Intrusion prevention and active response deploying network and host IPS
Title:
Intrusion prevention and active response deploying network and host IPS
Author:
Rash, Michael (Michael Brandon)
ISBN:
9781932266474
Publication Information:
Rockland, MA : Syngress ; [Sebastopol] : Distributed by O'Reilly Media in the United States and Canada, c2005.
Physical Description:
xx, 402 p. : ill. ; 24 cm.
General Note:
Includes index.
Contents:
Introduction to Intrusion Prevention ; False Positives and Real Damage ; Data Link IPS ; Network IPS ; Transport IPS ; Application Layer Responses ; Host IPS Actions ; Hybrid IPS Actions ; Network Inline Data Modification.
Abstract:
This book provides an introduction to the field of Intrusion Prevention and provides detailed information on various IPS methods and technologies. Specific methods are covered in depth, including both network and host IPS and response technologies such as port deactivation, firewall/router network layer ACL modification, session sniping, outright application layer data modification, system call interception, and application shims. * Corporate spending for Intrusion Prevention systems increased dramatically by 11% in the last quarter of 2004 alone * Lead author, Michael Rash, is well respected in the IPS Community, having authored FWSnort, which greatly enhances the intrusion prevention capabilities of the market-leading Snort IDS.
Genre:
Added Author:
Added Corporate Author:
Electronic Access:
ScienceDirect An electronic book accessible through the World Wide Web; click for information