Intrusion Signatures and Analysis (Landmark) by Matt Fearnow  (8)
$26.39
|
The Tao of Network Security Monitoring: Beyond Intrusion Detection by Richard Bejtlich  (20)
$40.94
|
Inside Network Perimeter Security (2nd Edition) (Inside) by Stephen Northcutt  (7)
$34.99
|
Network Security Architectures (Networking Technology) by Sean Convery (4)
$52.00
|
(43)
$37.79
|
This item is not eligible for Amazon Prime, but millions of other items are. Join Amazon Prime today. Already a member? Sign in.
|
|||||||||
Customers Who Bought This Item Also Bought
Editorial Reviews
Amazon.com
Network Intrusion Detection: An Analyst's Handbook explains some of what you need to know to prevent unauthorized accesses of your networked computers and minimize the damage intruders can do. It emphasizes, though, proven techniques for recognizing attacks while they're underway. Without placing too much emphasis (or blame, for that matter) on any operating system or other software product, author Stephen Northcutt explains ways to spot suspicious behavior and deal with it, both automatically and manually.
Network Intrusion Detection: An Analyst's Handbook explains some of what you need to know to prevent unauthorized accesses of your networked computers and minimize the damage intruders can do. It emphasizes, though, proven techniques for recognizing attacks while they're underway. Without placing too much emphasis (or blame, for that matter) on any operating system or other software product, author Stephen Northcutt explains ways to spot suspicious behavior and deal with it, both automatically and manually.
The case studies, large and small, are the best part of this book. Northcutt opens with a technical brief on the methods used by Kevin Mitnick in his attack upon Tsutomu Shimomura's server. In documenting that famous attack, Northcutt explains SYN flooding and TCP hijacking with clarity and detail: readers get a precise picture of what Mitnick did and how Shimomura's machine reacted. A former security expert for the U.S. Department of Defense, Northcutt explains how a system administrator would detect and defeat an attack like Mitnick's. Another case study appears later in the book, this one in the form of a line-by-line analysis of a .history file that shows how a bad guy with root privileges attacked a Domain Name System (DNS) server. Reading Northcutt's analysis is like reading a play-by-play account of a football match. Network Intrusion Detection is one of the most readable technical books around. --David Wall
Topics covered: Catching intruders in the act by recognizing the characteristics of various kinds of attacks in real time, both manually and with the use of filters and other automated systems; techniques for identifying security weaknesses and minimizing false security alarms.
Book Description
Written to be both a training aid and a technical reference for intrusion detection analysts, Northcutt's book contains unparalleled, practicalexperience that can't be found anywhere else. With detailed explanations and illustrative examples from his own career, Northcutt covers the topic completely, from detect evaluation, analysis, and situation handling, through the theories involved in understanding hackers, intelligence gathering, and coordinated attacks, to an arsenal of preventive and aggressive security measures. Ideal for the serious security analyst, Network Intrusion Detection: An Analyst's Handbook is the tool that puts you in full control of your network's security.
See all Editorial Reviews
Product Details
Would you like to update product info or give feedback on images?
|
Citations
(learn more)
47
books
cite this book:
- Intrusion Signatures and Analysis (Landmark) by Matt Fearnow in Front Matter (1), Front Matter (2), and Back Matter
- Security Fundamentals for E-Commerce (Artech House Computer Security Series. New Series) by Vesna Hassler on page 218, and page 282