Attack Intention Analysis Model for Network Forensics

摘要: In network forensics, attack intentions analyses play a major role to help and accelerate decision-making for apprehending the real perpetrator. fact, intention analysis is prediction factor investigators conclude case with high accuracy. However, current techniques in only focus on recognizing an alert correlation certain evidence predicting future attacks. reality, more factors should be used by come concise decision such as intention, incident path ..., etc. This paper will propose model, which reasoning of attacks under uncertainty intention. A new model introduced using combination mathematical Dempster- Shafer (D-S) theory probabilistic technique through causal predict We found that analyzing attacker’s forensic investigation agents able audit perform efficient way. Experiments were performed samples probability evaluate proposed model. Arguably, may produce clear impact investigator decision-making.