Security information and event management (SIEM) implementation [

"Effectively manage the security information and events produced by your network with help from this authoritative guide. Written by IT security experts, Security Information and Event Management (SIEM) Implementation shows you how to deploy SIEM technologies to monitor, identify, document, and...

Full description

Bibliographic Details
Main Author: Miller, David , 1959 November 5- (Author)
Format: Book
Language:English
Published: New York : McGraw-Hill , c2011
Subjects:
Online Access:McGraw Hill
Table of Contents:
  • 1. Business models
  • 2. Threat models
  • 3. Regulatory compliance
  • 4. SIEM concepts - components for small and medium size businesses
  • 5. The anatomy of a SIEM
  • 6. Incident response
  • 7. Using SIEM for business intelligence
  • 8. AlienVault OSSIM implementation
  • 9. AlienVault OSSIM operation
  • 10. Cisco security-MARS implementation
  • 11. Cisco Security-MARS advanced techniques
  • 12. Q1 Labs QRadar implementation
  • 13. Q1 Labs QRadar advanced techniques
  • 14. ArcSight v4.5 implementation
  • 15. ArcSight ESM v4.5 advanced techniques