Network Forensics Method Based on Evidence Graph and Vulnerability Reasoning
Causality reasoning about network events for detecting stealthy malware activities