论文信息 - A Log Correlation Model to Support the Evidence Search Process in a Forensic Investigation - 字舞流文

A Log Correlation Model to Support the Evidence Search Process in a Forensic Investigation

Roberto Gómez Cárdenas | Jorge Herrerías Guerrero

[1] Jared Allison. Automated log processing , 2002 .

[2] Warren G. Kruse,et al. Computer Forensics: Incident Response Essentials , 2001 .

[3] Dario Forte. The “ART” of log correlation: part 1 , 2004 .

[4] Peng Ning,et al. Constructing attack scenarios through correlation of intrusion alerts , 2002, CCS '02.

[5] Frédéric Cuppens,et al. Alert correlation in a cooperative intrusion detection framework , 2002, Proceedings 2002 IEEE Symposium on Security and Privacy.

[6] Matt Bishop,et al. A standard audit trail format , 1995 .