Logging and Log Management: The Authoritative Guide to Understanding the Concepts Surrounding Logging and Log Management introduces information technology professionals to the basic concepts of logging and log management. It provides tools and techniques to analyze log data and detect malicious activity. The book consists of 22 chapters that cover the basics of log data; log data sources; log storage technologies; a case study on how syslog-ng is deployed in a real environment for log collection; covert logging; planning and preparing for the analysis log data; simple analysis techniques; and tools and techniques for reviewing logs for potential problems. The book also discusses statistical analysis; log data mining; visualizing log data; logging laws and logging mistakes; open source and commercial toolsets for log data collection and analysis; log management procedures; and attacks against logging systems. In addition, the book addresses logging for programmers; logging and compliance with regulations and policies; planning for log analysis system deployment; cloud logging; and the future of log standards, logging, and log analysis. This book was written for anyone interested in learning more about logging and log management. These include systems administrators, junior security engineers, application developers, and managers. - Comprehensive coverage of log management including analysis, visualization, reporting and more - Includes information on different uses for logs -- from system operations to regulatory compliance - Features case Studies on syslog-ng and actual real-world situations where logs came in handy in incident response - Provides practical guidance in the areas of report, log analysis system selection, planning a log analysis system and log data normalization and correlation
Autorentext
Dr. Anton Chuvakin is a recognized security expert in the field of log
management and PCI DSS compliance. He is an author of the books "Security Warrior" and "PCI
Compliance" and has contributed to many others, while also publishing dozens of papers on
log management, correlation, data analysis, PCI DSS, and security management. His blog
(http://www.securitywarrior.org) is one of the most popular in the industry.
Additionaly, Anton teaches classes and presents at many security conferences across the world
and he works on emerging security standards and serves on the advisory boards of
several security start-ups. Currently, Anton is developing his security consulting practice,
focusing on logging and PCI DSS compliance for security vendors and Fortune 500 organizations.
Anton earned his Ph.D. from Stony Brook University.
Inhalt
Chapter 1 Logs, Trees, Forest: the Big Picture
Chapter 2 What is a Log?
Chapter 3 Generating Logs
Chapter 4 Log Storage Technologies
Chapter 5 Case study: syslog-ng
Chapter 6 Covert logging
Chapter 7 Analysis Goals, Planning and Preparation: What Are We Looking for?
Chapter 8 Simple Analysis Techniques
Chapter 9 Filtering, Matching and Correlation
Chapter 10 Statistical Analysis
Chapter 11 Log Data Mining
Chapter 12 Reporting and Summarization
Chapter 13 Visualizing Log Data
Chapter 14 Logging Laws and Logging Mistakes
Chapter 15 Tools for Log Analysis and Collection
Chapter 16 Log Management Procedures: Escalation, Response
Chapter 17 Attacks against logging systems
Chapter 18 Logging for Programmers
Chapter 19 Logs and Compliance
Chapter 20 Planning Your Own Log Analysis System
Chapter 21 Cloud Logging
Chapter 22 Log Standard and Future Trends