Intrusion Signatures and Analysis

Know about the book -

Intrusion Signatures and Analysis is written by Stephen Northcutt and published by Sams Publishing. It's available with International Standard Book Number or ISBN identification 0735710635 (ISBN 10) and 9780735710634 (ISBN 13).

Intrusion Signatures and Analysis opens with an introduction into the format of some of the more common sensors and then begins a tutorial into the unique format of the signatures and analyses used in the book. After a challenging four-chapter review, the reader finds page after page of signatures, in order by categories. Then the content digs right into reaction and responses covering how sometimes what you see isn¿t always what is happening. The book also covers how analysts can spend time chasing after false positives. Also included is a section on how attacks have shut down the networks and web sites of Yahoo, and E-bay and what those attacks looked like. Readers will also find review questions with answers throughout the book, to be sure they comprehend the traces and material that has been covered.