We see that javascript is disabled or not supported by your browser - javascript is needed for important actions on the site. Read more

What's New - Home - Login

Member $avings: $81,565,617.05 | Books Available: 796,005 | Members Online: 189

Swap Used Books - Buy New Books at Great Prices!

How To Swap Books Sign Up Search submenu

PBS Market (New Books)

Gift Buying Guide

Book Browser Advanced Search Books Posted Today Member Book Reviews Award Winning Books NYT Best Sellers Amazon Best Sellers Most Traveled Copies Club Wish List

Discussion Forums Book Lists

Club Lists My Book Lists My Watched Lists Create a List

Blog Donations

School Donation Program In Memory of... Military Donation Program Friends of PBS

Box-O-Books Maps The Eclectic Pen Fun Stuff

20 Questions Sudoku Bookmark Creator

Top 100

Requests Posts Swappers Referrers Reviewers

Pulse of PBS Spread The Word

Invite Friends Bookmarks Facebook Page Facebook App More Ways...

Photo Gallery Recipes Club Tag Cloud Member Testimonials

Help Center submenu

How To Swap Books Browse Help Docs Ask the Librarian PBS Member Icons Live Help

Kiosk

PBS Market (New Books) Go Shopping Buy Credits Buy PBS Money Upgrade Membership Gift Certificates Transfer Credits

Need Help?

Search - Host Integrity Monitoring Using Osiris and Samhain

Host Integrity Monitoring Using Osiris and Samhain
Author: Brian Wotring, Bruce Potter, Marcus Ranum

Your IDS Just Detected an Attack: Was it Successful? This book is about one of the most crucial aspects of system and security management: host integrity protection. Fundamentally, host integrity protection is all about understanding the changes that occur on your system--friendly or hostile, deliberate or accidental--and understanding... more » the impact of those changes. In other words, it's change control in a potentially hostile environment. Best of all, this book is written by Brian Wotring, who has designed and deployed host integrity monitoring systems, used them, and relied on their results. It's hard to overstate the value of such experience. Books like the one you're holding are the survival kits for the future of computing. They're full of the important clues that you're going to need if you want to be one of the survivors instead of the statistics. --From the Foreword by Marcus J. Ranum

Detect Successful Attacks Determine exactly which attacks successfully compromised your host environment.
Download and Run Invaluable Scripts Use real-world scripts and configurations, which have been successfully deployed in enterprise host integrity monitoring solutions.
Perform Damage Assessment Understand the extent to which a host was compromised, and learn exactly how the attacker penetrated your defenses.
Reduce False Positives Learn how to dramatically reduce false positives, which can obfuscate your valuable, legitimate results.
Monitor Your Entire Environment Develop a solution to monitor files, users and groups, the kernel, open network ports, privileged executables, and other runtime elements.
Learn the Importance of Proper Planning Gain insight into successful planning, deployment, and administration of a working host integrity monitoring solution.
Master Defensive Techniques Learn how to mitigate attacks on the host integrity monitoring system itself.
Monitor Log Files and Create Notifications Use Swatch to monitor Osiris and Samhain log files, and create custom notification messages.
Establish Audit Trails Create trusted audit trails of activity that can prove invaluable in forensic investigations.

Your Solutions Membership Gives You Access to: A comprehensive FAQ page that consolidates all of the key points of this book into an easy-to-search Web page "From the Author" Forum where the authors post timely updates and links to related sites Custom, working scripts from the book. Downloadable chapters from these best-selling books:

Snort 2.1 Intrusion Detection, Second Edition
Ethereal Packet Sniffing
Nessus Network Auditing
Microsoft Log Parser Toolkit

TOC Chapter 1 Host Integrity Chapter 2 Understanding the Terrain Chapter 3 Understanding Threats Chapter 4 Planning Chapter 5 Host Integrity Monitoring with Open Source Tools Chapter 6 Osiris Chapter 7 Samhain Chapter 8 Log Monitoring and Response Chapter 9 Advanced Strategies Appendix A Monitoring Linksys Devices Appendix B Extending Osiris and Samhain with Modules Appendix C Further Reading

ISBN-13: 9781597490184
ISBN-10: 1597490180
Publication Date: 6/1/2005
Pages: 450
Edition: 1
Rating:

0 stars, based on 0 rating

Publisher: Syngress
Book Type: Paperback
Members Wishing: 0
Reviews: Amazon | Write a Review

Genres:

Back to the Top ↑

Search - Host Integrity Monitoring Using Osiris and Samhain

Loading...