An intelligent analysis model for multisource volatile memory

作者：Zhang Xiaolu; Hu Liang; Song Shinan; Xie Zhenzhen; Meng Xiangyu; Zhao Kuo^*

来源：Journal of Networks, 2013, 8(9): 1943-1949.

DOI：10.4304/jnw.8.9.1943-1949

• Abstract modeling
• Distributed computing environment
• Intelligent analysis
• Multisources
• Space-time features
• Thinking process
• Volatile elements
• Volatile memory

For the rapidly development of network and distributed computing environment, it make researchers harder to do analysis examines only from one or few pieces of data source in persistent data-oriented approaches, so as the volatile memory analysis either. Therefore, mass data automatically analysis and action modeling needs to be considered for reporting entire network attack process. To model multiple volatile data sources situation can help understand and describe both thinking process of investigator and possible action step for attacker. This paper presents a Game model for multisource volatile data and applies it to main memory images analysis with the definition of space-time feature for volatile element information. Abstract modeling allows the lessons gleaned in performing intelligent analysis, evidence filing and automating presentation. Finally, a test demo based on the model is also present to illustrate the whole procedure.

• 出版日期2013