Network Security Through Data Analysis : Building Situational Awareness

Collins, Michael

ISBN 10: 1449357903 / ISBN 13: 9781449357900

Edité par O'Reilly Media, Incorporated, 2014

A propos de cet article

Ships from the UK. Former library book; may include library markings. Used book that is in excellent condition. May show signs of wear or have minor defects.

N° de réf. du vendeur 10061773-6

Détails bibliographiques

• Titre: Network Security Through Data Analysis : Building Situational Awareness
• Éditeur: O'Reilly Media, Incorporated
• Date de parution: 2014
• Langue: anglais
• ISBN à 10 chiffres: 1449357903
• ISBN à 13 chiffres: 9781449357900
• Reliure: Couverture souple
• État de l'article: Very Good
• Poids: 1,296 livre

A propos de ce titre

Synopsis

Traditional intrusion detection and logfile analysis are no longer enough to protect today’s complex networks. In this practical guide, security researcher Michael Collins shows you several techniques and tools for collecting and analyzing network traffic datasets. You’ll understand how your network is used, and what actions are necessary to protect and improve it.

Divided into three sections, this book examines the process of collecting and organizing data, various tools for analysis, and several different analytic scenarios and techniques. It’s ideal for network administrators and operational security analysts familiar with scripting.

• Explore network, host, and service sensors for capturing security data
• Store data traffic with relational databases, graph databases, Redis, and Hadoop
• Use SiLK, the R language, and other tools for analysis and visualization
• Detect unusual phenomena through Exploratory Data Analysis (EDA)
• Identify significant structures in networks with graph analysis
• Determine the traffic that’s crossing service ports in a network
• Examine traffic volume and behavior to spot DDoS and database raids
• Get a step-by-step process for network mapping and inventory

À propos de l?auteur

Michael Collins is the chief scientist for RedJack, LLC., a Network Security and Data Analysis company located in the Washington D.C. area. Prior to his work at RedJack, Dr. Collins was a member of the technical staff at the CERT/Network Situational Awareness group atCarnegie Mellon University. His primary focus is on network instrumentation and traffic analysis, in particular on the analysis of large traffic datasets. Dr. Collins graduated with a PhD in Electrical Engineering from Carnegie Mellon University in 2008, he holds Master's and Bachelor's Degrees from the same institution.