This webcast is based on the authors' years of experience conducting incident response to keep Cisco's global network secure. It offers six steps to improve network monitoring. These steps will help you:
- Develop Policies: define rules, regulations, and monitoring criteria
- Know Your Network: build knowledge of your infrastructure with network telemetry
- Select Your Targets: define the subset of infrastructure to be monitored
- Choose Event Sources: identify event types needed to discover policy violations
- Feed and Tune: collect data, generate alerts, and tune systems using contextual information
- Maintain Dependable Event Sources: prevent critical gaps in collecting and monitoring events
The webcast illustrates these steps with detailed examples that will help you learn to select and deploy the best techniques for monitoring your own enterprise network.
Attendance is limited, so register now. We'll send you a reminder before the webcast. And please feel free to share this invitation with others.
Date: Wednesday, July 15th at 10 am PT
Price: Free
Duration: Approximately 90 minutes
To register: oreilly.com/go/security
Questions? Please send email to webcast@oreilly.com
About Chris Fry
Chris Fry, security investigator for Cisco Systems Computer Security Incident Response Team (CSIRT), joined Cisco in 1997 as an IT analyst specializing in production services support. Fry spent four years as a network engineer within Cisco IT gaining enterprise network knowledge and a unique insight into monitoring production networks. In 2007, he presented Inside the Perimiter: 6 Steps to Improve Your Security Monitoring at the annual conference for the Forum for Incident Response and Security Teams (FIRST) in Seville, Spain, and at the Cisco Networkers conventions in Brisbane, Australia and Anaheim, California. Fry received a BA in Corporate Financial Analysis and an MS in Information and Communication Sciences from Ball State University. He lives in Cary, North Carolina, with his wife, Laurie, and their two sons and daughter.
About Martin Nystrom
Martin Nystrom is a Member of Technical Staff (MTS) for the Computer Security Incident Response Team (CSIRT) at Cisco Systems. He leads the global security monitoring team and provides guidance for incident response and security initiatives. Prior to joining Cisco's CSIRT, he was responsible for designing and consulting on secure architectures for IT projects. Martin worked as an IT architect and a Java programmer for 12 years prior, where he built his experience in the pharmaceutical and computer industries. He received a bachelor's degree from Iowa State University in 1990, a master's degree from NC State University in 2003, and his CISSP certification in 2004. He is the author of O'Reilly's SQL Injection Defenses, and co-author of Security Monitoring. He is a frequent conference speaker, and was honored on the Java One Rock Star Wall of Fame. He enjoys speaking at FIRST and Cisco Networkers conferences, and providing security guidance to customers via Cisco's Executive Briefing Program. Most of Martin's papers and presos can be found on his web site at xianshield.org.
About O’Reilly
O’Reilly Media spreads the knowledge of innovators through its books, online services, magazines, and conferences. Since 1978, O’Reilly Media has been a chronicler and catalyst of cutting-edge development, homing in on the technology trends that really matter and spurring their adoption by amplifying “faint signals” from the alpha geeks who are creating the future. An active participant in the technology community, the company has a long history of advocacy, meme-making, and evangelism.