OSSEC host-based intrusion detection guide:
Gespeichert in:
1. Verfasser: | |
---|---|
Format: | Elektronisch E-Book |
Sprache: | English |
Veröffentlicht: |
Burlington, Mass.
Syngress Pub.
c2008
|
Schlagworte: | |
Online-Zugang: | Volltext |
Beschreibung: | Includes index This book is the definitive guide on the OSSEC Host-based Intrusion Detection system and frankly, to really use OSSEC you are going to need a definitive guide. Documentation has been available since the start of the OSSEC project but, due to time constraints, no formal book has been created to outline the various features and functions of the OSSEC product. This has left very important and powerful features of the product undocumented ... until now! The book you are holding will show you how to install and configure OSSEC on the operating system of your choice and provide detailed examples to help prevent and mitigate attacks on your systems. -- Stephen Northcutt OSSEC determines if a host has been compromised in this manner by taking the equivalent of a picture of the host machine in its original, unaltered state. This?picture? captures the most relevant information about that machine?s configuration. OSSEC saves this?picture? and then constantly compares it to the current state of that machine to identify anything that may have changed from the original configuration. Now, many of these changes are necessary, harmless, and authorized, such as a system administrator installing a new software upgrade, patch, or application. But, then there are the not-so-harmless changes, like the installation of a rootkit, trojan horse, or virus. Differentiating between the harmless and the not-so-harmless changes determines whether the system administrator or security professional is managing a secure, efficient network or a compromised network which might be funneling credit card numbers out to phishing gangs or storing massive amounts of pornography creating significant liability for that organization. Separating the wheat from the chaff is by no means an easy task. Hence the need for this book. The book is co-authored by Daniel Cid, who is the founder and lead developer of the freely available OSSEC host-based IDS. As such, readers can be certain they are reading the most accurate, timely, and insightful information on OSSEC. .Get Started with OSSEC Get an overview of the features of OSSEC including commonly used terminology, pre-install preparation, and deployment considerations. .Follow Steb-by-Step Installation Instructions Walk through the installation process for the "local", "agent", and "server" install types on some of the most popular operating systems available. .Master Configuration Learn the basic configuration options for your install type and learn how to monitor log files, receive remote messages, configure email notification, and configure alert levels. .Work With Rules Extract key information from logs using decoders and how you can leverage rules to alert you of strange occurrences on your network. .Understand System Integrity Check and Rootkit Detection Monitor binary executable files, system configuration files, and the Microsoft Windows registry. .Configure Active Response Configure the active response actions you want and bind the actions to specific rules and sequence of events. .Use the OSSEC Web User Interface Install, configure, and use the community-developed, open source web interface available for OSSEC. .Play in the OSSEC VMware Environment Sandbox Use the OSSEC HIDS VMware Guest image on the companion DVD to implement what you have learned in a sandbox-style environment. .Dig Deep into Data Log Mining Take the "high art" of log analysis to the next level by breaking the dependence on the lists of strings or patterns to look for in the logs |
Beschreibung: | 1 Online-Ressource (xxvii, 307 p.) |
ISBN: | 9781597492409 159749240X |
Internformat
MARC
LEADER | 00000nmm a2200000zc 4500 | ||
---|---|---|---|
001 | BV042305732 | ||
003 | DE-604 | ||
005 | 00000000000000.0 | ||
007 | cr|uuu---uuuuu | ||
008 | 150129s2008 |||| o||u| ||||||eng d | ||
020 | |a 9781597492409 |9 978-1-59749-240-9 | ||
020 | |a 159749240X |9 1-59749-240-X | ||
035 | |a (OCoLC)272382225 | ||
035 | |a (DE-599)BVBBV042305732 | ||
040 | |a DE-604 |b ger |e aacr | ||
041 | 0 | |a eng | |
049 | |a DE-1046 | ||
082 | 0 | |a 005.8 |2 22 | |
100 | 1 | |a Hay, Andrew |e Verfasser |4 aut | |
245 | 1 | 0 | |a OSSEC host-based intrusion detection guide |c Andrew Hay, Daniel Cid, Rory Bray |
264 | 1 | |a Burlington, Mass. |b Syngress Pub. |c c2008 | |
300 | |a 1 Online-Ressource (xxvii, 307 p.) | ||
336 | |b txt |2 rdacontent | ||
337 | |b c |2 rdamedia | ||
338 | |b cr |2 rdacarrier | ||
500 | |a Includes index | ||
500 | |a This book is the definitive guide on the OSSEC Host-based Intrusion Detection system and frankly, to really use OSSEC you are going to need a definitive guide. Documentation has been available since the start of the OSSEC project but, due to time constraints, no formal book has been created to outline the various features and functions of the OSSEC product. This has left very important and powerful features of the product undocumented ... until now! The book you are holding will show you how to install and configure OSSEC on the operating system of your choice and provide detailed examples to help prevent and mitigate attacks on your systems. -- | ||
500 | |a Stephen Northcutt OSSEC determines if a host has been compromised in this manner by taking the equivalent of a picture of the host machine in its original, unaltered state. This?picture? captures the most relevant information about that machine?s configuration. OSSEC saves this?picture? and then constantly compares it to the current state of that machine to identify anything that may have changed from the original configuration. Now, many of these changes are necessary, harmless, and authorized, such as a system administrator installing a new software upgrade, patch, or application. But, then there are the not-so-harmless changes, like the installation of a rootkit, trojan horse, or virus. | ||
500 | |a Differentiating between the harmless and the not-so-harmless changes determines whether the system administrator or security professional is managing a secure, efficient network or a compromised network which might be funneling credit card numbers out to phishing gangs or storing massive amounts of pornography creating significant liability for that organization. Separating the wheat from the chaff is by no means an easy task. Hence the need for this book. The book is co-authored by Daniel Cid, who is the founder and lead developer of the freely available OSSEC host-based IDS. As such, readers can be certain they are reading the most accurate, timely, and insightful information on OSSEC. .Get Started with OSSEC Get an overview of the features of OSSEC including commonly used terminology, pre-install preparation, and deployment considerations. | ||
500 | |a .Follow Steb-by-Step Installation Instructions Walk through the installation process for the "local", "agent", and "server" install types on some of the most popular operating systems available. .Master Configuration Learn the basic configuration options for your install type and learn how to monitor log files, receive remote messages, configure email notification, and configure alert levels. .Work With Rules Extract key information from logs using decoders and how you can leverage rules to alert you of strange occurrences on your network. .Understand System Integrity Check and Rootkit Detection Monitor binary executable files, system configuration files, and the Microsoft Windows registry. .Configure Active Response Configure the active response actions you want and bind the actions to specific rules and sequence of events. .Use the OSSEC Web User Interface Install, configure, and use the community-developed, open source web interface available for OSSEC. | ||
500 | |a .Play in the OSSEC VMware Environment Sandbox Use the OSSEC HIDS VMware Guest image on the companion DVD to implement what you have learned in a sandbox-style environment. .Dig Deep into Data Log Mining Take the "high art" of log analysis to the next level by breaking the dependence on the lists of strings or patterns to look for in the logs | ||
630 | 0 | 4 | |a OSSEC (Computer file) |
650 | 7 | |a OSSEC (Computer file) |2 fast | |
650 | 7 | |a Computer networks / Security measures |2 fast | |
650 | 7 | |a Computer security |2 fast | |
650 | 4 | |a Computer security | |
650 | 4 | |a Computer networks |x Security measures | |
650 | 0 | 7 | |a Computersicherheit |0 (DE-588)4274324-2 |2 gnd |9 rswk-swf |
650 | 0 | 7 | |a Open Source |0 (DE-588)4548264-0 |2 gnd |9 rswk-swf |
650 | 0 | 7 | |a Programm |0 (DE-588)4047394-6 |2 gnd |9 rswk-swf |
689 | 0 | 0 | |a Computersicherheit |0 (DE-588)4274324-2 |D s |
689 | 0 | 1 | |a Open Source |0 (DE-588)4548264-0 |D s |
689 | 0 | 2 | |a Programm |0 (DE-588)4047394-6 |D s |
689 | 0 | |8 1\p |5 DE-604 | |
700 | 1 | |a Cid, Daniel |e Sonstige |4 oth | |
700 | 1 | |a Bray, Rory |e Sonstige |4 oth | |
856 | 4 | 0 | |u http://www.sciencedirect.com/science/book/9781597492409 |x Verlag |3 Volltext |
912 | |a ZDB-33-ESD |a ZDB-33-EBS | ||
940 | 1 | |q FAW_PDA_ESD | |
940 | 1 | |q FLA_PDA_ESD | |
999 | |a oai:aleph.bib-bvb.de:BVB01-027742724 | ||
883 | 1 | |8 1\p |a cgwrk |d 20201028 |q DE-101 |u https://d-nb.info/provenance/plan#cgwrk |
Datensatz im Suchindex
_version_ | 1804152889156829184 |
---|---|
any_adam_object | |
author | Hay, Andrew |
author_facet | Hay, Andrew |
author_role | aut |
author_sort | Hay, Andrew |
author_variant | a h ah |
building | Verbundindex |
bvnumber | BV042305732 |
collection | ZDB-33-ESD ZDB-33-EBS |
ctrlnum | (OCoLC)272382225 (DE-599)BVBBV042305732 |
dewey-full | 005.8 |
dewey-hundreds | 000 - Computer science, information, general works |
dewey-ones | 005 - Computer programming, programs, data, security |
dewey-raw | 005.8 |
dewey-search | 005.8 |
dewey-sort | 15.8 |
dewey-tens | 000 - Computer science, information, general works |
discipline | Informatik |
format | Electronic eBook |
fullrecord | <?xml version="1.0" encoding="UTF-8"?><collection xmlns="http://www.loc.gov/MARC21/slim"><record><leader>05469nmm a2200589zc 4500</leader><controlfield tag="001">BV042305732</controlfield><controlfield tag="003">DE-604</controlfield><controlfield tag="005">00000000000000.0</controlfield><controlfield tag="007">cr|uuu---uuuuu</controlfield><controlfield tag="008">150129s2008 |||| o||u| ||||||eng d</controlfield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">9781597492409</subfield><subfield code="9">978-1-59749-240-9</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">159749240X</subfield><subfield code="9">1-59749-240-X</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(OCoLC)272382225</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(DE-599)BVBBV042305732</subfield></datafield><datafield tag="040" ind1=" " ind2=" "><subfield code="a">DE-604</subfield><subfield code="b">ger</subfield><subfield code="e">aacr</subfield></datafield><datafield tag="041" ind1="0" ind2=" "><subfield code="a">eng</subfield></datafield><datafield tag="049" ind1=" " ind2=" "><subfield code="a">DE-1046</subfield></datafield><datafield tag="082" ind1="0" ind2=" "><subfield code="a">005.8</subfield><subfield code="2">22</subfield></datafield><datafield tag="100" ind1="1" ind2=" "><subfield code="a">Hay, Andrew</subfield><subfield code="e">Verfasser</subfield><subfield code="4">aut</subfield></datafield><datafield tag="245" ind1="1" ind2="0"><subfield code="a">OSSEC host-based intrusion detection guide</subfield><subfield code="c">Andrew Hay, Daniel Cid, Rory Bray</subfield></datafield><datafield tag="264" ind1=" " ind2="1"><subfield code="a">Burlington, Mass.</subfield><subfield code="b">Syngress Pub.</subfield><subfield code="c">c2008</subfield></datafield><datafield tag="300" ind1=" " ind2=" "><subfield code="a">1 Online-Ressource (xxvii, 307 p.)</subfield></datafield><datafield tag="336" ind1=" " ind2=" "><subfield code="b">txt</subfield><subfield code="2">rdacontent</subfield></datafield><datafield tag="337" ind1=" " ind2=" "><subfield code="b">c</subfield><subfield code="2">rdamedia</subfield></datafield><datafield tag="338" ind1=" " ind2=" "><subfield code="b">cr</subfield><subfield code="2">rdacarrier</subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">Includes index</subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">This book is the definitive guide on the OSSEC Host-based Intrusion Detection system and frankly, to really use OSSEC you are going to need a definitive guide. Documentation has been available since the start of the OSSEC project but, due to time constraints, no formal book has been created to outline the various features and functions of the OSSEC product. This has left very important and powerful features of the product undocumented ... until now! The book you are holding will show you how to install and configure OSSEC on the operating system of your choice and provide detailed examples to help prevent and mitigate attacks on your systems. -- </subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">Stephen Northcutt OSSEC determines if a host has been compromised in this manner by taking the equivalent of a picture of the host machine in its original, unaltered state. This?picture? captures the most relevant information about that machine?s configuration. OSSEC saves this?picture? and then constantly compares it to the current state of that machine to identify anything that may have changed from the original configuration. Now, many of these changes are necessary, harmless, and authorized, such as a system administrator installing a new software upgrade, patch, or application. But, then there are the not-so-harmless changes, like the installation of a rootkit, trojan horse, or virus. </subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">Differentiating between the harmless and the not-so-harmless changes determines whether the system administrator or security professional is managing a secure, efficient network or a compromised network which might be funneling credit card numbers out to phishing gangs or storing massive amounts of pornography creating significant liability for that organization. Separating the wheat from the chaff is by no means an easy task. Hence the need for this book. The book is co-authored by Daniel Cid, who is the founder and lead developer of the freely available OSSEC host-based IDS. As such, readers can be certain they are reading the most accurate, timely, and insightful information on OSSEC. .Get Started with OSSEC Get an overview of the features of OSSEC including commonly used terminology, pre-install preparation, and deployment considerations. </subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">.Follow Steb-by-Step Installation Instructions Walk through the installation process for the "local", "agent", and "server" install types on some of the most popular operating systems available. .Master Configuration Learn the basic configuration options for your install type and learn how to monitor log files, receive remote messages, configure email notification, and configure alert levels. .Work With Rules Extract key information from logs using decoders and how you can leverage rules to alert you of strange occurrences on your network. .Understand System Integrity Check and Rootkit Detection Monitor binary executable files, system configuration files, and the Microsoft Windows registry. .Configure Active Response Configure the active response actions you want and bind the actions to specific rules and sequence of events. .Use the OSSEC Web User Interface Install, configure, and use the community-developed, open source web interface available for OSSEC. </subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">.Play in the OSSEC VMware Environment Sandbox Use the OSSEC HIDS VMware Guest image on the companion DVD to implement what you have learned in a sandbox-style environment. .Dig Deep into Data Log Mining Take the "high art" of log analysis to the next level by breaking the dependence on the lists of strings or patterns to look for in the logs</subfield></datafield><datafield tag="630" ind1="0" ind2="4"><subfield code="a">OSSEC (Computer file)</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">OSSEC (Computer file)</subfield><subfield code="2">fast</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">Computer networks / Security measures</subfield><subfield code="2">fast</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">Computer security</subfield><subfield code="2">fast</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Computer security</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Computer networks</subfield><subfield code="x">Security measures</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Computersicherheit</subfield><subfield code="0">(DE-588)4274324-2</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Open Source</subfield><subfield code="0">(DE-588)4548264-0</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Programm</subfield><subfield code="0">(DE-588)4047394-6</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="689" ind1="0" ind2="0"><subfield code="a">Computersicherheit</subfield><subfield code="0">(DE-588)4274324-2</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2="1"><subfield code="a">Open Source</subfield><subfield code="0">(DE-588)4548264-0</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2="2"><subfield code="a">Programm</subfield><subfield code="0">(DE-588)4047394-6</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2=" "><subfield code="8">1\p</subfield><subfield code="5">DE-604</subfield></datafield><datafield tag="700" ind1="1" ind2=" "><subfield code="a">Cid, Daniel</subfield><subfield code="e">Sonstige</subfield><subfield code="4">oth</subfield></datafield><datafield tag="700" ind1="1" ind2=" "><subfield code="a">Bray, Rory</subfield><subfield code="e">Sonstige</subfield><subfield code="4">oth</subfield></datafield><datafield tag="856" ind1="4" ind2="0"><subfield code="u">http://www.sciencedirect.com/science/book/9781597492409</subfield><subfield code="x">Verlag</subfield><subfield code="3">Volltext</subfield></datafield><datafield tag="912" ind1=" " ind2=" "><subfield code="a">ZDB-33-ESD</subfield><subfield code="a">ZDB-33-EBS</subfield></datafield><datafield tag="940" ind1="1" ind2=" "><subfield code="q">FAW_PDA_ESD</subfield></datafield><datafield tag="940" ind1="1" ind2=" "><subfield code="q">FLA_PDA_ESD</subfield></datafield><datafield tag="999" ind1=" " ind2=" "><subfield code="a">oai:aleph.bib-bvb.de:BVB01-027742724</subfield></datafield><datafield tag="883" ind1="1" ind2=" "><subfield code="8">1\p</subfield><subfield code="a">cgwrk</subfield><subfield code="d">20201028</subfield><subfield code="q">DE-101</subfield><subfield code="u">https://d-nb.info/provenance/plan#cgwrk</subfield></datafield></record></collection> |
id | DE-604.BV042305732 |
illustrated | Not Illustrated |
indexdate | 2024-07-10T01:17:53Z |
institution | BVB |
isbn | 9781597492409 159749240X |
language | English |
oai_aleph_id | oai:aleph.bib-bvb.de:BVB01-027742724 |
oclc_num | 272382225 |
open_access_boolean | |
owner | DE-1046 |
owner_facet | DE-1046 |
physical | 1 Online-Ressource (xxvii, 307 p.) |
psigel | ZDB-33-ESD ZDB-33-EBS FAW_PDA_ESD FLA_PDA_ESD |
publishDate | 2008 |
publishDateSearch | 2008 |
publishDateSort | 2008 |
publisher | Syngress Pub. |
record_format | marc |
spelling | Hay, Andrew Verfasser aut OSSEC host-based intrusion detection guide Andrew Hay, Daniel Cid, Rory Bray Burlington, Mass. Syngress Pub. c2008 1 Online-Ressource (xxvii, 307 p.) txt rdacontent c rdamedia cr rdacarrier Includes index This book is the definitive guide on the OSSEC Host-based Intrusion Detection system and frankly, to really use OSSEC you are going to need a definitive guide. Documentation has been available since the start of the OSSEC project but, due to time constraints, no formal book has been created to outline the various features and functions of the OSSEC product. This has left very important and powerful features of the product undocumented ... until now! The book you are holding will show you how to install and configure OSSEC on the operating system of your choice and provide detailed examples to help prevent and mitigate attacks on your systems. -- Stephen Northcutt OSSEC determines if a host has been compromised in this manner by taking the equivalent of a picture of the host machine in its original, unaltered state. This?picture? captures the most relevant information about that machine?s configuration. OSSEC saves this?picture? and then constantly compares it to the current state of that machine to identify anything that may have changed from the original configuration. Now, many of these changes are necessary, harmless, and authorized, such as a system administrator installing a new software upgrade, patch, or application. But, then there are the not-so-harmless changes, like the installation of a rootkit, trojan horse, or virus. Differentiating between the harmless and the not-so-harmless changes determines whether the system administrator or security professional is managing a secure, efficient network or a compromised network which might be funneling credit card numbers out to phishing gangs or storing massive amounts of pornography creating significant liability for that organization. Separating the wheat from the chaff is by no means an easy task. Hence the need for this book. The book is co-authored by Daniel Cid, who is the founder and lead developer of the freely available OSSEC host-based IDS. As such, readers can be certain they are reading the most accurate, timely, and insightful information on OSSEC. .Get Started with OSSEC Get an overview of the features of OSSEC including commonly used terminology, pre-install preparation, and deployment considerations. .Follow Steb-by-Step Installation Instructions Walk through the installation process for the "local", "agent", and "server" install types on some of the most popular operating systems available. .Master Configuration Learn the basic configuration options for your install type and learn how to monitor log files, receive remote messages, configure email notification, and configure alert levels. .Work With Rules Extract key information from logs using decoders and how you can leverage rules to alert you of strange occurrences on your network. .Understand System Integrity Check and Rootkit Detection Monitor binary executable files, system configuration files, and the Microsoft Windows registry. .Configure Active Response Configure the active response actions you want and bind the actions to specific rules and sequence of events. .Use the OSSEC Web User Interface Install, configure, and use the community-developed, open source web interface available for OSSEC. .Play in the OSSEC VMware Environment Sandbox Use the OSSEC HIDS VMware Guest image on the companion DVD to implement what you have learned in a sandbox-style environment. .Dig Deep into Data Log Mining Take the "high art" of log analysis to the next level by breaking the dependence on the lists of strings or patterns to look for in the logs OSSEC (Computer file) OSSEC (Computer file) fast Computer networks / Security measures fast Computer security fast Computer security Computer networks Security measures Computersicherheit (DE-588)4274324-2 gnd rswk-swf Open Source (DE-588)4548264-0 gnd rswk-swf Programm (DE-588)4047394-6 gnd rswk-swf Computersicherheit (DE-588)4274324-2 s Open Source (DE-588)4548264-0 s Programm (DE-588)4047394-6 s 1\p DE-604 Cid, Daniel Sonstige oth Bray, Rory Sonstige oth http://www.sciencedirect.com/science/book/9781597492409 Verlag Volltext 1\p cgwrk 20201028 DE-101 https://d-nb.info/provenance/plan#cgwrk |
spellingShingle | Hay, Andrew OSSEC host-based intrusion detection guide OSSEC (Computer file) OSSEC (Computer file) fast Computer networks / Security measures fast Computer security fast Computer security Computer networks Security measures Computersicherheit (DE-588)4274324-2 gnd Open Source (DE-588)4548264-0 gnd Programm (DE-588)4047394-6 gnd |
subject_GND | (DE-588)4274324-2 (DE-588)4548264-0 (DE-588)4047394-6 |
title | OSSEC host-based intrusion detection guide |
title_auth | OSSEC host-based intrusion detection guide |
title_exact_search | OSSEC host-based intrusion detection guide |
title_full | OSSEC host-based intrusion detection guide Andrew Hay, Daniel Cid, Rory Bray |
title_fullStr | OSSEC host-based intrusion detection guide Andrew Hay, Daniel Cid, Rory Bray |
title_full_unstemmed | OSSEC host-based intrusion detection guide Andrew Hay, Daniel Cid, Rory Bray |
title_short | OSSEC host-based intrusion detection guide |
title_sort | ossec host based intrusion detection guide |
topic | OSSEC (Computer file) OSSEC (Computer file) fast Computer networks / Security measures fast Computer security fast Computer security Computer networks Security measures Computersicherheit (DE-588)4274324-2 gnd Open Source (DE-588)4548264-0 gnd Programm (DE-588)4047394-6 gnd |
topic_facet | OSSEC (Computer file) Computer networks / Security measures Computer security Computer networks Security measures Computersicherheit Open Source Programm |
url | http://www.sciencedirect.com/science/book/9781597492409 |
work_keys_str_mv | AT hayandrew ossechostbasedintrusiondetectionguide AT ciddaniel ossechostbasedintrusiondetectionguide AT brayrory ossechostbasedintrusiondetectionguide |