Security Response and Forensic Examination

• What are the steps to handle an incident?
• What do I have to do to preserve evidence?
• What was the Melissa virus and what can we learn from it?
• Who do I contact when I receive unusual traffic from a host?
• Preventing SYN Flooding with Cisco Routers
• What difficulties are associated on matching events with attacks. Why is event/data correlation important?
• Network Intrusion and use of automated responses
• What is Active Response?
• What is the Role of Security Event Correlation in Intrusion Detection?