Intrusion Prevention Fundamentals [Paperback]

Earl Carter (Author), Jonathan Hogue (Author)

Editorial Reviews

Product Description

An introduction to network attack mitigation with IPS

 

• Where did IPS come from? How has it evolved?
• How does IPS work? What components does it have?
• What security needs can IPS address?
• Does IPS work with other security products? What is the “big picture”?
• What are the best practices related to IPS?
• How is IPS deployed, and what should be considered prior to a deployment?

 

Intrusion Prevention Fundamentals offers an introduction and in-depth overview of Intrusion Prevention Systems (IPS) technology. Using real-world scenarios and practical case studies, this book walks you through the lifecycle of an IPS project–from needs definition to deployment considerations. Implementation examples help you learn how IPS works, so you can make decisions about how and when to use the technology and understand what “flavors” of IPS are available. The book will answer questions like:

 

Whether you are evaluating IPS technologies or want to learn how to deploy and manage IPS in your network, this book is an invaluable resource for anyone who needs to know how IPS technology works, what problems it can or cannot solve, how it is deployed, and where it fits in the larger security marketplace.

 

• Understand the types, triggers, and actions of IPS signatures
• Deploy, configure, and monitor IPS activities and secure IPS communications
• Learn the capabilities, benefits, and limitations of host IPS
• Examine the inner workings of host IPS agents and management infrastructures
• Enhance your network security posture by deploying network IPS features
• Evaluate the various network IPS sensor types and management options
• Examine real-world host and network IPS deployment scenarios

 

This book is part of the Cisco Press® Fundamentals Series. Books in this series introduce networking professionals to new networking technologies, covering network topologies, example deployment concepts, protocols, and management techniques.

 

Includes a FREE 45-Day Online Edition

 

From the Back Cover

An introduction to network attack mitigation with IPS

 

• Where did IPS come from? How has it evolved?
• How does IPS work? What components does it have?
• What security needs can IPS address?
• Does IPS work with other security products? What is the “big picture”?
• What are the best practices related to IPS?
• How is IPS deployed, and what should be considered prior to a deployment?

 

Intrusion Prevention Fundamentals offers an introduction and in-depth overview of Intrusion Prevention Systems (IPS) technology. Using real-world scenarios and practical case studies, this book walks you through the lifecycle of an IPS project–from needs definition to deployment considerations. Implementation examples help you learn how IPS works, so you can make decisions about how and when to use the technology and understand what “flavors” of IPS are available. The book will answer questions like:

 

Whether you are evaluating IPS technologies or want to learn how to deploy and manage IPS in your network, this book is an invaluable resource for anyone who needs to know how IPS technology works, what problems it can or cannot solve, how it is deployed, and where it fits in the larger security marketplace.

 

• Understand the types, triggers, and actions of IPS signatures
• Deploy, configure, and monitor IPS activities and secure IPS communications
• Learn the capabilities, benefits, and limitations of host IPS
• Examine the inner workings of host IPS agents and management infrastructures
• Enhance your network security posture by deploying network IPS features
• Evaluate the various network IPS sensor types and management options
• Examine real-world host and network IPS deployment scenarios

 

This book is part of the Cisco Press® Fundamentals Series. Books in this series introduce networking professionals to new networking technologies, covering network topologies, example deployment concepts, protocols, and management techniques.

 

Includes a FREE 45-Day Online Edition

 

See all Editorial Reviews

Product Details

• Paperback: 312 pages
• Publisher: Cisco Press; 1 edition (January 28, 2006)
• Language: English
• ISBN-10: 1587052393
• ISBN-13: 978-1587052392
• Product Dimensions: 9.1 x 7.3 x 0.7 inches
• Shipping Weight: 1 pounds (View shipping rates and policies)
• Average Customer Review: 4.5 out of 5 stars  See all reviews (2 customer reviews)
• Amazon Bestsellers Rank: #1,022,099 in Books (See Top 100 in Books)

Customer Reviews

Most Helpful Customer Reviews

8 of 8 people found the following review helpful:

4.0 out of 5 stars Those are certainly fundamentals, February 1, 2006

By	Stephen Northcutt (Kauai, HI USA) - See all my reviews (REAL NAME)

This review is from: Intrusion Prevention Fundamentals (Paperback)

The book is clearly written, does not assume previous knowledge. If you need a place to start, this is a fine place to start. However, the content is very dated. Charts end at 2003, examples include Nimda, the land attack, slammer. Please don't get me wrong, those are all oldies, but goodies and each teaches an important lesson, but it would be nice to see something from 2005/2006. More effort should have been invested in a discussion on "zero day" attacks, the authors mention attacks may occur that have not been seen in the wild, but do not offer stategies for this. Since "zero day" attacks are not uncommon these days, the issue must be considered and addressed.

The last one third of the book includes the Cisco specifics, e.g. Cisco Security Agent, Policy Feature Card, etc that you expect to see in a Ciscopress book. I enjoyed this part of the book immensely. If you are a manager of a Cisco shop and want to know that you have implemented defense in depth well, this is a great discussion. If you are considering the Cisco product line, this will be truly helpful for you, the authors don't sell, but they lay out how to implement a number of the Cisco security tools in a clear, concise, complete and accurate manner.

5.0 out of 5 stars Cisco Centric, but a Very Good Overview, March 9, 2006

By	John Matlock "Gunny" (Winnemucca, NV) - See all my reviews (REAL NAME)

This review is from: Intrusion Prevention Fundamentals (Paperback)

It's hard to imagine a system today that isn't connected to the outside world. And with this connection comes (at no extra charge) a way for the bad guys to get access to your data. And unlike our normal custure, there are few (if any) cops out there to do battle with the bad guys.

Unfortunately that leaves the security of your system up to you. And to help you, all kinds of products have emerged to protect your system from undesired penetration from the bad guys, be they from across the globe, or down the hall.

This book gives an overview of the whole problem from a very good description of the threats, to the general rules that any IPS system has to have. As it was written by a couple of Cisco folk, this book tends to follow Cisco concepts in software, hardware, and usage. This isn't all bad because Cisco has a good set of products in this area, arguably the most complete and best integrated together set of tools available. And if you're not using Cisco, this book will still be of use as you'll know what to look for in comparing your equipment with that from Cisco.