Security Intelligence

Qing Li , Gregory Clark 지음

Wiley 2015년 04월 16일 출간

작품소개

책소개

Similar to unraveling a math word problem, Security Intelligence: A Practitioner's Guide to Solving Enterprise Security Challenges guides you through a deciphering process that translates each security goal into a set of security variables, substitutes each variable with a specific security technology domain, formulates the equation that is the deployment strategy, then verifies the solution against the original problem by analyzing security incidents and mining hidden breaches, ultimately refines the security formula iteratively in a perpetual cycle. You will learn about: Secure proxies the necessary extension of the endpoints Application identification and control visualize the threats Malnets where is the source of infection and who are the pathogens Identify the security breach who was the victim and what was the lure Security in Mobile computing SNAFU With this book, you will be able to: Identify the relevant solutions to secure the infrastructure Construct policies that provide flexibility to the users so to ensure productivity Deploy effective defenses against the ever evolving web threats Implement solutions that are compliant to relevant rules and regulations Offer insight to developers who are building new security solutions and products

목차

Foreword xv Preface xvii Chapter 1 Fundamentals of Secure Proxies 1 Security Must Protect and Empower Users 2 The Birth of Shadow IT 2 Internet of Things and Connected Consumer Appliances 3 Conventional Security Solutions 5 Traditional Firewalls: What Are Their Main Deficiencies? 5 Firewall with DPI: A Better Solution? 9 IDS/IPS and Firewall 11 Unified Threat Management and Next?]Generation Firewall 14 Security Proxy&m-A Necessary Extension of the End Point 15 Transaction?]Based Processing 18 The Proxy Architecture 19 SSL Proxy and Interception 22 Interception Strategies 24 Certificates and Keys 28 Certificate Pinning and OCSP Stapling 32 SSL Interception and Privacy 33 Summary 35 Chapter 2 Proxy Deployment Strategies and Challenges 37 Definitions of Proxy Types: Transparent Proxy and Explicit Proxy 38 Inline Deployment of Transparent Proxy: Physical Inline and Virtual Inline 41 Physical Inline Deployment 41 Virtual Inline Deployment 43 Traffic Redirection Methods: WCCP and PBR 44 LAN Port and WAN Port 46 Forward Proxy and Reverse Proxy 47 Challenges of Transparent Interception 48 Directionality of Connections 53 Maintaining Traffic Paths 53 Avoiding Interception 56 Asymmetric Traffic Flow Detection and Clustering 58 Proxy Chaining 62 Summary 64 Chapter 3 Proxy Policy Engine and Policy Enforcements 67 Policy System Overview 69 Conditions and Properties 70 Policy Transaction 71 Policy Ticket 73 Policy Updates and Versioning System 77 Security Implications 77 Policy System in the Cloud Security Operation 80 Policy Evaluation 82 Policy Checkpoint 82 Policy Execution Timing 84 Revisiting the Proxy Interception Steps 86

작가정보

저자(글) Qing Li

Qing Li is Chief Scientist and Vice President of Advanced Technologies for Blue Coat Systems, a worldwide provider of security and network systems. He has 17 issued patents, has received multiple industry awards and has been an active speaker at industry conferences and an active voice in the technology media around the world. Gregory Clark is currently the CEO of Blue Coat Systems, a worldwide provider of security and network systems.

저자(글) Gregory Clark