What do you think?
Rate this book
Network Security Through Data Analysis: From Data to Action
Traditional intrusion detection and logfile analysis are no longer enough to protect today's complex networks. In the updated second edition of this practical guide, security researcher Michael Collins shows InfoSec personnel the latest techniques and tools for collecting and analyzing network traffic datasets. You'll understand how your network is used, and what actions are necessary to harden and defend the systems within it.
In three sections, this book examines the process of collecting and organizing data, various tools for analysis, and several different analytic scenarios and techniques. New chapters focus on active monitoring and traffic manipulation, insider threat detection, data mining, regression and machine learning, and other topics.
You'll learn how to:
Use sensors to collect network, service, host, and active domain data
Work with the SiLK toolset, Python, and other tools and techniques for manipulating data you collect
Detect unusual phenomena through exploratory data analysis (EDA), using visualization and mathematical techniques
Analyze text data, traffic behavior, and communications mistakes
Identify significant structures in your network with graph analysis
Examine insider threat data and acquire threat intelligence
Map your network and identify significant hosts within it
Work with operations to develop defenses and analysis techniques
In three sections, this book examines the process of collecting and organizing data, various tools for analysis, and several different analytic scenarios and techniques. New chapters focus on active monitoring and traffic manipulation, insider threat detection, data mining, regression and machine learning, and other topics.
You'll learn how to:
Use sensors to collect network, service, host, and active domain data
Work with the SiLK toolset, Python, and other tools and techniques for manipulating data you collect
Detect unusual phenomena through exploratory data analysis (EDA), using visualization and mathematical techniques
Analyze text data, traffic behavior, and communications mistakes
Identify significant structures in your network with graph analysis
Examine insider threat data and acquire threat intelligence
Map your network and identify significant hosts within it
Work with operations to develop defenses and analysis techniques
428 pages, ebook
First published September 8, 2017
17 people are currently reading
20 people want to read
Ratings & Reviews
Friends & Following
Create a free account to discover what your friends think of this book!
Community Reviews
Displaying 1 of 1 review
July 1, 2019
Lots of good information on what you should be looking at in your network and the challenges it bring. Can be a little dry but you can address this by working along with the examples. Some of the math was above my head but still good to try and understand when dealing with analytics.
Displaying 1 of 1 review