Overcome Your Fastest-Growing Security Problem: Internal, Client-Based Attacks Today's most devastating security attacks are launched from within the company, by intruders who have compromised your users' Web browsers, e-mail and chat clients, and other Internet-connected software. Hardening your network perimeter won't solve this problem. You must systematically protect client software and monitor the traffic it generates. Extrusion Detection is a comprehensive guide to preventing, detecting, and mitigating security breaches from the inside out. Top security consultant Richard Bejtlich offers clear, easy-to-understand explanations of today's client-based threats and effective, step-by-step solutions, demonstrated against real traffic and data. You will learn how to assess threats from internal clients, instrument networks to detect anomalies in outgoing traffic, architect networks to resist internal attacks, and respond effectively when attacks occur. Bejtlich's The Tao of Network Security Monitoring earned acclaim as the definitive guide to overcoming external threats. Now, in Extrusion Detection, he brings the same level of insight to defending against today's rapidly emerging internal threats. Whether you're an architect, analyst, engineer, administrator, or IT manager, you face a new generation of security risks. Get this book and protect yourself. Coverage includes * Architecting defensible networks with pervasive awareness: theory, techniques, and tools * Defending against malicious sites, Internet Explorer exploitations, bots, Trojans, worms, and more * Dissecting session and full-content data to reveal unauthorized activity * Implementing effective Layer 3 network access control * Responding to internal attacks, including step-by-step network forensics * Assessing your network's current ability to resist internal attacks * Setting reasonable corporate access policies * Detailed case studies, including the discovery of internal and IRC-based bot nets * Advanced extrusion detection: from data collection to host and vulnerability enumeration About the Web Site Get book updates and network security news at Richard Bejtlich's popular blog, taosecurity.blogspot.com, and his Web site, www.bejtlich.net.About the Author:
Richard Bejtlich is founder of TaoSecurity, a company that helps clients detect, contain, and remediate intrusions using Network Security Monitoring (NSM) principles. He was formerly a principal consultant at Foundstone--performing incident response, emergency NSM, and security research and training--and created NSM operations for ManTech International Corporation and Ball Aerospace & Technologies Corporation. For three years, Bejtlich defended U.S. information assets as a captain in the Air Force Computer Emergency Response Team (AFCERT). Formally trained as an intelligence officer, he is a graduate of Harvard University and of the U.S. Air Force Academy. He has authored or coauthored several security books, including The Tao of Network Security Monitoring (Addison-Wesley, 2004).
"Sobre este título" puede pertenecer a otra edición de este libro.
Descripción Pearson P T R, 2005. PAP. Estado de conservación: New. New Book. Shipped from UK within 10 to 14 business days. Established seller since 2000. Nº de ref. de la librería PJ-9780321349965
Descripción Prentice Hall. Estado de conservación: New. Brand New. Nº de ref. de la librería 0321349962
Descripción Addison-Wesley Professional, 2005. Paperback. Estado de conservación: New. book. Nº de ref. de la librería 0321349962
Descripción Addison-Wesley Professional, 2005. Paperback. Estado de conservación: New. Nº de ref. de la librería DADAX0321349962
Descripción Addison-Wesley Professional, 2005. Estado de conservación: New. Brand new! Please provide a physical shipping address. Nº de ref. de la librería 9780321349965
Descripción Addison-Wesley Professional. PAPERBACK. Estado de conservación: New. 0321349962 BRAND NEW W/FAST SHIPPING! This item is: Extrusion Detection: Security Monitoring for Internal Intrusions, 1st Ed., 2006, by Bejtlich, Richard; FORMAT: Paperback; ISBN: 9780321349965. Choose Expedited for fastest shipping! Our 98%+ rating proves our commitment! We cannot ship to PO Boxes/APO address. To avoid ordering the wrong item, please check your item's ISBN number!. Nº de ref. de la librería P9780321349965
Descripción Addison-Wesley, 2005. Paperback. Estado de conservación: Brand New. new title edition. 416 pages. 9.00x6.75x1.00 inches. In Stock. Nº de ref. de la librería zk0321349962
Descripción Addison-Wesley Professional, 2005. Paperback. Estado de conservación: New. Nº de ref. de la librería P110321349962
Descripción Estado de conservación: Brand New. Book Condition: Brand New. Nº de ref. de la librería 97803213499651.0