Intrusion Signatures and Analysis

For advanced courses in network security.

Intrusion Signatures and Analysis is ideal for courses looking to teach students about the concepts of intrusion detection and network security. The book opens with an introduction into the format of some of the more common detection sensors and then begins a tutorial into the unique format of the signatures and analyses used in the book. After a challenging four-chapter review, the student finds page after page of signatures, in order by categories. Then the content digs right into reaction and responses covering how sometimes what you see isn't always what is happening. The book also covers how students and analysts can spend time chasing after false positives. Also included is a section on how attacks have shut down the networks and web sites of Yahoo, and E-bay and what those attacks looked like. Students will also find review questions with answers throughout the book, to be sure they comprehend the traces and material that has been covered.