Introduction

Reaction is what differentiates a traditional security program from a program that employs Advanced Persistent Security. More specifically, it is an appropriate reaction strategy that creates Advanced Persistent Security. It allows the program to adapt to attacks, incidents, and changing circumstances.
Implementing such a reaction strategy is clearly not simple. It takes a great deal of expertise from a technical and operational perspective to implement a reaction program effectively. It must be able to take the results of detection and then use that to triage the incident and determine the appropriate way to move forward to reduce potential loss, and further use the results to improve security.
We intend to provide a foundation for ...

Get Advanced Persistent Security now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.