Text

Network intrusion detection

---

Table of Contents
I. TCP/IP.
1. IP Concepts.
2. Introduction to TCPdump and TCP.
3. Fragmentation.
4. ICMP.
5. Stimulus and Response.
6. DNS.

II. TRAFFIC ANALYSIS.
7. Packet Dissection Using TCPdump.
8. Examining IP Header Fields.
9. Examining Embedded Protocol Header Fields.
10. Real-World Analysis.
11. Mystery Traffic.

III. FILTERS/RULES FOR NETWORK MONITORING.
12. Writing TCPdump Filters.
13. Introduction to Snort and Snort Rules.
14. Snort Rules-Part II.

IV. INTRUSION INFRASTRUCTURE.
15. Mitnick Attack.
16. Architectural Issues.
17. Organizational Issues.
18. Automated and Manual Response.
19. Business Case for Intrusion Detection.

V. APPENDIXES.
Appendix A. Exploits and Scans to Apply Exploits.
Appendix B. Denial of Service.

---

Availability

Detail Information

Series Title

--

Call Number

005.8 NOR n

Publisher

Indianapolis : New Riders., 2003

Collation

xvii, 490 hal.; ilus.; 23 cm

Language

English

ISBN/ISSN

0735712654

Classification

005.8

Content Type

-

Media Type

-

Carrier Type

-

Edition

Third Edition

Subject(s)

Computer security
Internet -- Security Measures
Computer networks -- Security measures

Specific Detail Info

--

Statement of Responsibility

Stephen Northcutt dan Judy Novak

Other version/related

File Attachment

Comments

---

You must be logged in to post a comment