PLANTEAMIENTO

COLLECTION DETECTION
DELPROBLEMA

STARS THE PROCESS OF INVESTIGATING LOGS NETWORK INFORMATION ABOUT IDENTIFIES ABNORMAL EVENTS
NETWORK DATA ILLEGAL ACTIVITIES

INCIDENT NETWORK FORENSICS PROCESS

RESPONSE

INFORMS THE SYSTEM ABOUT

ABNORMAL ACTIONS

EXAMINATION AND PRESERVATION

PRESENTATION
ANALYSIS

SHOWS ATTACK PATTERNS IN AN INTEGRATES DATA COLLECTED IN A MAINTAINS ORIGINAL NETWORK DATA
UNDERSTANDABLE MANNER DATABASE AND EXAMINES DATA AND A COPY OF DATA IS INSPECTED
COLLECTED USING DIFFERENT
STATISTICAL TOOLS