ICAP ICAP protocol extension method for providing network forensic service of encrypted traffic network forensic device supporting it and web proxy

摘要

An ICAP protocol extension method for providing a network forensic service of encryption traffic, a network forensic device supporting the same, and a web proxy are disclosed. The network forensic device according to an embodiment includes an ICAP server for receiving an ICAP message including HTTP traffic decrypted from an ICAP client of a web proxy through an ICAP protocol and extracting HTTP traffic from the received ICAP message, Lt; RTI ID = 0.0 HTTP / RTI