Mason Archival Repository Service

A Probabilistic Logic Programming Based Model for Network Forensics

Show simple item record

dc.contributor.advisor Wijesekera, Duminda
dc.contributor.author Liu, Changwei
dc.creator Liu, Changwei
dc.date.accessioned 2016-04-19T19:29:44Z
dc.date.available 2016-04-19T19:29:44Z
dc.date.issued 2015
dc.identifier.uri http://hdl.handle.net/1920/10197
dc.description.abstract Network forensics is the science that addresses the capture, recording and analysis of network events and traffic for detecting intrusions and investigating them, attributing blame and supporting a case against potential intruders in an appropriate court of law. Network forensics involves post mortem investigation of the attack. Forensics investigations are initiated after the attack has happened. Different stages of legal proceedings (such as obtaining a warrant or evidence to the jury) require reconstructing an attack scenario from an attacked system with varying degrees of certainty. In order to present the scenario that can be best supported by evidence, digital forensic investigators analyze all possible attack scenarios reconstructed from the available evidence. The analysis phase also assigns some indication of possibilities, including an odds ratio for each potential attack.
dc.format.extent 168 pages
dc.language.iso en
dc.rights Copyright 2015 Changwei Liu
dc.subject Computer science
dc.subject Attack scenario
dc.subject Cyber attack
dc.subject Digital evidence
dc.subject Evidence graph
dc.subject Logic programming
dc.subject Network forensics
dc.title A Probabilistic Logic Programming Based Model for Network Forensics
dc.type Dissertation en
thesis.degree.level Doctoral en
thesis.degree.discipline Computer Science en
thesis.degree.grantor George Mason University en


Files in this item

This item appears in the following Collection(s)

Show simple item record

Search MARS


Browse

My Account

Statistics