Overview

The increasing complexity and diversity of systems, applications, and networks has made them more difficult to defend. As companies continue to experience losses due to security breaches, security professionals must take a new approach in protecting their assets. By using monitoring and detection measures with prompt intervention, you can reduce the magnitude of incidents. This book gives you the information you need to develop an effective incident response strategy. Providing specific security plans from internationally recognized experts on the topic, illustrated through case studies showing real-world application, Incident Response provides comprehensive coverage of all phases of incident response, from pre-incident conditions and considerations to post-incident analysis. Dr. E. Eugene Schultz and Russell Shumway (along wiht a contribution by Dr. Terry Gudaitis) teach you security principles that help you minimize information loss and system disruption.

Full Product Details

Author:   E. Schultz ,  Russell Shumway
Publisher:   Pearson Education (US)
Imprint:   Sams Publishing
Dimensions:   Width: 22.80cm , Height: 2.00cm , Length: 17.60cm
Weight:   0.620kg
ISBN:  

9781578702565

ISBN 10:   1578702569
Pages:   408
Publication Date:   16 November 2001
Audience:   College/higher education ,  Tertiary & Higher Education
Format:   Paperback
Publisher's Status:   Active
Availability:   In Print  
This item will be ordered in for you from one of our suppliers. Upon receipt, we will promptly dispatch it out to you. For in store availability, please contact us.

Table of Contents

(NOTE: Each chapter concludes with a Summary/Conclusion.) 1. An Introduction to Incident Response. What Is Incident Response? The Rationale for Incident Response. Overview of Incident Response. 2. Risk Analysis. About Risk Analysis. Types of Security-Related Risks. Obtaining Data About Security-Related Incidents. The Importance of Risk Analysis in Incident Response. 3. A Methodology for Incident Response. Rationale for Using an Incident Response Methodology. A Six-Stage Methodology for Incident Response. Caveats. 4. Forming and Managing an Incident Response Team. What Is an Incident Response Team? Why Form an Incident Response Team? Issues in Forming a Response Team. About Managing an Incident Response Effort. 5. Organizing for Incident Response. Virtual Teams-Ensuring Availability. Training the Team. Testing the Team. Barriers to Success. External Coordination. Managing Incidents. 6. Tracing Network Attacks. What Does Tracing Network Attacks Mean? Putting Attack Tracing in Context. Tracing Methods. Next Steps. Constructing an “Attack Path”. Final Caveats. 7. Legal Issues. U.S. Computer Crime Statutes. International Statutes. Search, Seizure, and Monitoring. Policies. Liability. To Prosecute or Not? 8. Forensics I. Guiding Principles. Forensics Hardware. Forensics Software. Acquiring Evidence. Examination of the Evidence. 9. Forensics II. Covert Searches. Advanced Searches. Encryption. Home Use Systems. UNIX and Server Forensics. 10. Responding to Insider Attacks. Types of Insiders. Types of Attacks. Preparing for Insider Attacks. Detecting Insider Attacks. Responding to Insider Attacks. Special Considerations. Special Situations. Legal Issues. 11. The Human Side of Incident Response. Integration of the Social Sciences into Incident Response. Part I: Cybercrime Profiling. Part II: Insider Attacks. Part III: Incident Victims. Part IV: Human Side of Incident Response. 12. Traps and Deceptive Measures. About Traps and Deceptive Measures. Advantages and Limitations of Traps and Deceptive Measures. Focus: Honeypots. Integrating Traps and Deceptive Measures into Incident Response. 13. Future Directions in Incident Response. Technical Advances. Social Advances. The Progress of the Profession. The Nature of Incidents. Appendix A. RFC-2196. Site Security Handbook. Appendix B. Incident Response and Reporting Checklist.

Reviews

Author Information

"Dr. E. Eugene Schultz, founder and former manager of the U.S. Department of Energy's Computer Incident Advisory Capability (CIAC) team, is currently on the support staff of Global Integrity's REACT team-the first commercial incident response capability. Russell Shumway is the director of intelligence and response services with Network Security Corporation, which is responsible for the management of NSEC's Incident Mitigation and Open-Source Monitoring services. Russ previously worked as the technical director of Global Integrity Corporation's REACT program, where he worked on numerous computer-security incidents for clients ranging from Fortune 100 companies to private individuals and provided consulting services to 7 of the top 10 financial services companies in the United States and 13 of the top 50 in the world. He assisted in the design and development of Global Integrity's Financial Services Incident Sharing and Advisory Center (FS/ISAC). Dr. Terry Gudaitis is a behavioral scientist/criminologist who has 12 years of experience in research and applied practice in the discipline of behavioral assessment and profiling. She received her MA and Ph.D. from the University of Florida. Since 1987, she has provided domestic and international assessments and profiles for academia, local law enforcement, federal agencies and bureaus, and private industry. Dr. Gudaitis has worked with the Central Intelligence Agency as a criminal psychologist at the CounterTerrorist Center. Currently, Dr. Gudaitis is responsible for the integration of behavioral/criminal profiling and computer forensics at Global Integrity Corporation, a Science Applications International Corporation (SAIC) subsidiary. Dr. Gudaitis provides consultation, human systems assessment, and profiling services to private industry. Dr. Gudaitis has recently published articles in CyberPsychology and Behavior, Imp Magazine, presented on the ""Insider Threat"" at SecureComm98, was a guest speaker on ""Cyber Crime Profiling"" for Leadership America-Greater Washington, and is an active member of the High Technology Crime Investigative Association."

Tab Content 6

Author Website:  

Customer Reviews

Recent Reviews

No review item found!

Add your own review!

Countries Available

All regions