000			02754cam a2200253 a 4500
008			100301s2009 cc a b 001 0 eng
010			_a2009502247
020			_a9780596518165 (pbk.)
020			_a0596518161 (pbk.)
035			_a(Sirsi) u4115
040			_aEG-CaNU _c EG-CaNU _d EG-CaNU
042			_ancode
082	0	4	_a005.8 _2 22
100	1		_aFry, Chris. _94601
245	1	0	_aSecurity monitoring / _c Chris Fry and Martin Nystrom.
250			_a1st ed.
260			_aBeijing ; _a Cambridge [Mass.] : _b O’Reilly, _c c2009.
300			_axv, 227 p. : _b ill. ; _c 24 cm.
504			_aIncludes bibliographical references and index.
505	0		_aPrefaceChapter 1 -- Getting StartedChapter 2 -- Implement Policies for MonitoringChapter 3 -- Know Your NetworkChapter 4 -- Select Targets for MonitoringChapter 5 -- Choose Event SourcesChapter 6 -- Feed and TuneChapter 7 -- Maintain Dependable Event SourcesChapter 8 -- Conclusion -- Keeping It RealDetailed OSU flow-tools Collector SetupSLA TemplateCalculating AvailabilityColophon
520			_aHow does your system stand up against today's sophisticated security threats, especially those involving data theft? With this book, security experts from Cisco Systems demonstrate how you can protect your network effectively — first by determining which assets you need to monitor closely, and then developing targeted strategies and user policies to protect those vital areas. Security Monitoring offers six steps to improve network monitoring, based on the authors' presentation at the Forum for Incident Response and Security Teams (FIRST) conference in 2007. By following these security steps, you will: Develop Policies: define the rules, regulations, criteria for monitoring your network Know Your Network: build knowledge of your infrastructure with network telemetry Select Your Targets: determine the subset of infrastructure to focus monitoring efforts Choose Event Sources: identify what can and should be collected from each type Feed and Tune: begin collecting data, and tune systems using contextual information Maintain and Troubleshoot: keep your security monitoring event sources online To help you understand this approach, each chapter in Security Monitoring shows how a fictional cellular phone service implements the frameworks and methods presented, with diagrams and explanations of how the company performs security monitoring. If you implement just a few of the recommendations in this book, you'll improve your monitoring and incident response capabilities significantly. If you implement all of the recommendations, you'll have a world-class security monitoring capability.
650		0	_aComputer networks _x Security measures. _98143
596			_a1
999			_c3111 _d3111