New payload attribution methods for network forensic investigations.

Miroslav Ponec Paul Giura Joel Wein Hervé Brönnimann New payload attribution methods for network forensic investigations. 2010 13 ACM Trans. Inf. Syst. Secur. 2 http://doi.acm.org/10.1145/1698750.1698755 db/journals/tissec/tissec13.html#PonecGWB10