Security Information and Event Management (SIEM) Implementation

Shon Harris is the founder and CEO of Logical Security LLC, an information security consultant, a former engineer in the Air Force’s Information Warfare unit, an instructor and an author. She has authored several international bestselling books on information security published by McGraw-Hill and Pearson which has sold over a million copies and have been translated into six languages. Ms. Harris authors academic textbooks, security articles for publication and is a technical editor for Information Security Magazine. Ms. Harris has consulted for a large number of organizations in every business sector (financial, medical, retail, entertainment, utility) and several U.S. government agencies over the last 18 years. Ms. Harris provides high-end, advanced and specialized consulting for organizations globally. She also works directly with law firms as a technical and expert witness on cases that range from patent infringement, criminal investigations, civil lawsuits and she specializes in cryptographic technologies. Ms. Harris has taught information security to a wide range of clients over the last 18 years, some of which have included; West Point, Microsoft, DHS, DoD, DoE, NSA, FBI, NASA, CDC, PWC, DISA, RSA, Visa, Intel, Cisco, Oracle, HP, Boeing, Northrop Grumman, Shell, Verizon, Citi, BoA, HSBC, Morgan Stanley, Symantec, Warner Brothers, Bridgestone, American Express, etc. Ms. Harris was recognized as one of the top 25 women in the Information Security field by Information Security Magazine.

• Part I: Introduction to SIEM: Threat Intelligence for IT SystemsChapter 1 Business ModelsChapter 2 Threat ModelsChapter 3 Regulatory CompliancePart II: IT Threat Intelligence Using SIEM SystemsChapter 4 SIEM Concepts - Components for small and medium size businessesChapter 5 The Anatomy of a SIEMChapter 6 Incident ResponseChapter 7 Using SIEM for Business IntelligencePart III: SIEM ToolsChapter 8 AlienVault OSSIM ImplementationChapter 9 AlienVault OSSIM OperationChapter 10 Cisco Security-MARS ImplementationChapter 11 Cisco Security-MARS Advanced TechniquesChapter 12 Q1 Labs QRadar ImplementationChapter 13 Q1 Labs QRadar Advanced TechniquesChapter 14 ArcSight ImplementationChapter 15 ArcSight ESM Advanced TechniquesAppendix: The Ways and Means of the Security Analyst