Chapter 9

Network forensics

Abstract

This chapter explores network fundamentals, common hacks and attacks, and incident response. It covers both network security and investigative tools. Network evidence and challenges are also addressed.

Keywords

Client/server network
Local Area Network
LAN
Wide Area Network
WAN
Packet switching
Intrusion Detection System
IDS
Distributed Denial of Service
DDoS
Man-in-the-Middle-Attack
Social Engineering
Sniffer
Firewall

“Detection is, or ought to be, an exact science …”

—Sherlock Holmes in the Sign of the Four

Information in this chapter
Networking Fundamentals
Types of Networks
Network Security Tools
Network Attacks
Incident Response
Network Evidence and Investigations

Introduction

Get The Basics of Digital Forensics, 2nd Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.