Book description
As recently as five years ago, securing a network meant putting in a firewall, intrusion detection system, and installing antivirus software on the desktop. Unfortunately, attackers have grown more nimble and effective, meaning that traditional security programs are no longer effective.
Today's effective cyber security programs take these best practices and overlay them with intelligence. Adding cyber threat intelligence can help security teams uncover events not detected by traditional security platforms and correlate seemingly disparate events across the network. Properly-implemented intelligence also makes the life of the security practitioner easier by helping him more effectively prioritize and respond to security incidents.
The problem with current efforts is that many security practitioners don't know how to properly implement an intelligence-led program, or are afraid that it is out of their budget. Building an Intelligence-Led Security Program is the first book to show how to implement an intelligence-led program in your enterprise on any budget. It will show you how to implement a security information a security information and event management system, collect and analyze logs, and how to practice real cyber threat intelligence. You'll learn how to understand your network in-depth so that you can protect it in the best possible way.
- Provides a roadmap and direction on how to build an intelligence-led information security program to protect your company.
- Learn how to understand your network through logs and client monitoring, so you can effectively evaluate threat intelligence.
- Learn how to use popular tools such as BIND, SNORT, squid, STIX, TAXII, CyBox, and splunk to conduct network intelligence.
Table of contents
- Cover
- Title page
- Table of Contents
- Copyright
- Dedication
- Introduction
- About the Author
- About the Technical Editor
- Acknowledgments
- Chapter 1: Understanding the threat
- Chapter 2: What is intelligence?
- Chapter 3: Building a network security intelligence model
- Chapter 4: Gathering data
- Chapter 5: Internal intelligence sources
- Chapter 6: External intelligence sources
- Chapter 7: Fusing internal and external intelligence
- Chapter 8: CERTs, ISACs, and intelligence-sharing communities
- Chapter 9: Advanced intelligence capabilities
- Index
Product information
- Title: Building an Intelligence-Led Security Program
- Author(s):
- Release date: December 2014
- Publisher(s): Syngress
- ISBN: 9780128023709
You might also like
book
People-Centric Security: Transforming Your Enterprise Security Culture
A culture hacking how to complete with strategies, techniques, and resources for securing the most volatile …
book
Modernizing Cybersecurity Operations with Machine Intelligence
Adversaries and hackers have gained significant and distinct advantages in cyber warfare today. Creative, fast, and …
book
Security Intelligence: A Practitioner's Guide to Solving Enterprise Security Challenges
Similar to unraveling a math word problem, Security Intelligence: A Practitioner's Guide to Solving Enterprise Security …
book
Inside Network Security Assessment: Guarding Your IT Infrastructure
As an IT professional, you need to know how to perform network security assessments. Inside Network …