How to Improve Your Security Monitoring
October 30, 2008
Presentation on how to setup your security monitoring systems, presented at FIRST and Networkers.
This presentation discusses techniques for building a successful computer security monitoring system. In this preso, Cisco CSIRT engineers describe their approach, topology, challenges, and lessons learned in the process. This highly practical session illustrates security monitoring with Cisco Intrusion Prevention System (IPS) version 5 and 6, Cisco Security Monitoring, Analysis and Response (MARS) solution version 4, Netflow v7, and syslog. Cisco CSIRT engineers describe how the global solution was deployed, tuned, and lessons learned.