02292cam a2200289 a 4500 1/37991 090721s2005 us 001 0 eng 9781932266474 193226647X 40613 OPELS eng OPELS OKU OCLCQ OCLCF GR-PeUP Intrusion prevention and active response [electronic resource] : deploying network and host IPS / Michael Rash ... [et al.] ; foreword by Stephen Northcutt. Rockland, MA : Syngress ; [Sebastopol] : Distributed by O'Reilly Media in the United States and Canada, c2005. 1 online resource (xx, 402 p.) : ill. Includes index. Intrusion prevention and active response -- Packet inspection for intrusion analysis -- False positives and real damage -- Four layers of IPS actions -- Network inline data modification -- Protecting your host through the operating system -- IPS at the application layer -- Deploying open source IPS solutions -- IPS evasion techniques (network). This book provides an introduction to the field of Intrusion Prevention and provides detailed information on various IPS methods and technologies. Specific methods are covered in depth, including both network and host IPS and response technologies such as port deactivation, firewall/router network layer ACL modification, session sniping, outright application layer data modification, system call interception, and application shims. * Corporate spending for Intrusion Prevention systems increased dramatically by 11% in the last quarter of 2004 alone * Lead author, Michael Rash, is well respected in the IPS Community, having authored FWSnort, which greatly enhances the intrusion prevention capabilities of the market-leading Snort IDS. Computer networks Security measures. Computer network protocols. Computers Access control. Data protection. Electronic books. Rash, Michael (Michael Brandon) INST UNIPILB EBOOKS 20100625 00b40613 00b40613 ONLINE 0 ScienceDirect http://www.sciencedirect.com/science/book/9781932266474 /webopac/covers/02/40613_9781932266474.jpg /webopac/covers/02/40613_193226647X.jpg