The Practice of Network Security Monitoring


Book Description

Network security is not simply about building impenetrable walls—determined attackers will eventually overcome traditional defenses. The most effective computer security strategies integrate network security monitoring (NSM): the collection and analysis of data to help you detect and respond to intrusions. In The Practice of Network Security Monitoring, Mandiant CSO Richard Bejtlich shows you how to use NSM to add a robust layer of protection around your networks—no prior experience required. To help you avoid costly and inflexible solutions, he teaches you how to deploy, build, and run an NSM operation using open source software and vendor-neutral tools. You'll learn how to: –Determine where to deploy NSM platforms, and size them for the monitored networks –Deploy stand-alone or distributed NSM installations –Use command line and graphical packet analysis tools, and NSM consoles –Interpret network evidence from server-side and client-side intrusions –Integrate threat intelligence into NSM software to identify sophisticated adversaries There’s no foolproof way to keep attackers out of your network. But when they get in, you’ll be prepared. The Practice of Network Security Monitoring will show you how to build a security net to detect, contain, and control them. Attacks are inevitable, but losing sensitive data shouldn't be.




The Site Reliability Workbook


Book Description

In 2016, Googleâ??s Site Reliability Engineering book ignited an industry discussion on what it means to run production services todayâ??and why reliability considerations are fundamental to service design. Now, Google engineers who worked on that bestseller introduce The Site Reliability Workbook, a hands-on companion that uses concrete examples to show you how to put SRE principles and practices to work in your environment. This new workbook not only combines practical examples from Googleâ??s experiences, but also provides case studies from Googleâ??s Cloud Platform customers who underwent this journey. Evernote, The Home Depot, The New York Times, and other companies outline hard-won experiences of what worked for them and what didnâ??t. Dive into this workbook and learn how to flesh out your own SRE practice, no matter what size your company is. Youâ??ll learn: How to run reliable services in environments you donâ??t completely controlâ??like cloud Practical applications of how to create, monitor, and run your services via Service Level Objectives How to convert existing ops teams to SREâ??including how to dig out of operational overload Methods for starting SRE from either greenfield or brownfield




Incident Management for Operations


Book Description

Are you satisfied with the way your company responds to IT incidents? How prepared is your response team to handle critical, time-sensitive events such as service disruptions and security breaches? IT professionals looking for effective response models have successfully adopted the Incident Management System (IMS) used by firefighters throughout the US. This practical book shows you how to apply the same response methodology to your own IT operation. You’ll learn how IMS best practices for leading people and managing time apply directly to IT incidents where the stakes are high and outcomes are uncertain. This book provides use cases of some of the largest (and smallest) IT operations teams in the world. There is a better way to respond. You just found it. Assess your IT incident response with the PROCESS programmatic evaluation tool Get an overview of the IMS all-hazard, all-risk framework Understand the responsibilities of the Incident Commander Form a unified command structure for events that affect multiple business units Systematically evaluate what broke and how the incident team responded







Site Reliability Engineering


Book Description

The overwhelming majority of a software system’s lifespan is spent in use, not in design or implementation. So, why does conventional wisdom insist that software engineers focus primarily on the design and development of large-scale computing systems? In this collection of essays and articles, key members of Google’s Site Reliability Team explain how and why their commitment to the entire lifecycle has enabled the company to successfully build, deploy, monitor, and maintain some of the largest software systems in the world. You’ll learn the principles and practices that enable Google engineers to make systems more scalable, reliable, and efficient—lessons directly applicable to your organization. This book is divided into four sections: Introduction—Learn what site reliability engineering is and why it differs from conventional IT industry practices Principles—Examine the patterns, behaviors, and areas of concern that influence the work of a site reliability engineer (SRE) Practices—Understand the theory and practice of an SRE’s day-to-day work: building and operating large distributed computing systems Management—Explore Google's best practices for training, communication, and meetings that your organization can use




Critical Incident Management


Book Description

Terrorism threats and increased school and workplace violence have always generated headlines, but in recent years, the response to these events has received heightened media scrutiny. Critical Incident Management: A Complete Resource Guide, Second Edition provides evidence-based, tested, and proven methodologies applicable to a host of scenarios that may be encountered in the public and private sector. Filled with tactical direction designed to prevent, contain, manage, and resolve emergencies and critical incidents efficiently and effectively, this volume explores: The phases of a critical incident response and tasks that must be implemented to stabilize the scene Leadership style and techniques required to manage a critical incident successfully The National Incident Management System (NIMS) and the Incident Command System (ICS) Guidelines for responding to hazardous materials and weapons of mass destruction incidents Critical incident stress management for responders Maintaining continuity of business and delivery of products or services in the face of a crisis Roles of high-level personnel in setting policy and direction for the response and recovery efforts Augmented by Seven Critical TasksTM that have been the industry standard for emergency management and response, the book guides readers through every aspect of a critical incident: from taking initial scene command, to managing resources, to resolution, and finally to recovery and mitigation from the incident. The authors’ company, BowMac Educational Services, Inc., presently conducts five courses certified by the Department of Homeland Security. These hands-on "Simulation Based" Courses will prepare your personnel to handle any unexpected scenario. For additional information contact: 585-624-9500 or [email protected].




Incident Management Handbook


Book Description

This U.S. Environmental Protection Agency (EPA) - Incident Management Handbook (IMH) is designed to assist EPA personnel in the use of the Incident Command System (ICS) and the National Incident Management System (NIMS) doctrine during incident response operations and planned events.--Taken from Purpose (p. i-iii).




Seeking SRE


Book Description

Organizations big and small have started to realize just how crucial system and application reliability is to their business. Theyâ??ve also learned just how difficult it is to maintain that reliability while iterating at the speed demanded by the marketplace. Site Reliability Engineering (SRE) is a proven approach to this challenge. SRE is a large and rich topic to discuss. Google led the way with Site Reliability Engineering, the wildly successful Oâ??Reilly book that described Googleâ??s creation of the discipline and the implementation thatâ??s allowed them to operate at a planetary scale. Inspired by that earlier work, this book explores a very different part of the SRE space. The more than two dozen chapters in Seeking SRE bring you into some of the important conversations going on in the SRE world right now. Listen as engineers and other leaders in the field discuss: Different ways of implementing SRE and SRE principles in a wide variety of settings How SRE relates to other approaches such as DevOps Specialties on the cutting edge that will soon be commonplace in SRE Best practices and technologies that make practicing SRE easier The important but rarely explored human side of SRE David N. Blank-Edelman is the bookâ??s curator and editor.




Driving Digital


Book Description

Every organization makes plans for updating products, technologies, and business processes. But that’s not enough anymore for the twenty-first-century company. The race is now on for everyone to become a digital enterprise. For those individuals who have been charged with leading their company’s technology-driven change, the pressure is intense while the correct path forward unclear. Help has arrived! In Driving Digital, author Isaac Sacolick shares the lessons he’s learned over the years as he has successfully spearheaded multiple transformations and helped shape digital-business best practices. Readers no longer have to blindly trek through the mine field of their company’s digital transformation. In this thoroughly researched one-stop manual, learn how to: • Formulate a digital strategy • Transform business and IT practices • Align development and operations • Drive culture change • Bolster digital talent • Capture and track ROI • Develop innovative digital practices • Pilot emerging technologies • And more! Your company cannot avoid the digital disruption heading its way. The choice is yours: Will this mean the beginning of the end for your business, or will your digital practices be what catapults you into next-level success?




Crafting the InfoSec Playbook


Book Description

Any good attacker will tell you that expensive security monitoring and prevention tools aren’t enough to keep you secure. This practical book demonstrates a data-centric approach to distilling complex security monitoring, incident response, and threat analysis ideas into their most basic elements. You’ll learn how to develop your own threat intelligence and incident detection strategy, rather than depend on security tools alone. Written by members of Cisco’s Computer Security Incident Response Team, this book shows IT and information security professionals how to create an InfoSec playbook by developing strategy, technique, and architecture. Learn incident response fundamentals—and the importance of getting back to basics Understand threats you face and what you should be protecting Collect, mine, organize, and analyze as many relevant data sources as possible Build your own playbook of repeatable methods for security monitoring and response Learn how to put your plan into action and keep it running smoothly Select the right monitoring and detection tools for your environment Develop queries to help you sort through data and create valuable reports Know what actions to take during the incident response phase