Poised Solutions Tech Library

Monitoring is the ongoing process of cyber security, releasing a compromise has occurred and responding in a timely manner is made possible by constant vigilence (monitoring). The monitoring books reveiwed here cover most of the techniques used in cyber security monitoring, there is a bias towards the Unix operating systems and TCP/IP based networking.

Security Monitoring Book Reviews

The Tao of Network Security Monitoring

Virtual Honeypots

Managing Security with Snort and IDS Tools

Managing Security with Snort and IDS tools, focuses mainly on Snort (intrusion detection and response tool), there are some general security tips, and general network monitoring methodology also explained. The writing style is lively and clear, and by the end the reader should feel confident in securing and managing a Snort setup for a network. Managing Security with Snort and IDS tools is a recommended book for understanding and deploying Snort.

Learning Nagios 3.0

Hacker's Challenge

Hacker's Challenge is a book detailing a number of intrusions and challenges the reader to determine which host was responsible; a how 'dunnit for cyber security. Each challenge is presented as a story with some background information, and clues as to the identity of the intruder, the readers then has to piece it together. Solutions to each of the challenges are also included.

Ethereal Packet Sniffing

Ethereal Packet Sniffing, is about the usage of the now known as Wireshark network analyser. All information flowing over a network connection can be collected with a variety of tools, including Wireshark, and analysed in the Wireshark program. Sensitive data can be sniffed and network issues analysed.

Hacker's Challenge 3