Network forensic Log analysis

Network forensics log analysis is the capturing, recording, and analysis of network events in order to discover the source of security attacks. An investigator needs to back up these recorded data to free up recording media and to preserve the data for future analysis. An investigator needs to perform network forensics process to determine which type of an attack over a network and to trace out the culprit. In the cyber-crime world huge log data, transactional data occurs which tends to plenty of data for storage and analyze them. It is difficult for forensic investigators to keep on playing with time and to find out the clues and analyze those collected data. In network forensic analysis, it involves network traces and detection of attacks. The trace involves an Intrusion Detection System and firewall logs, logs generated by network services and applications, packet captures. Network forensics is a branch of digital forensics that focuses on the monitoring and analysis of network traffic. Unlike other areas of digital forensics that focus on stored or static data, network forensics deals with volatile and dynamic data. It generally has two uses. The first, relating to security, involves detecting anomalous traffic and identifying intrusions. The second use, relating to law enforcement according to the chain of custody rule, involves capturing and Analyzing network traffic and can include tasks such as reassembling transferred files.“Stop, look and listen” systems, in which each packet is analysed in a rudimentary way in memory and only certain information saved for current analysis. On this analysis, we propose to archive data using various tools and provide a “unified structure” based on a standard forensic process. This different unified structured IDS data are use to store and preserve in a place, which would be use to present as an evidence in court by the forensic analysis. DOI: 10.17762/ijritcc2321-8169.15053

Measurement of the lifetime and Λ\Lambda separation energy of Λ3H^{3}_{\Lambda}\mathrm H

The most precise measurements to date of the $^{3}_{\Lambda}\mathrm H$ lifetime $\tau$ and $\Lambda$ separation energy ${\rm B}_{\Lambda}$ are obtained using the data sample of Pb-Pb collisions at $\sqrt{s_{\mathrm{NN}}}=$ 5.02 TeV collected by ALICE at the LHC. The $^{3}_{\Lambda}\mathrm H$ is reconstructed via its charged two-body mesonic decay channel ($^{3}_{\Lambda}\mathrm{H} \rightarrow$ $^3$He + $\pi^-$ and the charge-conjugate process). The measured values $\tau = [253 \pm 11 \text{ (stat.)} \pm 6 \text{ (syst.)}]$ ps and ${\rm B}_{\Lambda}= [72 \pm 63 \text{ (stat.)} \pm 36 \text{ (syst.)}]$ keV are compatible with predictions from effective field theories and conclusively confirm that the $^{3}_{\Lambda}\mathrm H$ is a weakly-bound system.The most precise measurements to date of the HΛ3 lifetime τ and Λ separation energy BΛ are obtained using the data sample of Pb-Pb collisions at sNN=5.02  TeV collected by ALICE at the LHC. The HΛ3 is reconstructed via its charged two-body mesonic decay channel (HΛ3→He3+π- and the charge-conjugate process). The measured values τ=[253±11(stat)±6(syst)]  ps and BΛ=[102±63(stat)±67(syst)]  keV are compatible with predictions from effective field theories and confirm that the HΛ3 structure is consistent with a weakly bound system.The most precise measurements to date of the $^{3}_{\Lambda}\mathrm H$ lifetime $\tau$ and $\Lambda$ separation energy ${\rm B}_{\Lambda}$ are obtained using the data sample of Pb-Pb collisions at $\sqrt{s_{\mathrm{NN}}}=$ 5.02 TeV collected by ALICE at the LHC. The $^{3}_{\Lambda}\mathrm H$ is reconstructed via its charged two-body mesonic decay channel ($^{3}_{\Lambda}\mathrm{H} \rightarrow$$^3$He + $\pi^-$ and the charge-conjugate process). The measured values $\tau = [253 \pm 11 \text{ (stat.)} \pm 6 \text{ (syst.)}]$ ps and ${\rm B}_{\Lambda}= [102 \pm 63 \text{ (stat.)} \pm 67 \text{ (syst.)}]$ keV are compatible with predictions from effective field theories and confirm that the $^{3}_{\Lambda}\mathrm H$ structure is consistent with a weakly-bound system

Neutron emission in ultraperipheral Pb–Pb collisions at √sNN = 5.02 TeV

In ultraperipheral collisions (UPCs) of relativistic nuclei without overlap of nuclear densities, the two nuclei are excited by the Lorentz-contracted Coulomb fields of their collision partners. In these UPCs, the typical nuclear excitation energy is below a few tens of MeV, and a small number of nucleons are emitted in electromagnetic dissociation (EMD) of primary nuclei, in contrast to complete nuclear fragmentation in hadronic interactions. The cross sections of emission of given numbers of neutrons in UPCs of 208Pb nuclei at sNN−−−√=5.02 TeV were measured with the neutron zero degree calorimeters (ZDCs) of the ALICE detector at the LHC, exploiting a similar technique to that used in previous studies performed at sNN−−−√=2.76 TeV. In addition, the cross sections for the exclusive emission of one, two, three, four, and five forward neutrons in the EMD, not accompanied by the emission of forward protons, and thus mostly corresponding to the production of 207,206,205,204,203Pb, respectively, were measured for the first time. The predictions from the available models describe the measured cross sections well. These cross sections can be used for evaluating the impact of secondary nuclei on the LHC components, in particular, on superconducting magnets, and also provide useful input for the design of the Future Circular Collider (FCC-hh)

Measurement of the Lifetime and Λ Separation Energy of Λ3^3_\LambdaH

The most precise measurements to date of the HΛ3 lifetime τ and Λ separation energy BΛ are obtained using the data sample of Pb-Pb collisions at sNN=5.02 TeV collected by ALICE at the LHC. The HΛ3 is reconstructed via its charged two-body mesonic decay channel (HΛ3→He3+π- and the charge-conjugate process). The measured values τ=[253±11(stat)±6(syst)] ps and BΛ=[102±63(stat)±67(syst)] keV are compatible with predictions from effective field theories and confirm that the HΛ3 structure is consistent with a weakly bound system

Skewness and kurtosis of mean transverse momentum fluctuations at the LHC energies

International audienceThe first measurements of skewness and kurtosis of mean transverse momentum ($\langle p_\mathrm{T}\rangle$) fluctuations are reported in Pb$-$Pb collisions at $\sqrt{s_\mathrm{NN}}$ = 5.02 TeV, Xe$-$Xe collisions at $\sqrt{s_\mathrm{NN}}$$=$ 5.44 TeV and pp collisions at $\sqrt{s} = 5.02$ TeV using the ALICE detector. The measurements are carried out as a function of system size $\langle \mathrm{d}N_\mathrm{ch}/\mathrm{d}\eta\rangle_{|\eta|<0.5}^{1/3}$, using charged particles with transverse momentum ($p_\mathrm{T}$) and pseudorapidity ($\eta$), in the range $0.2 < p_\mathrm{T} < 3.0$ GeV/$c$ and $|\eta| < 0.8$, respectively. In Pb$-$Pb and Xe$-$Xe collisions, positive skewness is observed in the fluctuations of $\langle p_\mathrm{T}\rangle$ for all centralities, which is significantly larger than what would be expected in the scenario of independent particle emission. This positive skewness is considered a crucial consequence of the hydrodynamic evolution of the hot and dense nuclear matter created in heavy-ion collisions. Furthermore, similar observations of positive skewness for minimum bias pp collisions are also reported here. Kurtosis of $\langle p_\mathrm{T}\rangle$ fluctuations is found to be in good agreement with the kurtosis of Gaussian distribution, for most central Pb$-$Pb collisions. Hydrodynamic model calculations with MUSIC using Monte Carlo Glauber initial conditions are able to explain the measurements of both skewness and kurtosis qualitatively from semicentral to central collisions in Pb--Pb system. Color reconnection mechanism in PYTHIA8 model seems to play a pivotal role in capturing the qualitative behavior of the same measurements in pp collisions

Pseudorapidity densities of charged particles with transverse momentum thresholds in pp collisions at √ s = 5.02 and 13 TeV

The pseudorapidity density of charged particles with minimum transverse momentum (pT) thresholds of 0.15, 0.5, 1, and 2 GeV/c is measured in pp collisions at the center of mass energies of √s=5.02 and 13 TeV with the ALICE detector. The study is carried out for inelastic collisions with at least one primary charged particle having a pseudorapidity (η) within 0.8pT larger than the corresponding threshold. In addition, measurements without pT-thresholds are performed for inelastic and nonsingle-diffractive events as well as for inelastic events with at least one charged particle having |η|2GeV/c), highlighting the importance of such measurements for tuning event generators. The new measurements agree within uncertainties with results from the ATLAS and CMS experiments obtained at √s=13TeV.

Inclusive photon production at forward rapidities in pp and p–Pb collisions at √sNN = 5.02 TeV

A study of multiplicity and pseudorapidity distributions of inclusive photons measured in pp and p−Pb collisions at a center-of-mass energy per nucleon−nucleon collision of sNN−−−√=5.02 TeV using the ALICE detector in the forward pseudorapidity region 2.3<ηlab<3.9 is presented. Measurements in p−Pb collisions are reported for two beam configurations in which the directions of the proton and lead ion beam were reversed. The pseudorapidity distributions in p−Pb collisions are obtained for seven centrality classes which are defined based on different event activity estimators, i.e., the charged-particle multiplicity measured at midrapidity as well as the energy deposited in a calorimeter at beam rapidity. The inclusive photon multiplicity distributions for both pp and p−Pb collisions are described by double negative binomial distributions. The pseudorapidity distributions of inclusive photons are compared to those of charged particles at midrapidity in \pp collisions and for different centrality classes in p−Pb collisions. The results are compared to predictions from various Monte Carlo event generators. None of the generators considered in this paper reproduces the inclusive photon multiplicity distributions in the reported multiplicity range. The pseudorapidity distributions are, however, better described by the same generators

Neutral to charged kaon yield fluctuations in Pb – Pb collisions at sNN\sqrt{s_{\rm NN}} = 2.76 TeV

We present the first measurement of event-by-event fluctuations in the kaon sector in Pb – Pb collisions at $\sqrt{s_{\rm NN}}$ = 2.76 TeV with the ALICE detector at the LHC. The robust fluctuation correlator ν$_{dyn}$ is used to evaluate the magnitude of fluctuations of the relative yields of neutral and charged kaons, as well as the relative yields of charged kaons, as a function of collision centrality and selected kinematic ranges. While the correlator ν$_{dyn}$[K$^+$,K$^−$] exhibits a scaling approximately in inverse proportion of the charged particle multiplicity, ν$_{dyn}$[K$_S^0$,K$^\pm$] features a significant deviation from such scaling. Within uncertainties, the value of ν$_{dyn}$[K$_S^0$,K$^\pm$] is independent of the selected transverse momentum interval, while it exhibits a pseudorapidity dependence. The results are compared with HIJING, AMPT and EPOS–LHC predictions, and are further discussed in the context of the possible production of disoriented chiral condensates in central Pb – Pb collisions

Skewness and kurtosis of mean transverse momentum fluctuations at the LHC energies

International audienceThe first measurements of skewness and kurtosis of mean transverse momentum ($\langle p_\mathrm{T}\rangle$) fluctuations are reported in Pb$-$Pb collisions at $\sqrt{s_\mathrm{NN}}$ = 5.02 TeV, Xe$-$Xe collisions at $\sqrt{s_\mathrm{NN}}$$=$ 5.44 TeV and pp collisions at $\sqrt{s} = 5.02$ TeV using the ALICE detector. The measurements are carried out as a function of system size $\langle \mathrm{d}N_\mathrm{ch}/\mathrm{d}\eta\rangle_{|\eta|<0.5}^{1/3}$, using charged particles with transverse momentum ($p_\mathrm{T}$) and pseudorapidity ($\eta$), in the range $0.2 < p_\mathrm{T} < 3.0$ GeV/$c$ and $|\eta| < 0.8$, respectively. In Pb$-$Pb and Xe$-$Xe collisions, positive skewness is observed in the fluctuations of $\langle p_\mathrm{T}\rangle$ for all centralities, which is significantly larger than what would be expected in the scenario of independent particle emission. This positive skewness is considered a crucial consequence of the hydrodynamic evolution of the hot and dense nuclear matter created in heavy-ion collisions. Furthermore, similar observations of positive skewness for minimum bias pp collisions are also reported here. Kurtosis of $\langle p_\mathrm{T}\rangle$ fluctuations is found to be in good agreement with the kurtosis of Gaussian distribution, for most central Pb$-$Pb collisions. Hydrodynamic model calculations with MUSIC using Monte Carlo Glauber initial conditions are able to explain the measurements of both skewness and kurtosis qualitatively from semicentral to central collisions in Pb--Pb system. Color reconnection mechanism in PYTHIA8 model seems to play a pivotal role in capturing the qualitative behavior of the same measurements in pp collisions