Tuyển tập báo cáo các nghiên cứu khoa học quốc tế ngành hóa học dành cho các bạn yêu hóa học tham khảo đề tài: Formal reconstruction of attack scenarios in mobile ad hoc and sensor networks | Rekhis and Boudriga EURASIP Journal on Wireless Communications and Networking 2011 2011 39 EURASIP Journal on . http content 20ll l 39 Wireless Communications and Networking a SpringerOpen Journal RESEARCH Open Access Formal reconstruction of attack scenarios in mobile ad hoc and sensor networks Slim Rekhis and Noureddine Boudriga Abstract Several techniques of theoretical digital investigation are presented in the literature but most of them are unsuitable to cope with attacks in wireless networks especially in Mobile Ad hoc and Sensor Networks MASNets . In this article we propose a formal approach for digital investigation of security attacks in wireless networks. We provide a model for describing attack scenarios in a wireless environment and system and network evidence generated consequently. The use of formal approaches is motivated by the need to avoid ad hoc generation of results that impedes the accuracy of analysis and integrity of investigation. We develop an inference system that integrates the two types of evidence handles incompleteness and duplication of information in them and allows possible and provable actions and attack scenarios to be generated. To illustrate the proposal we consider a case study dealing with the investigation of a remote buffer overflow attack. Keywords Digital investigation Wireless networks Formal proof Attack scenarios reconstruction Network of observation Introduction Faced with an increasing number of security incidents and their sophistication and the inability of preventive security measures to deal with all latest forms of attacks digital forensic investigation has emerged as a new research topic in information security. It is defined as the use of scientifically derived and proven methods towards the preservation collection validation identification analysis interpretation and presentation of digital evidence derived from digital sources for the purpose of facilitating or furthering the .