Security Monitoring
(Sprache: Englisch)
How well does your enterprise stand up against today's sophisticated security threats? In this book, security experts from Cisco Systems demonstrate how to detect damaging security incidents on your global network--first by teaching you which assets you...
Leider schon ausverkauft
versandkostenfrei
Buch (Kartoniert)
43.00 €
Produktdetails
Produktinformationen zu „Security Monitoring “
How well does your enterprise stand up against today's sophisticated security threats? In this book, security experts from Cisco Systems demonstrate how to detect damaging security incidents on your global network--first by teaching you which assets you need to monitor closely, and then by helping you develop targeted strategies and pragmatic techniques to protect them.
Security Monitoring is based on the authors' years of experience conducting incident response to keep Cisco's global network secure. It offers six steps to improve network monitoring. These steps will help you:
* Develop Policies: define rules, regulations, and monitoring criteria
* Know Your Network: build knowledge of your infrastructure with network telemetry
* Select Your Targets: define the subset of infrastructure to be monitored
* Choose Event Sources: identify event types needed to discover policy violations
* Feed and Tune: collect data, generate alerts, and tune systems using contextual information
* Maintain Dependable Event Sources: prevent critical gaps in collecting and monitoring events
Security Monitoring illustrates these steps with detailed examples that will help you learn to select and deploy the best techniques for monitoring your own enterprise network.
Security Monitoring is based on the authors' years of experience conducting incident response to keep Cisco's global network secure. It offers six steps to improve network monitoring. These steps will help you:
* Develop Policies: define rules, regulations, and monitoring criteria
* Know Your Network: build knowledge of your infrastructure with network telemetry
* Select Your Targets: define the subset of infrastructure to be monitored
* Choose Event Sources: identify event types needed to discover policy violations
* Feed and Tune: collect data, generate alerts, and tune systems using contextual information
* Maintain Dependable Event Sources: prevent critical gaps in collecting and monitoring events
Security Monitoring illustrates these steps with detailed examples that will help you learn to select and deploy the best techniques for monitoring your own enterprise network.
Klappentext zu „Security Monitoring “
How does your system stand up against today's sophisticated security threats, especially those involving data theft? With this book, security experts from Cisco Systems demonstrate how you can protect your network effectively - first by determining which assets you need to monitor closely, and then developing targeted strategies and user policies to protect those vital areas.Security Monitoring offers six steps to improve network monitoring, based on the authors' presentation at the Forum for Incident Response and Security Teams (FIRST) conference in 2007. By following these security steps, you will:Develop Policies: define the rules, regulations, criteria for monitoring your network
Know Your Network: build knowledge of your infrastructure with network telemetry
Select Your Targets: determine the subset of infrastructure to focus monitoring efforts
Choose Event Sources: identify what can and should be collected from each type
Feed and Tune: begin collecting data, and tunesystems using contextual information
Maintain and Troubleshoot: keep your security monitoring event sources online
To help you understand this approach, each chapter in Security Monitoring shows how a fictional cellular phone service implements the frameworks and methods presented, with diagrams and explanations of how the company performs security monitoring.If you implement just a few of the recommendations in this book, you'll improve your monitoring and incident response capabilities significantly. If you implement all of the recommendations, you'll have a world-class security monitoring capability.
How well does your enterprise stand up against today's sophisticated security threats? With this book, security experts from Cisco Systems demonstrate how you can detect damaging security incidents on your global network -first by discovering which assets you need to monitor closely, then by helping you develop targeted strategies and pragmatic techniques to identify security incidents.
Security Monitoring offers six steps to improve network monitoring, based on the authors' years of experience conducting incident response to keep Cisco's global network secure. These steps will guide you through the following:
- Develop Policies: define the rules, regulations, and criteria against which to monitor
- Know Your Network: build knowledge of your infrastructure with network telemetry
- Select Your Targets: define the subset of infrastructure where you'll focus monitoring
- Choose Event Sources: identify the event types needed to discover policy violations
- Feed and Tune: collect data and generate alerts, tuning systems using context
- Maintain Dependable Event Sources: prevent critical gaps in your event collection and monitoring
To help you understand this framework, Security Monitoring illustrates its recommendations using a fictional mobile telephony provider. Each chapter's approach and techniques are overlaid against this fictional example with diagrams and detailed examples. These recommendations will help you select and deploy the best techniques for monitoring your own enterprise network.
Security Monitoring offers six steps to improve network monitoring, based on the authors' years of experience conducting incident response to keep Cisco's global network secure. These steps will guide you through the following:
- Develop Policies: define the rules, regulations, and criteria against which to monitor
- Know Your Network: build knowledge of your infrastructure with network telemetry
- Select Your Targets: define the subset of infrastructure where you'll focus monitoring
- Choose Event Sources: identify the event types needed to discover policy violations
- Feed and Tune: collect data and generate alerts, tuning systems using context
- Maintain Dependable Event Sources: prevent critical gaps in your event collection and monitoring
To help you understand this framework, Security Monitoring illustrates its recommendations using a fictional mobile telephony provider. Each chapter's approach and techniques are overlaid against this fictional example with diagrams and detailed examples. These recommendations will help you select and deploy the best techniques for monitoring your own enterprise network.
Autoren-Porträt von Chris Fry, Martin Nystrom
Chris Fry has been a member of the Computer Security Incident Response Team (CSIRT) at Cisco Systems, Inc for 5 years, focusing on deployment of intrusion detection, network monitoring tools, and incident investigation. He began his career at Cisco in 1997 as an IT analyst, supporting Cisco's production services. His four years as a Network Engineer in Cisco IT's internal network support organization give him valuable knowledge about and unique insight into monitoring production enterprise networks. Chris holds a BA in Corporate Financial Analysis and an MS in Information and Communication Sciences from Ball State University.Martin Nystrom is a Member of Technical Staff (MTS) for the Computer Security Incident Response Team (CSIRT) at Cisco Systems. He leads the global security monitoring team and provides guidance for incident response and security initiatives. Prior to joining Cisco's CSIRT, he was responsible for designing and consulting on secure architectures for IT projects. Martin worked as an IT architect and a Java programmer for 12 years prior, where he built his experience in the pharmaceutical and computer industries. He received a bachelor's degree from Iowa State University in 1990, a master's degree from NC State University in 2003, and his CISSP certification in 2004.He is a frequent conference speaker, and was honored on the Java One Rock Star Wall of Fame. He enjoys speaking at FIRST and Cisco Networkers conferences, and providing security guidance to customers via Cisco's Executive Briefing program.
Bibliographische Angaben
- Autoren: Chris Fry , Martin Nystrom
- 2009, 227 Seiten, mit Abbildungen, Maße: 18,2 x 23,2 cm, Kartoniert (TB), Englisch
- Verlag: O'Reilly Media
- ISBN-10: 0596518161
- ISBN-13: 9780596518165
Sprache:
Englisch
Kommentar zu "Security Monitoring"
0 Gebrauchte Artikel zu „Security Monitoring“
Zustand | Preis | Porto | Zahlung | Verkäufer | Rating |
---|
Schreiben Sie einen Kommentar zu "Security Monitoring".
Kommentar verfassen