The Tao of Network Security Monitoring: Beyond Intrusion Detection

No user reviews yet. Soon you will be able to review this book.

Check back in the near future to submit a review of this book.

• Provides information on computer network security, covering such topics as NSM operational framework and deployment, using open-source tools, session data, statistical data, Sguil, and DNS.
• This guide for network and system administrators, security managers, and software developers describes the author's approach to network security. Network security monitoring (NSM) combines auditing, vulnerability assessment, intrusion detection and prevention, and incident response to overcome the limitations of devices such as firewalls and intrusion detection systems. Security consultant Bejtlich explains how to use a variety of open-source tools to mine network traffic for data and describes best practices for evaluating monitoring vendors and deploying an NSM architecture. Tools for generating arbitrary packets, manipulating traffic, and conducting reconnaissance are also evaluated.
  more...
  Annotation ?2004 Book News, Inc., Portland, OR (booknews.com)
  less...