tailieunhanh - Security Monitoring: Proven Methods for Incident Detection on Enterprise Networks

How well does your enterprise stand up against today's sophisticated security threats? In this book, security experts from Cisco Systems demonstrate how to detect damaging security incidents on your global network--first by teaching you which assets you need to monitor closely, and then by helping you develop targeted strategies and pragmatic techniques to protect them. Security Monitoring is based on the authors' years of experience conducting incident response to keep Cisco's global network secure. It offers six steps to improve network monitoring. . | Proven Methods for Incident Detection on Enterprise Networks Chris Fry o REILLY Martin NyStrom Network Security o REILLY Security Monitoring How well does your enterprise stand up against today s sophisticated security threats In this book security experts from Cisco Systems demonstrate NSìKm how to detect damaging security incidents on your global network first by teaching you which assets you need to monitor closely and then by helping you develop targeted strategies and pragmatic techniques to protect them. Security Monitoring is based on the authors years of experience conducting incident response to keep Cisco s global network secure. It offers six steps to improve network monitoring these steps will help you Develop Policies define rules regulations and monitoring criteria Know Your Network build knowledge of your infrastructure with network telemetry Select Your Targets define the subset of infrastructure to be monitored Choose Event Sources identify event types needed to discover policy violations Feed and Tune collect data generate alerts and tune systems using contextual information Maintain Dependable Event Sources prevent critical gaps in collecting and monitoring events Security Monitoring illustrates these steps with detailed examples that will help you learn to select and deploy the best techniques for monitoring your own enterprise network. This hook is from practitioners for practitioners. The authors are approaching the topic of security monitoring front a very practical and hands-on perspective. Raffael Marty. chief security strategist. Security Visualization Chris Fry is a member of the Computer Security Incident Response Team CSIRT at Cisco Systems Inc. where he focuses on the deployment of intrusion detection and network-monitoring tools. Martin Nystrom is a senior security analyst with CSIRT where he leads initiatives to improve monitoring and response in information security. us CAN ISBN 978-0-596-51816-5 II .

• Hệ điều hành
• Security Monitoring
• Proven Methods
• Incident Detection
• Enterprise Networks
• Cisco Systems
• Network Devices
• computer
• businesses
• technology operational
• Cisco IOS
• Managing Cisco IOS devices
• Cisco router
• Cấu hình cisco router
• Chức năng cisco router
• Tài liệu IT
• cisco systems – inc
• Tập đoàn hệ thống Cisco
• khách hàng và đối tác
• sản phẩm và dịch vụ
• quy trình đặ hàng
• xử lý đơn hàng
• cisco exam
• cisco CSIDS
• Switching
• management network
• Cisco Switches
• PIX Firewall
• information technology
• international certification
• network cisco
• network Systems
• Cisco TelePresence System
• Linux system
• Starting a switch
• Starting a Router
• Configuring a Router
• network environment
• remove devices
• Router startup
• switch operations
• Redundant topology overview
• tree protocol overview
• Configuring a catalyst switch