Sumanth Reddy Allam

Publications (3)0 Total impact

• Article: Tools and techniques for Network Forensics

  Natarajan Meghanathan, Sumanth Reddy Allam, Loretta A. Moore
  [show abstract] [hide abstract]
  ABSTRACT: Network forensics deals with the capture, recording and analysis of network events in order to discover evidential information about the source of security attacks in a court of law. This paper discusses the different tools and techniques available to conduct network forensics. Some of the tools discussed include: eMailTrackerPro to identify the physical location of an email sender; Web Historian to find the duration of each visit and the files uploaded and downloaded from the visited website; packet sniffers like Etherea to capture and analyze the data exchanged among the different computers in the network. The second half of the paper presents a survey of different IP traceback techniques like packet marking that help a forensic investigator to identify the true sources of the attacking IP packets. We also discuss the use of Honeypots and Honeynets that gather intelligence about the enemy and the tools and tactics of network intruders. Comment: 12Pages
  04/2010;
• Article: Tools and techniques for Network Forensics

  Natarajan Meghanathan, Sumanth Reddy Allam, Loretta A. Moore
  CoRR. 01/2010; abs/1004.0570.
• Source

  Available from: arxiv.org

  Article: TOOLS AND TECHNIQUES FOR NETWORK FORENSICS

  Meghanathan Natarajan, Sumanth Reddy Allam, Loretta A. Moore
  [show abstract] [hide abstract]
  ABSTRACT: Network forensics deals with the capture, recording and analysis of network events in order to discover evidential information about the source of security attacks in a court of law. This paper discusses thedifferent tools and techniques available to conduct network forensics. Some of the tools discussed include: eMailTrackerPro – to identify the physical location of an email sender; Web Historian – to find the duration of each visit and the files uploaded and downloaded from the visited website; packet sniffers like Ethereal – to capture and analyze the data exchanged among the different computers in the network. The second half of the paper presents a survey of different IP traceback techniques like packet marking that help a forensic investigator to identify the true sources of the attacking IP packets. We also discuss the use of Honeypots and Honeynets that gather intelligence about the enemy and the tools and tactics ofnetwork intruders.
  International Journal of Network Security & Its Applications. 01/2009;