Free Trial

Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.

  • Create BookmarkCreate Bookmark
  • Create Note or TagCreate Note or Tag
  • PrintPrint

4.6. Summary

Now that you have been shown a small section of the available tools and types of logs that are available to a security staff to monitor and maintain their hosts and systems from each host's own logs, you should be aware that even something as simple as storing and parsing your Web servers' logs can be used to determine the health and wellness of those systems. These logs can also be viewed from a different angle and show geo-location and common requests to possibly identify attackers. When this type of technology is combined with other defensive measures, such as DNS blackholing or malware redirection, it can be leveraged to create better defenses, such as extending DNS blacklists. Another possibility would be to use these types of logs to help formulate your incident response based on the victims in host or Web logs. These can prove invaluable when trying to determine the number of victims in a large network, and they can also help limit wasted man-hours searching for victims.

Lastly, keep in mind that these components are only one piece of the puzzle when considering your security team's full view of the health and wellness of your network(s). These types of tools are best used when combined with other measures, such as your IDS, VA, and policy team's data. These components can be summed up in the form of an ESM system, but if one is not available, then creating a reporting structure that integrates these tools into it to provide your organization with a cohesive view should be implemented. Again these logs and the data they provide are only as valuable as you make them.


  

You are currently reading a PREVIEW of this book.

                                                                                                                    

Get instant access to over $1 million worth of books and videos.

  

Start a Free 10-Day Trial


  
  • Safari Books Online
  • Create BookmarkCreate Bookmark
  • Create Note or TagCreate Note or Tag
  • PrintPrint