文档介绍：526367 3/19/03 3:53 PM Page 1
with law enforcement. ments, legal issues, and how to work information and evidence require- forensics, puter Crime law for incident response puter understanding of the methodologies He also provides you with a firm duct audits to prevent future attacks. evidence to report the crime, and con- tools to reveal a security breach, gather Douglas Schweitzer arms you with the With prehensive guide, response to such incidents is critical. network is vulnerable to attack. Your user pany files, your through an e-mail or an unauthorized Whether it’s from malicious code sent
Networking/Security
and preventing future attacks Your in-depth guide to work breaches, uncovering evidence,
Wiley Technology Publishing
*85555-IGFADh
Visit our Web site at pbooks/
Timely. Practical. Reliable.
••••••••• You’ll learn how to:
carefully audit the system Develop policies and procedures to work attacks, and inappropriate use of Prevent espionage, insider monitor your system accordingly Anticipate future attacks and ties you uncover and then eradicate any vulnerabili- network and connections, Contain an incident by severing erly collect and preserve evidence Create a forensics toolkit to prop- caches to retrieve and analyze clues browser history, and examine Web Perform keyword searches, review locate hidden files code enters the system and quickly Analyze and detect when malicious data from work devices, and collecting operating systems, identifying Search for evidence by preparing measures incident and take specific response Recognize the telltale signs of an
from Malicious Code.
Easy author of Security Made Schweitzer is also the tions. certifica- Network+, and + Associate, and holds A+, Certified Webmaster work Associate puter forensics. He is a Cisco authority on malicious code and security specialist and SCHWEITZER DOUGLAS
•• includes: CD-ROM
,!7IA7G4-fcgdgh!:p;o;p;K;K
incident response and handling by the author f