The Tao of Network Security Monitoring
Subtitle: Beyond Intrusion Detection
Publisher: Addison-Wesley Professional
Published: July 12, 2004
Language: eng
Format: Paperback
Number of pages: 832
ISBN-13: 9780321246776
Subjects: Network security; Computer Data Security; Computer Network Management; Computers; Computer Bks - General Information; Computers - Computer Security; Computer Books: General; Security; Security - General; Computers / Internet / Security; Computer networks; Security measures
Table of contents: title: Foreword
pagenum: xvii; title: Preface
pagenum: xix; title: About the Author
pagenum: xxxi; title: About the Contributors
pagenum: xxxiii; label: Part I
pagenum: 1
title: Introduction to Network Security Monitoring; label: Chapter 1
pagenum: 3
title: The Security Process; label: Chapter 2
pagenum: 25
title: What is Network Security Monitoring?; label: Chapter 3
pagenum: 45
title: Deployment Considerations; label: Part II
pagenum: 103
title: Network Security Monitoring Products; label: Chapter 4
pagenum: 105
title: The Reference Intrusion Model; label: Chapter 5
pagenum: 119
title: Full Content Data; label: Chapter 6
pagenum: 173
title: Additional Data Analysis; label: Chapter 7
pagenum: 211
title: Session Data; label: Chapter 8
pagenum: 247
title: Statistical Data; label: Chapter 9
pagenum: 285
title: Alert Data: Bro and Prelude; label: Chapter 10
pagenum: 317
title: Alert Data: NSM Using Sguil; label: Part III
pagenum: 345
title: Network Security Monitoring Processes; label: Chapter 11
pagenum: 347
title: Best Practices; label: Chapter 12
pagenum: 385
title: Case Studies for Managers; label: Part IV
pagenum: 403
title: Network Security Monitoring People; label: Chapter 13
pagenum: 405
title: Analyst Training Program; label: Chapter 14
pagenum: 433
title: Discovering DNS; label: Chapter 15
pagenum: 473
title: Harnessing the Power of Session Data; label: Chapter 16
pagenum: 491
title: Packet Monkey Heaven; label: Part V
pagenum: 519
title: The Intruder versus Network Security Monitoring; label: Chapter 17
pagenum: 521
title: Tools for Attacking Network Security Monitoring; label: Chapter 18
pagenum: 583
title: Tactics for Attacking Network Security Monitoring; label: Epilogue
pagenum: 651
title: The Future of Network Security Monitoring; label: Part VI
pagenum: 661
title: Appendixes; label: Appendix A
pagenum: 661
title: Protocol Header Reference; label: Appendix B
pagenum: 685
title: Intellectual History of Network Security Monitoring; label: Appendix C
pagenum: 757
title: Protocol Anomaly Detection; label: Index
pagenum: 765