A Network Forensics System for Information Leak Events

摘要

The events of information leak and illegal content propagation often occur on the network. The existing techniques cannot collect sufficient evidences about users' contents to support forensics for these events. A new approach and a system are proposed which apply Chinese word segment and bloom filter to store the digest of users' contents. With this system, investigators can trace back the events that happened months or even years ago without extra cost of hardware storage.