E-Book, Englisch, 550 Seiten, Web PDF
Rash / Orebaugh / Clark Intrusion Prevention and Active Response
1. Auflage 2005
ISBN: 978-0-08-048929-2
Verlag: Elsevier Science & Techn.
Format: PDF
Kopierschutz: 1 - PDF Watermark
Deploying Network and Host IPS
E-Book, Englisch, 550 Seiten, Web PDF
ISBN: 978-0-08-048929-2
Verlag: Elsevier Science & Techn.
Format: PDF
Kopierschutz: 1 - PDF Watermark
This book provides an introduction to the field of Intrusion Prevention and provides detailed information on various IPS methods and technologies. Specific methods are covered in depth, including both network and host IPS and response technologies such as port deactivation, firewall/router network layer ACL modification, session sniping, outright application layer data modification, system call interception, and application shims.
* Corporate spending for Intrusion Prevention systems increased dramatically by 11% in the last quarter of 2004 alone
* Lead author, Michael Rash, is well respected in the IPS Community, having authored FWSnort, which greatly enhances the intrusion prevention capabilities of the market-leading Snort IDS
Autoren/Hrsg.
Weitere Infos & Material
1;Cover;1
2;Contents;12
3;Foreword;20
4;Intrusion Prevention and Active Response;22
5;Packet Inspection for Intrusion Analysis;50
6;False Positives and Real Damage;94
7;Four Layers of IPS Actions;126
8;Network Inline Data Modification;154
9;Protecting Your Host Through the Operating System;214
10;IPS at the Application Layer;278
11;Deploying Open Source IPS Solutions;316
12;IPS Evasion Techniques (Network);388
13;Index;410
14;Related Titles;425
