Network Security Through Data Analysis ─ From Data to Action

How can how security personnel use the data they gather to harden networks and defend systems? With this practical book, you’ll learn how to use tools to collect data, make defensible security judgements, and execute them in order to defend your network.

The discipline of security analysis requires new tools, but what these tools look like is still uncertain. Network Security through Data Analysis provides a much-needed primer on the technology of data-driven security that identifies and codifies the discipline. It’s the definitive applied reference to the SiLK toolset.

• Get a comprehensive overview of how to instrument and collect data for security
• Understand how to take security data and convert it into a decision
• Learn tools and techniques for identifying attacker behavior
• Dive into active monitoring and traffic manipulation, insider threat detection, data mining, and regression and machine learning

Michael Collins is the chief scientist for RedJack, LLC., a NetworkSecurity and Data Analysis company located in the WashingtonD.C. area. Prior to his work at RedJack, Dr. Collins was a member ofthe technical staff at the CERT/Network Situational Awareness group at Carnegie Mellon University. His primary focus is on networkinstrumentation and traffic analysis, in particular on the analysis oflarge traffic datasets.Dr. Collins graduated with a PhD in Electrical Engineering fromCarnegie Mellon University in 2008, he holds Master's and Bachelor'sDegrees from the same institution.