Intrusion Signatures and Analysis Stephen Northcutt, Mark Cooper, Matt Fearnow, Karen Frederick

Intrusion Signatures and Analysis opens with an introduction into the format of some of the more common sensors and then begins a tutorial into the unique format of the signatures and analyses used in the book. After a challenging four-chapter review, the reader finds page after page of signatures, in order by categories. Then the content digs right into reaction and responses covering how sometimes what you see isn¿t always what is happening. The book also covers how analysts can spend time chasing after false positives. Also included is a section on how attacks have shut down the networks and web sites of Yahoo, and E-bay and what those attacks looked like. Readers will also find review questions with answers throughout the book, to be surethey comprehend the traces and material that has been covered. Это и многое другое вы найдете в книге Intrusion Signatures and Analysis (Mark Cooper, Stephen Northcutt, Matt Fearnow, Karen Frederick)