Intrusion Prevention And Active Response

* Corporate spending for Intrusion Prevention systems increased dramatically by 11% in the last quarter of 2004 alone

* Lead author, Michael Rash, is well respected in the IPS Community, having authored FWSnort, which greatly enhances the intrusion prevention capabilities of the market-leading Snort IDS

This book provides an introduction to the field of Intrusion Prevention and provides detailed information on various IPS methods and technologies. Specific methods are covered in depth, including both network and host IPS and response technologies such as port deactivation, firewall/router network layer ACL modification, session sniping, outright application layer data modification, system call interception, and application shims.

A guide for IT managers and security technologists that shows how to automate responses to intrusions and master buffer overflow- prevention technologies. The guide covers major systems including Snort Inline, SnortSAM, PaX, Stackguard, LIDS, FWSnort, PSAD, Enterasys Web IPS, and mod_securit. It concentrates on the technology and implementation of active response and intrusion prevention techniques and also emphasizes the countermeasures than can be implemented after an attack has been detected. Distributed in the US by O'Reilly. Annotation ©2005 Book News, Inc., Portland, OR

Angela Orebaugh (, GCIA, GCFW, GCIH, GSEC, CCNA) is a Senior Scientist in the Advanced Technology Research Center of Sytex, Inc. where she works with a specialized team to advance the state of the art in information systems security. She has over 10 years experience in information technology, with a focus on perimeter defense, secure network design, vulnerability discovery, penetration testing, and intrusion detection systems. She has a Masters in Computer Science, and is currently pursuing her Ph.D. with a concentration in Information Security at George Mason University.