Snort, an open source intrusion detection and prevention system (IDS/IPS), capable of real-time traffic analysis and packet logging, is regarded as the gold standard in IDS and IPS. The new version, Snort 3, is a major upgrade to the Snort IDS/IPS, featuring a new design and enhanced detection functionality, resulting in higher efficacy and improved performance, scalability, usability, and extensibility. Snort 3 is the latest version of Snort, with the current version at the time of writing being Snort v3.3.3.
This book will help you understand the fundamentals of packet inspection in Snort and familiarize you with the various components of Snort. The chapters take you through the installation and configuration of Snort, focusing on helping you fine-tune your installation to optimize Snort performance. You’ll get to grips with creating and modifying Snort rules, fine-tuning specific modules, deploying and configuring, as well as troubleshooting Snort. The examples in this book enable network administrators to understand the real-world application of Snort, while familiarizing them with the functionality and configuration aspects.
By the end of this book, you’ll be well-equipped to leverage Snort to improve the security posture of even the largest and most complex networks.

Zobacz także:

• PLC i TIA Portal. Kurs video. Techniki programowania SIMATIC S7-1200 200,00 zł, (10,00 zł -95%)
• Google Cloud. Kurs video. Zostań administratorem systemów IT 142,86 zł, (10,00 zł -93%)
• Instalacja i konfiguracja baz danych. Kurs video. Przygotowanie do egzaminu 70-765 Provisioning SQL Databases 285,57 zł, (19,99 zł -93%)
• Jak zhakowa 125,00 zł, (10,00 zł -92%)
• Excel w HR. Kurs video. Od teorii do praktyki 222,11 zł, (19,99 zł -91%)

Spis treści

IDS and IPS with Snort 3. Get up and running with Snort 3 and discover effective solutions to your security issues eBook -- spis treści

• 1. Introduction to Intrusion Detection and Prevention
• 2. The History and Evolution of Snort
• 3. Snort 3 – System Architecture and Functionality
• 4. Installing Snort 3
• 5. Configuring Snort 3
• 6. Data Acquisition
• 7. Packet Decoding
• 8. Inspectors
• 9. Stream Inspectors
• 10. HTTP Inspector
• 11. DCE/RPC Inspectors
• 12. IP Reputation
• 13. Rules
• 14. Alert Subsystem
• 15. OpenAppID
• 16. Miscellaneous Topics on Snort 3