Название: Intelligence-Driven Incident Response: Outwitting the Adversary 2nd Edition (Final)Автор: Rebekah Brown, Scott J. Roberts
Издательство: O’Reilly Media, Inc.
Год: 2023
Страниц: 480
Язык: английский
Формат: pdf, epub
Размер: 10.2 MB
Cyber-threat intelligence isn’t a new concept, simply a new name for an old approach: applying a structured analytical process to understand an attack and the adversary behind it. The application of threat intelligence to network security is more recent, but the basics haven’t changed. Cyber-threat intelligence involves applying intelligence processes and concepts—some of the oldest concepts that exist—and making them a part of the overall information security process. Threat intelligence has many applications, but one of the fundamental ways it can be utilized is as an integral part of the intrusion-detection and incident-response process. We call this intelligence-driven incident response and think it is something every security team can do, with or without a major capital investment. It’s less about tools, although they certainly help sometimes, and more about a shift in the way we approach the incident-response process. Intelligence-driven incident response will help not only to identify, understand, and eradicate threats within a network, but also to strengthen the entire information security process to improve those responses in the future.
Автор: Майя Марук
Автор: Ирина Романова
Название: Advanced Wireless Communication and Sensor Networks: Applications and Simulations
Автор: Николай Ободников
Автор: Анна Одувалова