Computer network forensics research workshop 2005 "defining network forensics"

Abstract

Understanding malicious behavior on networks is becoming a critical research problem. In response to this, funding agencies such as the United States National Science Foundation have begun making funding in this area a priority. As often happens in a new research field, it is difficult to get a clear picture of what has been done and what topics fall within its purview. The goal of this workshop for 2005 is to define network forensics as a discipline and how relates to existing work in forensics and network security. It is my distinct pleasure to present these proceedings. This year, we accepted six papers and one extended abstract. The scholarship described in this work spans bodies of work from taxonomy to systems engineering to case studies of investigations. Although not a part of the formal proceedings, working sessions during the workshop will focus on definitional issues. Outcomes from these working sessions will be posted on the workshop web site. As this field continues to grow, I hope that this workshop can continue to grow and mature as a venue for the discussion and presentation of network forensics research.