From the course: Data-Driven Network Security Essentials

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Use data science to conduct a network forensics investigation

Use data science to conduct a network forensics investigation

From the course: Data-Driven Network Security Essentials

Start my 1-month free trial

Use data science to conduct a network forensics investigation

- [Instructor] Network forensics in its conventional form is not scalable enough to deal with the explosive growth of data. Think about combing though gigabytes or terabytes of network data using a popular tool like Wireshark. Doing this is simply infeasible and too time-consuming. The traditional tools may also crash and burn very quickly in such a scenario. Because of these limitations, more scalable network forensic solutions are emerging rapidly. For example, companies like Endace offer network recorders capable of capturing 100 percent of network traffic with their 192 terabytes of local storage. RSA Netwitness uses big data analytics to help investigate suspicious network activities. What's special about this product is its ability to leverage machine learning to predict the level of risks associated with a specific network security drag, which is useful for prioritization. Blue Coat is another leading company providing abilities to record, replay and analyze network traffic as…

Contents