June 2016
Beginner to intermediate
376 pages
8h 58m
Japanese
Content preview from データ分析によるネットワークセキュリティ
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
7.3
参考資料
153
作成する。この問題については、10章で詳しく説明する。
最後に、攻撃を監視するだけではなく、資源側の監視も検討する。ほとんどの検知システムは、
特定の攻撃シグネチャを検知したときに警告を発するなど攻撃者の挙動に重点を置いている。攻撃
者の挙動に焦点を当てる代わりに、アナリストをネットワーク上の特定のホストに割り当て、その資
源に対するトラフィックの異常の監視と分析を行わせる。優先度の低い対象は、制限の強いファイア
ウォールなどのより制約的なテクニックを使って防御すればよい。
アナリストを資源に割り当てると、他にもメリットがある。アナリストは監視しているシステムに
関する専門知識を得ることができるのだ。多くの場合、偽陽性は、多くの場合 IDSには簡単には記
述できない一般的な処理から発生する。例えば、プロジェクト締め切り間際のファイルサーバへのア
クセスの急増、給与システムに対する通常の要求、
特定のユーザ層に人気のサービスなどだ。専門
知識があれば、アナリストは短時間でデータを取捨選択できる。些細な問題を捨て、重要な脅威に
集中することができる。
7.3
参考資料
1. Stefan Axelsson,
“
The Base-Rate Fallacy and the Difficulty of Intrusion Detection,
”
ACM
Transactions on Information and System Security, Vol. 3, Issue 3, Augu ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.