- Shopping Bag ( 0 items )
From Barnes & NobleThe Barnes & Noble Review
While companies have been aggressively defending their networks against attacks from the outside, hackers have discovered they can attack from the inside, by compromising the web software your people depend upon. Firewalls won’t fix that: You need a complete strategy for protecting client software and monitoring outbound traffic. That’s what Extrusion Detection delivers.
Author Richard Bejtlich is one of the world’s most respected security consultants (and author of the widely praised Tao of Network Security Monitoring). Here, he systematically demonstrates how to build networks that can detect and control intruders launching either server-side or client-side attacks. He ranges widely, covering theory, architecture, access policies and control, data collection, even packet analysis using open source tools.
Everything comes together with two detailed case studies -- including a fascinating look at the discovery of a malicious botnet using only session data. Bill Camarda, from the February 2006 Read Only