This manual, "Network Security Through Data Analysis: Building Situational Awareness" by Michael Collins, published on February 10, 2014, is a comprehensive guide for network administrators and operational security analysts. It focuses on advanced techniques for network security analysis, providing insights into situational awareness, intrusion detection, and logfile analysis. The content covers the utilization of network, host, and service sensors for data collection, and explores various data storage technologies including relational databases, graph databases, Redis, and Hadoop.
The purpose of this manual is to equip readers with the knowledge and tools necessary for effective network security. It details analytic techniques such as Exploratory Data Analysis (EDA), graph analysis, traffic analysis, network mapping, and inventory management. Furthermore, it addresses detection capabilities for unusual phenomena, significant network structure identification, traffic crossing service ports, and the analysis of traffic volume and behavior for threats like DDoS attacks and database raids. A familiarity with scripting is recommended for readers.
Traditional intrusion detection and logfile analysis are no longer enough to protect today’s complex networks. In this practical guide, security researcher Michael Collins shows you several techniques and tools for collecting and analyzing network traffic datasets. You’ll understand how your network is used, and what actions are necessary to protect and improve it.
Divided into three sections, this book examines the process of collecting and organizing data, various tools for analysis, and several different analytic scenarios and techniques. It’s ideal for network administrators and operational security analysts familiar with scripting.
- Explore network, host, and service sensors for capturing security data
- Store data traffic with relational databases, graph databases, Redis, and Hadoop
- Use SiLK, the R language, and other tools for analysis and visualization
- Detect unusual phenomena through Exploratory Data Analysis (EDA)
- Identify significant structures in networks with graph analysis
- Determine the traffic that’s crossing service ports in a network
- Examine traffic volume and behavior to spot DDoS and database raids
- Get a step-by-step process for network mapping and inventory
Author: Collins, Michael
Publisher: O'Reilly Media
Illustration: N
Language: ENG
Title: Network Security Through Data Analysis: Building Situational Awareness
Pages: 00348 (Unencrypted EPUB) / 00348 (Encrypted EPUB)
On Sale: 2014-02-10
SKU-13/ISBN: 9781449357900
Category: Computers : Networking - Security
Traditional intrusion detection and logfile analysis are no longer enough to protect today’s complex networks. In this practical guide, security researcher Michael Collins shows you several techniques and tools for collecting and analyzing network traffic datasets. You’ll understand how your network is used, and what actions are necessary to protect and improve it.
Divided into three sections, this book examines the process of collecting and organizing data, various tools for analysis, and several different analytic scenarios and techniques. It’s ideal for network administrators and operational security analysts familiar with scripting.
- Explore network, host, and service sensors for capturing security data
- Store data traffic with relational databases, graph databases, Redis, and Hadoop
- Use SiLK, the R language, and other tools for analysis and visualization
- Detect unusual phenomena through Exploratory Data Analysis (EDA)
- Identify significant structures in networks with graph analysis
- Determine the traffic that’s crossing service ports in a network
- Examine traffic volume and behavior to spot DDoS and database raids
- Get a step-by-step process for network mapping and inventory
Author: Collins, Michael
Publisher: O'Reilly Media
Illustration: N
Language: ENG
Title: Network Security Through Data Analysis: Building Situational Awareness
Pages: 00348 (Unencrypted EPUB) / 00348 (Encrypted EPUB)
On Sale: 2014-02-10
SKU-13/ISBN: 9781449357900
Category: Computers : Networking - Security
