| Description |
1 online resource (1 volume) : illustrations |
|
text file |
| Note |
Previous edition published: 2014. |
| Bibliography |
Includes bibliographical references and index. |
| Contents |
I. Data. Organizing data: vantage, domain, action, and validity -- Vantage: understanding sensor placement in networks -- Sensors in the network domain -- Data in the service domain -- Sensors in the service domain -- Data and sensors in the host domain -- Data and sensors in the active domain -- II. Tools. Getting data in one place -- The SiLK suite -- Reference and Lookup: tools for figuring out who someone is -- III. Analytics. Exploratory data analysis and visualization -- On analyzing text -- On Fumbling -- On volume and time -- On graphs -- On insider threat -- On threat intelligence -- Application identification -- On network mapping -- On working with Ops -- Conclusions. |
| Summary |
Traditional intrusion detection and logfile analysis are no longer enough to protect today's complex networks. In the updated second edition of this practical guide, security researcher Michael Collins shows InfoSec personnel the latest techniques and tools for collecting and analyzing network traffic datasets. You'll understand how your network is used, and what actions are necessary to harden and defend the systems within it. In three sections, this book examines the process of collecting and organizing data, various tools for analysis, and several different analytic scenarios and techniques. New chapters focus on active monitoring and traffic manipulation, insider threat detection, data mining, regression and machine learning, and other topics. You'll learn how to: Use sensors to collect network, service, host, and active domain data Work with the SiLK toolset, Python, and other tools and techniques for manipulating data you collect Detect unusual phenomena through exploratory data analysis (EDA), using visualization and mathematical techniques Analyze text data, traffic behavior, and communications mistakes Identify significant structures in your network with graph analysis Examine insider threat data and acquire threat intelligence Map your network and identify significant hosts within it Work with operations to develop defenses and analysis techniques. |
| Subject |
Computer networks -- Security measures.
|
|
Communication -- Network analysis.
|
|
Réseaux d'ordinateurs -- Sécurité -- Mesures. |
|
Communication -- Analyse de réseau. |
|
Communication -- Network analysis |
|
Computer networks -- Security measures |
| Other Form: |
Print version: 1491962844 9781491962848 (OCoLC)966378503 |
| ISBN |
9781491962817 |
|
149196281X |
|
9781491962794 |
|
1491962798 |
|
1491962836 |
|
9781491962831 |
|
More Resources