Practical network security monitoringNetwork security monitoring is based on the notion that preventive action will someday fail. In todays threat environment, no matter how hard you try to protect yourself, an attacker will eventually find a way to break into your network. In such a situation, depending on the difference of intrusion detection and response capability, it may lead to a small security accident or a major accident. The book consists of three phases of the NSM acquisition, detection, and analysis. You will be able to see insights from veteran NSM experts with practical knowledge that can be immediately applied to each section.