The Tao of network security monitoring : beyond intrusion...

Notas: Incluye índicesSumario: Inside you will find in-depth information on the following áreas: - The NSM operational framework and deployement considerations. -How to use a variety of open-source tools (including Sguil, Argus and Ethereal) to mine network traffic for full content,session, statistical, and after data. - Best practices for conducting emergency NSM in an incident response scenario, evaluating monitoring vendors, and developing an MSN architecture. - Develoving and applying knowledge of weapons, tactics, telecommunications, system administration, scripting, and programing for MSN. - The best tool for generating arbitrary packets, exploiting flaws, manipulating traffic, and conducting reconnaissance. Whether you are new to network intrusión detection and incident response, or a computer-security veteran, this book will enable you to quickly develop and apply the skills needed to detect, prevent, and respond to new and emerging threats.