rdf-syntax-grammar
mods:
  schema location: http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-2.xsd
  title info:
    title: Security log management
    sub title: identifying patterns in the chaos
  name:
    name part: Babbin, Jacob.
    role:
      role term: creator
  name:
    name part: ScienceDirect (Online service)
  type of resource: text
  genre: Electronic books.
  origin info:
    place:
      place term: mau
    place:
      place term: Rockland, MA
    publisher: Syngress
    date issued: ©2006
    date issued: 2006
    issuance: monographic
  language:
    language term: eng
  physical description:
    form: remote
    extent: 1 online resource (xviii, 333 pages) : illustrations
  abstract: This book teaches IT professionals how to analyze, manage, and automate their security log files to generate useful, repeatable information that can be use to make their networks more efficient and secure using primarily open source tools. The book begins by discussing the Top 10 security logs that every IT professional should be regularly analyzing. These 10 logs cover everything from the top workstations sending/receiving data through a firewall to the top targets of IDS alerts. The book then goes on to discuss the relevancy of all of this information. Next, the book describes how to script open source reporting tools like Tcpdstats to automatically correlate log files from the various network devices to the Top 10 list. By doing so, the IT professional is instantly made aware of any critical vulnerabilities or serious degradation of network performance. All of the scripts presented within the book will be available for download from the Syngress Solutions Web site. Almost every operating system, firewall, router, switch, intrusion detection system, mail server, Web server, and database produces some type of log file. This is true of both open source tools and commercial software and hardware from every IT manufacturer. Each of these logs is reviewed and analyzed by a system administrator or security professional responsible for that particular piece of hardware or software. As a result, almost everyone involved in the IT industry works with log files in some capacity. * Provides turn-key, inexpensive, open source solutions for system administrators to analyze and evaluate the overall performance and security of their network * Dozens of working scripts and tools presented throughout the book are available for download from Syngress Solutions Web site. * Will save system administrators countless hours by scripting and automating the most common to the most complex log analysis tasks.
  table of contents: Log analysis : overall issues -- IDS reporting -- Firewall reporting -- Systems and network device reporting -- Creating a reporting infrastructure -- Scalable enterprise Solutions (ESM deployments) -- Managing log files with Microsoft Log Parser -- Investigating intrusions with Microsoft Log Parser -- Managing Snort alerts with Microsoft Log Parser.
  note: Jacob Babbin [and others].
  note: Includes index.
  subject:
    topic: Computer networks
    topic: Security measures
  subject:
    topic: Réseaux d'ordinateurs
    topic: Sécurité
    topic: Mesures
  subject:
    topic: COMPUTERS
    topic: Internet
    topic: Security
  subject:
    topic: COMPUTERS
    topic: Networking
    topic: Security
  subject:
    topic: COMPUTERS
    topic: Security
    topic: General
  subject:
    topic: Computer networks
    topic: Security measures
  classification: TK5105.59 .B333 2006eb
  classification: 005.8
  related item:
    title info:
      title: Security log management
    name:
      name part: Babbin, Jacob.
    origin info:
      publisher: Rockland, MA : Syngress, ©2006
    identifier: (OCoLC)63807023
  identifier: 1423754174
  identifier: 9781423754176
  identifier: 0080489702
  identifier: 9780080489704
  identifier: 9781597490429
  identifier: 1597490423
  identifier: 2006355064
  identifier: 116458:116556 Elsevier Science & Technology
  identifier: http://proxy.library.tamu.edu/login
  record info:
    record content source: N$T
    record creation date: 060224
    record change date: 20260326144830.0
    record identifier: in00005730143
    language of cataloging:
      language term: eng