作者: Ahmet Salih Buyukkayhan , Alina Oprea , Zhou Li , William Robertson
DOI: 10.1007/978-3-319-66332-6_4
关键词:
摘要: Organizations are facing an increasing number of criminal threats ranging from opportunistic malware to more advanced targeted attacks. While various security technologies available protect organizations’ perimeters, still many breaches lead undesired consequences such as loss proprietary information, financial burden, and reputation defacing. Recently, endpoint monitoring agents that inspect system-level activities on user machines started gain traction be deployed in the industry additional defense layer. Their application, though, most cases is only for forensic investigation determine root cause incident.