Network Intrusion Analysis book cover

Network Intrusion Analysis

Methodologies, Tools, and Techniques for Incident Analysis and Response

Nearly every business depends on its network to provide information services to carry out essential activities, and network intrusion attacks have been growing increasingly frequent and severe. When network intrusions do occur, it’s imperative that a thorough and systematic analysis and investigation of the attack is conducted to determine the nature of the threat and the extent of information lost, stolen, or damaged during the attack. A thorough and timely investigation and response can serve to minimize network downtime and ensure that critical business systems are maintained in full operation.

Network Intrusion Analysis teaches the reader about the various tools and techniques to use during a network intrusion investigation. The book focuses on the methodology of an attack as well as the investigative methodology, challenges, and concerns. This is the first book that provides such a thorough analysis of network intrusion investigation and response.

Network Intrusion Analysis addresses the entire process of investigating a network intrusion by:
*Providing a step-by-step guide to the tools and techniques used in the analysis and investigation of a network intrusion.
*Providing real-world examples of network intrusions, along with associated workarounds.
*Walking you through the methodology and practical steps needed to conduct a thorough intrusion investigation and incident response, including a wealth of practical, hands-on tools for incident assessment and mitigation.

Audience
Professionals (Network Administrators, IT Managers, Security Managers, Security Analysts, Directors of Security, etc.) IT Security Professionals (Security Auditors, Security Engineers, Compliance Specialists, etc.).

Paperback, 252 Pages

Published: April 2006

Imprint: Syngress

ISBN: 978-1-59749-962-0

Reviews

  • Not only does this book teach you about network intrusion analysis, it also gives you knowledge of how intrusions are performed.  This inside information helps give you a better picture of what's really going on when you are investigating a compromise.

     -Derrick Rountree, CISSP, CASP, MCSE


Contents

  • Chapter 1. Intrusion Analysis Methodology
    Chapter 2. Intrusion Methodologies and Artifacts
    Chapter 3. Incident Response
    Chapter 4. Volatile Data Analysis
    Chapter 5. Network Analysis
    Chapter 6. Host-Based Analysis
    Chapter 7. Malware Analysis
    Chapter 8. Finalizing the Analysis

Advertisement

advert image