期刊名称：International Journal of Advanced Research in Computer Engineering & Technology (IJARCET)
印刷版ISSN：2278-1323
出版年度：2012
卷号：1
期号：4
页码：504-508
出版社：Shri Pannalal Research Institute of Technolgy
摘要：Network Forensics is scientifically confirmed techniques to collect, detect, identify, examine, correlate, analyze, and document digital evidence from multiple systems for the purpose of finding the fact of attacks and other problem incident as well as perform the action to recover from the attack. Network Forensic measures the success of unauthorized activities meant to disrupt, corrupt, and or compromise system components as well as providing information to assist in response to or recovery from these activities. In this paper we designed a Linux based Network Forensic system in which contented virtual honeynet system to solve the information gathering in the past . This system is totally based on traditional server honeypot. It helps organizations in investigating outside and inside network attacks. It is also important for law enforcement investigations.
