Web Forensics System on the Basis of Evidence Gathering with Code Injection Attack

In Web environment a major challenge facing by the law enforcing agency is to collect accurate & effective evidences from the growing volumes of crime data. In cyber space multi-step attack involve group of action where some of these actions may be legitimate but when combine together constitute malicious activity. Code injection attack is a type of multi step attack which may be carried out by potentially malicious invaders through inserting script code and SQL statement into available feedback form or Suggestion box on vulnerable web site. In this paper architecture for gathering evidence subjected to code injection attack is proposed. The work presented in this paper focuses upon the correlation of various sources of evidences, protection of evidences and preservation of evidences in cyber space.