Identity Linking in Computer Networks

Libor Polčák, Ondřej Ryšavý, Petr Matoušek

2020

Abstract

Lawful interception, network forensics, and security incident investigations require cross-layer linking of identification information to link different activities of a particular person. This paper presents a model called graphs of identifiers that allows cross-layer linking of identifiers detected by various methods. Graphs of identifiers provide operations that link identifiers according to the constraints provided in the queries. The goal is to employ the linking during early stages of the network forensic investigations when an investigator searches for leads. The tools that implement the proposed model are publicly available.

Paper Citation

in Harvard Style

Polčák L., Ryšavý O. and Matoušek P. (2020). Identity Linking in Computer Networks.In Proceedings of the 17th International Joint Conference on e-Business and Telecommunications - Volume 1: DCNET, ISBN 978-989-758-445-9, pages 45-52. DOI: 10.5220/0009783500450052

in Bibtex Style

@conference{dcnet20,
author={Libor Polčák and Ondřej Ryšavý and Petr Matoušek},
title={Identity Linking in Computer Networks},
booktitle={Proceedings of the 17th International Joint Conference on e-Business and Telecommunications - Volume 1: DCNET,},
year={2020},
pages={45-52},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0009783500450052},
isbn={978-989-758-445-9},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 17th International Joint Conference on e-Business and Telecommunications - Volume 1: DCNET,
TI - Identity Linking in Computer Networks
SN - 978-989-758-445-9
AU - Polčák L.
AU - Ryšavý O.
AU - Matoušek P.
PY - 2020
SP - 45
EP - 52
DO - 10.5220/0009783500450052