Question

computer forensics question

how would you use data about network traffic to defer attacks to the network?

Answer 1

Network traffic data can offer valuable insights about executable files, infected sites, advertisements, USB drives, email attachments, etc.

Such data can be used to monitor and detect suspicious data sources and files and delete them. If there are certain suspicious malicious outgoing sources, one can use data encryption and other types of protection mechanisms.

A firewall can also be used. It helps in monitoring data about incoming/outgoing traffic and setting some security rules. It helps in creating a border between internal and external networks. This helps in creating solution tools for applications, mobile apps, APIs, etc.