Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Hands-On Network Forensics

You're reading from   Hands-On Network Forensics Investigate network attacks and find evidence using common network forensic tools

Arrow left icon
Product type Paperback
Published in Mar 2019
Publisher
ISBN-13 9781789344523
Length 358 pages
Edition 1st Edition
Languages
Concepts
Arrow right icon
Author (1):
Arrow left icon
Nipun Jaswal Nipun Jaswal
Author Profile Icon Nipun Jaswal
Nipun Jaswal
Arrow right icon
View More author details
Toc

Table of Contents (16) Chapters Close

Preface 1. Section 1: Obtaining the Evidence FREE CHAPTER
2. Introducing Network Forensics 3. Technical Concepts and Acquiring Evidence 4. Section 2: The Key Concepts
5. Deep Packet Inspection 6. Statistical Flow Analysis 7. Combatting Tunneling and Encryption 8. Section 3: Conducting Network Forensics
9. Investigating Good, Known, and Ugly Malware 10. Investigating C2 Servers 11. Investigating and Analyzing Logs 12. WLAN Forensics 13. Automated Evidence Aggregation and Analysis 14. Other Books You May Enjoy 15. Assessments

The inter-networking refresher

The open systems interconnection (OSI), model is built for the network based digital communication and keeps flexibility and modularity in mind. The OSI model is a seven-layered design, starting from the physical layer and ending at the application layer. A high-level diagram of the OSI layers can be viewed as follows:

The seven layers are responsible for a variety of different communication standards as:

  • At the physical layer, we are generally speaking about the cables, hubs, optical fibers, coaxial cables, and connectors, which are the actual physical carriers of data, and the data is represented in bits.
  • At the data-link layer, we have 802.11, WI-MAX, ATM, Ethernet, Token Ring, PPTP, L2TP, and much more, which enables establishment and termination between the nodes. The data is represented in frames.
  • At the network layer, we have the IPv4...
lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $19.99/month. Cancel anytime
Banner background image