Linux Firewalls Attack Detection and Response

The Netfilter firewall built into Linux provides capabilities that rival many commercial firewalls. Netfilter: Intrustion Detection and Response explores using Netfilter as an intrusion detection system (IDS) to create a highly secure network. The book discusses passive network authentication; Netfilter log analysis and policies; exploit packet traces and Snort ruleset emulation with Netfilter rules; and more. Perl and C code snippets are included to help readers maximize the effectiveness of Netfilter.

Michael Rash is a Security Architect on the Dragon Intrusion Detection System with Enterasys Networks, Inc., and is a frequent contributor to open source projects. As the creator of psad, fwknop, and fwsnort, Rash is an expert on firewalls, IDSs, OS fingerprinting, and the Snort rules language. He is co-author of the book Snort 2.1 Intrusion Detection, lead-author and technical editor of the book Intrusion Prevention and Active Response, and has written security articles for Linux Journal, SysAdmin, and ;login:.

Care and Feeding of iptables	p. 9
Network Layer Attacks and Defense	p. 35
Transport Layer Attacks and Defense	p. 49
Application Layer Attacks and Defense	p. 69
Introducing psad: The Port Scan Attack Detector	p. 81
Psad Operations: Detecting Suspicious Traffic	p. 99
Advanced psad Topics: From Signature Matching to OS Fingerprinting	p. 113
Active Response with psad	p. 131
Translating Snort Rules into iptables Rules	p. 149
Deploying fwsnort	p. 173
Combining psad and fwsnort	p. 193
Port Knocking vs. Single Packet Authorization	p. 213
Introducing fwknop	p. 231
Visualizing iptables Logs	p. 257
Attack Spoofing	p. 279
A Complete fwsnort Script	p. 285
Table of Contents provided by Blackwell. All Rights Reserved.

What is included with this book?

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.

FREE SHIPPING

Rent More, Save More! Use code: BBRENTAL

5% off 1 book, 7% off 2 books, 10% off 3+ books

Linux Firewalls Attack Detection and Response

Summary

Author Biography

Table of Contents

Supplemental Materials

FREE SHIPPING

Rent More, Save More! Use code: BBRENTAL

5% off 1 book, 7% off 2 books, 10% off 3+ books

Linux Firewalls Attack Detection and Response

Summary

Author Biography

Table of Contents

Supplemental Materials

Digital License