Intrusion Prevention and Active Response
Deploying Network and Host IPS
Published on 4. March 2005
550 pages
978-0-08-048929-2 (ISBN)
Description
Intrusion Prevention and Active Response provides an introduction to the field of Intrusion Prevention and provides detailed information on various IPS methods and technologies. Specific methods are covered in depth, including both network and host IPS and response technologies such as port deactivation, firewall/router network layer ACL modification, session sniping, outright application layer data modification, system call interception, and application shims.
- Corporate spending for Intrusion Prevention systems increased dramatically by 11% in the last quarter of 2004 alone
- Lead author, Michael Rash, is well respected in the IPS Community, having authored FWSnort, which greatly enhances the intrusion prevention capabilities of the market-leading Snort IDS
More details
Other editions
Additional editions
Michael Rash | Angela Orebaugh | Graham Clark
Intrusion Prevention and Active Response
Deploying Network and Host IPS
Book
03/2005
Syngress
€52.00
No shipping information available
Persons
Angela Orebaugh (, GCIA, GCFW, GCIH, GSEC, CCNA) is a Senior Scientist in the Advanced Technology Research Center of Sytex, Inc. where she works with a specialized team to advance the state of the art in information systems security. She has over 10 years experience in information technology, with a focus on perimeter defense, secure network design, vulnerability discovery, penetration testing, and intrusion detection systems. She has a Masters in Computer Science, and is currently pursuing her Ph.D. with a concentration in Information Security at George Mason University.
Content
Introduction to Intrusion Prevention ; False Positives and Real Damage ; Data Link IPS ; Network IPS ; Transport IPS ; Application Layer Responses ; Host IPS Actions ; Hybrid IPS Actions ; Network Inline Data Modification
