06563cam a2200781Ii 4500 ocn906699046 OCoLC 20171025084023.0 m o d cr cnu|||unuuu 150407s2015 inu ob 001 0 eng d 9781118896679 electronic bk. 111889667X electronic bk. 9781118896662 electronic bk. 1118896661 electronic bk. 9781119183617 electronic bk. 1119183618 electronic bk. 9781118896693 1118896696 9781118896693 AU@ 000054954842 DEBSZ 453328733 DEBSZ 452647193 DEBBG BV043615808 DEBBG BV043397685 (OCoLC)906699046 (OCoLC)908080285 (OCoLC)914287647 (OCoLC)961627624 (OCoLC)962627152 CL0500000619 Safari Books Online N$T eng rda pn N$T N$T IDEBK E7B CDX YDXCP EBLCP OCLCF UMI DG1 COO RECBK DEBSZ OCLCQ DEBBG KSU K6U MAIN TK5105.59 COM 060040 bisacsh COM 043050 bisacsh COM 053000 bisacsh 005.8 Li, Qing, 1971- author. Security intelligence : a practitioner's guide to solving enterprise security challenges / Qing Li, Gregory Clark. [electronic resource] Indianapolis, IN : Wiley, 2015. 1 online resource text txt rdacontent computer c rdamedia online resource cr rdacarrier Includes bibliographical references and index. Security Intelligence: A Practitioner's Guide to Solving Enterprise Security Challenges; Contents; Foreword; Preface; Chapter 1 Fundamentals of Secure Proxies; Security Must Protect and Empower Users; The Birth of Shadow IT; Internet of Things and Connected Consumer Appliances; Conventional Security Solutions; Traditional Firewalls: What Are Their Main Deficiencies?; Firewall with DPI: A Better Solution?; IDS/IPS and Firewall; Unified Threat Management and Next-Generation Firewall; Security Proxy-A Necessary Extension of the End Point; Transaction-Based Processing; The Proxy Architecture SSL Proxy and InterceptionInterception Strategies; Certificates and Keys; Certificate Pinning and OCSP Stapling; SSL Interception and Privacy; Summary; Chapter 2 Proxy Deployment Strategies and Challenges; Definitions of Proxy Types: Transparent Proxy and Explicit Proxy; Inline Deployment of Transparent Proxy: Physical Inline and Virtual Inline; Physical Inline Deployment; Virtual Inline Deployment; Traffic Redirection Methods: WCCP and PBR; LAN Port and WAN Port; Forward Proxy and Reverse Proxy; Challenges of Transparent Interception; Directionality of Connections; Maintaining Traffic Paths Avoiding InterceptionAsymmetric Traffic Flow Detection and Clustering; Proxy Chaining; Summary; Chapter 3 Proxy Policy Engine and Policy Enforcements; Policy System Overview; Conditions and Properties; Policy Transaction; Policy Ticket; Policy Updates and Versioning System; Security Implications; Policy System in the Cloud Security Operation; Policy Evaluation; Policy Checkpoint; Policy Execution Timing; Revisiting the Proxy Interception Steps; Enforcing External Policy Decisions; Summary; Chapter 4 Malware and Malware Delivery Networks; Cyber Warfare and Targeted Attacks Espionage and Sabotage in CyberspaceIndustrial Espionage; Operation Aurora; Watering Hole Attack; Breaching the Trusted Third Party; Casting the Lures; Spear Phishing; Pharming; Cross-Site Scripting; Search Engine Poisoning; Drive-by Downloads and the Invisible iframe; Tangled Malvertising Networks; Malware Delivery Networks; Fast-Flux Networks; Explosion of Domain Names; Abandoned Sites and Domain Names; Antivirus Software and End-Point Solutions -- The Losing Battle; Summary; Chapter 5 Malnet Detection Techniques; Automated URL Reputation System; Creating URL Training Sets Extracting URL Feature SetsClassifier Training; Dynamic Webpage Content Rating; Keyword Extraction for Category Construction; Keyword Categorization; Detecting Malicious Web Infrastructure; Detecting Exploit Servers through Content Analysis; Topology-Based Detection of Dedicated Malicious Hosts; Detecting C2 Servers; Detection Based on Download Similarities; Crawlers; Detecting Malicious Servers with a Honeyclient; High Interaction versus Low Interaction; Capture-HPC: A High-Interaction Honeyclient; Thug: A Low-Interaction Honeyclient; Evading Honeyclients; Summary; Chapter 6 Writing Policies Identify, deploy, and secure your enterprise Security Intelligence, A Practitioner's Guide to Solving Enterprise Security Challenges is a handbook for security in modern times, against modern adversaries. As leaders in the design and creation of security products that are deployed globally across a range of industries and market sectors, authors Qing Li and Gregory Clark deliver unparalleled insight into the development of comprehensive and focused enterprise security solutions. They walk you through the process of translating your security goals into specific security technology domains, fo. Online resource; title from PDF title page (Ebsco, viewed April 13, 2015). Electronic information resources Access control. Computer networks Security measures. Computer security. COMPUTERS / Internet / Security bisacsh COMPUTERS / Networking / Security bisacsh COMPUTERS / Security / General bisacsh Computer networks -- Security measures. World Wide Web -- Security measures. Computer science. Network security. Computer networks Security measures. fast (OCoLC)fst00872341 Computer security. fast (OCoLC)fst00872484 Electronic information resources Access control. fast (OCoLC)fst00907296 Electronic books. Electronic books. Clark, Gregory, author. Print version: Li, Qing Security Intelligence : A Practitioner's Guide to Solving Enterprise Security Challenges Hoboken : Wiley,c2015 9781118896693 http://onlinelibrary.wiley.com/book/10.1002/9781119183617 Wiley Online Library ddc BK 207973 207973