This timely text/reference presents a detailed introduction to the essential aspects of computer network forensics. The book considers not only how to uncover information hidden in email messages, web pages and web servers, but also what this reveals about the functioning of the Internet and its core protocols. This, in turn, enables the identification of shortcomings and highlights where improvements can be made for a more secure network. Topics and features: provides learning objectives in every chapter, and review questions throughout the book to test understanding; introduces the basic concepts of network process models, network forensics frameworks and network forensics tools; discusses various techniques for the acquisition of packets in a network forensics system, network forensics analysis, and attribution in network forensics; examines a range of advanced topics, including botnet, smartphone, and cloud forensics; reviews a number of freely available tools for performing forensic activities.

The first book to provide a thorough discussion on attribution in network forensics Presents an exhaustive literature survey on theoretical models and implemented frameworks Introduces a wide range of both proprietary and open source tools for network forensic analysis

Autorentext
Prof. Ramesh Chandra Joshi is the Chancellor of Graphic Era University, Dehradun, India. He was formerly a Professor in the Department of Electronics and Computer Engineering at the Indian Institute of Technology Roorkee, India.

Dr. Emmanuel Shubhakar Pilli is an Assistant Professor in the Department of Computer Science and Engineering at Malaviya National Institute of Technology, Jaipur, India.

Inhalt

Part I: Fundamentals .- Introduction.- Network Forensic Process Models.- Network Forensic Frameworks.- Network Forensics Tools.- Part II: Techniques .- Acquisition.- Network Forensic Analysis.- Attribution.- Part III: Advances .- Botnet Forensics.- Smartphone Forensics.- Cloud Forensics.