Recently, powerful innovations in intrusion detection and prevention have evolved in response to emerging threats and changing business environments. However, s... » 

Recently, powerful innovations in intrusion detection and prevention have evolved in response to emerging threats and changing business environments. However, security practitioners have found little reliable, usable information about these new IDS/IPS technologies. In Practical Intrusion Analysis, one of the field's leading experts brings together these innovations for the first time and demonstrates how they can be used to analyze attacks, mitigate damage, and track attackers.

Ryan Trost reviews the fundamental techniques and business drivers of intrusion detection and prevention by analyzing today's new vulnerabilities and attack vectors. Next, he presents complete explanations of powerful new IDS/IPS methodologies based on Network Behavioral Analysis (NBA), data visualization, geospatial analysis, and more.

Writing for security practitioners and managers at all experience levels, Trost introduces new solutions for virtually every environment. Coverage includesAssessing the strengths and limitations of mainstream monitoring tools and IDS technologiesUsing Attack Graphs to map paths of network vulnerability and becoming more proactive about preventing intrusionsAnalyzing network behavior to immediately detect polymorphic worms, zero-day exploits, and botnet DoS attacksUnderstanding the theory, advantages, and disadvantages of the latest Web Application FirewallsImplementing IDS/IPS systems that protect wireless data trafficEnhancing your intrusion detection efforts by converging with physical security defensesIdentifying attackers' geographical fingerprint and using that information to respond more effectivelyVisualizing data traffic to identify suspicious patterns more quicklyRevisiting intrusion detection ROI in light of new threats, compliance risks, and technical alternatives «