Security Monitoring: Proven Methods for Incident Detection on Enterprise Networks (O'Reilly Ser.) - Softcover

Security Monitoring : Proven Methods for Incident Detection on Enterprise Networks

Taschenbuch. Zustand: Neu. Neuware - How does your system stand up against today's sophisticated security threats, especially those involving data theft With this book, security experts from Cisco Systems demonstrate how you can protect your network effectively - first by determining which assets you need to monitor closely, and then developing targeted strategies and user policies to protect those vital areas.Security Monitoring offers six steps to improve network monitoring, based on the authors' presentation at the Forum for Incident Response and Security Teams (FIRST) conference in 2007. By following these security steps, you will:Develop Policies: define the rules, regulations, criteria for monitoring your networkKnow Your Network: build knowledge of your infrastructure with network telemetrySelect Your Targets: determine the subset of infrastructure to focus monitoring effortsChoose Event Sources: identify what can and should be collected from each typeFeed and Tune: begin collecting data, and tune systems using contextual informationMaintain and Troubleshoot: keep your security monitoring event sources onlineTo help you understand this approach, each chapter in Security Monitoring shows how a fictional cellular phone service implements the frameworks and methods presented, with diagrams and explanations of how the company performs security monitoring.If you implement just a few of the recommendations in this book, you'll improve your monitoring and incident response capabilities significantly. If you implement all of the recommendations, you'll have a world-class security monitoring capability. Artikel-Nr. 9780596518165

Verkäufer kontaktieren