Network Security Through Data Analysis
Regular price
€59.99
14 days return policy
Shipping & Delivery
A01=Michael S. Collins
Age Group_Uncategorized
Age Group_Uncategorized
Author_Michael S. Collins
automatic-update
Category1=Non-Fiction
Category=UNC
Category=URY
Category=UTN
COP=United States
Delivery_Delivery within 10-20 working days
eq_bestseller
eq_computing
eq_isMigrated=2
eq_nobargain
eq_non-fiction
Language_English
PA=Available
Price_€50 to €100
PS=Active
security network data analysis big data SiLK ArcSight Splunk EDA visualization intrusion detection SIM SEM SIEM
softlaunch
Product details
- ISBN 9781491962848
- Weight: 746g
- Dimensions: 182 x 232mm
- Publication Date: 25 Aug 2017
- Publisher: O'Reilly Media
- Publication City/Country: US
- Product Form: Paperback
- Language: English
Secure
checkout
Fast Shipping
Easy returns
Traditional intrusion detection and logfile analysis are no longer enough to protect today’s complex networks. In the updated second edition of this practical guide, security researcher Michael Collins shows InfoSec personnel the latest techniques and tools for collecting and analyzing network traffic datasets. You’ll understand how your network is used, and what actions are necessary to harden and defend the systems within it.
In three sections, this book examines the process of collecting and organizing data, various tools for analysis, and several different analytic scenarios and techniques. New chapters focus on active monitoring and traffic manipulation, insider threat detection, data mining, regression and machine learning, and other topics.
You’ll learn how to:
Use sensors to collect network, service, host, and active domain data
Work with the SiLK toolset, Python, and other tools and techniques for manipulating data you collect
Detect unusual phenomena through exploratory data analysis (EDA), using visualization and mathematical techniques
Analyze text data, traffic behavior, and communications mistakes
Identify significant structures in your network with graph analysis
Examine insider threat data and acquire threat intelligence
Map your network and identify significant hosts within it
Work with operations to develop defenses and analysis techniques
Michael Collins is the chief scientist for RedJack, LLC., a NetworkSecurity and Data Analysis company located in the WashingtonD.C. area. Prior to his work at RedJack, Dr. Collins was a member ofthe technical staff at the CERT/Network Situational Awareness group at Carnegie Mellon University. His primary focus is on networkinstrumentation and traffic analysis, in particular on the analysis oflarge traffic datasets.Dr. Collins graduated with a PhD in Electrical Engineering fromCarnegie Mellon University in 2008, he holds Master's and Bachelor'sDegrees from the same institution.
