The Practical Intrusion Detection Handbook (Hardcover)

Summary

The definitive guide to understanding, selecting, and deploying intrusion detection in the enterprise!

• Product selection, planning, and operations
• Filled with real-life cases and stories of intrusion detection systems in action
• Covers host-based and network-based intrusion detection

Foreword by Dorothy Denning, author of Cryptography and Data Security and Information Warfare and Security

Technical Edit by Ira Winkler, author of Corporate Espionage

In The Practical Intrusion Detection Handbook, one of the field's leading experts shows exactly how to detect, deter, and respond to security threats using intrusion detection systems. Using real-world case studies and practical checklists, Paul E. Proctor shows what intrusion detection software can achieve, and how to integrate it into a comprehensive strategy for protecting information and e-commerce assets. No other guide to intrusion detection offers all this:

• Practical coverage of host-based, network-based, and hybrid solutions
• Detailed selection criteria and sample RFPs
• Key factors associated with successful deployment
• Intrusion detection in action: response, surveillance, damage assessment, data forensics, and beyond
• Six myths of intrusion detection — and the realities

Whether you're a senior IT decision-maker, system administrator, or infosecurity specialist, intrusion detection is a key weapon in your security arsenal. Now, there's a start-to-finish guide to making the most of it: The Practical Intrusion Detection Handbook by Paul E. Proctor.

"Intrusion detection has gone from a theoretical concept to a practical solution, from a research dream to a major product area, from an idea worthy of study to a key element of the national plan for cyber defense. . . Nobody brought that about more than Paul Proctor. . . Paul brings his considerable knowledge and experience with commercial intrusion detection products to this first-of-a-kind book."
—From the Foreword by Dorothy Denning

《實用入侵檢測手冊》摘要

這本書是企業了解、選擇和部署入侵檢測的權威指南！內容包括產品選擇、規劃和操作，並且充滿了實際案例和入侵檢測系統的實際應用故事。書中涵蓋了基於主機和基於網絡的入侵檢測。前言由Dorothy Denning撰寫，她是《密碼學與數據安全》和《信息戰爭與安全》的作者。技術編輯由Ira Winkler負責，他是《企業間諜活動》的作者。

在《實用入侵檢測手冊》中，該領域的領先專家之一Paul E. Proctor展示了如何使用入侵檢測系統檢測、阻止和應對安全威脅。通過實際案例和實用檢查表，Proctor展示了入侵檢測軟件的功能以及如何將其整合到保護信息和電子商務資產的綜合策略中。沒有其他入侵檢測指南能提供如此全面的內容，包括主機、網絡和混合解決方案的實用覆蓋範圍、詳細的選擇標準和樣本RFP、成功部署的關鍵因素、入侵檢測的應對、監視、損害評估、數據取證等等。此外，書中還揭示了六個關於入侵檢測的迷思和現實。

無論您是高級IT決策者、系統管理員還是信息安全專家，入侵檢測都是您安全防禦武器中的關鍵部分。現在，有了Paul E. Proctor的《實用入侵檢測手冊》，您可以充分利用它。以下是來自Dorothy Denning前言中的一段引言：“入侵檢測已從理論概念發展為實際解決方案，從研究夢想成為重要的產品領域，從值得研究的想法成為國家網絡防禦計劃的關鍵元素...沒有人比Paul Proctor更能實現這一點...Paul將他對商業入侵檢測產品的豐富知識和經驗帶到了這本首部獨特的書籍中。”