With the number of intrusion and hacking incidents around the world on the rise, the importance of having dependable intrusion detection systems in place is greater than ever. Offering both a developmental and technical perspective on this crucial element of network security, Intrusion Detection covers: practical considerations for selecting and implementing intrusion detection systems; methods of handling the results of analysis, and the options for responses to detected problems, data sources commonly used in intrusion detection and how they influence the capabilities of all intrusion detection systems; legal issues surrounding detection and monitoring that affect the design, development, and operation of intrusion detection systems. More than just an overview of the technology, Intrusion Detection presents real analysis schemes and responses, as well as a detailed discussion of the vulnerabilities inherent in many systems, and approaches to testing systems for these problems.
1. The History of Intrusion Detection.
2. Concepts and Definitions.
3. Information Sources.
4. Analysis Schemes.
6. Vulnerability Analysis—A Special Case.
7. Current Issues.
8. So Why Do We Need This Stuff?
9. For Users.
10. For Strategists.
11. For Designers.
12. Future Needs.