know you can depend upon the better your chances of getting a reasonable back trace. In this month’s column we will discuss some techniques that you can use to perform a trace back to a suspected attacker. The reader should take note that there are reasons why this won’t work in some cases (we’ll cover those) and why you will need corroboration in any event.