Published Paper Details:

Abstract: Network forensic deals with the unauthorized invasion identification in a network by recording, capturing and analyzing the network traffic. It is a broader term used to identify and prevent different kinds of network threats and attacks. One such category of network attack is Denial of Service attack (DOS). This paper comprehensively examines the DOS attacks available in various datasets. The DOS attacks such as: Fraggle, smurf, NTP, UDP flood, WinNuke, TCP Syn flood, ICMP flood etc. have been extensively examined. A brief description of tools and techniques used to capture and identify these attacks and accuracy obtained is specified analytically. The authors have also made an attempt to uncover the specifics of the tools used by attackers to launch the aforementioned DOS attacks. Various defense mechanisms have been laid down in order to guard the network against DOS attacks. A framework scenario has been proposed to identify the DOS attack from the legitimate network traffic. The proposed scenario seems to accurately identify the network intrusion to a fair extent.