For most enterprise accounts in the market, the issue for internal Internet access by employees usually brings benefits as well as damages. Accessing the Internet conveniently will increase the productivity of an employee in terms of fast information collection and better communication with both customers and suppliers. On the other hand, the Internet is also the major reason of data leakage and employee distraction from their job. In many enterprises, minimizing the disadvantages of employee internet access while increasing productivity is a primary concern of senior management.
Internet user behavior management is not a new idea. Senior management already uses log files from network management systems or active directories for that purpose in many enterprises. Unfortunately, reports from these systems, which are not designed for such purposes, don’t usually reveal many clues about employee behavior during working hours nor specify which event is abnormal. So, year after year, the situation is still the same as the internal network infrastructure grows more complicated with business development.
Digital Forensic Technology is a new way to manage Internet user behavior. It collects all data packets, inbound or outbound, at the router side of the network, and parses and classifies these packets, reconstructs the packets back to its original contents, and stores it in a file system in a database.