Summarizing and Searching Data in Computer Networks<br/>

Please enable javascript in your browser.

Summarizing and Searching Data in Computer Networks

589 Viewed

Type of Document: M.Sc. Thesis
Language: Farsi
Document No: 42952 (02)
University: Sharif University of Technology
Department: Mathematical Sciences
Advisor(s): Jafari, Amir; Kharrazi, Mehdi
Abstract:
Network forensic analysts employ Payload Attribution Systems (PAS) as an investigative tool. With such tool large amount of network traffic, including full packet payload, is summarized and stored. Hence an investigator could query the system for a specific string and see whether any packets transmitted previously in the network contained that specific string. Wildcards are an important type of query that allows the investigator to locate strings in the payload when only part of the string is known. In this thesis we present a new payload attribution technique, named character based bloom filter, which in addition to improving on previously proposed techniques is able to support wildcard queries.
Keywords:
Computer Networks ; Summarization ; Fingerprint ; False Positive ; Wildcard Searching

No TOC