Evidence Collection in Peer-to-Peer Network Investigations

Abstract : Peer-to-peer (P2P) file sharing networks are often abused to distribute content that is prohibited by law. Strong evidence of suspicion must be provided to obtain a court order to identify the location of an offender. However, initial evidence collection from a P2P network is a challenge due to the lack of a central point of control and the dynamic nature of the network. This paper describes an initial evidence collection tool for P2P network forensics. The tool performs active and passive monitoring by inserting a modified peer node in a P2P network that records relevant information about nodes that distribute contraband files. It logs data sent by suspicious nodes along with timestamps and unique identification information, which provides a strong, verifiable body of initial evidence.
Type de document :
Communication dans un congrès
Gilbert Peterson; Sujeet Shenoi. 8th International Conference on Digital Forensics (DF), Jan 2012, Pretoria, South Africa. Springer, IFIP Advances in Information and Communication Technology, AICT-383, pp.215-230, 2012, Advances in Digital Forensics VIII. 〈10.1007/978-3-642-33962-2_15〉
Liste complète des métadonnées

https://hal.inria.fr/hal-01523704
Contributeur : Hal Ifip <>
Soumis le : mardi 16 mai 2017 - 17:10:13
Dernière modification le : vendredi 1 décembre 2017 - 01:16:43
Document(s) archivé(s) le : vendredi 18 août 2017 - 00:28:56

Fichier

978-3-642-33962-2_15_Chapter.p...
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Teja Myneedu, Yong Guan. Evidence Collection in Peer-to-Peer Network Investigations. Gilbert Peterson; Sujeet Shenoi. 8th International Conference on Digital Forensics (DF), Jan 2012, Pretoria, South Africa. Springer, IFIP Advances in Information and Communication Technology, AICT-383, pp.215-230, 2012, Advances in Digital Forensics VIII. 〈10.1007/978-3-642-33962-2_15〉. 〈hal-01523704〉

Partager

Métriques

Consultations de la notice

31

Téléchargements de fichiers

108