The Practice of Network Security Monitoring

Network security is not simply about building impenetrable walls&#151;determined attackers <i>will</i> eventually overcome traditional defenses. The most effective computer security strategies integrate network security monitoring (NSM): the collection and analysis of data to help you detect and respond to intrusions.<br><br>In <i>The Practice of Network Security Monitoring</i> Mandiant CSO Richard Bejtlich shows you how to use NSM to add a robust layer of protection around your networks&#151;no prior experience required. To help you avoid costly and inflexible solutions he teaches you how to deploy build and run an NSM operation using open source software and vendor-neutral tools.<br><br>You'll learn how to:<br>&#150;Determine where to deploy NSM platforms and size them for the monitored networks<br>&#150;Deploy stand-alone or distributed NSM installations<br>&#150;Use command line and graphical packet analysis tools and NSM consoles<br>&#150;Interpret network evidence from server-side and client-side intrusions<br>&#150;Integrate threat intelligence into NSM software to identify sophisticated adversaries<br><br>There&#146;s no foolproof way to keep attackers out of your network. But when they get in you&#146;ll be prepared. <i>The Practice of Network Security Monitoring</i> will show you how to build a security net to detect contain and control them. Attacks are inevitable but losing sensitive data shouldn't be.