2016
O'Reilly Media / Infinite Skills
Ric Messier
2:45
English
An outsider might be inside your network and ready to release attack traffic. A disgruntled employee might be inside your system and ready to delete files. You're a systems or network admin and it's your job to prevent these types of malicious events.
Where do you begin? A good start is knowing with some certainty that the attackers are even present and a good intrusion detection system will do just that. In this video, security expert Ric Messier explains why intrusion detection systems are necessary, what they do, how they work, where to find them, and how to implement them.
- Understand intrusion detection: Its meaning, its value, and how to implement it
- Master the workings of host-based and network-based intrusion detection systems
- Learn about network captures, cryptographic hashes, alerting, incident response, and more
- Gain awareness of anomaly based and signature based intrusion detection systems
- Learn to use open source intrusion detection systems like Snort, Suricata, and Bro
- Understand how to perform file integrity checks using Tripwire and Samhain
- Review multiple forms of built-into-the-OS IDS systems
01. Introduction
0101 Welcome
0102 What Will Be Covered
0103 About The Author
02. Host-Based
0201 Logs - Windows
0202 Auditing - Windows
0203 Logs - Linux
0204 Auditing - Linux
0205 Cryptographic Hashes
0206 File Settings
0207 Tripwire Configuration
0208 Tripwire Operation
0209 OSSEC
0210 OSSEC Installation
0211 OSSEC Operation
0212 Samhain Configuration
0213 Samhain Operation
0214 Centralized Logging
0215 Logwatch
03. Network-Based
0301 Network Captures
0302 Snort Overview
0303 Snort Configuration
0304 Snort Usage
0305 Snort Rules
0306 Monitoring Consoles
0307 Suricata Overview
0308 Suricata Configuration
0309 Suricata Usage
0310 Suricata Rules
0311 Bro IDS Overview
0312 Bro IDS Configuration
0313 Bro IDS Usage
0314 Bro IDS Rules
0315 Oinkmaster
0316 Barnyard2
04. Endpoint Protection
0401 Antivirus
0402 Data Loss Prevention
0403 Windows Defender
0404 Application Protection
0405 Network Monitoring - Application Usage
0406 Spyware
0407 Browser Alerts
0408 Browser Protections
0409 Encryption Certificates
0410 E-Mail
05. Conclusion
0501 Conclusion
oreilly.com, infiniteskills.com/training/understanding-intrusion-detection-system.html
Download File Size:950.37 MB
|
