Question

How would you use data about network traffic to deter attacks to the network? This is a question based on computer forensics.

Answer 1

Data about network traffic can be used for performing Network Traffic Analysis .

NETWORK TRAFFIC ANALYSIS(NTA)

NTA determine network threats by analysing threats on the network level. So a specialist can detect threat and isolate the threat efficiently at the early stage and keep the network secure.

The features of NTA are:

• NTA system analyses a network in all the directions so that non of a suspicious action is unnoticed.
• The threat is detected by NTA system by using a combination of tools including machine learning, compromise indicators, behaviour analysis etc. So that an attack can be detected even after the attacker gain access to the network.
• NTA system also can ve used to investigate on previous attacks by some hypothesis which helps to isolate the flaw and make the network more secure.

NTA also helps to ensure that the network met the security guidlines. It detects attacks inside a network and also in a network perimeters.