Implementation of Network Forensics Based on Honeypot

For years, numbers of researches had addressed the serious matters of network attacks, and developed various technologies such as firewalls and intrusion detection systems to prevent the malware attacking. Currently, technologies lack any investigative features because of the network information gathering is too difficult. In this study, we designed a network forensics system, which contented honeypot system to solve the information gathering problems in the past, and distributed the honeypot system module at the same time, and even combine with the Capture-HPC program to check out the traverse web sites in search of client-side malware. Therefore, the study result can help investigators gather the evidences about the network crimes to allow criminals to be prosecuted in court.