rdf-syntax-grammar
mods:
  schema location: http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-2.xsd
  title info:
    title: Building an intelligence-led security program
  name:
    name part: Liska, Allan
    role:
      role term: creator
    role:
      role term: author.
  name:
    name part: Gallo, Tim
    role:
      role term: editor.
  name:
    name part: ScienceDirect (Online service)
  type of resource: text
  genre: bibliography
  genre: Electronic books.
  genre: Security; Information Technology.
  origin info:
    place:
      place term: ne
    date issued: 2014
    copyright date: 2015
    issuance: monographic
  language:
    language term: eng
  physical description:
    form: remote
    extent: 1 online resource (xv, 175 pages) : illustrations
  abstract: As recently as five years ago, securing a network meant putting in a firewall, intrusion detection system, and installing antivirus software on the desktop. Unfortunately, attackers have grown more nimble and effective, meaning that traditional security programs are no longer effective. Today's effective cyber security programs take these best practices and overlay them with intelligence. Adding cyber threat intelligence can help security teams uncover events not detected by traditional security platforms and correlate seemingly disparate events across the network. Properly-implemented intelligence also makes the life of the security practitioner easier by helping him more effectively prioritize and respond to security incidents. The problem with current efforts is that many security practitioners don't know how to properly implement an intelligence-led program, or are afraid that it is out of their budget. Building an Intelligence-Led Security Program is the first book to show how to implement an intelligence-led program in your enterprise on any budget. It will show you how to implement a security information a security information and event management system, collect and analyze logs, and how to practice real cyber threat intelligence. You'll learn how to understand your network in-depth so that you can protect it in the best possible way. Provides a roadmap and direction on how to build an intelligence-led information security program to protect your company. Learn how to understand your network through logs and client monitoring, so you can effectively evaluate threat intelligence. Learn how to use popular tools such as BIND, SNORT, squid, STIX, TAXII, CyBox, and splunk to conduct network intelligence.
  table of contents: Understanding the threat -- What is intelligence? -- Building a network security intelligence model -- Gathering data -- Internal intelligence sources -- External intelligence sources -- Fusing internal and external intelligence -- CERTs, ISACs, and intelligencec-sharing communities -- Advanced intelligence capabilities.
  note: Allan Liska ; Tim Gallo, technical editor.
  note: Includes bibliographical references and index.
  subject:
    topic: Computer networks
    topic: Security measures
  subject:
    topic: Réseaux d'ordinateurs
    topic: Sécurité
    topic: Mesures
  subject:
    topic: COMPUTERS
    topic: Networking
    topic: Security
  subject:
    topic: Computer networks
    topic: Security measures
  classification: TK5105.59 .L57 2015eb
  classification: 658.478
  related item:
    title info:
      title: Building an intelligence-led security program
    name:
      name part: Liska, Allan.
    origin info:
      publisher: Amsterdam : Elsevier, Syngress, [2015]
  identifier: 9781322480787
  identifier: 1322480788
  identifier: 9780128023709
  identifier: 0128023708
  identifier: 9780128021453
  identifier: 0128021454
  identifier: 679360 MIL
  identifier: ACBABE98-8BD5-481B-A033-6E6667C0D03C OverDrive, Inc.
  identifier: http://proxy.library.tamu.edu/login
  record info:
    record content source: IDEBK
    record creation date: 141219
    record change date: 20260326212731.0
    record identifier: in00005758509
    language of cataloging:
      language term: eng