The Network Security. Org

Responding to Intrusions

Most organizations are not adequately prepared to deal with intrusions. They are likely to address the need to prepare and respond only after a breach occurs. The result is that when an intrusion is detected, many decisions are made in haste and can reduce an organization's ability to

* understand the extent and source of an intrusion
* protect sensitive data contained on systems
* protect the systems, the networks, and their ability to continue operating as intended
* recover systems
* collect information to better understand what happened. Without such information, you may inadvertently take actions that can further damage your systems.
* support legal investigations

Even if you have sophisticated prevention measures in place, intrusions can happen. In this module, we describe practices to be implemented independent of the size, type, or severity of an intrusion or of the methods used to gain access. The key event is that an intruder has gained access to your systems or data.

You need a strategy for handling intrusions effectively that includes preparation, detection, and response. The practices in this module identify steps you must take to respond to and recover from a detected intrusion. Responding to Intrusions

More News

• Several vulnerabilities closed in the Linux kernel
  



• 8 Best Practices for Encryption Key Management and Data Security
  



• Free Honeypot Client Could Sting Malware
  



• What Firewalls Do & Donot Do
  



• Symantec fingers D Link for bot attacks
  



• WhiteHat: 90% of Sites Still Vulnerable
  



• Red Hat releases free security code
  



• A new type of Bluetooth security
  



• Dude, where is my perimeter?
  



• Scaring users into IT security
  



• VMware fixes security bugs
  



• The top 10 security land mines
  



• Encrypt volumes through a cross platform GUI with TrueCrypt 5.0
  



• The threat of the Ajax Super Worm
  



• eEye to Add Retina Web App Scanner
  



• FTP Hacking on the Rise
  



• Microsoft Patches 12 Office Security Holes
  



• Malware removes rival rootkits
  



• Security holes in VLC media player patched
  



• Five basic mistakes of security policy