Practical Intrusion Analysis: Prevention and Detection for the Twenty-First Century

2. Infrastructure Monitoring

The term infrastructure monitoring represents many different tasks and processes, depending on the context and the role of the person using the term. Infrastructure monitoring typically involves traffic analysis of data flowing through a network; it might also involve creating inventories of all devices connected to the network and their associated operating status (particularly their security posture).

A more specific application of infrastructure monitoring relates to security issues, both from a preventative and a corrective action viewpoint. With preventative network monitoring and analysis, the network is surveyed for potential security issues, and the solutions are hopefully implemented before an attacker exploits ...