Purpose
The purpose of this chapter is to provide the reader with an understanding and perspective of the mechanisms by which incidents occur. By understanding the characteristics of an incident, the administrator will have a better understanding of how systems can be affected by incidents and how to protect them. Investigators will have a better understanding of how to gather, correlate, and analyze data about an incident, should one occur.
This chapter is not intended to provide a how-to guide for “hacking” into computers. There are plenty of books on the shelves of bookstores and libraries that provide this kind of information, detailing various exploits that can be used to gain unauthorized access. There are also numerous web sites that provide ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access