1 option
Applied network security monitoring : collection, detection, and analysis / Chris Sanders, Jason Smith ; David J. Bianco, technical editor.
- Format:
- Book
- Author/Creator:
- Sanders, Chris, 1986-
- Smith, Jason (Adjunct associate professor), author.
- Series:
- Gale eBooks
- Language:
- English
- Subjects (All):
- Computer security.
- Computer networks--Security measures.
- Computer networks.
- Open source intelligence.
- Physical Description:
- 1 online resource (xxiv, 472 pages) : illustrations (some color)
- Edition:
- 1st edition
- Place of Publication:
- Waltham, MA : Syngress, 2014.
- Language Note:
- English
- System Details:
- text file
- Summary:
- Applied Network Security Monitoring is the essential guide to becoming an NSM analyst from the ground up. This book takes a fundamental approach to NSM, complete with dozens of real-world examples that teach you the key concepts of NSM. Network security monitoring is based on the principle that prevention eventually fails. In the current threat landscape, no matter how much you try, motivated attackers will eventually find their way into your network. At that point, it is your ability to detect and respond to that intrusion that can be the difference between a small incident
- Contents:
- Machine generated contents note: Introduction to NSM Driving Data Collection The Sensor Platform Full Packet Capture Data Session Data Protocol Metadata Statistical Data Indicators of Compromise Target-Based Detection Signature-Based Detection with Snort Signature-Based Detection with Suricata Anomaly-Based Detection with Bro Early Warning AS&W with Honeypots Packet Analysis Friendly Intelligence Hostile Intelligence Differential Diagnosis of NSM Events Incident Morbidity and Mortality Malware Analysis for NSM.
- Notes:
- Description based upon print version of record.
- Includes bibliographical references and index.
- Description based on print version record.
- Other Format:
- Print version: Sanders, Chris Applied Network Security Monitoring
- ISBN:
- 9780124172166
- 0124172164
- OCLC:
- 864745978
The Penn Libraries is committed to describing library materials using current, accurate, and responsible language. If you discover outdated or inaccurate language, please fill out this feedback form to report it and suggest alternative language.