Intrusion Detection and Prevention
An intrusion detection system (IDS) gathers and analyzes information from the computer or a network it is monitoring. An IDS can be considered a type of network management and monitoring tool. The key to what type of activity the IDS will detect depends on where the sensor is placed. Before discussing the types of intrusion detection systems, let’s first review the various ways in which an intrusion is detected.
Intrusions are detected in one of three basic ways:
Signature Recognition Signature recognition relies on a database of known attacks, and it is also known as misuse detection. Each known attack is loaded into the IDS in the form of a signature. Once the signatures are loaded, the IDS can begin to guard the network. The signatures are usually given a number or name so that they are easily identified when an attack occurs. For example, these signatures may include the Ping of Death, SYN floods, or Smurf DoS. The biggest disadvantage to...
CASP+ CompTIA Advanced Security Practitioner Study Guide: Exam CAS-003 - Third Edition
By :
CASP+ CompTIA Advanced Security Practitioner Study Guide: Exam CAS-003 - Third Edition
By:
Overview of this book
The next few years will bring a 45-fold increase in digital data and at least one-third of that data will pass through the cloud. The level of risk to data everywhere is growing in parallel and organizations are in need of qualified data security professionals to safeguard their information. The CASP+ certification validates this in-demand skillset and this book is your ideal resource for passing the exam. CASP+ meets the ISO 17024 standard and is approved by the U.S. Department of Defense to fulfill Directive 8570.01-M requirements. It is also compliant with government regulations under the Federal Information Security Management Act (FISMA). As such, this career-building credential makes you in demand in the marketplace and shows that you are qualified to address enterprise-level security concerns. The CASP+ CompTIA Advanced Security Practitioner Study Guide: Exam CAS-003, Third Edition, is the preparation resource you need to take the next big step for your career and pass with flying colors.
This book provides detailed explanations of technical and business concepts that give you the background you need to apply, identify, and implement appropriate security solutions. You’ll solidify your understanding of each objective with end-of-chapter reviews. The book contains hands-on lab exercises and hundreds of practice questions to help you test your knowledge in advance of the exam.
By the end of the book, you’ll have the knowledge and the confidence to ace the CASP+ certification exam.
Related Content you might be interested in
Current Title:
CASP+ CompTIA Advanced Security Practitioner Study Guide: Exam CAS-003 - Third Edition
No titles found
Table of Contents (22 chapters)
Acknowledgments
About the Authors
Table of Exercises
Introduction
Assessment Test
Answers to Assessment Test
Chapter 1 Cryptographic Tools and Techniques
Chapter 2 Comprehensive Security Solutions
Chapter 3 Securing Virtualized, Distributed, and Shared Computing
Chapter 4 Host Security
Chapter 5 Application Security and Penetration Testing
Chapter 6 Risk Management
Chapter 7 Policies, Procedures, and Incident Response
Chapter 8 Security Research and Analysis
Chapter 9 Enterprise Security Integration
Chapter 10 Security Controls for Communication and Collaboration
Index
Advert
End User License Agreement
Appendix A Answers to Review Questions
Appendix B CASP+ Lab Manual
Customer Reviews