O'Reilly logo

SSFIPS Securing Cisco Networks with Sourcefire Intrusion Prevention System Study Guide: Exam 500-285 by John Gay, Alex Tatistcheff, Todd Lammle

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 6 Intrusion Event Analysis

THE SSFIPS EXAM TOPICS COVERED IN THIS CHAPTER INCLUDE THE FOLLOWING:

  • ✓ 3.0 Event Analysis
  • ✓ 3.1 Understand the role that geolocation plays in analysis
  • ✓ 3.2 Be familiar with the interfaces for analysis, including the Dashboard, Workflows and Context Explorer

The world of network intrusion detection is a dynamic place where new vulnerabilities are discovered daily, new attacks are launched continuously, and networks themselves are in a constant state of flux. Vendors ceaselessly respond by creating and releasing a steady stream of software patches to address vulnerabilities, and teams like Cisco Talos (formerly VRT) are continuously rolling out new rules to protect against attacks. It’s a never-ending ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required